$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/31E1DE72B04B11EE9F3B384BC4F9AE02.roa File: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (raw, json) Hash identifier: 0/XyD86MMGDFZWji3u5g4rHGi/klL7pxbtniJ4b3GEs= Subject key identifier: 21:70:62:F8:D5:DB:3F:BC:10:A2:42:03:82:6D:7F:E0:BF:40:D2:8E Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 1328 Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/31E1DE72B04B11EE9F3B384BC4F9AE02.roa Signing time: Tue 04 Nov 2025 17:35:33 +0000 ROA not before: Tue 04 Nov 2025 17:35:33 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137442 IP address blocks: 103.191.142.0/23 maxlen: 24 203.12.229.0/24 maxlen: 24 203.12.230.0/24 maxlen: 24 2001:df0:ca00::/48 maxlen: 48 2001:df0:ca01::/48 maxlen: 48 2001:df0:ca02::/48 maxlen: 48 2001:df0:ca03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4904 (0x1328) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Nov 4 17:35:33 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690a3965-1583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:e6:92:ce:18:08:43:67:fb:e9:b2:7f:de: 24:0d:42:b0:ff:ad:16:59:77:3f:73:cf:2b:fd:e5: b9:c6:9f:5b:85:14:20:0c:ab:e4:98:28:91:d8:61: e9:3b:91:2d:78:7e:57:18:c1:8d:db:42:eb:1a:85: b5:92:c7:e9:83:f6:e5:91:25:54:16:34:9c:af:07: 27:94:0e:a2:52:38:99:3a:4f:3b:c0:56:db:d4:f5: 84:b5:e0:bd:f2:73:d8:13:a8:2a:81:70:29:73:de: d6:f8:bc:a0:b5:2f:51:13:a4:b7:69:2f:be:f1:28: 3b:75:58:de:68:db:5f:c9:5d:6b:60:00:01:3a:cf: 60:cc:2c:c6:19:8b:fa:a0:d8:2f:ab:4d:4b:b2:40: 8c:88:c9:23:6a:09:08:39:97:73:1a:a7:f4:0a:a5: 6e:b3:ad:83:66:19:88:c5:4e:15:db:19:50:d4:96: c3:35:65:95:32:2e:9a:62:8b:99:d3:e1:40:f1:e5: f2:66:42:27:8e:06:75:8f:54:c9:80:7f:1b:eb:91: 1c:f1:26:00:96:44:b2:13:c7:1f:f8:0b:62:e3:73: 3a:ab:98:47:18:22:1d:39:a7:96:a6:18:91:eb:b7: 62:4a:95:bd:8c:8e:ea:61:62:00:d5:b6:9b:33:b7: 81:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:70:62:F8:D5:DB:3F:BC:10:A2:42:03:82:6D:7F:E0:BF:40:D2:8E X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/31E1DE72B04B11EE9F3B384BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.191.142.0/23 203.12.229.0-203.12.230.255 IPv6: 2001:df0:ca00::/46 Signature Algorithm: sha256WithRSAEncryption aa:ac:69:ed:39:59:eb:7a:25:5f:02:17:00:17:9a:bf:e8:f7: 02:83:27:83:a7:82:4f:b5:85:f2:25:7d:12:24:55:cd:3b:b0: c0:ef:c8:54:b7:4b:4a:79:c5:92:23:a7:e4:6f:cb:a9:bd:38: 2f:fa:f9:8d:b2:ca:12:fa:45:02:5c:1f:10:02:25:4c:40:55: d7:ac:b6:c8:8a:c5:fb:6b:cc:40:10:b6:39:ba:32:50:4a:05: 76:eb:e6:79:2c:b7:94:a4:ec:a1:cd:e8:e5:1d:e5:63:4a:0a: 04:03:0d:45:45:8b:c9:e0:8b:cf:27:4b:d6:7b:2e:4d:cd:43: 60:12:31:ea:0e:36:cc:d8:81:0f:36:30:49:ad:78:f0:f1:9b: ed:9f:37:d9:47:8d:6b:b2:f1:b0:38:89:86:40:55:d1:6b:69: ed:20:0e:8a:5b:6f:69:16:e4:0c:fe:92:b0:70:b0:75:fa:c3: 98:5b:d1:a7:78:5b:fc:21:26:d9:59:53:58:7e:10:c6:74:92: 8d:73:bc:12:60:06:fb:5e:49:fa:42:b2:62:27:22:59:cf:a1: e4:39:1f:55:64:1e:73:ee:a7:6d:ca:cc:73:40:d7:30:b5:67: b1:a1:d5:9e:6a:69:45:88:4d:77:f9:2d:bc:b8:38:c9:91:60: 84:19:b0:ab -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICEygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjUxMTA0MTczNTMzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhMzk2NS0xNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKPmks4YCENn++myf94kDUKw/60WWXc/c88r/eW5xp9bhRQgDKvkmCiR2GHp O5EteH5XGMGN20LrGoW1ksfpg/blkSVUFjScrwcnlA6iUjiZOk87wFbb1PWEteC9 8nPYE6gqgXApc97W+LygtS9RE6S3aS++8Sg7dVjeaNtfyV1rYAABOs9gzCzGGYv6 oNgvq01LskCMiMkjagkIOZdzGqf0CqVus62DZhmIxU4V2xlQ1JbDNWWVMi6aYouZ 0+FA8eXyZkInjgZ1j1TJgH8b65Ec8SYAlkSyE8cf+Ati43M6q5hHGCIdOaeWphiR 67diSpW9jI7qYWIA1babM7eBywIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCFwYvjV 2z+8EKJCA4Jtf+C/QNKOMB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIxQkUvNUE1Nzc4NkNDMEM4MTFFOEFFODA1MzM0QzRGOUFFMDIvMzFFMURFNzJC MDRCMTFFRTlGM0IzODRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBoEAgABMBQDBAFnv44wDAMEAMsM5QMEAMsM5jAPBAIAAjAJAwcCIAEN8MoA MA0GCSqGSIb3DQEBCwUAA4IBAQCqrGntOVnreiVfAhcAF5q/6PcCgyeDp4JPtYXy JX0SJFXNO7DA78hUt0tKecWSI6fkb8upvTgv+vmNssoS+kUCXB8QAiVMQFXXrLbI isX7a8xAELY5ujJQSgV26+Z5LLeUpOyhzejlHeVjSgoEAw1FRYvJ4IvPJ0vWey5N zUNgEjHqDjbM2IEPNjBJrXjw8ZvtnzfZR41rsvGwOImGQFXRa2ntIA6KW29pFuQM /pKwcLB1+sOYW9GneFv8ISbZWVNYfhDGdJKNc7wSYAb7Xkn6QrJiJyJZz6HkOR9V ZB5z7qdtysxzQNcwtWexodWeamlFiE13+S28uDjJkWCEGbCr -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:06 2025 by rpki-client