$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa File: DA481A0CB61811F0ABB14C31C4F9AE02.roa (raw, json) Hash identifier: T3+CRirqLtz1Ta4crR0HI+okuEb0BcJI1bh/9/iVPTY= Subject key identifier: EA:30:4A:97:9F:F9:81:E5:B0:81:F5:88:D5:A7:34:E6:73:D9:41:2A Certificate issuer: /CN=A91FC1B8/serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Certificate serial: 0EE9 Authority key identifier: 6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa Signing time: Fri 31 Oct 2025 05:18:47 +0000 ROA not before: Fri 31 Oct 2025 05:18:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139922 IP address blocks: 103.139.152.0/24 maxlen: 24 2001:df0:8180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3817 (0xee9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1B8, serialNumber=6D7D80576C4B3BE6AFF431F8D32338F71FDF01DD Validity Not Before: Oct 31 05:18:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=690446b7-f95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d9:ec:49:c0:85:7b:c3:74:ef:6f:a3:38:d0: 0f:86:53:80:0b:cd:a5:83:64:44:6e:e0:cd:d3:34: b9:8c:da:cd:6a:7e:41:19:8e:9e:16:57:cf:e6:0f: d3:e6:51:a4:86:d6:cf:34:0d:01:a0:2a:bb:66:9f: 98:50:3f:35:ff:a2:d5:b1:a1:b4:02:da:65:e0:e0: 09:ae:ce:98:0e:10:0d:c7:e0:cf:6b:80:1c:d4:9e: 3a:22:56:9e:c5:cf:ec:86:dd:2d:b3:a7:3e:59:4b: 3c:c0:69:f4:59:ca:42:bf:bf:8d:ac:3f:6f:68:70: 36:de:76:f2:21:73:d3:4c:e3:3c:4b:12:7c:78:7c: a8:97:c1:80:cc:86:f6:4a:08:d5:98:5f:67:f2:92: 65:b9:1c:2d:04:ff:2c:e3:f8:40:05:e1:45:e0:6d: 3e:d4:88:6c:11:2b:36:60:b5:e9:2f:3f:5d:b2:06: 85:f2:9d:22:49:3c:86:8c:e0:4e:9f:ec:b2:64:ca: 68:37:f4:45:ef:e2:f9:fd:e6:41:c6:3c:cb:17:06: 55:14:3d:2e:19:6a:0c:27:75:82:d3:84:83:a5:98: 86:82:5e:c7:c9:62:d3:0b:1d:43:93:e7:f7:3c:a9: 1e:f3:f5:94:dc:da:cd:e2:1c:2c:9a:ee:43:92:25: c4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:30:4A:97:9F:F9:81:E5:B0:81:F5:88:D5:A7:34:E6:73:D9:41:2A X509v3 Authority Key Identifier: keyid:6D:7D:80:57:6C:4B:3B:E6:AF:F4:31:F8:D3:23:38:F7:1F:DF:01:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/bX2AV2xLO-av9DH40yM49x_fAd0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bX2AV2xLO-av9DH40yM49x_fAd0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1B8/FBDE99FA90FB11E992D5987FC4F9AE02/DA481A0CB61811F0ABB14C31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.152.0/24 IPv6: 2001:df0:8180::/48 Signature Algorithm: sha256WithRSAEncryption 0e:8e:03:d6:63:7c:7b:0e:7e:23:ea:46:d5:f7:77:64:7d:bb: fb:65:ab:4d:60:20:a6:88:5a:67:86:23:ce:f0:bc:7b:2b:e0: 3d:8d:4b:7c:52:dd:0e:bf:c3:e6:ce:42:fd:b0:70:07:13:c6: ac:41:ad:e1:ff:5d:85:a5:3e:df:b4:fd:2d:9a:d0:af:33:88: 12:17:c1:d8:f3:2a:31:1d:a2:a7:c4:49:f6:c2:28:60:1e:8e: 71:05:8e:5a:20:59:78:d8:66:ac:17:b6:29:48:b4:e4:02:25: 87:96:37:aa:15:01:1b:b5:1e:45:c0:16:d1:96:29:c6:73:b6: 38:2d:59:5f:bf:a2:fe:2c:21:af:2f:ab:9e:85:6b:0d:56:a7: 97:82:4b:05:87:c9:55:ac:c3:a1:01:64:13:5b:18:c7:9d:81: b3:26:67:a5:a8:8d:ec:99:a5:5d:c9:6d:af:67:ef:40:b8:bc: 00:b6:23:d5:9d:1d:d1:6e:10:d2:6f:40:82:41:17:b1:52:b6: 3a:bf:01:61:4b:85:91:ea:f4:40:4f:78:10:4c:06:c6:dd:44: 1a:76:85:0d:00:4d:00:ca:a2:fc:aa:a4:5a:e6:e5:b5:21:33: 88:8c:f9:f3:8e:ee:c7:93:9c:8b:6f:6b:ac:5f:9b:e8:14:41: 02:92:22:3e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxQjgxMTAvBgNVBAUTKDZEN0Q4MDU3NkM0QjNCRTZBRkY0MzFGOEQzMjMzOEY3 MUZERjAxREQwHhcNMjUxMDMxMDUxODQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0NDZiNy1mOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59nsScCFe8N072+jONAPhlOAC82lg2REbuDN0zS5jNrNan5BGY6eFlfP5g/T 5lGkhtbPNA0BoCq7Zp+YUD81/6LVsaG0Atpl4OAJrs6YDhANx+DPa4Ac1J46Ilae xc/sht0ts6c+WUs8wGn0WcpCv7+NrD9vaHA23nbyIXPTTOM8SxJ8eHyol8GAzIb2 SgjVmF9n8pJluRwtBP8s4/hABeFF4G0+1IhsESs2YLXpLz9dsgaF8p0iSTyGjOBO n+yyZMpoN/RF7+L5/eZBxjzLFwZVFD0uGWoMJ3WC04SDpZiGgl7HyWLTCx1Dk+f3 PKke8/WU3NrN4hwsmu5DkiXEPQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOowSpef +YHlsIH1iNWnNOZz2UEqMB8GA1UdIwQYMBaAFG19gFdsSzvmr/Qx+NMjOPcf3wHd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFCOC9GQkRFOTlGQTkw RkIxMUU5OTJENTk4N0ZDNEY5QUUwMi9iWDJBVjJ4TE8tYXY5REg0MHlNNDl4X2ZB ZDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYMkFWMnhMTy1hdjlESDQweU00OXhfZkFkMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkMxQjgvRkJERTk5RkE5MEZCMTFFOTkyRDU5ODdGQzRGOUFFMDIvREE0ODFBMENC NjE4MTFGMEFCQjE0QzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABni5gwDwQCAAIwCQMHACABDfCBgDANBgkqhkiG9w0BAQsF AAOCAQEADo4D1mN8ew5+I+pG1fd3ZH27+2WrTWAgpohaZ4YjzvC8eyvgPY1LfFLd Dr/D5s5C/bBwBxPGrEGt4f9dhaU+37T9LZrQrzOIEhfB2PMqMR2ip8RJ9sIoYB6O cQWOWiBZeNhmrBe2KUi05AIlh5Y3qhUBG7UeRcAW0ZYpxnO2OC1ZX7+i/iwhry+r noVrDVanl4JLBYfJVazDoQFkE1sYx52BsyZnpaiN7JmlXcltr2fvQLi8ALYj1Z0d 0W4Q0m9AgkEXsVK2Or8BYUuFker0QE94EEwGxt1EGnaFDQBNAMqi/KqkWubltSEz iIz5847ux5Oci29rrF+b6BRBApIiPg== -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:57 2025 by rpki-client