$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/630BCB6E1A1D11EC99B84C20C4F9AE02.roa File: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (raw, json) Hash identifier: KLbn4axyWFCDHHukPbRuTMga6xjQIaRTiqnBj5WTC3A= Subject key identifier: 92:E4:C2:DF:40:75:EB:28:5A:9A:02:FD:D0:86:D2:52:36:DF:C5:E4 Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Certificate serial: 0537 Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/630BCB6E1A1D11EC99B84C20C4F9AE02.roa Signing time: Sat 25 Oct 2025 02:13:22 +0000 ROA not before: Sat 25 Oct 2025 02:13:22 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 147042 IP address blocks: 103.173.110.0/23 maxlen: 23 103.173.110.0/24 maxlen: 24 103.173.111.0/24 maxlen: 24 2407:e640::/32 maxlen: 32 2407:e640::/36 maxlen: 36 2407:e640:1000::/36 maxlen: 36 2407:e640:2000::/36 maxlen: 36 2407:e640:3000::/36 maxlen: 36 2407:e640:4000::/36 maxlen: 36 2407:e640:5000::/36 maxlen: 36 2407:e640:6000::/36 maxlen: 36 2407:e640:7000::/36 maxlen: 36 2407:e640:8000::/36 maxlen: 36 2407:e640:9000::/36 maxlen: 36 2407:e640:a000::/36 maxlen: 36 2407:e640:b000::/36 maxlen: 36 2407:e640:c000::/36 maxlen: 36 2407:e640:d000::/36 maxlen: 36 2407:e640:e000::/36 maxlen: 36 2407:e640:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1335 (0x537) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Validity Not Before: Oct 25 02:13:22 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68fc3242-cd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:33:e4:40:57:aa:c0:75:f6:25:26:e7:3f:24: 1e:b7:2d:ff:82:47:a2:39:80:82:d5:fc:94:1c:85: 82:79:45:eb:33:49:74:d4:ee:1e:3e:b5:72:ab:cb: 29:16:33:a9:53:21:93:08:07:ce:77:d3:b4:09:f0: f5:6d:9d:1f:7f:43:31:8f:32:c2:81:8a:1e:7f:80: 19:61:55:a1:02:dd:cf:a4:16:43:b4:48:6a:52:49: 80:8a:cc:b9:7a:24:fb:21:79:7f:dc:02:72:f4:d9: e3:c1:2c:91:59:1c:08:05:32:e9:d3:fe:be:16:00: a0:37:a7:46:ea:53:29:f8:04:a7:c5:ed:fe:ac:0f: 32:2f:8c:c9:55:14:24:eb:60:51:e2:3a:d6:82:9e: 97:0d:06:46:e2:ac:42:c3:fa:1c:c3:13:a0:7c:17: 79:db:b4:ab:23:a0:da:21:55:c1:3d:a1:33:6b:b0: e5:35:6b:cf:34:6e:c0:2b:25:b4:5b:1c:e5:b3:63: c5:c3:9c:b9:af:73:09:ae:2e:4c:35:c7:1a:61:3c: d5:86:0e:37:8d:ec:b3:42:53:9b:8d:39:d9:fc:1c: 91:57:ab:e5:08:79:af:0b:45:05:e1:c9:f5:b8:e7: 4d:21:4d:10:08:8b:ee:0d:e7:0d:e2:1b:53:69:c5: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E4:C2:DF:40:75:EB:28:5A:9A:02:FD:D0:86:D2:52:36:DF:C5:E4 X509v3 Authority Key Identifier: keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/630BCB6E1A1D11EC99B84C20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.173.110.0/23 IPv6: 2407:e640::/32 Signature Algorithm: sha256WithRSAEncryption 28:0c:00:82:7b:b7:96:54:28:b5:f0:17:b7:e5:f8:96:ed:37: 54:3e:98:61:e3:7d:4a:2c:92:48:12:b0:8b:13:b3:3f:78:a8: a1:9a:19:34:c2:85:3c:2f:ea:b7:25:40:57:80:01:45:93:b2: 2c:63:c8:d4:9a:bd:7c:89:26:b2:c5:2b:c7:43:17:93:bd:b8: ac:52:02:7d:0d:d9:3c:8a:32:c9:c1:0a:c8:b0:68:21:47:0f: 36:27:6e:47:1e:cf:9f:89:02:38:a5:dd:f2:af:32:5a:3a:4a: 5a:18:8b:77:0d:b4:7a:50:f7:4c:c0:e0:fb:ed:5d:c6:b8:a4: 6c:32:d5:e1:e8:c7:a0:a2:c8:79:52:7e:c1:c3:f0:a7:b0:9f: 6e:f7:c0:91:90:26:c8:b8:11:c3:48:5c:70:35:44:bf:19:2a: 29:66:22:f3:cc:f6:ce:64:81:ac:af:02:96:40:44:e9:83:58: 13:8a:11:e1:a1:86:0e:d4:9e:25:ce:c0:af:7e:cf:05:89:10: d7:15:43:47:bc:f7:97:53:56:d7:1a:b8:56:f0:3e:fb:b7:7f: c5:99:7f:24:05:d7:0a:e3:fa:85:74:0f:57:eb:60:64:2b:18: 97:c6:fb:90:38:ce:db:29:a0:6f:3c:ae:5a:fe:e2:49:89:a1: da:78:49:80 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy NjA1NzUzRUYwHhcNMjUxMDI1MDIxMzIyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGZjMzI0Mi1jZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDPkQFeqwHX2JSbnPyQety3/gkeiOYCC1fyUHIWCeUXrM0l01O4ePrVyq8sp FjOpUyGTCAfOd9O0CfD1bZ0ff0MxjzLCgYoef4AZYVWhAt3PpBZDtEhqUkmAisy5 eiT7IXl/3AJy9NnjwSyRWRwIBTLp0/6+FgCgN6dG6lMp+ASnxe3+rA8yL4zJVRQk 62BR4jrWgp6XDQZG4qxCw/ocwxOgfBd527SrI6DaIVXBPaEza7DlNWvPNG7AKyW0 Wxzls2PFw5y5r3MJri5MNccaYTzVhg43jeyzQlObjTnZ/ByRV6vlCHmvC0UF4cn1 uOdNIU0QCIvuDecN4htTacXIhQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJLkwt9A desoWpoC/dCG0lI238XkMB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlEMEMvODE0RjZEMDQxQTFBMTFFQzlEMUNERjFFQzRGOUFFMDIvNjMwQkNCNkUx QTFEMTFFQzk5Qjg0QzIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnrW4wDQQCAAIwBwMFACQH5kAwDQYJKoZIhvcNAQELBQAD ggEBACgMAIJ7t5ZUKLXwF7fl+JbtN1Q+mGHjfUoskkgSsIsTsz94qKGaGTTChTwv 6rclQFeAAUWTsixjyNSavXyJJrLFK8dDF5O9uKxSAn0N2TyKMsnBCsiwaCFHDzYn bkcez5+JAjil3fKvMlo6SloYi3cNtHpQ90zA4PvtXca4pGwy1eHox6CiyHlSfsHD 8Kewn273wJGQJsi4EcNIXHA1RL8ZKilmIvPM9s5kgayvApZAROmDWBOKEeGhhg7U niXOwK9+zwWJENcVQ0e895dTVtcauFbwPvu3f8WZfyQF1wrj+oV0D1frYGQrGJfG +5A4ztspoG88rlr+4kmJodp4SYA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:01 2025 by rpki-client