$ rpki-client -vvf rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa File: 25B713A4FE6B11EBB5DD176BC4F9AE02.roa (raw, json) Hash identifier: DqhzTlL/TM9MCYZl1hZt1EMkx6698paItxMEmrPBJS4= Subject key identifier: 78:C7:F0:77:08:67:2E:04:21:08:95:70:E0:7D:F4:C5:B8:30:69:54 Certificate issuer: /CN=A91D23C7/serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Certificate serial: 05C0 Authority key identifier: 82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:17:09 +0000 ROA not before: Wed 08 Oct 2025 23:27:47 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 142628 IP address blocks: 103.171.42.0/24 maxlen: 24 2001:df7:3680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D23C7, serialNumber=826B5592AC38B012B7E7C2730DD0607E10DB8102 Validity Not Before: Oct 8 23:27:47 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44a65-a691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:c8:1c:48:cd:ac:8f:66:ea:5e:f7:a1:cf: 32:dc:cc:1c:52:7b:05:7b:7d:0d:1b:d9:81:aa:5f: ba:9e:03:7b:58:20:13:d5:fd:19:cb:a7:76:c9:b7: de:e3:17:9b:86:00:5c:07:bc:dc:f6:9b:a9:bd:ec: b0:47:4e:41:38:cc:74:b4:f4:c2:03:12:90:48:95: f6:a8:20:5b:84:1f:de:9f:72:ce:7c:a5:4f:09:34: f2:bd:6c:28:6b:8e:d2:aa:6c:6a:11:c5:45:9a:52: ff:3a:b3:34:84:fc:5a:e1:49:aa:1f:29:06:1c:90: 95:91:58:88:f4:c1:49:98:e3:28:5c:71:19:61:d7: 33:c8:b1:f5:b5:8f:86:54:19:17:34:36:94:cd:c5: 22:91:b7:92:03:35:b0:c7:ca:08:d7:e3:3a:65:5d: 0c:d7:da:94:ef:47:1d:8c:9b:b4:ca:f5:71:18:e7: 0c:82:5d:cb:61:a5:bb:01:47:07:86:77:b9:a6:ae: fa:07:8b:82:60:4e:63:24:2f:50:5f:f0:de:74:ad: 90:6b:c0:e0:25:fa:71:f8:ae:32:9e:c9:a6:42:cd: 98:41:f2:66:0c:77:6a:bd:e2:01:a4:0b:5e:b4:80: 44:21:8e:8c:50:7c:42:77:01:1f:e1:14:51:c9:7e: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C7:F0:77:08:67:2E:04:21:08:95:70:E0:7D:F4:C5:B8:30:69:54 X509v3 Authority Key Identifier: keyid:82:6B:55:92:AC:38:B0:12:B7:E7:C2:73:0D:D0:60:7E:10:DB:81:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/gmtVkqw4sBK358JzDdBgfhDbgQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmtVkqw4sBK358JzDdBgfhDbgQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D23C7/7B2F538AFE6811EB88CC0E41C4F9AE02/25B713A4FE6B11EBB5DD176BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.42.0/24 IPv6: 2001:df7:3680::/48 Signature Algorithm: sha256WithRSAEncryption 5a:44:61:c8:85:3e:f6:37:a0:ad:a6:47:31:ed:4a:11:3c:87: 7f:20:bd:7f:42:5b:d5:5d:3d:8f:14:f7:e3:50:87:ad:48:7e: 98:84:a8:fb:dd:72:60:24:a2:e1:12:b5:5d:d8:08:60:ab:96: 37:81:5d:38:79:5d:af:5f:06:74:9d:b9:17:73:fc:4a:3b:02: 0b:91:98:30:cf:7e:63:6d:92:23:b9:40:fc:2e:a2:28:b8:6c: 8b:df:7a:c8:b3:b5:49:02:46:9c:8c:55:fe:d3:7a:9b:a2:e0: a1:da:e3:59:a4:3e:5d:ce:72:24:8f:ca:c1:51:05:82:0b:b9: 99:36:c5:b9:ea:2a:8d:21:e1:5f:32:1e:e3:54:b7:77:77:7a: b6:79:46:c8:3f:88:c2:dd:02:58:ce:53:bc:cb:3d:0e:29:c1: c8:73:23:59:24:f8:2a:25:07:ee:b9:f8:13:75:ee:5a:85:82: 06:19:6f:45:7b:31:26:f6:e6:dc:88:f1:cd:67:a6:b4:dd:de: fd:df:c9:35:d7:b3:bb:2b:f1:e6:4f:5e:eb:93:01:f1:88:65: a2:e8:df:06:5a:bd:7a:f4:d2:db:87:66:1d:0f:5e:9b:17:4b: 93:8f:bc:4a:4b:5a:b5:51:fa:c6:b6:cd:8c:b7:1f:91:28:c9: d9:94:45:ec -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDIzQzcxMTAvBgNVBAUTKDgyNkI1NTkyQUMzOEIwMTJCN0U3QzI3MzBERDA2MDdF MTBEQjgxMDIwHhcNMjUxMDA4MjMyNzQ3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGE2NS1hNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX7IHEjNrI9m6l73oc8y3MwcUnsFe30NG9mBql+6ngN7WCAT1f0Zy6d2ybfe 4xebhgBcB7zc9pupveywR05BOMx0tPTCAxKQSJX2qCBbhB/en3LOfKVPCTTyvWwo a47SqmxqEcVFmlL/OrM0hPxa4UmqHykGHJCVkViI9MFJmOMoXHEZYdczyLH1tY+G VBkXNDaUzcUikbeSAzWwx8oI1+M6ZV0M19qU70cdjJu0yvVxGOcMgl3LYaW7AUcH hne5pq76B4uCYE5jJC9QX/DedK2Qa8DgJfpx+K4ynsmmQs2YQfJmDHdqveIBpAte tIBEIY6MUHxCdwEf4RRRyX5bwwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHjH8HcI Zy4EIQiVcOB99MW4MGlUMB8GA1UdIwQYMBaAFIJrVZKsOLASt+fCcw3QYH4Q24EC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjNDNy83QjJGNTM4QUZF NjgxMUVCODhDQzBFNDFDNEY5QUUwMi9nbXRWa3F3NHNCSzM1OEp6RGRCZ2ZoRGJn UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtdFZrcXc0c0JLMzU4SnpEZEJnZmhEYmdRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDIzQzcvN0IyRjUzOEFGRTY4MTFFQjg4Q0MwRTQxQzRGOUFFMDIvMjVCNzEzQTRG RTZCMTFFQkI1REQxNzZCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ6sqMA8EAgACMAkDBwAgAQ33NoAwDQYJKoZIhvcNAQELBQADggEB AFpEYciFPvY3oK2mRzHtShE8h38gvX9CW9VdPY8U9+NQh61IfpiEqPvdcmAkouES tV3YCGCrljeBXTh5Xa9fBnSduRdz/Eo7AguRmDDPfmNtkiO5QPwuoii4bIvfesiz tUkCRpyMVf7Tepui4KHa41mkPl3OciSPysFRBYILuZk2xbnqKo0h4V8yHuNUt3d3 erZ5Rsg/iMLdAljOU7zLPQ4pwchzI1kk+ColB+65+BN17lqFggYZb0V7MSb25tyI 8c1nprTd3v3fyTXXs7sr8eZPXuuTAfGIZaLo3wZavXr00tuHZh0PXpsXS5OPvEpL WrVR+sa2zYy3H5EoydmURew= -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:00 2026 by rpki-client