
$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa
File:                     C437B01282C211EBBB08B280C4F9AE02.roa (raw, json)
Hash identifier:          LDI+BxI6yWXikOHlYdiFwqiUYfCU5mn6/crB9AgbNkw=
Subject key identifier:   18:49:62:F2:18:3F:54:CA:88:46:5F:B0:D7:FD:EC:AE:46:DC:67:DC
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       06CD
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 22:41:59 +0000
ROA not before:           Sun 02 Nov 2025 22:41:59 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139700
IP address blocks:        103.143.185.0/24 maxlen: 24
                          103.168.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:42:02 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Nov  2 22:41:59 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6907de37-94c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:88:7b:56:1a:2c:5f:af:c5:6f:6e:02:87:
                    a6:ab:fc:11:0c:dd:e6:08:29:89:c6:5d:ee:f2:ce:
                    ff:d0:70:1b:ad:8b:98:e0:3e:25:7b:3e:d8:f1:35:
                    f3:3e:95:ef:30:00:cb:69:43:6e:f6:dd:cd:fd:9f:
                    e8:68:99:a3:70:9d:e9:ac:89:7e:20:15:ef:52:ee:
                    21:6d:cc:32:dc:b5:1f:e1:ae:87:a5:99:cc:0e:93:
                    5a:c6:4d:0f:ae:f6:71:a0:9d:91:77:40:48:ed:fa:
                    c5:3b:45:a9:e5:6c:2b:aa:4c:96:13:4e:a5:7e:9b:
                    ec:13:29:0e:ec:b4:4a:6e:9c:b6:4a:2e:91:af:ca:
                    0c:ee:c9:48:91:14:46:11:df:e2:42:c4:dc:b1:ab:
                    7c:01:fd:9f:67:25:a6:d3:87:b3:7a:7b:37:df:88:
                    00:c4:6b:be:ea:d3:dd:0c:23:03:ed:e7:2f:5b:b0:
                    30:c0:48:29:bc:46:f4:3a:ee:ec:cd:50:ff:93:7e:
                    b9:ba:04:5a:06:6c:cf:b6:41:05:88:09:ab:0a:d7:
                    89:55:08:ce:bf:4b:57:cd:95:c6:b2:eb:74:c1:b5:
                    13:e1:a3:1a:a2:ae:81:33:a6:f2:1f:c9:96:94:dc:
                    a2:3d:50:79:1d:84:f5:68:49:4e:88:2d:8c:f0:b3:
                    36:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:49:62:F2:18:3F:54:CA:88:46:5F:B0:D7:FD:EC:AE:46:DC:67:DC
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C437B01282C211EBBB08B280C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.185.0/24
                  103.168.45.0/24
    Signature Algorithm: sha256WithRSAEncryption
         a0:7a:b8:91:bb:02:ab:00:41:a2:39:8c:e6:4e:cd:13:42:06:
         f4:68:e1:5b:c0:26:8d:ce:9c:5c:89:d1:cd:22:dd:98:c1:83:
         ca:fd:1a:db:c5:be:2e:c8:23:75:11:58:fe:e2:47:0d:fd:5b:
         d6:e1:c0:1c:7a:fd:2e:62:60:b2:af:c0:61:ae:af:6c:df:28:
         c0:1b:9c:b3:b8:db:65:e9:39:20:e7:12:af:f2:fd:9d:47:7a:
         21:ab:27:b1:f8:a9:c2:cd:0a:7a:1f:a2:a2:a1:c7:19:ab:42:
         cb:59:70:cf:8c:ef:e1:15:a0:ad:f4:9e:9e:ba:82:b6:a7:39:
         68:ca:31:c4:96:0e:6b:38:a4:36:21:2d:28:25:b7:5a:f1:ce:
         22:08:d9:46:69:13:86:b3:39:62:5f:b7:b2:38:ca:f6:5e:a9:
         cd:6f:cf:c5:22:d6:5b:49:fc:5d:3c:72:6b:5b:b5:8e:9a:f4:
         b7:71:6b:ef:d6:40:ff:b5:5a:3d:9a:a7:2a:ca:30:44:1a:d0:
         e4:41:42:df:bc:3d:73:93:10:99:71:a4:6a:54:0d:cf:03:75:
         c6:f8:b3:b4:14:ab:6d:81:d0:da:83:30:96:f6:21:7b:a0:01:
         aa:ac:6b:5e:ed:9e:a3:9b:45:b2:de:3f:b2:55:e8:2b:d7:9b:
         ea:44:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:23:38 2025 by rpki-client