$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa File: 1BB9CAB6578011E99E80631AC4F9AE02.roa (raw, json) Hash identifier: frN4lZuv4ZlRLTeZDqpWstvGTNjkjq8jINytoj03BxI= Subject key identifier: 11:E0:45:79:B3:74:6A:C0:A1:4A:AA:15:BF:C3:1C:AF:86:CB:D4:73 Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0FFB Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa Signing time: Sat 06 Sep 2025 17:57:39 +0000 ROA not before: Sat 06 Sep 2025 17:57:39 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134595 IP address blocks: 103.121.12.0/24 maxlen: 24 103.121.13.0/24 maxlen: 24 103.121.14.0/24 maxlen: 24 103.121.15.0/24 maxlen: 24 2403:6240::/32 maxlen: 32 2403:6240::/36 maxlen: 36 2403:6240:1000::/36 maxlen: 36 2403:6240:2000::/36 maxlen: 36 2403:6240:3000::/36 maxlen: 36 2403:6240:4000::/36 maxlen: 36 2403:6240:5000::/36 maxlen: 36 2403:6240:6000::/36 maxlen: 36 2403:6240:7000::/36 maxlen: 36 2403:6240:8000::/36 maxlen: 36 2403:6240:9000::/36 maxlen: 36 2403:6240:a000::/36 maxlen: 36 2403:6240:b000::/36 maxlen: 36 2403:6240:c000::/36 maxlen: 36 2403:6240:d000::/36 maxlen: 36 2403:6240:e000::/36 maxlen: 36 2403:6240:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4091 (0xffb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Sep 6 17:57:39 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68bc7613-6f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1e:ce:fc:84:b9:85:ff:07:55:27:54:b4:ca: 0f:ac:d4:1d:e0:15:55:f8:30:91:7f:eb:97:13:b0: d4:75:9b:b9:c5:66:19:a6:c2:1d:87:94:76:b1:18: 6e:ed:f6:fb:8d:8c:54:bb:0f:5f:04:fe:db:c9:ec: a3:8e:7a:d9:76:66:1d:e3:c1:3a:ec:97:f8:85:84: a1:5f:51:a8:0d:ec:18:70:c1:c5:69:e9:e0:58:73: 94:94:3c:a5:aa:8b:35:97:18:58:98:f9:00:7e:21: 28:2f:c6:ff:de:a5:09:24:c5:eb:8f:0c:6e:d5:cb: 1f:31:0c:d7:65:2c:10:e2:80:77:10:1d:1d:ad:96: 66:c7:14:e0:90:15:c1:12:09:54:2f:37:9f:5e:ef: 1c:44:f3:75:78:fe:1a:42:2f:7d:b0:aa:05:ac:5e: a2:78:ba:a8:94:3b:eb:2b:d3:ac:5c:11:9f:a5:bb: 3b:bd:e5:7b:7b:e5:90:ed:b9:09:10:fc:f8:cf:23: e8:b7:9e:bc:a9:67:b0:9d:50:39:79:fa:b7:90:df: f2:d2:03:5a:d9:68:c8:f5:ff:7d:f9:c0:02:ed:61: d3:9c:30:f1:f8:9b:42:81:c8:22:ba:1e:f3:92:30: bf:eb:82:e4:e2:e3:cb:6b:8d:6a:38:37:d9:55:45: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:45:79:B3:74:6A:C0:A1:4A:AA:15:BF:C3:1C:AF:86:CB:D4:73 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/1BB9CAB6578011E99E80631AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.121.12.0/22 IPv6: 2403:6240::/32 Signature Algorithm: sha256WithRSAEncryption 00:33:0f:68:f4:ca:dc:cc:4c:7c:61:45:4f:43:88:36:e4:e9: a6:ce:59:85:4d:08:f5:76:90:d9:a1:ca:07:c9:b3:ca:d8:b1: 3c:38:56:1f:aa:4a:5a:50:70:7b:a8:cf:61:43:2e:7a:a2:fd: b3:1e:a3:1e:63:26:82:46:6d:04:f1:d4:ab:f0:29:45:3d:8c: fc:d2:68:bb:9b:de:3c:3e:e8:1f:38:ea:b1:b5:07:ad:d7:3f: 7c:f6:1f:63:de:18:4c:58:9f:d1:03:c9:46:61:3e:c6:16:44: 55:c5:40:46:c9:ed:c2:0d:25:f1:73:f3:85:70:b4:92:3b:4b: 8b:e6:93:df:f4:c2:80:2d:6f:11:a9:57:6d:01:89:e1:df:36: 57:ac:32:33:c2:75:14:81:a3:43:b6:ca:77:1d:35:b2:a9:4a: 53:2c:94:be:9a:f2:41:91:69:72:db:c9:15:3e:7c:af:52:e6: 2d:48:cd:a1:a2:51:2b:09:e2:21:94:45:98:53:f6:7e:6b:69: 7c:88:61:17:8b:48:e7:da:79:89:89:65:ef:42:5f:db:27:69: 36:8d:9a:7c:25:19:02:c7:fd:29:e4:09:d4:05:24:64:77:f5: 97:92:79:70:16:2c:be:5f:a1:2e:9c:42:96:6d:c9:e6:a6:5a: f8:4e:7f:1d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICD/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwOTA2MTc1NzM5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJjNzYxMy02ZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9x7O/IS5hf8HVSdUtMoPrNQd4BVV+DCRf+uXE7DUdZu5xWYZpsIdh5R2sRhu 7fb7jYxUuw9fBP7byeyjjnrZdmYd48E67Jf4hYShX1GoDewYcMHFaengWHOUlDyl qos1lxhYmPkAfiEoL8b/3qUJJMXrjwxu1csfMQzXZSwQ4oB3EB0drZZmxxTgkBXB EglULzefXu8cRPN1eP4aQi99sKoFrF6ieLqolDvrK9OsXBGfpbs7veV7e+WQ7bkJ EPz4zyPot568qWewnVA5efq3kN/y0gNa2WjI9f99+cAC7WHTnDDx+JtCgcgiuh7z kjC/64Lk4uPLa41qODfZVUWkHQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBHgRXmz dGrAoUqqFb/DHK+Gy9RzMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk2QTcvMjZFNzQ5OTY1NzdGMTFFOThFOTBDQTE4QzRGOUFFMDIvMUJCOUNBQjY1 NzgwMTFFOTlFODA2MzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJneQwwDQQCAAIwBwMFACQDYkAwDQYJKoZIhvcNAQELBQAD ggEBAAAzD2j0ytzMTHxhRU9DiDbk6abOWYVNCPV2kNmhygfJs8rYsTw4Vh+qSlpQ cHuoz2FDLnqi/bMeox5jJoJGbQTx1KvwKUU9jPzSaLub3jw+6B846rG1B63XP3z2 H2PeGExYn9EDyUZhPsYWRFXFQEbJ7cINJfFz84VwtJI7S4vmk9/0woAtbxGpV20B ieHfNlesMjPCdRSBo0O2yncdNbKpSlMslL6a8kGRaXLbyRU+fK9S5i1IzaGiUSsJ 4iGURZhT9n5raXyIYReLSOfaeYmJZe9CX9snaTaNmnwlGQLH/SnkCdQFJGR39ZeS eXAWLL5foS6cQpZtyeamWvhOfx0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:35:33 2025 by rpki-client