$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/08F61730538311F0860B155FC4F9AE02.roa File: 08F61730538311F0860B155FC4F9AE02.roa (raw, json) Hash identifier: 5tUhujimGcuYk2iCXVJH6UfqyUCQhG2eSFGvMuoYcGw= Subject key identifier: 02:43:58:A0:93:C2:57:3C:F5:0E:61:F2:31:B0:89:05:7F:C3:2E:31 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: 1B Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/08F61730538311F0860B155FC4F9AE02.roa Signing time: Fri 27 Jun 2025 18:17:50 +0000 ROA not before: Fri 27 Jun 2025 18:17:50 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135882 IP address blocks: 103.78.252.0/24 maxlen: 24 103.78.253.0/24 maxlen: 24 103.78.254.0/24 maxlen: 24 2400:1140::/32 maxlen: 32 2400:1140::/36 maxlen: 36 2400:1140:1000::/36 maxlen: 36 2400:1140:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Jun 27 18:17:50 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=685ee04e-c943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b1:71:39:44:b9:7b:01:0a:ed:29:06:7d:70: 52:63:49:51:d6:6c:2d:e0:76:b6:45:89:87:51:73: 40:86:42:e8:07:b2:6e:b4:0b:c5:0a:a9:5f:e6:c7: 73:0c:1a:84:d2:0f:6d:0b:72:38:30:9e:85:89:49: da:70:3d:23:d4:e4:1f:66:df:68:f7:8d:86:a2:d0: 2f:5e:0d:ff:16:83:7c:f3:dd:ef:21:b3:5b:ce:60: 7c:2c:1b:f5:d4:cf:9a:68:5e:3a:85:38:0c:22:28: 04:a2:55:43:73:99:9b:46:3e:9b:92:db:e4:34:de: 47:97:54:b2:f3:77:3d:2f:69:76:f6:23:62:fe:ee: 51:d7:64:98:f2:f3:7f:fa:71:55:80:f0:85:7c:de: 7b:7d:40:9f:c6:fa:e9:b1:3e:78:7d:72:0c:3c:28: c8:c7:67:2a:9a:17:5c:71:85:39:04:a7:48:82:0e: 1e:ba:5b:8a:1f:f9:03:8c:5c:ce:53:16:52:51:e8: 2a:05:8a:22:86:a5:e9:c8:30:d1:f4:f4:0f:05:59: 96:c9:95:43:e6:55:d6:0f:2c:40:9c:02:44:30:cb: 21:f8:63:f5:66:01:80:84:33:e6:a5:86:c3:0c:a9: cb:2f:d9:b4:95:6c:2d:9a:64:38:6f:8c:0b:30:d5: dd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:58:A0:93:C2:57:3C:F5:0E:61:F2:31:B0:89:05:7F:C3:2E:31 X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/08F61730538311F0860B155FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.78.252.0-103.78.254.255 IPv6: 2400:1140::/32 Signature Algorithm: sha256WithRSAEncryption 11:e2:73:2e:68:dd:3a:0c:4b:48:0e:7b:d2:15:53:e7:6f:54: 91:b0:c8:18:fe:36:63:9a:89:eb:a8:1f:d4:62:52:56:7d:bc: 15:5f:30:57:36:b2:fd:05:d2:3d:a8:53:bf:f0:92:0b:3c:20: 38:b3:8a:b8:6b:e1:73:ed:be:fa:48:8d:f8:90:10:d0:d9:1d: d2:08:af:0f:b3:4b:de:78:da:95:58:bd:92:d7:ea:3b:fc:df: a2:7a:20:40:10:cd:58:8e:bf:ef:22:19:41:bf:91:65:e3:0a: ac:b8:a2:b4:a0:c7:c1:4d:05:f1:3e:88:0a:46:d6:95:74:9a: cf:b6:14:93:c7:ad:48:a0:75:d8:86:00:d1:73:b0:ed:3f:a1: b0:99:26:00:77:2f:fc:34:0e:2d:a4:4a:07:01:aa:86:91:6c: f4:99:db:9e:a7:50:35:55:bf:d2:fe:37:80:df:d0:9c:33:4d: 0b:98:c0:ac:61:1d:39:d5:f2:43:0e:1c:44:0d:06:b8:fa:27: e1:fb:eb:e2:c4:54:c3:ce:45:8f:2e:b0:9f:ae:bf:a0:df:6b: 3f:7f:d7:5a:62:c2:cc:e5:29:94:c8:0b:21:ab:e2:bf:ce:2b: da:af:05:3a:f6:ea:69:a1:63:7e:18:fa:21:21:a9:5c:b4:0f: ed:5a:79:bd -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzY3MjExMC8GA1UEBRMoNkM2RDQ3QjExMTRGMkQ1ODFBODIxMjgwNUYxMkMzNzQ3 RjM0QUY4MzAeFw0yNTA2MjcxODE3NTBaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWVlMDRlLWM5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUsXE5RLl7AQrtKQZ9cFJjSVHWbC3gdrZFiYdRc0CGQugHsm60C8UKqV/mx3MM GoTSD20LcjgwnoWJSdpwPSPU5B9m32j3jYai0C9eDf8Wg3zz3e8hs1vOYHwsG/XU z5poXjqFOAwiKASiVUNzmZtGPpuS2+Q03keXVLLzdz0vaXb2I2L+7lHXZJjy83/6 cVWA8IV83nt9QJ/G+umxPnh9cgw8KMjHZyqaF1xxhTkEp0iCDh66W4of+QOMXM5T FlJR6CoFiiKGpenIMNH09A8FWZbJlUPmVdYPLECcAkQwyyH4Y/VmAYCEM+alhsMM qcsv2bSVbC2aZDhvjAsw1d2bAgMBAAGjggKsMIICqDAdBgNVHQ4EFgQUAkNYoJPC Vzz1DmHyMbCJBX/DLjEwHwYDVR0jBBgwFoAUbG1HsRFPLVgaghKAXxLDdH80r4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NjcyLzQzNzY0QkVDRjcy NDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkcxSHNSRlBMVmdhZ2hLQVh4TERkSDgwcjRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzY3Mi80Mzc2NEJFQ0Y3MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi8wOEY2MTczMDUz ODMxMUYwODYwQjE1NUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA2BggrBgEFBQcBBwEB/wQn MCUwFAQCAAEwDjAMAwQCZ078AwQAZ07+MA0EAgACMAcDBQAkABFAMA0GCSqGSIb3 DQEBCwUAA4IBAQAR4nMuaN06DEtIDnvSFVPnb1SRsMgY/jZjmonrqB/UYlJWfbwV XzBXNrL9BdI9qFO/8JILPCA4s4q4a+Fz7b76SI34kBDQ2R3SCK8Ps0veeNqVWL2S 1+o7/N+ieiBAEM1Yjr/vIhlBv5Fl4wqsuKK0oMfBTQXxPogKRtaVdJrPthSTx61I oHXYhgDRc7DtP6GwmSYAdy/8NA4tpEoHAaqGkWz0mduep1A1Vb/S/jeA39CcM00L mMCsYR051fJDDhxEDQa4+ifh++vixFTDzkWPLrCfrr+g32s/f9daYsLM5SmUyAsh q+K/zivarwU69uppoWN+GPohIalctA/tWnm9 -----END CERTIFICATE-----Generated at Wed Nov 5 08:28:19 2025 by rpki-client