$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/58C8DF8E1D3711ED9E2D8867C4F9AE02.roa File: 58C8DF8E1D3711ED9E2D8867C4F9AE02.roa (raw, json) Hash identifier: q+A3w69eNTuxgINFJ9CdURTVbChnB5JkJooc6RRAdHo= Subject key identifier: 55:99:56:42:88:AD:19:11:E6:FA:46:DA:BE:9D:F7:F9:66:D4:85:15 Certificate issuer: /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Certificate serial: 029B Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/58C8DF8E1D3711ED9E2D8867C4F9AE02.roa Signing time: Thu 11 Sep 2025 02:09:17 +0000 ROA not before: Thu 11 Sep 2025 02:09:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 142618 IP address blocks: 103.111.38.0/24 maxlen: 24 103.111.39.0/24 maxlen: 24 2001:df1:1a40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB Validity Not Before: Sep 11 02:09:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c22f4d-968b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3e:0e:de:a3:c9:f5:18:0c:4f:cf:af:c0:00: 2c:72:38:4f:7d:7d:7f:12:ca:ca:e0:26:2c:70:b2: 6f:88:58:7f:f0:61:84:f3:3f:02:64:a3:03:07:08: b1:d3:68:21:d8:91:12:06:5f:32:78:ae:49:6b:25: ca:d9:94:3b:35:42:ad:12:8d:82:59:1a:21:de:99: 1c:3b:77:e7:22:c1:b0:d3:d4:49:f7:c0:c8:c5:6f: 38:94:72:a4:d0:87:65:f7:47:a4:77:01:69:c0:33: ec:83:e5:25:22:9a:7d:90:d8:01:9f:4a:c6:71:11: af:4d:60:15:17:b6:80:9f:a2:45:0f:8a:99:ab:d7: 5e:20:8f:d3:d9:f3:7c:72:bb:cb:53:ff:af:e8:ae: 77:cf:e3:7a:52:41:43:1c:a0:08:7c:8b:b9:8b:9b: 49:32:9d:bb:6b:ea:24:d4:ab:e2:4b:e8:95:ef:f1: b9:41:36:e1:c7:c2:1f:b4:e9:86:1e:31:bb:e6:8b: d1:85:c7:43:30:63:a2:48:d8:61:73:10:10:f7:54: f3:96:a1:e0:80:92:78:18:e9:58:c3:97:f3:6a:cd: b1:d4:c3:fc:59:4d:4f:ed:d2:83:60:f4:8b:5d:ff: 0a:41:0d:5d:33:9d:63:92:5a:46:39:b2:b8:d2:34: 84:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:99:56:42:88:AD:19:11:E6:FA:46:DA:BE:9D:F7:F9:66:D4:85:15 X509v3 Authority Key Identifier: keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/58C8DF8E1D3711ED9E2D8867C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.38.0/23 IPv6: 2001:df1:1a40::/48 Signature Algorithm: sha256WithRSAEncryption 3b:d2:55:95:b3:ea:84:c1:a5:03:88:40:f4:5c:aa:ad:42:c2: 22:c5:8b:20:86:78:4a:47:33:54:2b:83:f2:fd:54:09:13:ab: 60:9d:fa:3c:9d:51:70:64:4c:6f:38:41:ee:b9:d0:df:42:66: a4:6f:d5:20:21:42:e8:1e:02:47:68:c4:a8:52:06:f8:71:65: 52:59:a7:8c:2e:70:b9:f3:8d:ed:ed:db:72:71:61:fb:3d:b8: ea:33:22:c0:0b:49:ae:0b:28:d3:7d:c3:5b:fd:0e:7e:97:32: 18:6f:33:c8:8b:75:be:78:f2:5e:ba:78:bc:b6:13:92:6d:60: 26:ae:43:e3:af:7a:f8:0e:3d:5d:fd:0d:49:1c:e8:c7:64:f1: 74:45:2d:74:ff:b4:7f:b8:2c:07:68:90:4b:63:37:fa:72:32: 0e:d9:da:92:b2:27:dc:a5:dd:ec:89:09:19:bb:d9:d8:56:8d: 94:06:e4:d4:31:55:47:36:dc:bc:d2:20:a3:e5:04:37:00:7f: 52:0c:f0:87:69:2f:13:83:59:fc:c7:11:14:14:b4:2d:19:cc: 3f:25:c4:23:2a:83:0e:3f:fe:b1:30:26:8d:fd:44:d5:ff:f9: b4:31:48:d5:6a:01:72:6b:06:7e:b7:ae:d3:63:4a:4e:57:be: 10:60:a2:e5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA1QUQxMTAvBgNVBAUTKEY1MTJBRDY2M0E2MzMyNjM1NUNBOEQ4RTkxMDBCM0NF QUIzQ0I5RkIwHhcNMjUwOTExMDIwOTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMyMmY0ZC05NjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8T4O3qPJ9RgMT8+vwAAscjhPfX1/EsrK4CYscLJviFh/8GGE8z8CZKMDBwix 02gh2JESBl8yeK5JayXK2ZQ7NUKtEo2CWRoh3pkcO3fnIsGw09RJ98DIxW84lHKk 0Idl90ekdwFpwDPsg+UlIpp9kNgBn0rGcRGvTWAVF7aAn6JFD4qZq9deII/T2fN8 crvLU/+v6K53z+N6UkFDHKAIfIu5i5tJMp27a+ok1KviS+iV7/G5QTbhx8IftOmG HjG75ovRhcdDMGOiSNhhcxAQ91TzlqHggJJ4GOlYw5fzas2x1MP8WU1P7dKDYPSL Xf8KQQ1dM51jklpGObK40jSEMwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFWZVkKI rRkR5vpG2r6d9/lm1IUVMB8GA1UdIwQYMBaAFPUSrWY6YzJjVcqNjpEAs86rPLn7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDVBRC85NUJFM0JENjFE MzMxMUVEOTZBMTBBNjBDNEY5QUUwMi85Ukt0Wmpwak1tTlZ5bzJPa1FDenpxczh1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlSS3RaanBqTW1OVnlvMk9rUUN6enFzOHVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzA1QUQvOTVCRTNCRDYxRDMzMTFFRDk2QTEwQTYwQzRGOUFFMDIvNThDOERGOEUx RDM3MTFFRDlFMkQ4ODY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnbyYwDwQCAAIwCQMHACABDfEaQDANBgkqhkiG9w0BAQsF AAOCAQEAO9JVlbPqhMGlA4hA9FyqrULCIsWLIIZ4SkczVCuD8v1UCROrYJ36PJ1R cGRMbzhB7rnQ30JmpG/VICFC6B4CR2jEqFIG+HFlUlmnjC5wufON7e3bcnFh+z24 6jMiwAtJrgso033DW/0OfpcyGG8zyIt1vnjyXrp4vLYTkm1gJq5D4696+A49Xf0N SRzox2TxdEUtdP+0f7gsB2iQS2M3+nIyDtnakrIn3KXd7IkJGbvZ2FaNlAbk1DFV RzbcvNIgo+UENwB/Ugzwh2kvE4NZ/McRFBS0LRnMPyXEIyqDDj/+sTAmjf1E1f/5 tDFI1WoBcmsGfreu02NKTle+EGCi5Q== -----END CERTIFICATE-----Generated at Fri Sep 19 00:50:22 2025 by rpki-client