$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/3D9FCF3CB74511EBB4D47C23C4F9AE02.roa File: 3D9FCF3CB74511EBB4D47C23C4F9AE02.roa (raw, json) Hash identifier: OyLQ+Oe7TKMDzLYNaYKVwb7JYXn+SADf8IpDxucp7XM= Subject key identifier: C9:54:2D:B2:4A:81:F8:CD:84:98:48:06:51:76:B1:E5:67:6F:6F:65 Certificate issuer: /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Certificate serial: 1A0F Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/3D9FCF3CB74511EBB4D47C23C4F9AE02.roa Signing time: Wed 20 Aug 2025 16:54:35 +0000 ROA not before: Wed 20 Aug 2025 16:54:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139719 IP address blocks: 103.115.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6671 (0x1a0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4 Validity Not Before: Aug 20 16:54:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68a5fdcb-f975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:63:04:02:c3:4b:85:79:51:b1:07:66:3d:34: 6c:02:74:e4:0b:ec:e9:09:fa:dd:1a:5c:ce:99:e6: 7d:46:cb:e8:59:2e:57:06:f8:e4:73:f3:9f:23:c1: 23:73:e9:b8:86:32:d2:0c:ef:b1:26:b1:35:ac:a8: cc:20:8a:c5:a9:a1:49:78:4b:18:60:18:5c:dc:7e: 89:fb:5b:ea:05:15:78:e1:5d:f8:7e:36:74:f3:d4: ba:42:d8:d1:7d:67:b4:8f:f2:b9:2a:37:bf:c8:e6: e8:e5:3b:90:2e:8e:e6:d4:db:58:07:2f:1e:13:d1: ac:5e:6c:e0:75:87:30:4b:29:0d:05:3e:65:69:19: 6a:2b:f5:a9:c9:09:f5:51:20:60:dd:1e:af:fe:77: 81:93:e3:8a:55:79:f5:9c:66:cf:c5:47:1e:89:80: d8:01:72:0a:b4:af:a1:fb:f0:27:9f:44:bd:99:e1: 6d:de:f3:89:3f:8a:c2:5c:8c:30:c2:62:cd:d3:76: ea:1e:ac:d2:22:d6:df:be:c5:6a:87:3b:a2:1f:0f: 6f:77:31:f6:a0:b7:92:a4:10:35:5d:ab:b0:67:18: b4:03:7d:51:2f:92:bb:06:75:97:de:15:36:82:9e: a4:16:d8:ab:8f:44:c7:88:88:e5:b7:a0:80:02:ac: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:54:2D:B2:4A:81:F8:CD:84:98:48:06:51:76:B1:E5:67:6F:6F:65 X509v3 Authority Key Identifier: keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/3D9FCF3CB74511EBB4D47C23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.115.4.0/23 Signature Algorithm: sha256WithRSAEncryption 70:c5:ff:1e:af:d2:91:e7:ce:31:2b:a8:fb:65:e4:6d:d5:52: f7:1b:ba:e0:d1:22:fa:16:9d:33:f6:7c:cc:6d:4e:6c:52:27: 5f:22:d4:5c:d0:4d:26:88:7e:5e:7a:7b:71:19:6f:4c:9c:81: 65:a0:da:fd:2f:6c:63:c0:7d:b8:9d:3c:c2:78:32:b4:e1:5c: 93:03:b6:fd:1d:65:c7:7e:ea:f8:37:60:76:b7:a2:c7:2e:93: 23:2d:a6:f5:a1:98:d8:7d:02:96:87:13:40:d3:ef:0e:78:59: b8:34:4c:16:9e:43:56:ea:eb:7b:a6:88:62:0a:b2:3b:68:de: 97:f5:6c:48:a8:b4:29:9a:82:c1:9f:a4:1d:ba:6e:4c:2d:64: 43:1d:06:82:70:12:95:fa:4c:11:37:04:5a:d3:87:f9:28:67: 34:83:ac:0a:02:85:9b:0a:7c:15:6f:4b:39:4d:7e:40:5f:60: 99:8e:72:2e:a7:21:df:b4:08:f9:7a:37:4a:e3:5e:98:aa:ac: 0d:58:44:2b:89:b6:66:70:8f:b0:fd:ce:c6:ed:62:ba:1d:79: 5e:47:3d:03:64:e2:42:07:b5:da:fe:6f:df:3f:18:57:bb:ba: 23:87:5b:8b:9b:f7:b4:67:26:b5:4d:a0:48:c0:ac:12:9e:23: 86:5a:07:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkyQUUxMTAvBgNVBAUTKDREQUE3NzZGODc5MjgwMEY0MkI4OTc4MEYzMkQ5RTcz Mjc2MTU1RDQwHhcNMjUwODIwMTY1NDM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE1ZmRjYi1mOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGMEAsNLhXlRsQdmPTRsAnTkC+zpCfrdGlzOmeZ9RsvoWS5XBvjkc/OfI8Ej c+m4hjLSDO+xJrE1rKjMIIrFqaFJeEsYYBhc3H6J+1vqBRV44V34fjZ089S6QtjR fWe0j/K5Kje/yObo5TuQLo7m1NtYBy8eE9GsXmzgdYcwSykNBT5laRlqK/WpyQn1 USBg3R6v/neBk+OKVXn1nGbPxUceiYDYAXIKtK+h+/Ann0S9meFt3vOJP4rCXIww wmLN03bqHqzSItbfvsVqhzuiHw9vdzH2oLeSpBA1XauwZxi0A31RL5K7BnWX3hU2 gp6kFtirj0THiIjlt6CAAqx0tQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMlULbJK gfjNhJhIBlF2seVnb29lMB8GA1UdIwQYMBaAFE2qd2+HkoAPQriXgPMtnnMnYVXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTJBRS8zMzZFRjY3NjYw RTgxMUU3QUMxNzUyNTlDNEY5QUUwMi9UYXAzYjRlU2dBOUN1SmVBOHkyZWN5ZGhW ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RhcDNiNGVTZ0E5Q3VKZUE4eTJlY3lkaFZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzkyQUUvMzM2RUY2NzY2MEU4MTFFN0FDMTc1MjU5QzRGOUFFMDIvM0Q5RkNGM0NC NzQ1MTFFQkI0RDQ3QzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFncwQwDQYJKoZIhvcNAQELBQADggEBAHDF/x6v0pHnzjEr qPtl5G3VUvcbuuDRIvoWnTP2fMxtTmxSJ18i1FzQTSaIfl56e3EZb0ycgWWg2v0v bGPAfbidPMJ4MrThXJMDtv0dZcd+6vg3YHa3oscukyMtpvWhmNh9ApaHE0DT7w54 Wbg0TBaeQ1bq63umiGIKsjto3pf1bEiotCmagsGfpB26bkwtZEMdBoJwEpX6TBE3 BFrTh/koZzSDrAoChZsKfBVvSzlNfkBfYJmOci6nId+0CPl6N0rjXpiqrA1YRCuJ tmZwj7D9zsbtYrodeV5HPQNk4kIHtdr+b98/GFe7uiOHW4ub97RnJrVNoEjArBKe I4ZaB3k= -----END CERTIFICATE-----Generated at Thu Aug 21 14:30:33 2025 by rpki-client