$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa File: B3A2D41A071211F0B9531F0DC4F9AE02.roa (raw, json) Hash identifier: E1N7tCSXkYyikP/pVQaGRW+aRkcNsE4Fu7zEh2kYF1g= Subject key identifier: 9F:5B:60:4F:4B:C3:0A:3A:07:DD:7A:C7:CB:B1:1A:71:B7:28:0F:2B Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 0822 Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa Signing time: Thu 30 Oct 2025 21:10:52 +0000 ROA not before: Thu 30 Oct 2025 21:10:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141189 IP address blocks: 103.156.26.0/23 maxlen: 23 103.156.26.0/24 maxlen: 24 103.156.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: Oct 30 21:10:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903d45c-2ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:d5:db:4a:34:73:a5:bb:71:eb:57:f5:36: e3:6d:b8:48:07:1d:a4:7c:48:46:7c:6f:17:52:90: b0:58:59:e3:df:38:c4:d4:92:d4:27:c5:c7:d8:6d: 58:75:e0:22:b8:0e:c4:ad:08:9c:dd:db:10:4d:b0: f4:4e:65:6e:6a:d3:ca:6a:8e:30:cf:a3:41:0b:8a: 81:8f:f2:c9:7b:36:9d:26:21:eb:bb:e1:b7:bd:d3: 3c:50:d7:16:69:5b:16:0c:da:05:bb:4f:73:c8:08: 3c:f2:91:51:64:02:a6:ed:db:a0:cc:bf:32:94:27: 4f:0a:c4:be:8e:ab:b1:c4:b4:7e:7a:47:01:d0:49: e8:b4:8e:03:48:29:1f:b1:ee:94:55:68:30:19:2f: 4c:1f:f9:68:6f:49:d6:d7:69:53:d4:e3:8e:2c:72: 97:99:9c:2b:ab:d8:a1:72:93:2e:9f:2a:fd:4a:81: 42:9e:ce:bb:ae:89:89:9f:2b:37:d2:39:86:34:19: ab:51:a9:ea:09:00:73:90:90:f0:25:a3:58:03:9e: 6c:42:56:51:55:93:19:e2:13:06:60:2a:70:5f:c9: cd:ef:80:f1:3b:f4:32:40:ad:e4:40:cb:6e:b2:48: 51:00:c5:a4:37:9b:4e:20:a3:f8:b0:61:ef:d1:e5: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5B:60:4F:4B:C3:0A:3A:07:DD:7A:C7:CB:B1:1A:71:B7:28:0F:2B X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/B3A2D41A071211F0B9531F0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.156.26.0/23 Signature Algorithm: sha256WithRSAEncryption dc:04:4f:6b:35:ff:f1:18:9b:40:2e:0c:bd:0b:8d:61:9c:04: 68:72:3f:63:b1:83:1b:a2:a7:5b:95:44:e4:94:4f:f7:08:aa: 5b:e6:0f:19:3e:74:90:35:68:c8:20:3a:20:24:4b:80:c5:2f: 3a:8a:1d:3f:50:fa:68:6f:31:07:b0:81:65:b5:f4:f8:82:b8: 2e:01:15:35:63:a8:0b:2e:04:bd:76:9d:c8:f6:bc:51:f1:cd: 21:ab:cd:dc:7a:10:a0:7d:03:3e:de:bc:3c:ea:2d:29:06:b0: 5a:b2:c2:5b:00:51:51:1a:b5:ab:b4:a7:48:14:81:cc:bd:d3: 9d:03:86:76:d0:08:0f:97:56:86:78:5d:cd:ea:11:2e:88:a0: 5f:9c:99:b6:52:f3:22:8d:1c:88:a6:47:40:84:4f:f5:ca:4a: 47:c0:00:26:87:2a:48:98:05:39:a2:88:a3:49:62:c2:7a:66: 54:71:15:40:49:c7:a2:f9:4a:33:90:2a:dd:43:45:02:8f:e4: a5:0f:ae:80:20:e7:09:c8:95:2b:2e:63:76:73:d5:fa:9e:49: 9c:f3:00:af:c2:48:a6:be:a3:e4:a3:a7:cf:c5:79:a5:b2:03: 0b:11:0f:1d:31:de:10:a9:0b:fe:77:18:8d:ad:45:f5:e3:f7: e1:74:a4:65 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjUxMDMwMjExMDUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZDQ1Yy0yZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUfV20o0c6W7cetX9TbjbbhIBx2kfEhGfG8XUpCwWFnj3zjE1JLUJ8XH2G1Y deAiuA7ErQic3dsQTbD0TmVuatPKao4wz6NBC4qBj/LJezadJiHru+G3vdM8UNcW aVsWDNoFu09zyAg88pFRZAKm7dugzL8ylCdPCsS+jquxxLR+ekcB0EnotI4DSCkf se6UVWgwGS9MH/lob0nW12lT1OOOLHKXmZwrq9ihcpMunyr9SoFCns67romJnys3 0jmGNBmrUanqCQBzkJDwJaNYA55sQlZRVZMZ4hMGYCpwX8nN74DxO/QyQK3kQMtu skhRAMWkN5tOIKP4sGHv0eWdxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ9bYE9L wwo6B916x8uxGnG3KA8rMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjc1RTkvRTY5NEZDNEFGQkQ3MTFFQUJGRUU1MjQ2QzRGOUFFMDIvQjNBMkQ0MUEw NzEyMTFGMEI5NTMxRjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnnBowDQYJKoZIhvcNAQELBQADggEBANwET2s1//EYm0Au DL0LjWGcBGhyP2Oxgxuip1uVROSUT/cIqlvmDxk+dJA1aMggOiAkS4DFLzqKHT9Q +mhvMQewgWW19PiCuC4BFTVjqAsuBL12ncj2vFHxzSGrzdx6EKB9Az7evDzqLSkG sFqywlsAUVEatau0p0gUgcy9050DhnbQCA+XVoZ4Xc3qES6IoF+cmbZS8yKNHIim R0CET/XKSkfAACaHKkiYBTmiiKNJYsJ6ZlRxFUBJx6L5SjOQKt1DRQKP5KUProAg 5wnIlSsuY3Zz1fqeSZzzAK/CSKa+o+Sjp8/FeaWyAwsRDx0x3hCpC/53GI2tRfXj 9+F0pGU= -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:32 2025 by rpki-client