$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa File: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (raw, json) Hash identifier: Qc3ACPBC+H3iasNyw+1g5xftexl02S0P/76vcceWhqE= Subject key identifier: 2A:3D:28:FD:AA:7E:CE:9D:58:A9:AB:9B:BF:A7:8D:6E:C1:79:B2:5D Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0222 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa Signing time: Mon 01 Sep 2025 23:29:17 +0000 ROA not before: Mon 01 Sep 2025 23:29:17 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 153346 IP address blocks: 103.48.20.0/23 maxlen: 23 2001:df1:a0c0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Sep 1 23:29:17 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68b62c4c-4fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0c:28:fb:3b:b2:c0:5b:cb:68:59:1f:f6:68: 19:ee:f9:de:c6:88:55:a1:26:d8:57:ec:42:22:5f: 53:c3:55:51:db:07:5a:36:4e:5e:e1:e9:19:09:24: 95:53:3c:e5:fa:14:da:da:d6:16:65:6f:79:41:c3: 4c:c4:3b:c2:42:04:a3:e2:b5:6a:5a:b8:3c:7c:e1: 64:1b:c7:f3:e2:92:d1:5e:da:3b:05:8f:80:42:2b: f3:89:10:b9:81:b1:a4:23:e5:83:c3:ef:dc:21:81: 08:f3:e2:93:55:09:99:fb:41:3e:47:70:c4:2a:77: f4:36:68:01:68:28:ea:b2:af:b9:96:2c:67:48:62: 0a:65:41:6b:69:8b:da:e3:95:0c:05:84:f7:4f:0f: ec:0c:d7:d8:1d:b8:24:0c:ad:8d:69:d5:66:e9:c6: ff:50:fc:6c:36:24:83:bd:1a:f8:ea:dd:56:e4:36: 6c:a8:44:e2:47:41:6b:8e:ab:b5:af:11:a8:fe:f9: 5d:9e:34:2e:84:27:1b:14:05:8a:92:4c:24:5d:e7: cc:67:f0:ad:ee:f6:aa:84:bd:12:4f:88:a9:19:07: 3d:41:c8:4e:8d:d4:ba:9b:53:52:32:74:02:8c:83: a0:95:40:1a:db:4f:7d:0b:51:f8:92:bc:8f:bc:88: cb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3D:28:FD:AA:7E:CE:9D:58:A9:AB:9B:BF:A7:8D:6E:C1:79:B2:5D X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.48.20.0/23 IPv6: 2001:df1:a0c0::/47 Signature Algorithm: sha256WithRSAEncryption 0a:8c:6d:60:30:76:95:6a:cc:ad:ed:da:8f:a0:69:aa:7d:f2: 2f:50:a5:3b:0c:ed:e8:9d:67:bc:82:c9:62:b9:d3:52:b5:3a: 5a:5b:75:46:ef:aa:ff:78:50:99:47:c5:61:d9:3c:05:ac:41: 62:f3:74:41:57:03:b0:84:34:11:00:93:87:2d:55:5a:4c:76: 6e:e4:55:99:8c:a8:08:5a:32:56:35:b5:aa:a2:e7:9e:49:01: 90:96:4b:e3:f7:2d:fc:51:61:d9:0c:79:0f:ae:99:42:12:b6: a8:c8:32:e4:97:aa:42:00:c9:93:4a:32:5a:8a:bf:c4:cb:bd: df:54:96:aa:60:1e:ae:c6:99:c2:9c:ff:8d:e2:93:d6:88:7d: b2:bf:c8:60:be:84:80:16:b2:b6:85:da:26:5e:44:46:71:44: 29:a7:d8:63:c8:9f:b1:21:6a:6a:7d:ad:c5:48:30:14:29:49: 83:ab:c6:b6:c0:e5:88:7d:da:17:12:54:c2:03:e5:05:38:89: 84:96:0c:f3:ca:dd:fe:bb:75:f9:25:93:9b:6a:47:7d:1b:70: 26:66:fb:9c:20:72:25:8b:9f:c7:b3:21:ed:56:be:41:7e:dd: 2a:00:4a:eb:01:0f:fa:97:58:64:b5:a8:02:9f:f9:12:03:85: 90:76:90:80 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjUwOTAxMjMyOTE3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI2MmM0Yy00ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Awo+zuywFvLaFkf9mgZ7vnexohVoSbYV+xCIl9Tw1VR2wdaNk5e4ekZCSSV Uzzl+hTa2tYWZW95QcNMxDvCQgSj4rVqWrg8fOFkG8fz4pLRXto7BY+AQivziRC5 gbGkI+WDw+/cIYEI8+KTVQmZ+0E+R3DEKnf0NmgBaCjqsq+5lixnSGIKZUFraYva 45UMBYT3Tw/sDNfYHbgkDK2NadVm6cb/UPxsNiSDvRr46t1W5DZsqETiR0Frjqu1 rxGo/vldnjQuhCcbFAWKkkwkXefMZ/Ct7vaqhL0ST4ipGQc9QchOjdS6m1NSMnQC jIOglUAa2099C1H4kryPvIjLmwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCo9KP2q fs6dWKmrm7+njW7BebJdMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI2RjgvNTYyQzNDQjQ3MjRFMTFFRDhFMjA2NzNFQzRGOUFFMDIvNEU4Njk1QzA0 RjYxMTFGMEFFRjIwMzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnMBQwDwQCAAIwCQMHASABDfGgwDANBgkqhkiG9w0BAQsF AAOCAQEACoxtYDB2lWrMre3aj6Bpqn3yL1ClOwzt6J1nvILJYrnTUrU6Wlt1Ru+q /3hQmUfFYdk8BaxBYvN0QVcDsIQ0EQCThy1VWkx2buRVmYyoCFoyVjW1qqLnnkkB kJZL4/ct/FFh2Qx5D66ZQhK2qMgy5JeqQgDJk0oyWoq/xMu931SWqmAersaZwpz/ jeKT1oh9sr/IYL6EgBaytoXaJl5ERnFEKafYY8ifsSFqan2txUgwFClJg6vGtsDl iH3aFxJUwgPlBTiJhJYM88rd/rt1+SWTm2pHfRtwJmb7nCByJYufx7Mh7Va+QX7d KgBK6wEP+pdYZLWoAp/5EgOFkHaQgA== -----END CERTIFICATE-----Generated at Tue Sep 9 07:52:21 2025 by rpki-client