$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa File: 3046CBE2C4E811EAB607D255C4F9AE02.roa (raw, json) Hash identifier: aGXCfIMMPiIdkB1VXV5Wr23hUeKQclg0bIflcTFqVx4= Subject key identifier: A1:B3:0F:E3:DE:F6:5E:F8:14:CF:E4:E7:1C:7B:39:47:3A:4C:45:B5 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 089F Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa Signing time: Thu 04 Sep 2025 21:01:24 +0000 ROA not before: Thu 04 Sep 2025 21:01:24 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140905 IP address blocks: 103.153.54.0/24 maxlen: 24 2001:df4:3480::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2207 (0x89f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Sep 4 21:01:24 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b9fe24-655c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:cf:95:bb:1b:6b:2c:62:d2:40:86:ca:e8: 8d:5a:66:56:b5:b4:98:06:01:6e:4d:ca:ee:bb:e3: ef:df:cd:39:37:5a:aa:83:0c:76:db:3a:29:8b:8c: 62:55:b3:e2:83:d7:8a:2b:fa:df:7e:6b:92:2e:69: c9:56:03:7b:0b:e9:07:a5:f1:cc:7e:46:0b:f4:73: 69:c2:4b:b9:27:ac:6e:63:11:d4:98:cd:a2:96:08: 0d:c2:70:44:5e:2c:f5:3a:b2:3e:f1:3a:0c:0a:20: 2a:8c:8f:98:6f:f4:36:2d:cc:06:19:bc:fc:d9:51: f7:07:c1:88:6e:fa:3b:72:5d:a0:3a:d3:45:7e:e1: 66:8b:8b:97:f0:29:a1:70:51:d0:31:28:fc:99:d5: 42:ac:3a:88:f3:3c:e8:8c:c6:58:46:f0:ee:6a:d1: 66:4f:a9:e3:08:e2:2b:ee:f8:af:23:96:c9:96:8b: ed:c0:16:36:37:09:dd:f7:5a:ad:29:a9:ce:c2:3f: f7:66:5d:12:03:45:b0:4d:2f:e6:56:04:b6:45:10: 09:64:e0:4a:8e:c4:36:b3:0c:06:90:e8:75:a4:ab: 93:7c:a0:cc:cf:78:12:e8:7f:b5:a0:aa:b0:37:86: ce:7f:b0:a7:ac:a2:8d:dd:9b:bf:31:bf:d7:7a:06: a3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B3:0F:E3:DE:F6:5E:F8:14:CF:E4:E7:1C:7B:39:47:3A:4C:45:B5 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/3046CBE2C4E811EAB607D255C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.153.54.0/24 IPv6: 2001:df4:3480::/48 Signature Algorithm: sha256WithRSAEncryption 55:30:f3:b3:2a:60:b1:27:0a:53:0f:b5:43:b3:ef:be:79:02: 05:d3:de:69:3a:0c:e5:fb:b3:eb:fb:ce:0f:23:82:29:ed:77: 3b:15:d8:71:89:d3:34:6a:ab:f2:5a:a7:2a:69:5a:6f:97:19: de:14:ab:79:9f:24:04:3d:66:6d:11:f9:dc:58:e4:e4:b8:8c: 1d:fa:39:6a:50:a2:8f:2c:86:20:87:f5:6b:5e:21:03:2e:ed: 04:15:be:f5:d5:f4:8f:4d:1c:06:76:4a:1a:78:bb:3f:cd:d3: df:d8:08:c8:59:8b:41:83:1f:b9:b5:80:07:8e:72:50:1b:1c: d9:16:9f:2e:6d:37:27:dd:e4:01:75:1b:7e:f7:2b:f7:85:d0: e9:b5:5a:1c:91:a3:fa:99:f5:01:c8:10:5d:50:17:12:53:d5: 02:60:b6:86:5d:21:29:bd:39:52:e8:f6:24:18:a8:53:c2:b8: 35:e3:71:81:94:a6:4e:2f:da:e1:74:ba:fd:4d:9e:dc:25:ab: 5d:14:bf:03:7b:fa:5d:10:c1:3f:77:47:ef:f5:8c:11:1e:e2: fb:31:2c:a6:63:96:0a:ed:e5:42:f7:d3:20:f8:4e:96:a4:e2: 49:1b:00:01:e6:a9:2b:68:62:b6:dc:d9:e1:8e:7f:db:d0:44: 33:98:3e:22 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwOTA0MjEwMTI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI5ZmUyNC02NTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VjPlbsbayxi0kCGyuiNWmZWtbSYBgFuTcruu+Pv3805N1qqgwx22zopi4xi VbPig9eKK/rffmuSLmnJVgN7C+kHpfHMfkYL9HNpwku5J6xuYxHUmM2ilggNwnBE Xiz1OrI+8ToMCiAqjI+Yb/Q2LcwGGbz82VH3B8GIbvo7cl2gOtNFfuFmi4uX8Cmh cFHQMSj8mdVCrDqI8zzojMZYRvDuatFmT6njCOIr7vivI5bJlovtwBY2Nwnd91qt KanOwj/3Zl0SA0WwTS/mVgS2RRAJZOBKjsQ2swwGkOh1pKuTfKDMz3gS6H+1oKqw N4bOf7CnrKKN3Zu/Mb/XegajqQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKGzD+Pe 9l74FM/k5xx7OUc6TEW1MB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkE1MjEvQzlGQUU3Q0FDNEU2MTFFQUE2NDU0RjU0QzRGOUFFMDIvMzA0NkNCRTJD NEU4MTFFQUI2MDdEMjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmTYwDwQCAAIwCQMHACABDfQ0gDANBgkqhkiG9w0BAQsF AAOCAQEAVTDzsypgsScKUw+1Q7PvvnkCBdPeaToM5fuz6/vODyOCKe13OxXYcYnT NGqr8lqnKmlab5cZ3hSreZ8kBD1mbRH53Fjk5LiMHfo5alCijyyGIIf1a14hAy7t BBW+9dX0j00cBnZKGni7P83T39gIyFmLQYMfubWAB45yUBsc2RafLm03J93kAXUb fvcr94XQ6bVaHJGj+pn1AcgQXVAXElPVAmC2hl0hKb05Uuj2JBioU8K4NeNxgZSm Ti/a4XS6/U2e3CWrXRS/A3v6XRDBP3dH7/WMER7i+zEspmOWCu3lQvfTIPhOlqTi SRsAAeapK2hittzZ4Y5/29BEM5g+Ig== -----END CERTIFICATE-----Generated at Fri Sep 19 04:51:05 2025 by rpki-client