$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/F4C2F7F604FF11EABFF6E022C4F9AE02.roa File: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (raw, json) Hash identifier: hMRVZDPhI9uQhHlcLsQL6+B9hhuCOLqR+jjUlDn3sAQ= Subject key identifier: 84:96:92:4D:7A:29:C9:4E:22:D5:2D:4E:5B:6A:61:4A:EB:EE:B6:4C Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0C12 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/F4C2F7F604FF11EABFF6E022C4F9AE02.roa Signing time: Tue 24 Dec 2024 18:36:37 +0000 ROA not before: Tue 24 Dec 2024 18:36:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 17473 IP address blocks: 103.10.82.0/24 maxlen: 24 103.53.115.0/24 maxlen: 24 103.87.254.0/24 maxlen: 24 103.199.119.0/24 maxlen: 24 144.48.16.0/22 maxlen: 24 203.30.65.0/24 maxlen: 24 203.56.181.0/24 maxlen: 24 203.96.232.0/23 maxlen: 24 2405:5940::/32 maxlen: 32 2405:5940:afff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 18:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Dec 24 18:36:37 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676aff35-b0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0c:2a:54:46:c0:7c:96:f6:0e:4c:65:b7:83: 51:0b:83:fb:4f:1c:a7:b4:aa:e3:31:fd:ff:5c:35: e2:4c:15:b2:c7:36:e0:7c:5d:cc:fd:dd:63:16:44: 79:d2:22:65:b0:98:8b:b3:0f:38:15:28:d6:ff:b9: 10:f0:44:44:dc:61:0e:bd:34:b2:cc:d1:16:ed:31: b6:8f:02:9e:a6:8a:9f:42:0a:0d:37:e3:45:4b:d3: a5:82:04:f7:eb:1b:f3:4b:11:e4:6a:12:4b:42:cf: ac:61:54:4a:18:36:1f:c6:14:32:38:dd:c8:92:b8: 24:86:a5:a6:55:04:04:42:eb:f1:7e:ca:30:06:8f: 2f:72:bd:ba:f9:9e:f6:71:57:0e:7e:d9:c8:51:29: ff:d5:ff:ed:80:fa:df:0c:22:01:91:a8:93:24:5d: a9:31:53:16:e3:d1:7a:6d:06:0b:85:36:35:19:59: bf:8d:92:d0:bf:38:14:6b:88:ae:d8:f8:c7:aa:78: 69:7f:70:91:7b:99:dc:b5:97:8a:b6:80:8e:46:38: 16:a7:d8:3e:ed:fd:95:0b:55:26:9f:17:28:94:f9: 61:00:1b:d6:b0:e9:4e:2c:19:fc:ed:5f:5b:c7:b4: 1c:94:fe:db:71:0f:9b:44:7c:87:d1:db:15:74:a7: 74:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:96:92:4D:7A:29:C9:4E:22:D5:2D:4E:5B:6A:61:4A:EB:EE:B6:4C X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/F4C2F7F604FF11EABFF6E022C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.82.0/24 103.53.115.0/24 103.87.254.0/24 103.199.119.0/24 144.48.16.0/22 203.30.65.0/24 203.56.181.0/24 203.96.232.0/23 IPv6: 2405:5940::/32 Signature Algorithm: sha256WithRSAEncryption 58:95:e0:4b:20:3b:d6:f7:69:4c:27:2b:2c:13:2e:5b:c3:01: d2:d7:ab:ac:37:e0:22:ac:c4:eb:63:86:9a:c1:31:1d:e4:b6: 1d:f3:e3:11:85:cf:18:d6:b1:0e:c5:5b:d6:62:9b:6b:d4:28: 9c:f4:85:b0:25:ad:f4:d2:85:db:75:d0:e8:05:e4:ac:59:d8: 77:cd:43:f7:32:13:79:07:ef:f2:b3:0c:27:99:c5:6d:04:a7: f5:d4:06:70:b5:25:ac:be:24:3f:9b:92:74:e4:3f:30:e9:42: 6b:5a:f0:49:e1:84:07:dd:8a:44:bc:f2:dd:8c:7e:27:29:67: fe:de:69:7e:bb:3f:50:43:43:0c:48:7d:f1:0e:c6:81:b5:f1: d8:4f:fc:a9:cb:1c:91:42:45:62:22:7e:ed:df:4e:71:77:b7: f7:b3:e1:c2:c3:13:b5:bc:98:d9:95:ea:c6:e1:79:2f:31:b8: fd:3d:8c:f5:88:dc:5b:70:40:c0:16:1e:1d:bf:85:1a:38:82: b5:14:dd:26:fd:25:ff:b5:93:d3:a8:c4:59:e2:3c:7d:59:8d: c3:f4:13:ed:31:88:e0:16:77:a5:c3:f5:c0:37:41:c9:07:a4: d4:d5:8a:5b:07:d0:13:a5:de:71:c0:c9:41:d6:a8:2d:f2:04: a9:2c:f2:e3 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjQxMjI0MTgzNjM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZhZmYzNS1iMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQwqVEbAfJb2Dkxlt4NRC4P7TxyntKrjMf3/XDXiTBWyxzbgfF3M/d1jFkR5 0iJlsJiLsw84FSjW/7kQ8ERE3GEOvTSyzNEW7TG2jwKepoqfQgoNN+NFS9OlggT3 6xvzSxHkahJLQs+sYVRKGDYfxhQyON3IkrgkhqWmVQQEQuvxfsowBo8vcr26+Z72 cVcOftnIUSn/1f/tgPrfDCIBkaiTJF2pMVMW49F6bQYLhTY1GVm/jZLQvzgUa4iu 2PjHqnhpf3CRe5nctZeKtoCORjgWp9g+7f2VC1UmnxcolPlhABvWsOlOLBn87V9b x7QclP7bcQ+bRHyH0dsVdKd0+QIDAQABo4ICzjCCAsowHQYDVR0OBBYEFISWkk16 KclOItUtTltqYUrr7rZMMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhFQUYvMTBCMEUzRDAwNEVBMTFFQUJFREM4MTYxQzRGOUFFMDIvRjRDMkY3RjYw NEZGMTFFQUJGRjZFMDIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWAYIKwYBBQUHAQcBAf8E STBHMDYEAgABMDADBABnClIDBABnNXMDBABnV/4DBABnx3cDBAKQMBADBADLHkED BADLOLUDBAHLYOgwDQQCAAIwBwMFACQFWUAwDQYJKoZIhvcNAQELBQADggEBAFiV 4EsgO9b3aUwnKywTLlvDAdLXq6w34CKsxOtjhprBMR3kth3z4xGFzxjWsQ7FW9Zi m2vUKJz0hbAlrfTShdt10OgF5KxZ2HfNQ/cyE3kH7/KzDCeZxW0Ep/XUBnC1Jay+ JD+bknTkPzDpQmta8EnhhAfdikS88t2MficpZ/7eaX67P1BDQwxIffEOxoG18dhP /KnLHJFCRWIifu3fTnF3t/ez4cLDE7W8mNmV6sbheS8xuP09jPWI3FtwQMAWHh2/ hRo4grUU3Sb9Jf+1k9OoxFniPH1ZjcP0E+0xiOAWd6XD9cA3QckHpNTVilsH0BOl 3nHAyUHWqC3yBKks8uM= -----END CERTIFICATE-----Generated at Wed Oct 29 11:56:41 2025 by rpki-client