$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/44E001183C5C11F095C6A259C4F9AE02.roa File: 44E001183C5C11F095C6A259C4F9AE02.roa (raw, json) Hash identifier: LF7g3GuLZ4mHsnQlDZv1P051dssz+lzErI8q8Up+K68= Subject key identifier: 9C:CB:B7:16:56:7A:96:C0:71:42:02:8D:A9:C7:3A:FE:27:76:15:F9 Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 4A Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/44E001183C5C11F095C6A259C4F9AE02.roa Signing time: Sun 31 Aug 2025 08:56:09 +0000 ROA not before: Sun 31 Aug 2025 08:56:09 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 40676 IP address blocks: 103.140.44.0/24 maxlen: 24 2001:df0:a880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Aug 31 08:56:09 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b40e28-994e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:4b:7e:6b:9f:2f:62:db:db:87:aa:96:ba: 88:a0:56:0e:40:00:87:3b:ca:64:f7:2d:e8:53:1c: fb:d2:b6:37:4d:f1:8a:1f:86:24:56:ea:2c:90:c8: 1c:fe:e5:c3:c2:94:a9:91:0d:ff:2f:ad:dd:7d:b6: d4:5d:f0:6f:56:4b:52:8c:99:47:32:45:f9:22:fd: fb:76:39:74:2d:dc:e6:c9:92:33:64:7a:2c:a1:b2: 34:fe:77:31:c0:d1:6f:ec:d6:1e:ca:a3:3c:2a:69: cd:1f:9d:03:f0:d3:61:90:58:53:e4:bb:dd:ac:39: a3:b1:ba:88:eb:31:27:de:5b:da:25:7b:51:10:f5: 79:34:73:77:39:7f:16:3d:2e:aa:c5:36:b5:d6:9a: 21:ea:60:c5:b6:6e:b5:44:c7:32:5d:95:44:b6:43: c8:08:02:d7:1f:cb:f0:ce:2a:6b:93:a5:c8:9c:3a: 49:3e:7d:9b:15:f7:71:a9:23:78:dc:74:c3:30:ce: e0:9c:3d:e0:45:7b:82:c3:1c:64:48:04:23:43:c4: 97:de:ef:ae:b4:69:7d:d6:75:70:b4:98:e3:ce:11: 26:78:19:27:72:4f:15:d6:e7:64:68:7d:e0:ce:80: c4:1f:c6:6c:4b:8a:23:55:d7:03:7e:8f:f9:0a:c0: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CB:B7:16:56:7A:96:C0:71:42:02:8D:A9:C7:3A:FE:27:76:15:F9 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/44E001183C5C11F095C6A259C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.44.0/24 IPv6: 2001:df0:a880::/48 Signature Algorithm: sha256WithRSAEncryption 87:5a:9f:c5:b0:eb:f3:84:bf:99:20:67:ad:5d:c4:ec:7c:17: eb:04:89:92:dd:ff:c3:6d:55:9c:2a:d1:3b:fc:be:e1:9b:1e: 7b:6b:63:cb:a4:3b:44:3b:b2:34:20:c5:22:e9:0a:51:cc:e8: 61:87:ce:62:e1:3f:1b:c8:39:79:ab:88:38:e1:93:d1:81:8d: 8a:a6:bd:a5:78:1e:8a:ba:8b:67:f3:e8:30:2b:30:7f:bc:2b: c5:bb:2a:3a:e0:a6:82:e1:d8:22:12:bb:47:67:8e:23:2e:5c: 2f:9f:f0:31:5d:c7:0e:9c:2d:fa:b3:bd:9d:66:aa:fe:f7:e6: 67:31:9e:2d:57:86:fc:eb:13:98:ff:b5:42:37:2c:0b:ef:3a: bb:34:5a:2e:2c:fa:6f:0b:75:fe:49:d5:ad:c6:14:91:3e:a4: 48:a2:4d:d9:86:cd:71:4d:71:94:aa:0d:68:ea:52:ba:26:ee: ae:21:c6:06:b6:77:bb:7c:9b:94:c7:62:58:53:82:f9:cb:c9: e3:b0:3e:58:c5:c2:96:d2:e2:c3:6b:1d:17:72:56:54:bd:c2: b8:11:52:a9:31:10:d9:c6:61:b0:ec:01:d7:1b:9a:1d:6b:e3: 7c:19:29:f3:fa:78:dc:1e:b8:d5:4e:b6:b5:67:17:2d:91:58: fc:d9:67:62 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTA4MzEwODU2MDlaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YjQwZTI4LTk5NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNjUt+a58vYtvbh6qWuoigVg5AAIc7ymT3LehTHPvStjdN8YofhiRW6iyQyBz+ 5cPClKmRDf8vrd19ttRd8G9WS1KMmUcyRfki/ft2OXQt3ObJkjNkeiyhsjT+dzHA 0W/s1h7Kozwqac0fnQPw02GQWFPku92sOaOxuojrMSfeW9ole1EQ9Xk0c3c5fxY9 LqrFNrXWmiHqYMW2brVExzJdlUS2Q8gIAtcfy/DOKmuTpcicOkk+fZsV93GpI3jc dMMwzuCcPeBFe4LDHGRIBCNDxJfe7660aX3WdXC0mOPOESZ4GSdyTxXW52RofeDO gMQfxmxLiiNV1wN+j/kKwJu3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUnMu3FlZ6 lsBxQgKNqcc6/id2FfkwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyMS8zM0VBQUM2ODJEMDMxMUYwODNFQkIzN0FDNEY5QUUwMi80NEUwMDExODND NUMxMUYwOTVDNkEyNTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGeMLDAPBAIAAjAJAwcAIAEN8KiAMA0GCSqGSIb3DQEBCwUA A4IBAQCHWp/FsOvzhL+ZIGetXcTsfBfrBImS3f/DbVWcKtE7/L7hmx57a2PLpDtE O7I0IMUi6QpRzOhhh85i4T8byDl5q4g44ZPRgY2Kpr2leB6Kuotn8+gwKzB/vCvF uyo64KaC4dgiErtHZ44jLlwvn/AxXccOnC36s72dZqr+9+ZnMZ4tV4b86xOY/7VC NywL7zq7NFouLPpvC3X+SdWtxhSRPqRIok3Zhs1xTXGUqg1o6lK6Ju6uIcYGtne7 fJuUx2JYU4L5y8njsD5YxcKW0uLDax0XclZUvcK4EVKpMRDZxmGw7AHXG5oda+N8 GSnz+njcHrjVTra1ZxctkVj82Wdi -----END CERTIFICATE-----Generated at Wed Sep 17 17:38:18 2025 by rpki-client