$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa File: EEA8968C461A11ED898DD14FC4F9AE02.roa (raw, json) Hash identifier: d5OlyNe99ww1Vvepz8IME1hvCCUKj/1zCQVefrQGjj4= Subject key identifier: 66:FF:F2:82:F1:D4:D0:BC:50:DB:4B:A1:FE:47:70:71:D6:40:86:DA Certificate issuer: /CN=A91AE3F2/serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Certificate serial: 024E Authority key identifier: FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa Signing time: Mon 03 Nov 2025 01:46:51 +0000 ROA not before: Mon 03 Nov 2025 01:46:51 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150345 IP address blocks: 103.17.6.0/24 maxlen: 24 103.17.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE3F2, serialNumber=FFE1B7A8729A0ECBBEC8B2FD9A97B74826CCDBC5 Validity Not Before: Nov 3 01:46:51 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6908098b-d99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:65:f6:d8:e9:b5:14:fc:9d:17:b7:e1:3d:8b: b5:a8:61:e2:62:3d:9f:c7:95:d4:d0:b8:ac:36:3c: 93:0a:9e:dd:b6:ba:8d:51:0f:bb:21:c4:03:d8:64: 7b:15:79:ee:51:63:ca:c0:ca:0c:20:95:19:95:20: b2:cf:08:b6:fb:ec:6f:c2:f2:8a:e6:4c:9f:77:fe: 09:60:f1:34:ff:b1:9b:b7:eb:5d:12:63:50:65:3a: 6a:be:b9:37:b2:93:4d:1b:32:3e:ed:ec:c2:95:0d: b6:b2:12:16:ff:42:f4:29:1d:6d:78:d2:bc:e7:4c: 34:5d:90:99:27:0a:59:00:5d:c9:f5:1d:96:75:a4: 6c:96:9b:eb:56:c0:ae:e0:6e:e5:64:50:bc:07:02: 7c:b7:23:26:32:16:8c:a8:86:95:29:cf:3d:a4:05: bf:e2:b3:d4:7c:72:92:64:57:19:7a:88:f1:fd:88: 2e:69:8c:29:ff:3e:44:31:ae:c5:53:6b:b9:3a:b4: ec:52:ae:28:01:67:05:c7:4a:bc:bf:2d:e9:91:2e: 7e:9a:2a:40:5f:bb:dd:7d:50:85:09:77:aa:2c:d2: 0f:90:67:be:c3:9e:dc:b8:b4:3f:b5:71:ab:fb:9c: d2:d2:96:e4:96:02:9a:df:a7:df:6e:fa:be:2a:0b: ed:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FF:F2:82:F1:D4:D0:BC:50:DB:4B:A1:FE:47:70:71:D6:40:86:DA X509v3 Authority Key Identifier: keyid:FF:E1:B7:A8:72:9A:0E:CB:BE:C8:B2:FD:9A:97:B7:48:26:CC:DB:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/_-G3qHKaDsu-yLL9mpe3SCbM28U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-G3qHKaDsu-yLL9mpe3SCbM28U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE3F2/86A0FB28461611ED92EAAD20C4F9AE02/EEA8968C461A11ED898DD14FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.17.6.0/23 Signature Algorithm: sha256WithRSAEncryption b0:4e:dd:a3:43:c9:03:43:db:30:1d:65:ff:af:4b:fd:5b:5a: 02:03:53:f0:8a:c5:80:46:27:2a:90:6d:6e:58:f8:31:bf:8c: 01:a3:cc:45:19:a3:85:70:b7:e9:0b:7f:4d:49:04:e7:79:b1: 56:1a:34:42:54:be:ff:ad:51:78:1e:ee:46:d7:b1:33:46:5c: fc:a5:87:e2:fc:ec:d8:bd:de:a9:b9:8e:d8:1a:7d:93:0a:86: 09:cf:5b:e0:4c:c7:54:01:2c:28:ce:b8:73:42:de:90:e7:dd: eb:8b:0c:b6:53:7c:29:62:de:a5:b5:d3:b5:26:4c:b7:35:fb: 07:86:9a:6d:f1:c4:ee:a0:58:1e:08:fc:be:a2:24:c1:05:7f: a9:e1:81:80:5b:a0:e5:1e:19:d7:76:82:af:ad:73:48:cb:52: 5e:84:cd:14:f9:d7:09:b3:a6:17:02:a4:8c:17:f5:b4:47:4e: 1c:df:0b:27:f9:e3:be:fa:00:6d:6c:1b:93:f3:f6:30:92:5b: aa:36:6a:25:27:8e:7f:a0:25:40:b6:71:6c:5b:38:aa:30:ff: c2:39:06:7f:70:58:02:c7:bf:f7:29:7f:d0:50:d1:bc:2f:80: bd:e9:58:b6:57:fd:e9:8d:d0:d8:09:93:a1:5f:82:cd:1e:fe: fa:da:5f:46 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzRjIxMTAvBgNVBAUTKEZGRTFCN0E4NzI5QTBFQ0JCRUM4QjJGRDlBOTdCNzQ4 MjZDQ0RCQzUwHhcNMjUxMTAzMDE0NjUxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MDk4Yi1kOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WX22Om1FPydF7fhPYu1qGHiYj2fx5XU0LisNjyTCp7dtrqNUQ+7IcQD2GR7 FXnuUWPKwMoMIJUZlSCyzwi2++xvwvKK5kyfd/4JYPE0/7Gbt+tdEmNQZTpqvrk3 spNNGzI+7ezClQ22shIW/0L0KR1teNK850w0XZCZJwpZAF3J9R2WdaRslpvrVsCu 4G7lZFC8BwJ8tyMmMhaMqIaVKc89pAW/4rPUfHKSZFcZeojx/YguaYwp/z5EMa7F U2u5OrTsUq4oAWcFx0q8vy3pkS5+mipAX7vdfVCFCXeqLNIPkGe+w57cuLQ/tXGr +5zS0pbklgKa36ffbvq+KgvtxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGb/8oLx 1NC8UNtLof5HcHHWQIbaMB8GA1UdIwQYMBaAFP/ht6hymg7Lvsiy/ZqXt0gmzNvF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTNGMi84NkEwRkIyODQ2 MTYxMUVEOTJFQUFEMjBDNEY5QUUwMi9fLUczcUhLYURzdS15TEw5bXBlM1NDYk0y OFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18tRzNxSEthRHN1LXlMTDltcGUzU0NiTTI4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUUzRjIvODZBMEZCMjg0NjE2MTFFRDkyRUFBRDIwQzRGOUFFMDIvRUVBODk2OEM0 NjFBMTFFRDg5OEREMTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnEQYwDQYJKoZIhvcNAQELBQADggEBALBO3aNDyQND2zAd Zf+vS/1bWgIDU/CKxYBGJyqQbW5Y+DG/jAGjzEUZo4Vwt+kLf01JBOd5sVYaNEJU vv+tUXge7kbXsTNGXPylh+L87Ni93qm5jtgafZMKhgnPW+BMx1QBLCjOuHNC3pDn 3euLDLZTfCli3qW107UmTLc1+weGmm3xxO6gWB4I/L6iJMEFf6nhgYBboOUeGdd2 gq+tc0jLUl6EzRT51wmzphcCpIwX9bRHThzfCyf54776AG1sG5Pz9jCSW6o2aiUn jn+gJUC2cWxbOKow/8I5Bn9wWALHv/cpf9BQ0bwvgL3pWLZX/emN0NgJk6Ffgs0e /vraX0Y= -----END CERTIFICATE-----Generated at Wed Nov 5 21:14:42 2025 by rpki-client