
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
File:                     3818D9A09A9011EFB14F1729C4F9AE02.roa (raw, json)
Hash identifier:          vvb4CejOVJri8OIdHwWGwZEAuucKhYGTP+ke3m07dcM=
Subject key identifier:   A6:74:E3:09:AD:A6:60:9E:AC:A1:8A:91:3D:E3:E3:65:5E:B8:AF:3B
Certificate issuer:       /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial:       0A05
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
Signing time:             Tue 28 Oct 2025 20:09:04 +0000
ROA not before:           Tue 28 Oct 2025 20:09:04 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9825
IP address blocks:        103.74.229.0/24 maxlen: 24
                          103.74.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
                          rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:54:29 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
        Validity
            Not Before: Oct 28 20:09:04 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690122e0-4f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:6f:1d:f2:47:fc:f2:e6:17:13:2f:44:f3:
                    9d:dd:21:7f:43:ec:f8:22:14:1e:ed:35:6f:67:92:
                    2b:ef:07:f5:88:b9:ea:5a:c2:ce:05:4d:58:c6:52:
                    04:67:9c:89:a4:c5:3b:76:06:5a:95:71:08:31:5b:
                    1f:e8:13:b3:b9:de:10:39:b7:fb:ff:94:4e:7c:15:
                    27:da:a5:6c:00:7c:78:53:17:40:37:1e:33:5e:ed:
                    d7:04:4a:bf:d6:62:57:f9:ab:fa:04:77:b1:7a:4e:
                    e0:12:94:fc:ac:5b:5d:9f:ee:f4:2a:5c:a1:84:71:
                    fb:b9:8c:c3:2a:46:a6:1b:d7:3e:2a:cc:ff:11:5b:
                    46:45:4e:8a:6a:27:7f:44:94:95:45:03:92:4d:e5:
                    7c:28:bc:7a:0d:f1:94:10:f5:ab:c8:66:35:d9:6a:
                    be:e7:f4:f2:e4:ee:1c:ed:5a:fa:0b:da:fe:5a:f3:
                    eb:c3:f1:43:0e:b3:b3:4f:e7:71:ed:64:ce:67:f7:
                    08:b3:a9:58:63:93:b7:85:4d:8f:86:a8:92:1d:c5:
                    9f:03:76:54:94:81:dc:8d:8c:a3:da:4e:55:8d:22:
                    77:8f:15:ea:ce:44:5a:a0:58:c5:c8:03:9e:bf:7f:
                    ad:70:95:70:79:d8:3b:03:ff:af:ec:55:08:92:55:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:74:E3:09:AD:A6:60:9E:AC:A1:8A:91:3D:E3:E3:65:5E:B8:AF:3B
            X509v3 Authority Key Identifier:
                keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/3818D9A09A9011EFB14F1729C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.229.0-103.74.230.255
    Signature Algorithm: sha256WithRSAEncryption
         62:7d:84:1c:0b:9f:c8:6c:84:44:9c:74:77:7f:db:f1:f5:2f:
         49:c2:b5:67:c5:14:95:4a:51:74:84:37:83:07:17:32:49:11:
         80:81:e8:ac:b2:0b:ea:da:83:7d:4b:c6:01:07:52:0d:6e:c0:
         d9:68:e6:f5:f1:0d:e3:31:ee:59:50:92:f8:68:29:38:b0:82:
         e0:b5:f0:70:71:9b:bd:58:4c:f6:c8:61:d4:00:a7:e8:d9:f3:
         e4:16:39:34:eb:bb:84:b1:af:4a:24:3b:e7:89:fb:55:cd:cf:
         af:d3:76:cd:fe:e1:7d:5d:a5:08:95:e2:f0:db:6c:33:37:2f:
         28:d4:0e:9b:9c:42:db:56:99:bb:5f:40:f7:2d:73:12:90:04:
         1b:86:64:63:96:da:b1:6d:ad:51:dd:7c:b0:27:ac:d9:79:b7:
         05:cf:ac:71:25:1f:b9:ad:be:fb:25:ae:8e:dd:f8:c1:18:5e:
         d5:d5:11:bb:9f:1a:00:3c:bc:de:b0:cf:3d:e8:80:f0:96:e9:
         ca:4e:58:fe:1e:83:5a:73:82:6f:ef:7d:39:69:1f:ff:99:8f:
         83:df:36:51:0e:87:1f:f8:65:28:4f:58:e5:ec:1e:b1:bb:22:
         57:cd:87:d0:98:1f:77:d8:de:24:f3:31:8e:e8:83:a6:b8:a3:
         03:ad:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 07:10:31 2025 by rpki-client