$ rpki-client -vvf rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/E1755B4E24D711EDBE2C660BC4F9AE02.roa File: E1755B4E24D711EDBE2C660BC4F9AE02.roa (raw, json) Hash identifier: wWURC3RR4weDeL/+js4Lxv4EiqiaY71sbi8A+8GXIJg= Subject key identifier: F5:A7:08:A5:35:D0:45:FB:3B:9D:86:54:89:83:44:C8:2D:54:5C:9D Certificate issuer: /CN=A91C956C/serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Certificate serial: 055B Authority key identifier: 51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/E1755B4E24D711EDBE2C660BC4F9AE02.roa Signing time: Thu 02 Oct 2025 23:54:48 +0000 ROA not before: Thu 02 Oct 2025 23:54:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132849 IP address blocks: 103.172.142.0/23 maxlen: 23 103.172.142.0/24 maxlen: 24 103.172.143.0/24 maxlen: 24 2001:df0:6a40::/48 maxlen: 48 2001:df0:6a40::/49 maxlen: 49 2001:df0:6a40:8000::/49 maxlen: 49 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1371 (0x55b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C956C, serialNumber=512D9BDE813CB7BC77190A84F9B18DB8EB4E225F Validity Not Before: Oct 2 23:54:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68df10c7-f27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:c1:58:93:29:82:b2:6b:28:af:3b:ff:54: 8e:04:2c:35:ad:90:a0:db:82:01:a4:bd:50:8c:24: 20:95:2d:0f:ba:8a:8e:9a:20:5a:02:ae:24:ea:62: f2:3b:9f:b5:d7:8a:2d:5c:7f:99:8d:c8:3a:04:70: 79:b0:11:c7:a9:5b:f9:d5:be:85:fe:ea:a5:4f:ee: 77:47:11:c1:11:e9:69:56:76:05:be:e4:bb:53:2a: 98:30:8c:7d:ef:09:16:e9:b2:47:1a:85:c8:d2:db: c6:20:f6:e3:f1:45:f9:3a:31:cf:77:ae:a1:fe:c6: 04:fb:52:70:db:66:cb:a6:45:6a:54:4a:0c:bf:0b: 9b:91:07:5a:4b:c7:4a:9f:07:22:ee:e6:ed:1b:f2: 93:34:f9:90:40:8f:7f:5f:63:39:99:25:51:f5:81: 83:53:37:17:6f:81:e2:fc:d9:4b:f8:18:0c:de:67: 32:85:ad:0a:e0:2f:78:47:3e:86:c4:be:db:32:47: b2:4e:e2:71:83:76:e5:70:f4:d6:b0:92:5b:cd:c7: a7:37:70:56:8e:d3:64:d3:87:f6:84:80:8a:d7:e4: 9b:2b:aa:47:3d:44:0d:bc:bc:d1:f2:16:ad:2a:fd: e0:dc:c0:f7:d0:ca:90:4f:2b:8a:a4:98:a9:30:5c: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A7:08:A5:35:D0:45:FB:3B:9D:86:54:89:83:44:C8:2D:54:5C:9D X509v3 Authority Key Identifier: keyid:51:2D:9B:DE:81:3C:B7:BC:77:19:0A:84:F9:B1:8D:B8:EB:4E:22:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/US2b3oE8t7x3GQqE-bGNuOtOIl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/US2b3oE8t7x3GQqE-bGNuOtOIl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C956C/FB305A5E0C8A11ECA3191B0CC4F9AE02/E1755B4E24D711EDBE2C660BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.172.142.0/23 IPv6: 2001:df0:6a40::/48 Signature Algorithm: sha256WithRSAEncryption 89:0c:fa:8d:9d:77:e4:b9:3d:73:45:11:01:71:6a:b9:4b:41: 94:0a:3f:19:2e:dd:e1:95:c4:7d:53:69:5c:66:7f:fa:90:a4: ec:79:c5:0d:7d:34:8e:1b:52:14:f1:b7:06:43:f1:d4:b4:ff: f2:22:5d:7c:dd:60:4f:24:0f:b9:7c:da:24:97:80:13:5e:23: 5a:86:64:dd:f8:83:39:5f:f2:f2:0b:12:3a:1d:cf:33:e9:df: 1f:8d:c6:c2:1a:85:1a:80:d1:4a:e9:2e:ec:fe:83:17:47:98: 53:83:00:bd:38:63:68:a1:a2:ee:f4:fd:dd:e7:d9:36:59:7c: 5c:ad:47:cb:28:7c:8f:66:e2:83:74:19:5e:bf:4b:fe:db:1e: b7:21:7e:b5:af:e9:f9:27:7b:49:55:49:5e:89:47:f2:79:c6: d9:b0:87:c4:a5:aa:76:44:59:88:03:30:98:ea:6a:82:59:53: c1:73:d3:53:3d:5d:f6:d5:32:19:f2:98:2e:0f:db:27:2d:a2: ca:16:39:c9:d1:6a:00:4b:23:f0:ab:a4:1a:5d:7c:ab:65:e5: b5:c1:04:18:97:5b:f6:50:69:c2:1e:fd:7d:e4:67:10:82:5e: 9d:9c:6e:4f:0a:54:24:39:5d:54:3c:aa:e3:21:20:94:ec:d6: 86:a3:a2:9b -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1NkMxMTAvBgNVBAUTKDUxMkQ5QkRFODEzQ0I3QkM3NzE5MEE4NEY5QjE4REI4 RUI0RTIyNUYwHhcNMjUxMDAyMjM1NDQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRmMTBjNy1mMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOjBWJMpgrJrKK87/1SOBCw1rZCg24IBpL1QjCQglS0PuoqOmiBaAq4k6mLy O5+114otXH+Zjcg6BHB5sBHHqVv51b6F/uqlT+53RxHBEelpVnYFvuS7UyqYMIx9 7wkW6bJHGoXI0tvGIPbj8UX5OjHPd66h/sYE+1Jw22bLpkVqVEoMvwubkQdaS8dK nwci7ubtG/KTNPmQQI9/X2M5mSVR9YGDUzcXb4Hi/NlL+BgM3mcyha0K4C94Rz6G xL7bMkeyTuJxg3blcPTWsJJbzcenN3BWjtNk04f2hICK1+SbK6pHPUQNvLzR8hat Kv3g3MD30MqQTyuKpJipMFxLLwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPWnCKU1 0EX7O52GVImDRMgtVFydMB8GA1UdIwQYMBaAFFEtm96BPLe8dxkKhPmxjbjrTiJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTU2Qy9GQjMwNUE1RTBD OEExMUVDQTMxOTFCMENDNEY5QUUwMi9VUzJiM29FOHQ3eDNHUXFFLWJHTnVPdE9J bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTMmIzb0U4dDd4M0dRcUUtYkdOdU90T0lsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk1NkMvRkIzMDVBNUUwQzhBMTFFQ0EzMTkxQjBDQzRGOUFFMDIvRTE3NTVCNEUy NEQ3MTFFREJFMkM2NjBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnrI4wDwQCAAIwCQMHACABDfBqQDANBgkqhkiG9w0BAQsF AAOCAQEAiQz6jZ135Lk9c0URAXFquUtBlAo/GS7d4ZXEfVNpXGZ/+pCk7HnFDX00 jhtSFPG3BkPx1LT/8iJdfN1gTyQPuXzaJJeAE14jWoZk3fiDOV/y8gsSOh3PM+nf H43GwhqFGoDRSuku7P6DF0eYU4MAvThjaKGi7vT93efZNll8XK1Hyyh8j2big3QZ Xr9L/tsetyF+ta/p+Sd7SVVJXolH8nnG2bCHxKWqdkRZiAMwmOpqgllTwXPTUz1d 9tUyGfKYLg/bJy2iyhY5ydFqAEsj8KukGl18q2XltcEEGJdb9lBpwh79feRnEIJe nZxuTwpUJDldVDyq4yEglOzWhqOimw== -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:26 2025 by rpki-client