$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa File: 6714424C3C9111EA9416CA78C4F9AE02.roa (raw, json) Hash identifier: BSAvl2a+qU3ElNPvDphfnCyZJ7WfZOIWkfyio3AfY2g= Subject key identifier: C8:FB:B3:C8:E4:B3:DB:18:2D:10:01:D6:25:DC:CF:D2:23:52:CA:B1 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0D65 Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa Signing time: Thu 30 Oct 2025 18:07:03 +0000 ROA not before: Thu 30 Oct 2025 18:07:03 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139675 IP address blocks: 103.143.126.0/23 maxlen: 23 103.143.126.0/24 maxlen: 24 103.143.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:05:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Oct 30 18:07:03 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903a946-f255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:90:83:e2:35:a1:81:9b:9f:34:ec:f2:48: fc:f0:f6:ba:ad:24:e4:93:b1:b6:cc:97:2a:06:4e: 74:68:60:b3:80:f5:9e:54:af:49:36:49:37:d2:f4: b6:63:e5:51:c7:5d:99:5d:97:30:56:32:a4:84:af: 71:85:4b:58:35:d1:a0:4b:78:a9:14:74:5b:0f:78: 16:77:af:ad:45:5f:17:9d:49:c2:52:b8:0a:23:42: 83:33:4d:66:6a:b1:a3:20:6a:b7:80:2b:2f:af:0d: b6:e2:20:04:15:96:7b:c8:2a:a9:ab:e6:32:18:bf: 9c:a3:51:87:6f:62:e5:d7:19:76:3f:f7:a9:74:c5: 5d:26:e7:3c:ea:0a:5f:b8:37:83:5e:f1:4b:2b:50: 68:4b:70:e1:34:01:03:7f:c6:86:9e:6e:c9:d3:63: eb:cf:e2:bd:f6:6d:f4:41:29:d0:da:dd:ba:e3:a3: 9a:80:ba:ad:01:6b:7b:98:e4:89:bb:7c:08:a6:0b: bd:0f:d6:66:ec:b7:30:7d:88:1d:7f:97:82:84:90: ad:86:67:6d:5b:13:a2:16:eb:36:7c:6c:72:c3:a2: 48:a7:aa:ef:37:c9:16:28:df:e1:a9:16:33:1e:60: 90:c8:8e:27:b0:35:d1:a1:c1:45:7f:0b:ff:14:f1: e2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:B3:C8:E4:B3:DB:18:2D:10:01:D6:25:DC:CF:D2:23:52:CA:B1 X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/6714424C3C9111EA9416CA78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.126.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:de:22:be:6c:e3:70:8e:61:4e:9f:29:0e:a6:d5:a6:33:33: 01:cb:9d:4d:5f:41:ae:7e:18:12:58:3f:44:2f:f9:cf:5f:d2: d3:41:9c:86:7f:ef:82:fa:57:b9:db:8c:e4:dd:b7:a2:79:50: ba:10:7a:9c:72:2f:24:05:45:88:8f:76:ce:e3:3d:2b:a6:39: 85:92:33:b5:a2:a3:7f:1e:30:72:e1:20:b7:e2:ce:50:b2:23: 62:c7:fd:2a:3d:98:03:2d:14:5e:e3:fa:cf:16:5f:c9:8f:b5: 6e:64:a5:26:a0:61:43:61:b7:45:8a:25:b0:43:92:00:0b:fb: 6f:63:8b:65:90:55:a1:d8:38:7d:fe:c7:91:ee:1d:92:5e:c1: 0f:a4:eb:be:44:68:e9:51:2a:9a:ab:50:fc:7a:0b:ef:5a:13: ab:ca:00:5f:94:ec:e5:b5:1c:94:7a:47:ec:f3:15:4a:99:0b: f9:d0:54:5c:16:d9:ef:02:fc:72:31:22:6a:0b:b6:2c:1e:e4: 70:f8:5c:02:59:c3:34:a1:94:96:f5:7b:4b:44:a9:0f:f7:43: bd:66:63:3b:e7:2f:e7:ef:6b:28:9b:ff:33:5d:ca:0c:27:8e: 6d:b3:5e:ba:72:21:4f:6b:91:7b:c9:02:ef:e8:a5:15:7d:7b: 96:73:28:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjUxMDMwMTgwNzAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzYTk0Ni1mMjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOyQg+I1oYGbnzTs8kj88Pa6rSTkk7G2zJcqBk50aGCzgPWeVK9JNkk30vS2 Y+VRx12ZXZcwVjKkhK9xhUtYNdGgS3ipFHRbD3gWd6+tRV8XnUnCUrgKI0KDM01m arGjIGq3gCsvrw224iAEFZZ7yCqpq+YyGL+co1GHb2Ll1xl2P/epdMVdJuc86gpf uDeDXvFLK1BoS3DhNAEDf8aGnm7J02Prz+K99m30QSnQ2t2646OagLqtAWt7mOSJ u3wIpgu9D9Zm7LcwfYgdf5eChJCthmdtWxOiFus2fGxyw6JIp6rvN8kWKN/hqRYz HmCQyI4nsDXRocFFfwv/FPHi3QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMj7s8jk s9sYLRAB1iXcz9IjUsqxMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzcyQjEvMkE0NUY5ODBERUM5MTFFOUFBQTdFQzMzQzRGOUFFMDIvNjcxNDQyNEMz QzkxMTFFQTk0MTZDQTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnj34wDQYJKoZIhvcNAQELBQADggEBAD/eIr5s43COYU6f KQ6m1aYzMwHLnU1fQa5+GBJYP0Qv+c9f0tNBnIZ/74L6V7nbjOTdt6J5ULoQepxy LyQFRYiPds7jPSumOYWSM7Wio38eMHLhILfizlCyI2LH/So9mAMtFF7j+s8WX8mP tW5kpSagYUNht0WKJbBDkgAL+29ji2WQVaHYOH3+x5HuHZJewQ+k675EaOlRKpqr UPx6C+9aE6vKAF+U7OW1HJR6R+zzFUqZC/nQVFwW2e8C/HIxImoLtiwe5HD4XAJZ wzShlJb1e0tEqQ/3Q71mYzvnL+fvayib/zNdygwnjm2zXrpyIU9rkXvJAu/opRV9 e5ZzKIo= -----END CERTIFICATE-----Generated at Wed Nov 5 19:50:01 2025 by rpki-client