$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/43E6BE1AF53411EF9DE3BD34C4F9AE02.roa File: 43E6BE1AF53411EF9DE3BD34C4F9AE02.roa (raw, json) Hash identifier: d0073l1e/pxbjtRy8RJAwD/f1Qu4geicKXKAmauL91Y= Subject key identifier: 75:56:7C:28:32:FC:0A:6A:B3:EA:66:C3:4C:7F:2E:DA:E9:59:32:BC Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Certificate serial: 040E Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/43E6BE1AF53411EF9DE3BD34C4F9AE02.roa Signing time: Thu 27 Feb 2025 17:57:10 +0000 ROA not before: Thu 27 Feb 2025 17:57:10 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 149414 IP address blocks: 103.178.220.0/24 maxlen: 24 2001:df0:3e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B72D9, serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3 Validity Not Before: Feb 27 17:57:10 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c0a776-f572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:c0:7a:7c:2a:ad:da:2a:96:64:0a:19:db: 58:e2:4d:84:14:0c:20:bc:df:ce:4e:db:bd:cc:b7: 2d:af:a5:92:10:ac:3e:8a:42:60:d6:c7:59:8a:2c: 4d:e9:24:8c:fd:42:29:6e:8b:83:c4:d5:f4:bf:fe: 7a:31:28:e5:44:be:fd:75:8a:12:23:8d:e7:e4:ad: 88:3d:ce:a2:d8:43:89:95:98:6f:c7:2e:f8:72:b5: e9:b7:f5:53:21:f7:21:f7:97:4a:c6:69:33:e5:fe: 34:57:ee:6a:41:6f:88:16:42:dd:09:5f:49:5d:46: f7:db:6e:1b:f7:26:d9:7c:dc:55:f5:af:c3:6f:2e: f2:bd:94:38:55:5c:f7:3f:57:22:ea:0b:07:bc:dd: 50:0a:d4:c5:c1:0e:c1:60:d7:ef:39:89:b8:4e:ee: 38:7c:e1:bf:12:9f:65:ab:4b:e9:18:9e:82:e6:e2: 51:d1:cf:0d:93:e5:b3:3e:34:72:3c:43:46:19:22: 56:3c:07:ca:a6:d0:5a:54:08:4b:73:41:4b:b3:ef: 50:b1:74:e0:05:75:53:45:be:92:46:07:cf:9c:6f: 9e:30:d0:8d:5f:fc:44:30:dc:52:1a:e0:4c:6e:82: e7:25:59:50:03:84:87:33:6a:27:4f:d8:77:83:da: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:56:7C:28:32:FC:0A:6A:B3:EA:66:C3:4C:7F:2E:DA:E9:59:32:BC X509v3 Authority Key Identifier: keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/43E6BE1AF53411EF9DE3BD34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.178.220.0/24 IPv6: 2001:df0:3e40::/48 Signature Algorithm: sha256WithRSAEncryption 3f:1b:a7:95:59:34:c9:70:51:6c:32:84:52:4a:7f:db:7f:ac: bb:7b:df:a2:5c:d2:b5:ac:8b:dc:93:dc:16:bf:69:de:31:fb: 2e:14:90:19:c4:76:43:82:8b:80:e2:a9:54:42:64:4b:8e:69: aa:15:90:99:85:57:e3:e9:1c:43:fe:4a:8f:bf:dc:02:b6:c4: c1:d8:2d:4c:2e:7d:0c:ee:78:ee:45:cd:6c:57:21:20:9d:89: 38:e1:de:1b:66:94:2e:de:42:a1:43:ea:51:e9:d3:c9:5b:a7: 4b:87:e6:5e:2b:1e:2c:87:71:c5:9e:86:83:e8:25:e8:d6:12: 00:79:18:0a:94:34:90:67:a4:a6:c2:8e:85:ca:26:c9:54:46: be:88:d0:9b:28:46:21:f4:0a:78:e8:57:08:1b:d5:bc:28:5c: 30:31:ce:25:3c:af:3f:51:73:c8:a5:44:9e:a3:a4:07:40:1a: 4b:2e:32:53:70:46:7d:31:5f:07:68:ae:24:56:40:13:9c:6c: 9b:84:f8:de:88:79:92:4a:7a:ea:fe:25:94:ca:7d:56:e2:71: f8:05:41:c0:1e:81:24:7f:55:14:39:74:16:4f:02:1d:3f:b6: f1:d9:fd:d1:f0:43:d7:35:a5:47:75:a5:70:65:23:b2:98:50: 2d:64:68:80 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcyRDkxMTAvBgNVBAUTKDQxRTVEQzIxNTUwNjlGRjMxN0U1RUUzOEM3NUI3ODg5 QzIyMTk3RTMwHhcNMjUwMjI3MTc1NzEwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MwYTc3Ni1mNTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYzAenwqrdoqlmQKGdtY4k2EFAwgvN/OTtu9zLctr6WSEKw+ikJg1sdZiixN 6SSM/UIpbouDxNX0v/56MSjlRL79dYoSI43n5K2IPc6i2EOJlZhvxy74crXpt/VT Ifch95dKxmkz5f40V+5qQW+IFkLdCV9JXUb3224b9ybZfNxV9a/Dby7yvZQ4VVz3 P1ci6gsHvN1QCtTFwQ7BYNfvOYm4Tu44fOG/Ep9lq0vpGJ6C5uJR0c8Nk+WzPjRy PENGGSJWPAfKptBaVAhLc0FLs+9QsXTgBXVTRb6SRgfPnG+eMNCNX/xEMNxSGuBM boLnJVlQA4SHM2onT9h3g9rkowIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHVWfCgy /Apqs+pmw0x/LtrpWTK8MB8GA1UdIwQYMBaAFEHl3CFVBp/zF+XuOMdbeInCIZfj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzJEOS9BQTIzRkE5NjY5 NzExMUVDQjYyNTkzMENDNEY5QUUwMi9RZVhjSVZVR25fTVg1ZTQ0eDF0NGljSWhs LU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlWGNJVlVHbl9NWDVlNDR4MXQ0aWNJaGwtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjcyRDkvQUEyM0ZBOTY2OTcxMTFFQ0I2MjU5MzBDQzRGOUFFMDIvNDNFNkJFMUFG NTM0MTFFRjlERTNCRDM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnstwwDwQCAAIwCQMHACABDfA+QDANBgkqhkiG9w0BAQsF AAOCAQEAPxunlVk0yXBRbDKEUkp/23+su3vfolzStayL3JPcFr9p3jH7LhSQGcR2 Q4KLgOKpVEJkS45pqhWQmYVX4+kcQ/5Kj7/cArbEwdgtTC59DO547kXNbFchIJ2J OOHeG2aULt5CoUPqUenTyVunS4fmXiseLIdxxZ6Gg+gl6NYSAHkYCpQ0kGekpsKO hcomyVRGvojQmyhGIfQKeOhXCBvVvChcMDHOJTyvP1FzyKVEnqOkB0AaSy4yU3BG fTFfB2iuJFZAE5xsm4T43oh5kkp66v4llMp9VuJx+AVBwB6BJH9VFDl0Fk8CHT+2 8dn90fBD1zWlR3WlcGUjsphQLWRogA== -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:32 2025 by rpki-client