$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa File: 42A8B35A753911ED9FF88D3DC4F9AE02.roa (raw, json) Hash identifier: goZVedJoqiLMMyICZFK9GGa4Un5ihZuSF2zSMp3JoO0= Subject key identifier: 1A:7F:01:45:D6:EA:D9:72:EB:C7:6B:D5:02:69:D6:C7:AE:21:7D:65 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E2F Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:57:39 +0000 ROA not before: Thu 28 Aug 2025 14:57:39 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 56141 IP address blocks: 49.156.52.0/22 maxlen: 24 103.101.76.0/22 maxlen: 24 2001:df2:9b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20015 (0x4e2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:39 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06e63-51dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:62:bb:98:f1:d3:34:90:d3:2b:5b:84:15:7a: e6:bb:23:70:62:0b:e7:40:09:e1:6f:c8:0f:8a:e0: 28:77:67:cd:58:e0:38:27:fd:b4:40:81:0d:35:8c: 4b:e7:24:b7:74:9a:6c:68:8c:26:15:1d:16:be:fe: 49:44:90:15:db:80:fc:83:54:e5:90:45:34:bf:ac: 7e:3c:48:67:b1:cf:6a:fe:3d:07:db:60:72:2f:31: 64:f0:8b:5b:da:8b:c5:60:d4:41:79:05:4f:76:e5: 68:78:86:a7:1c:e4:3c:f5:a4:b1:3b:50:11:af:e4: 38:52:04:1f:b3:b0:02:13:7a:49:67:aa:48:51:35: 1b:76:95:1d:0a:5f:d4:57:a7:d8:32:5a:12:21:c8: 28:95:8e:25:76:e7:aa:89:d8:f2:3a:26:55:b7:f2: b3:c0:e4:38:67:f5:7d:97:36:f8:3b:78:7e:51:0f: 03:e1:4e:0b:b4:d1:41:85:47:94:91:18:e7:7d:d4: 6d:cc:12:ef:ae:5b:91:d5:de:74:b4:c8:38:f7:63: 54:3e:06:e8:99:c9:d6:51:03:33:d3:9f:dc:8c:51: ec:7b:62:05:7c:b2:75:40:09:e3:ae:f7:12:3e:1d: 01:fe:d4:89:75:01:8c:18:a0:87:d4:1f:f3:37:b0: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:01:45:D6:EA:D9:72:EB:C7:6B:D5:02:69:D6:C7:AE:21:7D:65 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.156.52.0/22 103.101.76.0/22 IPv6: 2001:df2:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 4b:73:87:2d:08:57:30:de:24:c6:8e:06:9c:16:af:2e:6c:8c: d8:8e:da:58:17:3d:da:7e:71:e7:c4:f3:49:c1:ac:5e:8d:ef: d7:72:16:20:16:3a:31:d3:0a:11:ba:67:33:7f:03:13:35:6e: d7:8a:6d:93:04:96:0f:b2:ff:4e:39:fb:a3:e1:4e:f3:b8:52: eb:f3:83:ef:03:dd:47:22:00:a4:c1:d2:54:d3:c2:b0:fc:e6: f6:1e:61:62:a4:0f:4d:0c:66:44:6f:3f:19:db:56:77:86:7c: 23:fd:8c:90:a3:3e:05:b4:97:c1:52:ee:6b:1f:63:dc:28:17: 83:ce:f9:30:f7:f4:83:b6:09:b4:ae:09:6d:8f:31:c4:b2:b3: 85:f1:4e:08:57:e3:35:8e:94:93:63:5b:58:67:77:f5:02:37: 6f:d3:43:42:f9:b6:df:24:86:9d:29:9a:f2:b8:79:15:d2:54: 95:c5:54:d4:a3:89:cb:92:6d:c5:49:3b:5a:3e:09:d0:d7:4e: e7:07:ec:67:af:20:10:d5:2a:84:6f:1b:bf:37:20:45:89:28: 73:1c:26:9b:b5:35:69:a6:d0:a1:1d:ca:bd:ba:b8:68:a5:1b: bc:3c:8b:0f:2a:84:d2:23:d1:64:d0:93:a6:db:40:c8:9c:a0: b3:de:16:75 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICTi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmU2My01MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWK7mPHTNJDTK1uEFXrmuyNwYgvnQAnhb8gPiuAod2fNWOA4J/20QIENNYxL 5yS3dJpsaIwmFR0Wvv5JRJAV24D8g1TlkEU0v6x+PEhnsc9q/j0H22ByLzFk8Itb 2ovFYNRBeQVPduVoeIanHOQ89aSxO1ARr+Q4UgQfs7ACE3pJZ6pIUTUbdpUdCl/U V6fYMloSIcgolY4ldueqidjyOiZVt/KzwOQ4Z/V9lzb4O3h+UQ8D4U4LtNFBhUeU kRjnfdRtzBLvrluR1d50tMg492NUPgbomcnWUQMz05/cjFHse2IFfLJ1QAnjrvcS Ph0B/tSJdQGMGKCH1B/zN7AZrwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFBp/AUXW 6tly68dr1QJp1seuIX1lMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJBOEIzNUE3 NTM5MTFFRDlGRjg4RDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIxnDQDBAJnZUwwDwQCAAIwCQMHACABDfKbADANBgkqhkiG 9w0BAQsFAAOCAQEAS3OHLQhXMN4kxo4GnBavLmyM2I7aWBc92n5x58TzScGsXo3v 13IWIBY6MdMKEbpnM38DEzVu14ptkwSWD7L/Tjn7o+FO87hS6/OD7wPdRyIApMHS VNPCsPzm9h5hYqQPTQxmRG8/GdtWd4Z8I/2MkKM+BbSXwVLuax9j3CgXg875MPf0 g7YJtK4JbY8xxLKzhfFOCFfjNY6Uk2NbWGd39QI3b9NDQvm23ySGnSma8rh5FdJU lcVU1KOJy5JtxUk7Wj4J0NdO5wfsZ68gENUqhG8bvzcgRYkocxwmm7U1aabQoR3K vbq4aKUbvDyLDyqE0iPRZNCTpttAyJygs94WdQ== -----END CERTIFICATE-----Generated at Mon Sep 8 05:36:01 2025 by rpki-client