$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa File: 8C48B22C47E711EE91530D28C4F9AE02.roa (raw, json) Hash identifier: oOyEu7HdLHeRDgmI/hlcMUg6eiIlRVxLKBMf9ShkBXw= Subject key identifier: D7:97:CC:EC:67:0B:43:00:27:FF:C3:D6:88:B9:63:D7:62:50:F5:71 Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 01FD Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa Signing time: Thu 28 Aug 2025 08:43:47 +0000 ROA not before: Thu 28 Aug 2025 08:43:47 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138640 IP address blocks: 103.61.240.0/23 maxlen: 23 103.61.240.0/24 maxlen: 24 103.61.241.0/24 maxlen: 24 2001:df1:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Aug 28 08:43:47 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68b016c3-2795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d5:55:da:59:5f:c6:6a:d2:22:e2:31:dd:30: 5c:c8:56:37:85:2d:a1:c9:70:be:00:5c:5c:41:7b: e5:d8:6d:1d:d1:66:c0:c4:5a:e4:d9:e1:b7:b9:be: ac:9b:09:19:0d:0e:01:c0:80:76:6a:3c:1f:56:0e: 1d:1d:fd:76:32:71:79:50:2f:d4:d2:2f:74:00:52: 4d:c0:e6:74:ec:f3:46:a0:31:1f:02:c6:68:4c:c8: a4:1c:c2:0f:66:ca:85:8c:f0:8d:8e:15:8b:b2:27: c2:9c:60:2b:e4:30:f8:b2:e5:2e:cc:e0:8a:aa:10: 91:ab:d5:bd:d4:b2:72:74:65:de:f1:bb:b0:c8:78: cb:75:38:00:ca:c5:b5:84:c7:ac:99:91:d6:b8:52: 47:23:2a:a0:60:5c:dc:5e:d4:82:c1:bf:61:71:b0: e8:e1:8e:77:7a:52:a7:d2:62:f0:3a:13:01:69:70: 38:37:6d:04:9b:ca:49:67:28:42:a8:84:f1:9d:e8: 5a:61:95:d5:53:d8:63:b5:fc:bf:a5:33:c7:df:0f: a9:2a:46:a3:80:8f:84:d4:2c:8f:35:4c:6a:3c:42: 40:37:e8:36:98:1e:23:2b:59:df:88:ce:e8:70:1b: 9c:fa:8f:e0:c5:50:aa:9a:4f:40:12:61:64:d9:04: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:97:CC:EC:67:0B:43:00:27:FF:C3:D6:88:B9:63:D7:62:50:F5:71 X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.61.240.0/23 IPv6: 2001:df1:c340::/48 Signature Algorithm: sha256WithRSAEncryption 38:dc:c5:ec:74:08:06:2e:38:ba:24:24:7d:66:ba:49:fd:dc: 21:80:ec:a9:1a:38:fa:e9:d6:84:a6:f7:79:04:a3:37:4b:e6: 64:02:6e:f0:11:c8:71:24:31:d3:d4:ca:1e:2a:ab:3f:f7:92: 33:e6:7f:d1:b3:ac:ab:ca:96:88:ed:a3:83:20:60:ac:dd:90: b6:06:7d:b4:e6:b1:c1:ba:4e:5b:47:aa:dc:04:8e:33:b8:0a: 5a:2c:68:46:74:a0:1f:b2:ba:34:9e:5f:47:52:a9:ac:3a:62: 3f:62:9e:e1:71:83:8e:1d:fa:08:4b:1b:3f:b5:29:a7:e9:36: 71:0d:72:a6:21:a1:a1:de:d3:62:0b:a4:9d:01:4a:31:17:5e: 6c:49:b4:fb:b0:cb:ed:92:c7:95:b1:5e:86:95:40:db:af:f3: be:a5:67:6a:3d:2e:c2:1b:19:20:9a:13:05:65:66:dc:25:69: f7:20:ec:70:de:cd:1b:e0:65:39:49:8e:1f:6b:cc:1d:bd:a6: 89:a0:2c:63:ec:1f:c8:56:7b:c2:42:bd:cf:ac:33:05:95:73: e9:ae:86:1c:0f:1b:af:a2:7c:34:44:d1:08:47:17:c1:b9:ac: 11:6a:ed:68:d5:ff:e0:ef:6f:a8:e2:51:17:f4:c4:27:eb:23: 0f:36:1a:27 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjUwODI4MDg0MzQ3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwMTZjMy0yNzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59VV2llfxmrSIuIx3TBcyFY3hS2hyXC+AFxcQXvl2G0d0WbAxFrk2eG3ub6s mwkZDQ4BwIB2ajwfVg4dHf12MnF5UC/U0i90AFJNwOZ07PNGoDEfAsZoTMikHMIP ZsqFjPCNjhWLsifCnGAr5DD4suUuzOCKqhCRq9W91LJydGXe8buwyHjLdTgAysW1 hMesmZHWuFJHIyqgYFzcXtSCwb9hcbDo4Y53elKn0mLwOhMBaXA4N20Em8pJZyhC qITxnehaYZXVU9hjtfy/pTPH3w+pKkajgI+E1CyPNUxqPEJAN+g2mB4jK1nfiM7o cBuc+o/gxVCqmk9AEmFk2QRkEwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFNeXzOxn C0MAJ//D1oi5Y9diUPVxMB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRDMzAvMEYxRjdDRTg5NjQxMTFFREJBOURDQzRGQzRGOUFFMDIvOEM0OEIyMkM0 N0U3MTFFRTkxNTMwRDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnPfAwDwQCAAIwCQMHACABDfHDQDANBgkqhkiG9w0BAQsF AAOCAQEAONzF7HQIBi44uiQkfWa6Sf3cIYDsqRo4+unWhKb3eQSjN0vmZAJu8BHI cSQx09TKHiqrP/eSM+Z/0bOsq8qWiO2jgyBgrN2QtgZ9tOaxwbpOW0eq3ASOM7gK WixoRnSgH7K6NJ5fR1KprDpiP2Ke4XGDjh36CEsbP7Upp+k2cQ1ypiGhod7TYguk nQFKMRdebEm0+7DL7ZLHlbFehpVA26/zvqVnaj0uwhsZIJoTBWVm3CVp9yDscN7N G+BlOUmOH2vMHb2miaAsY+wfyFZ7wkK9z6wzBZVz6a6GHA8br6J8NETRCEcXwbms EWrtaNX/4O9vqOJRF/TEJ+sjDzYaJw== -----END CERTIFICATE-----Generated at Wed Sep 10 09:09:30 2025 by rpki-client