
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C310545082C211EBBB08B280C4F9AE02.roa
File:                     C310545082C211EBBB08B280C4F9AE02.roa (raw, json)
Hash identifier:          0laeAZbe0gy37miOPDx6Hc3w0hPowOHvIhox87nHsFA=
Subject key identifier:   08:35:D0:8C:0D:00:92:ED:E7:E5:BC:C3:C4:3A:E2:5F:6A:BF:88:5E
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       06CB
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C310545082C211EBBB08B280C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 22:41:58 +0000
ROA not before:           Sun 02 Nov 2025 22:41:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     1221
IP address blocks:        103.143.185.0/24 maxlen: 24
                          103.168.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:42:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1739 (0x6cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Nov  2 22:41:58 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6907de35-2ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:00:e8:58:9a:44:b7:e4:85:ec:61:90:e3:
                    4b:92:06:10:cd:97:0c:9c:d0:25:d6:97:6e:03:a5:
                    42:03:35:2d:df:8c:d2:47:c8:8f:fd:fc:8f:90:eb:
                    80:41:16:9f:22:66:4f:f1:f4:18:8f:42:4a:45:6d:
                    7f:5c:1e:7e:dd:21:97:43:86:92:cb:5f:f1:ff:a6:
                    71:2b:ce:fa:0a:81:a7:50:a2:c0:b1:69:b6:f4:92:
                    a9:00:c6:17:8c:d8:7c:17:cd:71:a0:5c:8c:79:08:
                    b4:85:55:e1:e9:f4:f5:14:1f:1f:c9:8d:0a:e0:24:
                    5e:e9:1e:08:b5:e8:f1:00:0b:f7:4d:62:28:1c:aa:
                    fb:99:23:57:95:b2:09:9e:06:03:c3:60:6d:e5:f9:
                    ed:4b:5d:48:ef:eb:9c:6e:7c:e9:77:d2:3b:48:8a:
                    38:e1:e9:61:1a:8f:c5:39:4e:51:23:55:a5:dd:77:
                    7e:a9:90:3c:35:b6:32:bf:e2:30:e3:db:cc:77:50:
                    4b:5d:18:2d:49:37:b2:7d:80:4f:4e:f7:a0:df:43:
                    31:f7:0c:c1:76:f1:a1:e6:3f:8a:8e:b3:2c:d8:25:
                    8e:b4:67:38:eb:c0:8c:13:f3:32:90:58:87:cf:8d:
                    25:fe:f1:29:a3:f7:90:a1:56:c2:62:a4:06:7d:99:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:D0:8C:0D:00:92:ED:E7:E5:BC:C3:C4:3A:E2:5F:6A:BF:88:5E
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C310545082C211EBBB08B280C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.185.0/24
                  103.168.45.0/24
    Signature Algorithm: sha256WithRSAEncryption
         56:25:91:b2:89:3b:37:59:57:cc:88:da:b9:7c:4b:17:ed:23:
         ac:96:7e:c6:4e:30:48:81:26:32:b2:9d:02:5e:b0:6a:87:c6:
         d4:5b:f8:ff:ad:cb:db:3d:56:4f:b5:31:31:ca:f3:25:50:e6:
         05:7e:3e:e9:29:17:71:b6:0c:9a:ac:7c:47:e8:5d:ed:f4:ef:
         2f:17:54:18:2c:69:d9:99:82:29:74:a6:db:82:79:c1:44:03:
         0c:ab:4f:8c:ad:cf:1c:35:b5:51:f4:19:6f:7c:eb:c5:5d:94:
         c4:d0:73:50:1d:c5:82:d9:a8:fa:d5:1f:74:da:9c:60:38:14:
         5d:24:7c:a1:e2:01:25:61:0b:7e:7d:41:e1:45:c7:ea:63:c8:
         48:3f:90:63:eb:c6:b1:3c:28:ea:67:c9:17:43:13:69:b1:92:
         06:29:b3:12:37:c4:88:25:6d:fe:d7:f9:1f:ae:15:91:52:b8:
         50:88:9e:32:85:a8:dc:f4:81:4b:c8:46:b8:d9:d3:98:e4:29:
         22:ca:fa:5c:39:4e:53:82:d2:7d:86:67:e0:48:74:a5:12:cc:
         14:dd:5f:ff:f1:7b:d6:3a:ae:1c:05:a8:47:af:89:1b:d6:62:
         7a:d5:17:e4:20:ff:67:7b:c3:d7:1f:17:4f:74:c0:ac:22:4c:
         38:6c:8c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:23:38 2025 by rpki-client