
$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/CB39C1A0B3B611F0BAAB2960C4F9AE02.roa
File:                     CB39C1A0B3B611F0BAAB2960C4F9AE02.roa (raw, json)
Hash identifier:          ihHUjtZqZJt66QnOXqHfkpUa1k+8R7/9ey9CEIS3+2U=
Subject key identifier:   50:2D:3D:DD:5C:A8:E5:30:F9:3D:A2:44:AB:5A:D4:B3:37:CD:14:40
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       06C8
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/CB39C1A0B3B611F0BAAB2960C4F9AE02.roa
Signing time:             Tue 28 Oct 2025 04:30:12 +0000
ROA not before:           Tue 28 Oct 2025 04:30:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152464
IP address blocks:        103.139.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:07:35 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: Oct 28 04:30:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=690046d4-f294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bd:48:9a:90:c6:7c:72:5b:ca:66:ab:ea:1e:
                    7b:26:56:92:c5:05:85:ee:a9:dd:46:34:df:e0:d6:
                    9e:15:d9:85:0e:fb:95:9d:f4:b4:e4:98:e6:11:ce:
                    b9:60:5e:96:38:8a:6d:b4:48:67:92:ca:b5:2a:9f:
                    8d:53:7a:ab:33:a5:15:58:d4:d7:df:cb:df:26:40:
                    a2:65:f6:a2:9f:fd:49:0f:74:3d:79:43:d4:f1:3b:
                    80:08:18:f8:0b:3e:d9:57:d2:df:4e:5a:2d:53:08:
                    b4:2c:d3:03:e6:9f:b6:be:d9:f2:3a:12:74:72:de:
                    1a:91:37:9c:63:cd:87:41:19:c6:e3:69:f6:18:43:
                    02:8d:b1:61:f6:53:24:72:9f:ea:13:29:d5:c8:03:
                    40:58:92:cc:d6:91:5c:a9:d6:ee:a3:3c:ef:4c:ee:
                    79:13:88:5a:ca:ec:c7:ed:99:3b:74:d6:90:33:6b:
                    6b:25:39:cf:8f:df:de:d2:b2:63:16:4a:46:0e:f7:
                    4c:de:38:25:51:91:3e:cb:d0:7f:7e:e5:ed:7f:cf:
                    28:20:b0:05:ca:e3:63:e2:f9:3a:87:45:e7:fc:d6:
                    18:6e:d0:e0:7a:20:a8:11:7e:be:93:86:0f:18:6d:
                    6e:76:be:3a:e3:bd:55:c3:61:1f:b4:61:03:e6:91:
                    73:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2D:3D:DD:5C:A8:E5:30:F9:3D:A2:44:AB:5A:D4:B3:37:CD:14:40
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/CB39C1A0B3B611F0BAAB2960C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.218.0/24
    Signature Algorithm: sha256WithRSAEncryption
         cb:7d:b4:06:91:78:fa:ad:e2:0d:c0:db:9a:5d:25:7f:5f:5f:
         79:ba:64:d8:3f:72:62:bc:1f:cc:e0:d4:13:07:8f:1f:7c:f5:
         a2:ef:d9:8d:99:ff:26:0e:8a:24:39:e5:f8:0d:2e:b9:03:a4:
         04:6a:f0:ea:aa:ed:08:8d:9e:9b:f7:88:50:d7:ba:d2:f2:60:
         85:ab:db:80:14:07:e8:9b:98:36:2d:26:8d:87:54:c1:ba:25:
         fa:1b:34:a7:68:28:88:47:6e:cc:cd:c4:7b:69:4c:3a:a4:39:
         73:15:40:52:35:5a:73:7d:7d:ee:71:16:31:ab:b4:3d:1b:67:
         44:ad:3d:68:a4:fd:dd:e3:1b:83:e7:af:cb:b3:a3:a8:f8:7d:
         37:06:78:15:ea:e3:1e:da:92:ef:ce:e6:9f:39:5a:3f:a6:85:
         82:26:bc:e5:2a:9a:54:4f:96:a8:e5:26:16:4c:b4:81:8c:14:
         a5:0d:83:62:4e:3f:f9:de:32:34:e1:ba:84:8a:39:77:17:2b:
         fa:d6:fa:90:7c:e5:af:f7:25:cc:2d:75:24:b7:bd:50:b6:51:
         89:a9:df:62:48:e0:c7:62:fb:10:00:28:46:f6:1b:1c:d8:9f:
         b7:74:3d:ae:6e:46:96:81:05:1d:4c:9d:4d:29:bc:8b:ca:dd:
         c7:28:a8:30
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxQTUxMTAvBgNVBAUTKEU1RTFDRkNBRTFGOUU2RjEyMUNBMTM1NTFCNDBGNjk4
OTg0QjlEOUQwHhcNMjUxMDI4MDQzMDEyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAwNDZkNC1mMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArr1ImpDGfHJbymar6h57JlaSxQWF7qndRjTf4NaeFdmFDvuVnfS05JjmEc65
YF6WOIpttEhnksq1Kp+NU3qrM6UVWNTX38vfJkCiZfain/1JD3Q9eUPU8TuACBj4
Cz7ZV9LfTlotUwi0LNMD5p+2vtnyOhJ0ct4akTecY82HQRnG42n2GEMCjbFh9lMk
cp/qEynVyANAWJLM1pFcqdbuozzvTO55E4hayuzH7Zk7dNaQM2trJTnPj9/e0rJj
FkpGDvdM3jglUZE+y9B/fuXtf88oILAFyuNj4vk6h0Xn/NYYbtDgeiCoEX6+k4YP
GG1udr46471Vw2EftGED5pFzDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFAtPd1c
qOUw+T2iRKta1LM3zRRAMB8GA1UdIwQYMBaAFOXhz8rh+ebxIcoTVRtA9piYS52d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDFBNS84NEI1RDYxQzdE
NkQxMUVCQTZBNEE4MTdDNEY5QUUwMi81ZUhQeXVINTV2RWh5aE5WRzBEMm1KaExu
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlSFB5dUg1NXZFaHloTlZHMEQybUpoTG5aMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAxQTUvODRCNUQ2MUM3RDZEMTFFQkE2QTRBODE3QzRGOUFFMDIvQ0IzOUMxQTBC
M0I2MTFGMEJBQUIyOTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABni9owDQYJKoZIhvcNAQELBQADggEBAMt9tAaRePqt4g3A
25pdJX9fX3m6ZNg/cmK8H8zg1BMHjx989aLv2Y2Z/yYOiiQ55fgNLrkDpARq8Oqq
7QiNnpv3iFDXutLyYIWr24AUB+ibmDYtJo2HVMG6JfobNKdoKIhHbszNxHtpTDqk
OXMVQFI1WnN9fe5xFjGrtD0bZ0StPWik/d3jG4Pnr8uzo6j4fTcGeBXq4x7aku/O
5p85Wj+mhYImvOUqmlRPlqjlJhZMtIGMFKUNg2JOP/neMjThuoSKOXcXK/rW+pB8
5a/3JcwtdSS3vVC2UYmp32JI4Mdi+xAAKEb2GxzYn7d0Pa5uRpaBBR1MnU0pvIvK
3ccoqDA=
-----END CERTIFICATE-----
Generated at Tue Nov  4 12:11:03 2025 by rpki-client