$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa File: 9EEA3006979411EA8C6FC25AC4F9AE02.roa (raw, json) Hash identifier: Y4bw++TnnqHhnQXoIqONS+4c30WzzpJSk4du/GajLxg= Subject key identifier: 40:83:D6:A8:EA:DC:34:9E:61:17:63:C5:DA:46:9B:FC:38:3C:1F:11 Certificate issuer: /CN=A91BA4F2/serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Certificate serial: 0963 Authority key identifier: 51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa Signing time: Mon 16 Jun 2025 20:06:13 +0000 ROA not before: Mon 16 Jun 2025 20:06:13 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140644 IP address blocks: 103.151.104.0/23 maxlen: 23 103.151.104.0/24 maxlen: 24 103.151.105.0/24 maxlen: 24 2001:df3:bb80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403 (0x963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA4F2, serialNumber=512DC06E41C0899A24A1FC885EB346E45307F347 Validity Not Before: Jun 16 20:06:13 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68507935-e2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:31:97:e4:11:36:e3:a3:17:f2:47:13:49: 53:8e:0b:a7:fe:fc:a8:a5:d4:1d:42:4c:46:a7:5c: 64:90:89:7c:71:24:c5:9c:fa:5f:10:43:e6:d3:3e: f1:7e:6c:a6:ac:29:83:42:7c:c1:bc:16:1d:1d:3d: 6f:24:c6:d8:00:f6:52:47:44:a6:75:81:29:c1:2b: 84:b6:8e:d1:cf:a8:5a:8f:f9:1f:32:eb:95:7a:b7: c1:35:12:8f:e5:52:8c:02:91:5c:3a:c4:fb:b7:68: e2:dc:41:c6:61:cb:4c:12:d5:02:0f:1b:d8:a6:7d: 23:c4:b9:23:0a:48:a7:07:13:18:a1:5f:27:7a:cd: ba:76:62:72:d3:e3:ef:91:08:87:c6:cc:b6:7c:26: 78:71:1c:d9:54:3d:eb:9c:b6:88:71:67:cf:a3:70: 20:28:de:5d:08:7e:19:65:e5:6d:3d:c6:dd:6b:34: 3c:dd:af:5e:89:9d:98:43:33:a7:b1:e1:6e:58:50: eb:c3:10:7b:43:93:fd:b1:bb:28:fe:7d:59:83:54: af:a8:b6:a4:66:84:69:ee:89:28:18:57:1b:a6:b0: ab:66:90:b4:b1:54:8a:0e:ba:f8:50:1a:93:e0:60: 82:38:23:ac:22:64:12:62:55:16:a6:91:34:e4:43: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:83:D6:A8:EA:DC:34:9E:61:17:63:C5:DA:46:9B:FC:38:3C:1F:11 X509v3 Authority Key Identifier: keyid:51:2D:C0:6E:41:C0:89:9A:24:A1:FC:88:5E:B3:46:E4:53:07:F3:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/US3AbkHAiZokofyIXrNG5FMH80c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US3AbkHAiZokofyIXrNG5FMH80c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA4F2/2AEDEF9A979311EAB2AD2956C4F9AE02/9EEA3006979411EA8C6FC25AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.151.104.0/23 IPv6: 2001:df3:bb80::/48 Signature Algorithm: sha256WithRSAEncryption 12:80:f8:7f:66:27:06:41:16:2f:d2:58:da:b9:fc:7d:af:8c: d5:65:61:c2:b3:14:e7:76:16:2f:e3:d2:c8:92:b9:20:43:09: 6b:4e:24:e7:7c:82:d1:ec:da:67:e0:9d:ce:c1:22:d4:84:75: 7a:d9:da:19:d5:ea:e6:94:aa:56:9e:e1:cd:6a:f4:07:58:04: b3:b6:92:8d:c8:fe:b1:61:89:9c:9c:86:e6:fd:86:73:1c:9a: ec:e1:6a:e1:df:f6:b7:f7:4e:bd:50:47:74:5f:74:1a:78:11: 71:01:f7:5d:66:17:6d:db:b2:d3:61:37:24:ae:ef:39:40:41: 1f:99:a7:40:e1:30:7a:07:a6:bc:bd:ec:78:38:ac:db:a4:5d: 49:06:11:93:3b:ef:f5:ea:59:8e:37:76:04:d1:3c:23:0b:f2: aa:89:d7:47:ee:2b:5c:49:9a:0c:4c:37:2c:24:1f:05:1d:0f: 9b:cf:eb:e6:8f:92:6e:8c:c0:35:96:b2:80:c5:f9:1c:41:bf: a7:45:82:8a:5f:29:61:3c:2b:d6:20:6f:5e:53:10:a0:d2:e8: 35:57:fd:90:d9:a3:93:ea:46:1c:dd:a8:61:7e:17:22:96:11: 69:af:6e:68:98:3c:9c:1a:c7:71:e9:42:c8:89:2b:06:c8:2a: a6:8f:3b:f4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE0RjIxMTAvBgNVBAUTKDUxMkRDMDZFNDFDMDg5OUEyNEExRkM4ODVFQjM0NkU0 NTMwN0YzNDcwHhcNMjUwNjE2MjAwNjEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUwNzkzNS1lMmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmQxl+QRNuOjF/JHE0lTjgun/vyopdQdQkxGp1xkkIl8cSTFnPpfEEPm0z7x fmymrCmDQnzBvBYdHT1vJMbYAPZSR0SmdYEpwSuEto7Rz6haj/kfMuuVerfBNRKP 5VKMApFcOsT7t2ji3EHGYctMEtUCDxvYpn0jxLkjCkinBxMYoV8nes26dmJy0+Pv kQiHxsy2fCZ4cRzZVD3rnLaIcWfPo3AgKN5dCH4ZZeVtPcbdazQ83a9eiZ2YQzOn seFuWFDrwxB7Q5P9sbso/n1Zg1SvqLakZoRp7okoGFcbprCrZpC0sVSKDrr4UBqT 4GCCOCOsImQSYlUWppE05EMyWQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFECD1qjq 3DSeYRdjxdpGm/w4PB8RMB8GA1UdIwQYMBaAFFEtwG5BwImaJKH8iF6zRuRTB/NH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTRGMi8yQUVERUY5QTk3 OTMxMUVBQjJBRDI5NTZDNEY5QUUwMi9VUzNBYmtIQWlab2tvZnlJWHJORzVGTUg4 MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTM0Fia0hBaVpva29meUlYck5HNUZNSDgwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE0RjIvMkFFREVGOUE5NzkzMTFFQUIyQUQyOTU2QzRGOUFFMDIvOUVFQTMwMDY5 Nzk0MTFFQThDNkZDMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnl2gwDwQCAAIwCQMHACABDfO7gDANBgkqhkiG9w0BAQsF AAOCAQEAEoD4f2YnBkEWL9JY2rn8fa+M1WVhwrMU53YWL+PSyJK5IEMJa04k53yC 0ezaZ+CdzsEi1IR1etnaGdXq5pSqVp7hzWr0B1gEs7aSjcj+sWGJnJyG5v2Gcxya 7OFq4d/2t/dOvVBHdF90GngRcQH3XWYXbduy02E3JK7vOUBBH5mnQOEwegemvL3s eDis26RdSQYRkzvv9epZjjd2BNE8IwvyqonXR+4rXEmaDEw3LCQfBR0Pm8/r5o+S bozANZaygMX5HEG/p0WCil8pYTwr1iBvXlMQoNLoNVf9kNmjk+pGHN2oYX4XIpYR aa9uaJg8nBrHcelCyIkrBsgqpo879A== -----END CERTIFICATE-----Generated at Wed Nov 5 23:48:49 2025 by rpki-client