$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/06E87B54046711ED95A3495FC4F9AE02.roa File: 06E87B54046711ED95A3495FC4F9AE02.roa (raw, json) Hash identifier: ZYQF+B8J3kvs5xBRsxJyyeizflCtkKmYQojiW1ynZsg= Subject key identifier: 2F:DF:C3:F7:15:0D:8E:27:73:42:71:7E:E4:97:DA:AB:95:7D:93:22 Certificate issuer: /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Certificate serial: 02B6 Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/06E87B54046711ED95A3495FC4F9AE02.roa Signing time: Tue 29 Jul 2025 02:09:06 +0000 ROA not before: Tue 29 Jul 2025 02:09:06 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 150123 IP address blocks: 103.191.84.0/23 maxlen: 23 103.191.84.0/24 maxlen: 24 103.191.85.0/24 maxlen: 24 2001:df0:f940::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A Validity Not Before: Jul 29 02:09:06 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68882d42-f9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:fc:6b:1a:7a:73:89:af:e6:fc:a7:df:ab: 2f:6e:70:26:3c:78:41:a0:46:91:5d:ac:ac:fd:b8: 9c:7f:d7:9b:81:94:0b:9c:26:0a:b1:53:e3:d3:32: 8b:f0:42:cf:29:01:c0:d4:d3:34:1e:cd:a8:b2:6d: 5d:f4:f9:35:3b:82:8f:de:e4:87:64:97:ef:c0:37: 6c:f1:be:24:f1:74:a9:f7:40:97:eb:66:34:07:cb: de:08:f1:6c:8d:19:6e:cb:86:3d:2a:22:af:e1:59: 14:23:48:2a:57:21:48:74:af:d0:4a:f3:c9:7c:eb: ed:57:40:d3:1a:98:ef:f5:b1:9d:24:2e:c0:66:6e: 7b:a5:95:bf:68:c7:dc:b1:a5:9a:58:34:1d:33:04: 51:61:7e:0f:99:ba:5f:3c:4e:ca:9a:ba:56:8d:23: 2a:55:1d:f0:bb:36:f4:ee:43:39:72:2b:52:08:29: ce:32:eb:e2:ad:ed:c6:56:72:06:a0:ff:8f:eb:74: ff:30:cf:97:89:70:27:eb:3e:17:3f:0f:e2:92:c0: 3d:98:f3:1a:01:ad:18:39:6d:67:2e:78:08:d8:95: e2:07:c7:91:f5:57:2a:63:2f:19:f4:d0:cb:37:fa: fc:40:ff:22:fa:84:ef:9f:c2:5a:1a:eb:0a:06:9c: 42:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DF:C3:F7:15:0D:8E:27:73:42:71:7E:E4:97:DA:AB:95:7D:93:22 X509v3 Authority Key Identifier: keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/06E87B54046711ED95A3495FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.84.0/23 IPv6: 2001:df0:f940::/48 Signature Algorithm: sha256WithRSAEncryption b1:86:d8:90:8b:9a:48:a5:24:94:a1:40:50:e7:58:8d:13:08: 0b:dc:b5:89:18:08:ed:eb:a9:3a:d5:f1:e8:b4:f1:2f:9f:b9: ce:b2:b5:4c:9e:ce:94:7b:37:bb:53:55:36:bd:c7:0c:b9:39: 58:87:9f:d2:64:11:3a:33:83:30:af:f4:1f:0f:f8:ba:8d:dd: 44:58:77:84:3b:c5:c0:5b:0d:e8:97:a8:2e:61:4b:07:df:45: 39:c7:f4:ae:18:06:83:07:0f:5c:3b:47:7b:fe:64:a4:a3:70: d7:a0:57:de:14:e1:91:bd:ba:37:e5:34:9f:f5:f0:e0:9f:a0: 6b:2d:63:5a:d3:78:63:27:07:b7:e4:2f:fe:df:eb:a3:1f:a7: b7:60:c7:b5:bf:e9:3a:df:7c:34:29:0a:bc:65:13:a1:8c:cf: fd:dd:d0:d6:20:a2:f9:e6:7a:07:a3:68:61:f7:45:a9:47:04: 9b:59:df:4f:29:67:63:a2:43:cf:f0:65:57:bc:01:3e:89:6e: 85:92:11:63:01:ee:fe:8f:8b:86:36:b0:ae:2b:0f:1b:20:16: 25:e0:98:72:9e:7b:11:bb:dd:a9:62:33:ed:5c:bb:2a:d9:27: e9:94:04:91:86:a1:ff:6b:24:ca:2c:55:32:d7:5c:8f:7e:f0: 4c:2f:da:07 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYwOUMxMTAvBgNVBAUTKEZERDU1NzRBQTZCM0EyMzdCNDM2Njk5NTdEODUzMzk1 OTNEQzFFOUEwHhcNMjUwNzI5MDIwOTA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg4MmQ0Mi1mOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPX8axp6c4mv5vyn36svbnAmPHhBoEaRXays/bicf9ebgZQLnCYKsVPj0zKL 8ELPKQHA1NM0Hs2osm1d9Pk1O4KP3uSHZJfvwDds8b4k8XSp90CX62Y0B8veCPFs jRluy4Y9KiKv4VkUI0gqVyFIdK/QSvPJfOvtV0DTGpjv9bGdJC7AZm57pZW/aMfc saWaWDQdMwRRYX4PmbpfPE7KmrpWjSMqVR3wuzb07kM5citSCCnOMuvire3GVnIG oP+P63T/MM+XiXAn6z4XPw/iksA9mPMaAa0YOW1nLngI2JXiB8eR9VcqYy8Z9NDL N/r8QP8i+oTvn8JaGusKBpxClwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFC/fw/cV DY4nc0JxfuSX2quVfZMiMB8GA1UdIwQYMBaAFP3VV0qms6I3tDZplX2FM5WT3B6a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjA5Qy8wQUE1N0M2QzA0 NjUxMUVEOUM4NUYxNUVDNEY5QUUwMi9fZFZYU3Fhem9qZTBObW1WZllVemxaUGNI cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19kVlhTcWF6b2plME5tbVZmWVV6bFpQY0hwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjYwOUMvMEFBNTdDNkMwNDY1MTFFRDlDODVGMTVFQzRGOUFFMDIvMDZFODdCNTQw NDY3MTFFRDk1QTM0OTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnv1QwDwQCAAIwCQMHACABDfD5QDANBgkqhkiG9w0BAQsF AAOCAQEAsYbYkIuaSKUklKFAUOdYjRMIC9y1iRgI7eupOtXx6LTxL5+5zrK1TJ7O lHs3u1NVNr3HDLk5WIef0mQROjODMK/0Hw/4uo3dRFh3hDvFwFsN6JeoLmFLB99F Ocf0rhgGgwcPXDtHe/5kpKNw16BX3hThkb26N+U0n/Xw4J+gay1jWtN4YycHt+Qv /t/rox+nt2DHtb/pOt98NCkKvGUToYzP/d3Q1iCi+eZ6B6NoYfdFqUcEm1nfTyln Y6JDz/BlV7wBPoluhZIRYwHu/o+LhjawrisPGyAWJeCYcp57EbvdqWIz7Vy7Ktkn 6ZQEkYah/2skyixVMtdcj37wTC/aBw== -----END CERTIFICATE-----Generated at Wed Nov 5 17:57:06 2025 by rpki-client