$ rpki-client -vvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/38CAF4EC52B911EAACE8041BC4F9AE02.roa File: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (raw, json) Hash identifier: lj/CFwKu+N9KL+BN8rOtiVH/zU3sp7+mG9hyAnPkezU= Subject key identifier: 46:E6:71:63:DB:1F:E6:31:B8:C1:AD:AE:EB:9F:C7:1B:00:E3:F9:3B Certificate issuer: /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Certificate serial: 0AAE Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/38CAF4EC52B911EAACE8041BC4F9AE02.roa Signing time: Fri 02 May 2025 20:00:39 +0000 ROA not before: Fri 02 May 2025 20:00:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45665 IP address blocks: 103.209.244.0/22 maxlen: 24 203.10.3.0/24 maxlen: 24 203.11.75.0/24 maxlen: 24 203.11.218.0/24 maxlen: 24 2001:df0:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2734 (0xaae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91594AE, serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Validity Not Before: May 2 20:00:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68152467-01de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:b7:95:45:31:c5:1c:46:fa:fa:76:2d:b2: 43:9f:ce:e5:23:5d:58:c7:6c:63:fd:12:4b:c3:50: 51:fc:05:80:41:eb:9d:dd:b4:26:f0:be:97:a8:d7: a6:07:0d:b8:ad:4e:d0:06:1f:ed:2e:6e:ba:2c:f7: e4:99:df:f4:df:18:f7:29:a8:dc:b1:a3:2f:29:7e: 6f:ff:ba:db:43:d4:a6:42:f1:56:16:20:3b:7c:29: 2d:9e:8b:21:01:e0:7f:a9:31:7c:30:c9:8e:ad:55: f6:5d:e4:a2:df:34:a0:44:b6:92:58:f1:ce:d8:a6: 00:15:6c:f9:40:bf:d1:a7:9b:f6:76:5a:ba:b1:b9: d6:8b:2b:ea:10:18:ca:c5:42:78:86:00:58:bb:92: 5c:94:fe:b0:e0:44:78:cc:ed:be:d0:cd:35:10:3b: a7:39:74:c8:98:38:ae:f6:75:a8:4a:af:6c:15:4c: 99:c7:50:42:ea:1a:5c:1e:81:33:ee:d1:72:80:8e: 71:01:f8:3f:b6:8f:62:68:cc:0b:28:26:4b:0c:62: a3:97:0f:83:f3:46:31:86:59:d4:ed:dc:b2:dc:b9: 80:7e:cc:91:a1:6d:96:50:ed:53:42:4b:9f:31:f4: 9b:70:67:d7:19:ee:77:34:27:81:a6:cc:fd:b9:40: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E6:71:63:DB:1F:E6:31:B8:C1:AD:AE:EB:9F:C7:1B:00:E3:F9:3B X509v3 Authority Key Identifier: keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/38CAF4EC52B911EAACE8041BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.209.244.0/22 203.10.3.0/24 203.11.75.0/24 203.11.218.0/24 IPv6: 2001:df0:71::/48 Signature Algorithm: sha256WithRSAEncryption 56:0f:ad:39:92:af:eb:54:17:f1:6f:14:fa:df:f9:29:cf:8b: a7:be:61:eb:64:4d:5d:fa:97:d7:97:88:1e:73:78:6a:a8:83: ec:10:67:b8:7c:92:07:e5:2f:8a:97:76:a8:a2:d6:89:e6:aa: 1c:50:7a:b1:4d:f0:c5:de:09:f3:d3:2f:66:f2:0f:45:88:c2: 45:4a:1a:89:2c:3f:96:cf:bd:d9:57:2f:2b:1b:f9:e7:aa:c3: 90:28:17:ae:83:f5:c1:67:12:bd:51:0d:ec:66:41:45:7b:12: ea:a6:9a:0a:ba:8c:e7:ce:db:59:62:32:67:ec:68:e4:8b:ce: 48:c8:f6:90:75:01:72:39:22:06:f8:a3:b8:9f:b5:4c:a0:30: cd:03:51:93:5f:30:58:94:9c:24:db:c8:14:da:c2:b8:cf:e1: dc:d5:16:9d:0e:2a:d6:6a:da:68:0d:08:2c:e1:0b:fd:8c:90: 34:b9:3e:68:9f:ff:64:3c:76:e8:5e:b4:de:c7:0c:a3:94:4d: ce:77:72:e9:b4:9f:b7:25:60:91:33:21:ce:be:91:99:78:c1: 31:7e:6e:fc:6c:14:76:40:c6:b6:70:0f:db:5c:fb:ed:dc:d6: 30:64:82:e9:ef:67:04:4e:f6:3c:54:2f:1f:28:a8:03:00:2b: b7:36:c1:76 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk0QUUxMTAvBgNVBAUTKENEQTQ3RTBBMUVFQjUyNUYzQjVBMEZBRkIyRkEwREJC MzYzQkZBNEQwHhcNMjUwNTAyMjAwMDM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1MjQ2Ny0wMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0O3lUUxxRxG+vp2LbJDn87lI11Yx2xj/RJLw1BR/AWAQeud3bQm8L6XqNem Bw24rU7QBh/tLm66LPfkmd/03xj3KajcsaMvKX5v/7rbQ9SmQvFWFiA7fCktnosh AeB/qTF8MMmOrVX2XeSi3zSgRLaSWPHO2KYAFWz5QL/Rp5v2dlq6sbnWiyvqEBjK xUJ4hgBYu5JclP6w4ER4zO2+0M01EDunOXTImDiu9nWoSq9sFUyZx1BC6hpcHoEz 7tFygI5xAfg/to9iaMwLKCZLDGKjlw+D80YxhlnU7dyy3LmAfsyRoW2WUO1TQkuf MfSbcGfXGe53NCeBpsz9uUBjXQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFEbmcWPb H+YxuMGtruufxxsA4/k7MB8GA1UdIwQYMBaAFM2kfgoe61JfO1oPr7L6Dbs2O/pN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTRBRS8zRDhCOEM0ODUy QjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVsODdXZy12c3ZvTnV6WTct azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phUi1DaDdyVWw4N1dnLXZzdm9OdXpZNy1rMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk0QUUvM0Q4QjhDNDg1MkI1MTFFQUE0QTlEMjBFQzRGOUFFMDIvMzhDQUY0RUM1 MkI5MTFFQUFDRTgwNDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBAJn0fQDBADLCgMDBADLC0sDBADLC9owDwQCAAIwCQMHACAB DfAAcTANBgkqhkiG9w0BAQsFAAOCAQEAVg+tOZKv61QX8W8U+t/5Kc+Lp75h62RN XfqX15eIHnN4aqiD7BBnuHySB+Uvipd2qKLWieaqHFB6sU3wxd4J89MvZvIPRYjC RUoaiSw/ls+92VcvKxv556rDkCgXroP1wWcSvVEN7GZBRXsS6qaaCrqM587bWWIy Z+xo5IvOSMj2kHUBcjkiBvijuJ+1TKAwzQNRk18wWJScJNvIFNrCuM/h3NUWnQ4q 1mraaA0ILOEL/YyQNLk+aJ//ZDx26F603scMo5RNzndy6bSftyVgkTMhzr6RmXjB MX5u/GwUdkDGtnAP21z77dzWMGSC6e9nBE72PFQvHyioAwArtzbBdg== -----END CERTIFICATE-----Generated at Wed Nov 5 21:28:05 2025 by rpki-client