$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/F394D822271911EF86EB1C09C4F9AE02.roa File: F394D822271911EF86EB1C09C4F9AE02.roa (raw, json) Hash identifier: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08= Subject key identifier: BA:56:FF:70:93:1D:E1:35:44:F7:E0:A1:7D:44:9B:A3:AA:56:F2:E4 Certificate issuer: /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Certificate serial: 8C Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/F394D822271911EF86EB1C09C4F9AE02.roa Signing time: Wed 29 Jan 2025 05:08:44 +0000 ROA not before: Wed 29 Jan 2025 05:08:44 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 45119 IP address blocks: 103.76.48.0/24 maxlen: 24 103.76.49.0/24 maxlen: 24 202.174.122.0/24 maxlen: 24 202.174.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0 Validity Not Before: Jan 29 05:08:44 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6799b7db-83cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:89:09:c3:7d:15:99:3f:d6:76:92:19:08: da:f7:93:d2:70:57:45:09:07:dd:a0:31:9b:ea:1e: 66:95:84:91:18:17:81:ff:cf:1d:26:b3:34:8d:f7: be:9a:61:2f:0f:36:b9:89:e7:b2:4c:b7:a4:f8:7d: 50:67:4d:af:cd:27:e3:32:2d:6f:68:eb:c0:bd:93: a9:21:b0:54:24:87:4d:99:fa:eb:d6:7e:c6:82:8f: c2:9d:1c:d0:39:0f:fa:79:81:11:1a:6f:36:47:3f: 5d:4b:c5:df:0a:45:3f:de:09:2c:8a:48:b8:6d:dd: be:4b:a9:86:c4:80:f0:79:20:33:ba:f3:76:8d:a0: c0:71:91:0a:ae:3b:66:ab:ff:dd:b4:30:de:2d:06: c5:5b:6a:7e:95:47:a6:0e:94:77:05:ae:16:d1:b0: 95:01:b9:0d:c7:68:2c:70:79:04:fa:fb:71:0b:4b: 03:45:2e:d1:07:3f:05:c2:0f:26:e4:ff:7e:a3:b7: 72:46:34:9f:c4:3f:77:dc:e7:c7:6b:f7:93:68:d9: c9:6f:38:de:d9:93:0a:db:13:b3:ec:04:5e:71:56: a7:87:52:0b:b3:0b:98:db:40:aa:d9:4b:7a:c9:6b: d6:b2:f9:33:4a:9e:a2:28:8b:a4:12:16:e1:9a:63: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:FF:70:93:1D:E1:35:44:F7:E0:A1:7D:44:9B:A3:AA:56:F2:E4 X509v3 Authority Key Identifier: keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/F394D822271911EF86EB1C09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.76.48.0/23 202.174.122.0/23 Signature Algorithm: sha256WithRSAEncryption 08:b4:27:f3:f1:6b:2a:df:72:e7:e1:a4:61:8b:d0:de:58:28: 34:6c:1e:ee:d7:06:36:bc:e7:55:78:eb:92:95:e3:a8:64:d7: 95:da:ca:22:b2:44:71:3f:30:c3:0f:e1:c4:5a:69:d2:e7:db: dc:c4:12:c5:fd:62:ee:04:24:11:7b:0d:08:8d:a7:b1:f8:7f: 38:d9:8a:50:84:78:50:45:68:6d:db:cb:1b:b8:aa:52:d0:9f: d6:35:c8:25:e1:2d:a0:38:f0:9d:57:b8:b2:c7:ce:02:76:bb: c9:03:52:22:32:f3:89:47:b5:bc:ff:5c:b8:87:23:f9:f0:89: 27:4e:cd:08:22:e6:9c:2b:55:be:6f:c0:fb:e7:00:bd:4d:0c: 1d:ee:2b:ac:b9:29:eb:31:fe:73:a5:f2:5b:3e:fd:31:bd:38: e8:3a:97:10:be:28:d9:3e:9d:5d:da:b0:b5:e6:3e:54:05:97: 02:2c:e9:53:b2:1b:52:2d:d3:03:9b:18:68:4a:fa:d4:68:6d: 34:40:3f:bb:35:b5:8e:19:c0:7e:2e:d9:d9:76:67:bd:26:5d: 50:fb:31:5b:1d:5b:f3:65:fd:fa:9f:40:69:86:7d:36:b3:65: a5:04:f4:c0:18:74:ad:b1:e4:ab:45:8f:0a:2f:6a:6a:02:80: 35:64:99:2d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUREOTkxMTAvBgNVBAUTKDRGQzQ2MEYwOUY5MEFBODZDQUY0NjdDMjg1QUQ3OEY0 MzEyNzIwQjAwHhcNMjUwMTI5MDUwODQ0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk5YjdkYi04M2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqSJCcN9FZk/1naSGQja95PScFdFCQfdoDGb6h5mlYSRGBeB/88dJrM0jfe+ mmEvDza5ieeyTLek+H1QZ02vzSfjMi1vaOvAvZOpIbBUJIdNmfrr1n7Ggo/CnRzQ OQ/6eYERGm82Rz9dS8XfCkU/3gksiki4bd2+S6mGxIDweSAzuvN2jaDAcZEKrjtm q//dtDDeLQbFW2p+lUemDpR3Ba4W0bCVAbkNx2gscHkE+vtxC0sDRS7RBz8Fwg8m 5P9+o7dyRjSfxD933OfHa/eTaNnJbzje2ZMK2xOz7ARecVanh1ILswuY20Cq2Ut6 yWvWsvkzSp6iKIukEhbhmmO+LQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLpW/3CT HeE1RPfgoX1Em6OqVvLkMB8GA1UdIwQYMBaAFE/EYPCfkKqGyvRnwoWtePQxJyCw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREQ5OS8wNTcyOUI0QzE5 QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFvYks5R2ZDaGExNDlERW5J TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q4Umc4Si1RcW9iSzlHZkNoYTE0OURFbklMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUREOTkvMDU3MjlCNEMxOUI5MTFFRjhFMERGRTNFQzRGOUFFMDIvRjM5NEQ4MjIy NzE5MTFFRjg2RUIxQzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnTDADBAHKrnowDQYJKoZIhvcNAQELBQADggEBAAi0J/Px ayrfcufhpGGL0N5YKDRsHu7XBja851V465KV46hk15XayiKyRHE/MMMP4cRaadLn 29zEEsX9Yu4EJBF7DQiNp7H4fzjZilCEeFBFaG3byxu4qlLQn9Y1yCXhLaA48J1X uLLHzgJ2u8kDUiIy84lHtbz/XLiHI/nwiSdOzQgi5pwrVb5vwPvnAL1NDB3uK6y5 Kesx/nOl8ls+/TG9OOg6lxC+KNk+nV3asLXmPlQFlwIs6VOyG1It0wObGGhK+tRo bTRAP7s1tY4ZwH4u2dl2Z70mXVD7MVsdW/Nl/fqfQGmGfTazZaUE9MAYdK2x5KtF jwovamoCgDVkmS0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:10 2025 by rpki-client