$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa File: 46B27CC6B82A11E9843DEE0AC4F9AE02.roa (raw, json) Hash identifier: wn9BYbDEeMgzZ+nvIIVHE03FH3j72pfXBWyBUiQ/bUc= Subject key identifier: 84:C4:A3:8B:F1:EE:7C:93:CB:09:5A:20:E9:76:25:5C:16:1D:5F:0A Certificate issuer: /CN=A911B5B4/serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Certificate serial: 0E24 Authority key identifier: 9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa Signing time: Thu 28 Aug 2025 18:08:37 +0000 ROA not before: Thu 28 Aug 2025 18:08:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 136968 IP address blocks: 103.5.241.0/24 maxlen: 24 2401:c7c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3620 (0xe24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B4, serialNumber=9DF94C33D3F647AE3D91361E1F172C20686F5989 Validity Not Before: Aug 28 18:08:37 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b09b25-64eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:5b:60:b9:49:02:d6:f7:6d:b2:12:11:41: f1:eb:e0:68:58:3c:60:fb:45:d8:c5:e5:c3:3a:97: 7d:69:0e:16:86:93:a5:1e:3a:1b:69:77:32:bd:15: 0a:78:69:1a:7c:aa:a2:77:ed:e4:d8:dc:fb:96:29: a6:a7:47:e4:0e:5f:67:02:33:55:70:ec:31:02:dd: 9e:2a:a7:f2:52:88:fd:6a:09:27:9c:62:9f:84:7c: ee:ed:77:d8:cc:90:35:0b:ba:3e:34:ea:17:a8:f0: e0:48:51:db:55:c1:96:80:b9:27:c7:a6:b6:22:41: bd:25:70:7f:ec:8b:a2:37:65:3a:2d:8a:39:83:dc: 5c:e9:37:6a:d1:08:2f:82:c0:f9:48:71:c8:4c:2c: 18:99:5a:ef:05:66:f6:18:05:d1:63:6e:c0:8c:54: 30:b1:3d:4d:8e:97:a4:6e:0d:57:cf:cb:fa:f4:7c: 5d:22:e0:13:a4:ce:6e:77:f1:00:cf:ea:1c:c5:96: da:a9:c1:2d:f2:4f:93:5b:7e:59:26:e8:ab:9f:b9: 7b:26:40:cb:9c:77:ca:bd:c0:97:64:17:39:7b:6d: db:ce:1d:b0:9a:b3:e6:09:7b:d8:c4:9e:30:bf:ce: ee:7b:e3:d5:1b:b6:3f:cc:eb:90:25:f8:f1:74:15: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C4:A3:8B:F1:EE:7C:93:CB:09:5A:20:E9:76:25:5C:16:1D:5F:0A X509v3 Authority Key Identifier: keyid:9D:F9:4C:33:D3:F6:47:AE:3D:91:36:1E:1F:17:2C:20:68:6F:59:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/nflMM9P2R649kTYeHxcsIGhvWYk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nflMM9P2R649kTYeHxcsIGhvWYk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B4/709F7A26B82911E993738A09C4F9AE02/46B27CC6B82A11E9843DEE0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.241.0/24 IPv6: 2401:c7c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 24:98:1d:cf:15:48:cc:e9:d0:9b:f4:0f:45:32:42:26:6a:88: cf:7f:04:30:78:5e:14:e4:fd:6f:55:91:b0:34:de:e0:81:5a: 76:23:12:6b:69:c4:09:9e:2c:80:f1:a6:a8:71:94:ed:91:ef: 45:70:32:08:5e:df:f8:7b:ee:34:1d:28:57:02:b4:0b:2c:f4: de:6b:86:99:df:ed:4d:15:8a:ed:00:94:5e:ad:a0:a5:f6:e2: 07:d8:38:dd:2d:5d:0c:1e:1d:92:83:50:f5:9f:7b:ca:c3:ad: 63:56:1d:b5:6c:d5:e1:81:76:2b:fc:5c:06:db:17:3a:53:67: d8:5a:32:be:00:d6:18:35:5f:63:a5:61:0d:dc:e0:a8:20:96: 8d:e5:14:3b:e3:b7:d4:34:a7:2a:87:5b:e2:a2:40:b1:c3:75: d4:b8:6a:4c:f0:df:af:85:dc:c4:d8:8d:c5:22:39:ef:77:21: 9c:9b:e3:0d:21:b2:de:60:0a:9a:68:54:c4:22:5f:66:18:48: 97:45:57:ca:b0:5f:0c:40:8a:0c:c1:11:8d:56:b8:37:62:05: 06:f4:64:c4:d5:65:1c:b0:ce:63:55:91:bf:0b:9b:2c:79:65: c1:5f:9d:54:7b:d5:4c:31:28:6e:a6:7e:db:eb:42:94:75:49: 10:f4:f9:e0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjQxMTAvBgNVBAUTKDlERjk0QzMzRDNGNjQ3QUUzRDkxMzYxRTFGMTcyQzIw Njg2RjU5ODkwHhcNMjUwODI4MTgwODM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwOWIyNS02NGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+NbYLlJAtb3bbISEUHx6+BoWDxg+0XYxeXDOpd9aQ4WhpOlHjobaXcyvRUK eGkafKqid+3k2Nz7limmp0fkDl9nAjNVcOwxAt2eKqfyUoj9agknnGKfhHzu7XfY zJA1C7o+NOoXqPDgSFHbVcGWgLknx6a2IkG9JXB/7IuiN2U6LYo5g9xc6Tdq0Qgv gsD5SHHITCwYmVrvBWb2GAXRY27AjFQwsT1Njpekbg1Xz8v69HxdIuATpM5ud/EA z+ocxZbaqcEt8k+TW35ZJuirn7l7JkDLnHfKvcCXZBc5e23bzh2wmrPmCXvYxJ4w v87ue+PVG7Y/zOuQJfjxdBXkSwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFITEo4vx 7nyTywlaIOl2JVwWHV8KMB8GA1UdIwQYMBaAFJ35TDPT9keuPZE2Hh8XLCBob1mJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCNC83MDlGN0EyNkI4 MjkxMUU5OTM3MzhBMDlDNEY5QUUwMi9uZmxNTTlQMlI2NDlrVFllSHhjc0lHaHZX WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25mbE1NOVAyUjY0OWtUWWVIeGNzSUdodldZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI1QjQvNzA5RjdBMjZCODI5MTFFOTkzNzM4QTA5QzRGOUFFMDIvNDZCMjdDQzZC ODJBMTFFOTg0M0RFRTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnBfEwDwQCAAIwCQMHACQBx8AAATANBgkqhkiG9w0BAQsF AAOCAQEAJJgdzxVIzOnQm/QPRTJCJmqIz38EMHheFOT9b1WRsDTe4IFadiMSa2nE CZ4sgPGmqHGU7ZHvRXAyCF7f+HvuNB0oVwK0Cyz03muGmd/tTRWK7QCUXq2gpfbi B9g43S1dDB4dkoNQ9Z97ysOtY1YdtWzV4YF2K/xcBtsXOlNn2FoyvgDWGDVfY6Vh DdzgqCCWjeUUO+O31DSnKodb4qJAscN11LhqTPDfr4XcxNiNxSI573chnJvjDSGy 3mAKmmhUxCJfZhhIl0VXyrBfDECKDMERjVa4N2IFBvRkxNVlHLDOY1WRvwubLHll wV+dVHvVTDEobqZ+2+tClHVJEPT54A== -----END CERTIFICATE-----Generated at Fri Sep 19 16:43:46 2025 by rpki-client