$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/10958AE05FB611F0BF84DD83C4F9AE02.roa File: 10958AE05FB611F0BF84DD83C4F9AE02.roa (raw, json) Hash identifier: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI= Subject key identifier: 57:E9:D7:1E:2F:06:3B:D8:E6:61:98:E6:0C:ED:7C:89:22:65:98:78 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 22 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/10958AE05FB611F0BF84DD83C4F9AE02.roa Signing time: Sun 13 Jul 2025 07:19:44 +0000 ROA not before: Sun 13 Jul 2025 07:19:44 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 137933 IP address blocks: 43.224.30.0/24 maxlen: 24 43.224.31.0/24 maxlen: 24 103.46.226.0/24 maxlen: 24 103.46.227.0/24 maxlen: 24 103.82.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 11:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Jul 13 07:19:44 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68735e0f-56c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:57:1e:d2:32:01:e4:21:71:fe:09:f6:16: f7:74:90:02:63:ec:85:7a:80:8f:7c:d6:f9:46:6f: 31:3c:60:3b:7c:99:ab:bd:58:a2:6b:53:12:89:21: 02:3b:3b:f0:47:29:66:f6:a0:cc:cf:5f:3a:67:65: 54:4f:5d:9f:38:ea:b8:bd:e4:99:4d:20:a6:f0:c4: 6d:f4:ab:38:45:fa:42:c0:01:00:32:90:ef:8b:53: 83:f9:88:dc:1d:6b:e9:74:a2:af:c0:d9:e8:87:8e: 26:b4:61:ae:b3:26:f2:5f:2c:5c:cd:b4:89:44:16: a2:ec:20:7f:df:3a:0a:e3:6f:52:1b:4e:cf:12:1f: 9f:3e:b5:15:03:24:86:f3:d2:c7:5b:c8:93:f8:0a: 80:65:49:08:94:81:5d:c9:03:0a:96:12:d7:8c:12: a5:9c:76:8b:1c:96:cc:45:49:b2:6b:a2:3b:23:0e: 83:26:ae:53:0d:b6:10:5c:1c:a7:3a:a7:27:d1:19: a0:2d:e2:c0:2e:5e:82:35:ea:15:ae:51:db:2d:9f: b7:47:43:a8:73:8d:a4:0d:b1:fa:57:40:10:cb:f1: 09:8b:6a:85:70:37:d3:12:8f:bd:88:65:6a:72:a9: 1f:de:6b:d8:19:8a:f4:b4:ab:64:b6:d3:48:b0:8b: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E9:D7:1E:2F:06:3B:D8:E6:61:98:E6:0C:ED:7C:89:22:65:98:78 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/10958AE05FB611F0BF84DD83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.30.0/23 103.46.226.0/23 103.82.140.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ac:eb:65:b1:91:ff:9e:74:e3:73:ee:0c:d4:d6:7c:ed:34: d5:33:44:87:b1:bc:ee:4f:a5:80:9d:48:0d:02:ac:4b:cd:eb: c2:0a:9d:e0:b5:60:82:ba:76:06:0e:cb:6a:38:22:dc:f5:a8: 17:06:32:dd:0f:63:55:f9:30:9a:9f:63:56:30:b9:88:b7:9f: ed:35:43:fb:21:3d:53:8a:c9:90:c5:a5:15:91:60:49:97:a4: 48:58:52:e9:eb:8d:04:51:28:91:48:94:7c:e9:ae:99:ce:a8: 0d:5a:85:78:6b:20:41:79:d1:c2:14:79:ed:01:7f:7c:e2:92: de:30:e2:81:23:40:ff:b2:63:2b:a3:12:87:3a:73:aa:03:f2: a1:0b:ea:52:fa:98:af:71:00:7e:84:83:c9:93:97:bb:97:eb: e4:b6:d3:58:5a:b2:78:5a:86:a5:34:fb:22:c2:39:5e:f3:7f: 25:e8:29:05:a7:c9:60:75:4c:ca:c1:a7:b5:60:24:a8:8c:de: ac:d3:1c:6b:f9:62:5a:35:bf:ea:04:0d:0c:37:2b:9c:16:c9: d8:45:8e:d8:58:ea:f1:f6:ef:0c:20:9f:68:6f:c3:f3:35:d3: b3:71:2a:85:25:5e:8f:20:5e:29:5b:5c:35:d5:b5:5a:f0:45: b2:cc:db:09 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNDdCNTc3QjlDOEFCRTJDMzYwMEM1QjRFNzkzRkY0RDQ3 QjY1MDYyMDAeFw0yNTA3MTMwNzE5NDRaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NzM1ZTBmLTU2YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCts1ce0jIB5CFx/gn2Fvd0kAJj7IV6gI981vlGbzE8YDt8mau9WKJrUxKJIQI7 O/BHKWb2oMzPXzpnZVRPXZ846ri95JlNIKbwxG30qzhF+kLAAQAykO+LU4P5iNwd a+l0oq/A2eiHjia0Ya6zJvJfLFzNtIlEFqLsIH/fOgrjb1IbTs8SH58+tRUDJIbz 0sdbyJP4CoBlSQiUgV3JAwqWEteMEqWcdosclsxFSbJrojsjDoMmrlMNthBcHKc6 pyfRGaAt4sAuXoI16hWuUdstn7dHQ6hzjaQNsfpXQBDL8QmLaoVwN9MSj72IZWpy qR/ea9gZivS0q2S200iwi+RNAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUV+nXHi8G O9jmYZjmDO18iSJlmHgwHwYDVR0jBBgwFoAUR7V3ucir4sNgDFtOeT/01HtlBiAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0M1REFCRUVBNUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdWM3VjaXI0c05nREZ0T2VUXzAxSHRsQmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzBDOS9DNURBQkVFQTVGQjQxMUYwODIwMzQ0N0RDNEY5QUUwMi8xMDk1OEFFMDVG QjYxMUYwQkY4NEREODNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEASvgHgMEAWcu4gMEAGdSjDANBgkqhkiG9w0BAQsFAAOCAQEA d6zrZbGR/55043PuDNTWfO001TNEh7G87k+lgJ1IDQKsS83rwgqd4LVggrp2Bg7L ajgi3PWoFwYy3Q9jVfkwmp9jVjC5iLef7TVD+yE9U4rJkMWlFZFgSZekSFhS6euN BFEokUiUfOmumc6oDVqFeGsgQXnRwhR57QF/fOKS3jDigSNA/7JjK6MShzpzqgPy oQvqUvqYr3EAfoSDyZOXu5fr5LbTWFqyeFqGpTT7IsI5XvN/JegpBafJYHVMysGn tWAkqIzerNMca/liWjW/6gQNDDcrnBbJ2EWO2Fjq8fbvDCCfaG/D8zXTs3EqhSVe jyBeKVtcNdW1WvBFsszbCQ== -----END CERTIFICATE-----Generated at Sun Oct 26 09:36:53 2025 by rpki-client