$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/F41E4608AD1511EE8FBA3458C4F9AE02.roa File: F41E4608AD1511EE8FBA3458C4F9AE02.roa (raw, json) Hash identifier: njsFK1qFbRu1CveVfyk+stg89vXjnCGuvbUS6fMSxUg= Subject key identifier: 4C:A6:CA:B2:38:89:64:3B:2E:7F:6F:A1:F9:59:27:30:07:A2:AC:39 Certificate issuer: /CN=A91FF94F/serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Certificate serial: 013E Authority key identifier: 2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/F41E4608AD1511EE8FBA3458C4F9AE02.roa Signing time: Fri 05 Sep 2025 05:11:00 +0000 ROA not before: Fri 05 Sep 2025 05:11:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139620 IP address blocks: 103.142.144.0/23 maxlen: 24 2001:df1:4780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF94F, serialNumber=2EA628AB55D181743EF290EF8249980D6299AFA2 Validity Not Before: Sep 5 05:11:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68ba70e3-5fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:50:b9:1b:17:9d:4c:fd:43:33:37:c7:3d: 20:56:15:15:62:e6:58:21:04:fa:4c:ee:5e:2e:c9: e5:49:ed:5c:28:ca:4e:0e:2a:d5:42:81:32:07:ee: 14:93:c2:2b:ef:9c:34:b7:74:d6:02:b0:25:27:94: b4:fb:e6:a1:7c:29:42:0a:ea:ae:f7:81:85:04:3c: 72:21:4e:5b:07:af:02:ce:18:19:4d:a8:f9:fc:45: 8d:64:a5:fa:c1:28:73:86:77:6d:4e:7b:bb:c3:c2: b7:d6:67:67:0d:90:dd:4c:23:6d:75:18:47:41:22: db:60:8f:31:a0:74:0a:ce:59:38:66:b8:bd:31:ec: e5:ad:1a:a8:38:a4:4d:42:a4:cd:5d:eb:1a:49:e6: 6a:01:5b:ca:8d:62:07:29:5a:72:5c:8d:ad:c7:ca: da:c0:12:c0:87:1a:c0:10:ad:23:c7:7c:dd:ad:28: 27:8f:f2:9c:58:61:34:f0:59:7f:71:7e:2c:8b:7e: 0e:92:fd:5a:06:22:58:30:f2:51:bd:75:87:db:d1: ec:d8:44:fe:4d:1f:49:55:60:dc:8a:22:d1:62:fc: 6e:ba:1b:01:8c:f5:b2:e8:30:e2:29:32:92:11:ff: 99:36:61:31:a5:1e:07:6c:c1:02:b1:dd:35:08:fd: 53:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A6:CA:B2:38:89:64:3B:2E:7F:6F:A1:F9:59:27:30:07:A2:AC:39 X509v3 Authority Key Identifier: keyid:2E:A6:28:AB:55:D1:81:74:3E:F2:90:EF:82:49:98:0D:62:99:AF:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LqYoq1XRgXQ-8pDvgkmYDWKZr6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF94F/D348F2D0AD1411EEB0B81139C4F9AE02/F41E4608AD1511EE8FBA3458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.142.144.0/23 IPv6: 2001:df1:4780::/48 Signature Algorithm: sha256WithRSAEncryption 7d:ae:ba:f5:64:89:bc:be:62:a5:05:d8:71:d5:8f:6a:bc:af: 39:3e:86:32:f2:f8:09:85:41:d3:d5:2f:c4:34:c0:ad:17:35: 25:aa:ac:90:d0:81:cb:93:24:48:56:b3:e8:dd:c2:fe:6d:3a: e6:a8:aa:db:c1:fd:75:56:3b:52:cd:e6:d8:e0:16:87:2d:48: bd:c7:c3:84:56:8d:dc:4f:94:f8:47:45:62:65:09:b1:5a:2d: 64:03:82:4b:f6:1b:1c:af:f6:89:fc:39:f6:23:7d:a9:ef:ea: 8d:8e:44:b6:7d:66:ad:37:d6:08:d1:e5:35:22:3c:4c:01:fc: 3b:38:1e:dc:80:6b:d2:e0:8e:ca:11:1e:4e:fd:fc:46:88:08: 11:2b:c7:73:ed:b1:af:15:97:52:7f:93:43:43:fc:4d:36:49: a3:44:5b:7a:87:86:75:01:30:c3:57:e1:c5:5e:65:dd:33:b7: 68:41:fd:0a:6a:b8:fd:0a:93:a1:4a:57:80:40:61:0d:78:13: 83:ee:08:7f:95:cd:ac:75:48:41:77:c7:f6:79:80:87:be:24: ed:67:c6:c8:51:52:be:01:27:65:6f:34:e5:5d:7a:7a:8b:72: d2:98:6e:82:20:60:c9:c8:b4:df:52:8d:6c:01:77:0f:57:22: 7a:b4:28:f8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY5NEYxMTAvBgNVBAUTKDJFQTYyOEFCNTVEMTgxNzQzRUYyOTBFRjgyNDk5ODBE NjI5OUFGQTIwHhcNMjUwOTA1MDUxMTAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhNzBlMy01ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/xQuRsXnUz9QzM3xz0gVhUVYuZYIQT6TO5eLsnlSe1cKMpODirVQoEyB+4U k8Ir75w0t3TWArAlJ5S0++ahfClCCuqu94GFBDxyIU5bB68CzhgZTaj5/EWNZKX6 wShzhndtTnu7w8K31mdnDZDdTCNtdRhHQSLbYI8xoHQKzlk4Zri9MezlrRqoOKRN QqTNXesaSeZqAVvKjWIHKVpyXI2tx8rawBLAhxrAEK0jx3zdrSgnj/KcWGE08Fl/ cX4si34Okv1aBiJYMPJRvXWH29Hs2ET+TR9JVWDciiLRYvxuuhsBjPWy6DDiKTKS Ef+ZNmExpR4HbMECsd01CP1TzwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEymyrI4 iWQ7Ln9voflZJzAHoqw5MB8GA1UdIwQYMBaAFC6mKKtV0YF0PvKQ74JJmA1ima+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjk0Ri9EMzQ4RjJEMEFE MTQxMUVFQjBCODExMzlDNEY5QUUwMi9McVlvcTFYUmdYUS04cER2Z2ttWURXS1py NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xxWW9xMVhSZ1hRLThwRHZna21ZRFdLWnI2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY5NEYvRDM0OEYyRDBBRDE0MTFFRUIwQjgxMTM5QzRGOUFFMDIvRjQxRTQ2MDhB RDE1MTFFRThGQkEzNDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnjpAwDwQCAAIwCQMHACABDfFHgDANBgkqhkiG9w0BAQsF AAOCAQEAfa669WSJvL5ipQXYcdWParyvOT6GMvL4CYVB09UvxDTArRc1JaqskNCB y5MkSFaz6N3C/m065qiq28H9dVY7Us3m2OAWhy1IvcfDhFaN3E+U+EdFYmUJsVot ZAOCS/YbHK/2ifw59iN9qe/qjY5Etn1mrTfWCNHlNSI8TAH8Ozge3IBr0uCOyhEe Tv38RogIESvHc+2xrxWXUn+TQ0P8TTZJo0RbeoeGdQEww1fhxV5l3TO3aEH9Cmq4 /QqToUpXgEBhDXgTg+4If5XNrHVIQXfH9nmAh74k7WfGyFFSvgEnZW805V16eoty 0phugiBgyci031KNbAF3D1cierQo+A== -----END CERTIFICATE-----Generated at Wed Nov 5 19:19:41 2025 by rpki-client