$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/AE58A24695B011E696EFE472C4F9AE02.roa File: AE58A24695B011E696EFE472C4F9AE02.roa (raw, json) Hash identifier: OwRMtrtGPYaPPKGjgTatExbq339fV5j/IPlfXafo770= Subject key identifier: D7:E3:55:11:F7:A1:19:6C:2A:CE:C1:88:1E:49:37:C6:AD:B3:B1:E9 Certificate issuer: /CN=A91DDD3F/serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Certificate serial: 1E0F Authority key identifier: A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/AE58A24695B011E696EFE472C4F9AE02.roa Signing time: Wed 08 Oct 2025 16:14:29 +0000 ROA not before: Wed 08 Oct 2025 16:14:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133156 IP address blocks: 103.75.23.0/24 maxlen: 24 2001:df5:2200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7695 (0x1e0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD3F, serialNumber=A7E4134D9B11DEAB75B11791D55E39D1744E0BF1 Validity Not Before: Oct 8 16:14:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e68de4-6efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:de:61:80:38:b2:91:c7:d9:7a:70:c0:58:70: ba:0c:01:76:26:1a:ee:a6:79:d2:50:33:56:87:22: 29:e0:57:77:e5:bd:55:bc:25:25:0d:60:4a:a9:b4: 68:8e:d2:10:bd:6b:d6:eb:98:da:d5:1c:64:91:54: f6:de:52:0e:d5:91:b2:9b:de:47:13:b5:90:03:bf: c0:95:c2:7d:d8:09:bf:c1:74:31:1c:f3:93:25:13: ee:bc:6c:67:1a:bd:b8:19:b0:e1:2c:81:3a:67:ad: a4:95:0d:57:c6:8e:0b:f4:8d:e5:9f:65:f7:5c:99: a7:81:c7:a8:d7:ea:ae:5b:27:98:09:63:9a:41:46: da:bf:35:92:db:59:b4:11:cb:d3:a8:c3:b5:b4:07: 08:cb:f1:4a:d7:9c:ba:ac:d6:e1:07:b6:57:65:75: 5c:21:61:df:3c:e5:48:e1:c8:99:e1:0c:c2:29:8e: cf:5b:90:43:26:ea:a2:bd:b8:54:07:21:ec:57:d8: b7:1b:a7:20:81:c2:eb:8b:6c:1f:5e:d3:a1:27:0a: d8:d6:09:9c:59:71:41:d0:47:8b:84:da:ef:06:c8: 8a:e5:83:69:8f:52:af:02:be:7b:3e:08:b4:4d:8b: d2:bb:b3:db:41:6c:2a:f1:19:2e:e8:28:56:16:c2: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E3:55:11:F7:A1:19:6C:2A:CE:C1:88:1E:49:37:C6:AD:B3:B1:E9 X509v3 Authority Key Identifier: keyid:A7:E4:13:4D:9B:11:DE:AB:75:B1:17:91:D5:5E:39:D1:74:4E:0B:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/p-QTTZsR3qt1sReR1V450XROC_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-QTTZsR3qt1sReR1V450XROC_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD3F/C1A47FD895AF11E6B7854371C4F9AE02/AE58A24695B011E696EFE472C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.75.23.0/24 IPv6: 2001:df5:2200::/48 Signature Algorithm: sha256WithRSAEncryption 9f:8e:ec:7d:6c:0f:fb:cc:50:fe:3d:50:48:0b:ac:ca:3f:39: 68:cd:84:66:f5:2f:91:2d:aa:e0:27:f9:4c:af:ee:5d:6f:07: d3:49:ef:44:79:fa:ea:a5:05:95:24:ec:82:c1:47:62:8c:d0: 93:e4:0f:c8:2d:e3:27:c4:d0:33:be:d5:4d:02:27:4a:8d:63: 88:df:37:76:42:26:b1:e4:15:39:30:15:58:9f:5e:01:9c:9e: ac:84:2f:4d:45:32:c5:db:70:20:57:44:ac:53:af:6d:f5:6c: c1:37:ff:a6:f2:e4:16:43:0c:e2:95:dc:91:5a:10:66:2c:b5: 00:b6:aa:6b:42:e4:66:3a:6d:67:92:78:d7:ee:78:4a:bd:b9: b1:f9:f9:9e:72:98:05:70:4a:f8:d2:0a:c8:3b:14:8f:49:d6: 97:63:e7:c3:6c:72:80:83:47:94:5c:ea:a8:2b:2d:e4:2b:ba: ab:a9:2f:32:d8:b4:80:8c:c7:97:b0:57:48:b6:1b:d1:3d:d1: 97:7c:06:8f:60:4a:87:e9:d0:13:48:e7:46:d7:06:35:4b:be: 3e:22:77:b3:ec:fd:a5:77:ea:18:6b:93:8a:5b:59:7b:61:33: 33:4f:6f:13:bd:ac:89:59:ca:d1:39:1f:56:71:ca:04:a4:ba: 5d:41:4c:d3 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICHg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREM0YxMTAvBgNVBAUTKEE3RTQxMzREOUIxMURFQUI3NUIxMTc5MUQ1NUUzOUQx NzQ0RTBCRjEwHhcNMjUxMDA4MTYxNDI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2OGRlNC02ZWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+d5hgDiykcfZenDAWHC6DAF2JhrupnnSUDNWhyIp4Fd35b1VvCUlDWBKqbRo jtIQvWvW65ja1RxkkVT23lIO1ZGym95HE7WQA7/AlcJ92Am/wXQxHPOTJRPuvGxn Gr24GbDhLIE6Z62klQ1Xxo4L9I3ln2X3XJmngceo1+quWyeYCWOaQUbavzWS21m0 EcvTqMO1tAcIy/FK15y6rNbhB7ZXZXVcIWHfPOVI4ciZ4QzCKY7PW5BDJuqivbhU ByHsV9i3G6cggcLri2wfXtOhJwrY1gmcWXFB0EeLhNrvBsiK5YNpj1KvAr57Pgi0 TYvSu7PbQWwq8Rku6ChWFsJ7NwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNfjVRH3 oRlsKs7BiB5JN8ats7HpMB8GA1UdIwQYMBaAFKfkE02bEd6rdbEXkdVeOdF0Tgvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQzRi9DMUE0N0ZEODk1 QUYxMUU2Qjc4NTQzNzFDNEY5QUUwMi9wLVFUVFpzUjNxdDFzUmVSMVY0NTBYUk9D X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtUVRUWnNSM3F0MXNSZVIxVjQ1MFhST0NfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REREM0YvQzFBNDdGRDg5NUFGMTFFNkI3ODU0MzcxQzRGOUFFMDIvQUU1OEEyNDY5 NUIwMTFFNjk2RUZFNDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnSxcwDwQCAAIwCQMHACABDfUiADANBgkqhkiG9w0BAQsF AAOCAQEAn47sfWwP+8xQ/j1QSAusyj85aM2EZvUvkS2q4Cf5TK/uXW8H00nvRHn6 6qUFlSTsgsFHYozQk+QPyC3jJ8TQM77VTQInSo1jiN83dkImseQVOTAVWJ9eAZye rIQvTUUyxdtwIFdErFOvbfVswTf/pvLkFkMM4pXckVoQZiy1ALaqa0LkZjptZ5J4 1+54Sr25sfn5nnKYBXBK+NIKyDsUj0nWl2Pnw2xygINHlFzqqCst5Cu6q6kvMti0 gIzHl7BXSLYb0T3Rl3wGj2BKh+nQE0jnRtcGNUu+PiJ3s+z9pXfqGGuTiltZe2Ez M09vE72siVnK0TkfVnHKBKS6XUFM0w== -----END CERTIFICATE-----Generated at Wed Nov 5 05:10:17 2025 by rpki-client