$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/04C9A45E870B11F08F7E7F2EC4F9AE02.roa File: 04C9A45E870B11F08F7E7F2EC4F9AE02.roa (raw, json) Hash identifier: PR1341ViT99C3x+IuwaQtpT92Ovg9jFutW4mwQSvMwI= Subject key identifier: 6F:5F:E7:8E:E2:4E:65:00:A8:06:47:AA:92:A6:83:1F:10:FA:4A:04 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0D0C Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/04C9A45E870B11F08F7E7F2EC4F9AE02.roa Signing time: Mon 01 Sep 2025 08:09:44 +0000 ROA not before: Mon 01 Sep 2025 08:09:44 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135341 IP address blocks: 103.137.72.0/24 maxlen: 24 103.137.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3340 (0xd0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Sep 1 08:09:44 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68b554c8-64ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:e0:e5:2c:fd:07:c2:4c:cd:88:af:ba:7e: da:46:c4:f1:91:01:d5:c9:1d:d7:77:53:eb:a0:de: bf:5d:12:5a:cc:b9:0d:d9:fb:77:bd:bb:a0:97:47: 10:46:26:5c:38:89:ec:7c:3b:4e:6c:05:8b:69:76: 84:9b:e8:59:71:2c:ee:6a:fa:a2:23:00:0b:25:95: 14:71:c5:a8:27:c3:50:a8:46:d7:b9:9c:f4:5a:39: 2d:5c:6f:92:97:9a:58:2c:a1:66:07:fa:5a:56:fd: 99:9e:60:c9:e2:2d:b1:17:7f:79:63:dc:fa:64:ec: f8:22:44:2c:84:e8:32:d9:3e:23:a1:6a:27:17:e0: b0:74:de:d9:95:6c:0c:56:e1:46:5d:8b:93:17:aa: 76:0a:91:7b:c5:1f:71:44:31:33:23:ea:a3:2a:08: cf:e6:45:fd:16:c5:f2:10:a8:9b:e3:03:5b:72:8c: 6a:77:bc:f7:6f:db:bc:c2:d8:7d:14:75:09:47:5f: 7f:06:98:53:61:a0:59:e9:db:a8:d7:df:ce:ef:9e: f8:4d:96:57:b8:8a:8a:43:bc:2b:fa:77:ad:8e:c6: 52:35:64:56:eb:e0:bc:61:e1:d7:f4:3c:8e:ff:c4: 7c:3a:43:4c:b0:31:ae:64:0a:e0:4a:e0:e7:01:97: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5F:E7:8E:E2:4E:65:00:A8:06:47:AA:92:A6:83:1F:10:FA:4A:04 X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/04C9A45E870B11F08F7E7F2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.137.72.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:1d:7a:16:02:34:40:4a:79:3d:1c:03:62:ef:e6:99:76:b7: 53:32:50:e2:06:cb:05:85:1a:5f:f2:75:ff:8d:53:e4:f7:ec: 47:d6:81:69:8e:e8:8c:9d:09:fd:dc:c9:8b:dd:08:f9:a2:24: 8b:2c:46:d1:ff:c4:b5:51:db:62:b4:1f:e2:bf:93:d9:57:38: 8f:c4:4b:3f:fd:ac:07:27:32:75:a9:89:c9:22:3e:3d:37:3e: ba:19:62:7c:08:5c:e7:0d:54:99:42:fc:b0:a1:67:08:83:4e: ae:10:00:1e:c1:c1:86:73:88:a4:99:76:ed:6c:3d:48:20:3d: 98:4d:ca:ff:4c:90:16:4b:f3:11:c3:1f:1a:b5:ad:a6:47:11: 2f:31:0e:bf:94:d6:8e:0c:2e:fc:29:3c:34:f0:39:7f:ce:d3: 45:45:c3:be:70:c1:be:dc:b7:d9:eb:94:fb:d3:24:95:4b:d9: 0f:83:6e:3e:dd:05:de:b1:4e:dd:70:3f:a7:16:de:a1:bd:16: c1:e2:05:dd:51:a4:16:b7:53:04:37:33:13:22:b1:a4:72:05: 51:5b:1e:3c:97:45:0d:9f:a2:98:6d:4e:d2:9e:48:53:e1:62: 7e:5a:dd:11:c9:09:bd:f1:51:1e:ca:e4:0a:2c:80:b6:c1:a9: 56:41:ca:b5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUwOTAxMDgwOTQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OGI1NTRjOC02NGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTng5Sz9B8JMzYivun7aRsTxkQHVyR3Xd1ProN6/XRJazLkN2ft3vbugl0cQ RiZcOInsfDtObAWLaXaEm+hZcSzuavqiIwALJZUUccWoJ8NQqEbXuZz0WjktXG+S l5pYLKFmB/paVv2ZnmDJ4i2xF395Y9z6ZOz4IkQshOgy2T4joWonF+CwdN7ZlWwM VuFGXYuTF6p2CpF7xR9xRDEzI+qjKgjP5kX9FsXyEKib4wNbcoxqd7z3b9u8wth9 FHUJR19/BphTYaBZ6duo19/O7574TZZXuIqKQ7wr+netjsZSNWRW6+C8YeHX9DyO /8R8OkNMsDGuZArgSuDnAZckVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG9f547i TmUAqAZHqpKmgx8Q+koEMB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU0MTgvMEMwQjgwMEVGNjgyMTFFOUE4OTk2MTQ2QzRGOUFFMDIvMDRDOUE0NUU4 NzBCMTFGMDhGN0U3RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFniUgwDQYJKoZIhvcNAQELBQADggEBADodehYCNEBKeT0c A2Lv5pl2t1MyUOIGywWFGl/ydf+NU+T37EfWgWmO6IydCf3cyYvdCPmiJIssRtH/ xLVR22K0H+K/k9lXOI/ESz/9rAcnMnWpickiPj03ProZYnwIXOcNVJlC/LChZwiD Tq4QAB7BwYZziKSZdu1sPUggPZhNyv9MkBZL8xHDHxq1raZHES8xDr+U1o4MLvwp PDTwOX/O00VFw75wwb7ct9nrlPvTJJVL2Q+Dbj7dBd6xTt1wP6cW3qG9FsHiBd1R pBa3UwQ3MxMisaRyBVFbHjyXRQ2fophtTtKeSFPhYn5a3RHJCb3xUR7K5AosgLbB qVZByrU= -----END CERTIFICATE-----Generated at Mon Sep 8 16:20:44 2025 by rpki-client