$ rpki-client -vvf rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa File: A4711C4A23BA11EFA8BACF1BC4F9AE02.roa (raw, json) Hash identifier: sI83SKQ1KIXzAI6k70Vt5zWHUlxvGed2ohcbiQweEnY= Subject key identifier: F3:C8:85:39:32:91:BC:D6:95:5F:16:B7:CC:02:64:82:A6:70:3C:45 Certificate issuer: /CN=A91330D0/serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Certificate serial: 0843 Authority key identifier: AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa Signing time: Thu 18 Sep 2025 21:02:18 +0000 ROA not before: Thu 18 Sep 2025 21:02:18 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140993 IP address blocks: 103.154.156.0/23 maxlen: 23 103.154.156.0/24 maxlen: 24 103.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2115 (0x843) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91330D0, serialNumber=ADD7E9FB956BBEE8F012EDDE954248D9B5D658C6 Validity Not Before: Sep 18 21:02:18 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68cc735a-9c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:52:ca:0f:32:3e:dd:a6:ea:60:aa:f1:6a: 06:96:b6:da:ea:6e:5b:0c:40:7a:b3:b8:b7:7e:27: 6c:29:32:ad:a3:4d:b6:85:9a:4b:aa:75:fb:46:b6: bd:fc:32:01:c9:5e:6a:d8:40:ca:25:aa:ea:d7:3a: 2d:63:2c:ca:98:93:e5:53:06:e3:52:cb:ca:37:98: 46:c3:c2:b0:f5:db:0b:29:40:f4:c9:92:6d:22:8a: e0:4d:1e:b5:42:08:0a:9b:2c:52:b8:0b:dd:8c:2f: 3d:dc:13:bf:80:bb:17:fd:79:5f:15:0c:a6:af:c8: c1:54:f8:fe:81:46:47:97:79:60:5a:85:04:e8:43: f6:5e:d1:52:30:40:1f:fc:39:e1:40:41:e8:c2:af: 4d:49:9d:2b:99:e6:8b:1f:3f:55:8f:01:b3:96:fd: 79:71:e1:c0:2f:36:81:16:27:6f:0d:f2:32:ca:64: 93:d5:c1:0e:6b:d9:3e:a0:43:28:8b:49:2c:37:91: ee:0b:0f:0a:67:f1:d8:f8:bc:1b:80:e1:48:4f:7a: ca:ba:85:01:2c:6c:5e:2e:47:81:fd:17:5c:e0:ec: 5c:5a:1b:2f:20:35:2a:18:74:1b:4e:56:ba:72:1e: 6c:92:91:ef:2a:e2:5e:0d:ef:69:7a:77:a3:bc:9c: da:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C8:85:39:32:91:BC:D6:95:5F:16:B7:CC:02:64:82:A6:70:3C:45 X509v3 Authority Key Identifier: keyid:AD:D7:E9:FB:95:6B:BE:E8:F0:12:ED:DE:95:42:48:D9:B5:D6:58:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/rdfp-5VrvujwEu3elUJI2bXWWMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdfp-5VrvujwEu3elUJI2bXWWMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91330D0/98799C6CE20711EAB8A0CB60C4F9AE02/A4711C4A23BA11EFA8BACF1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.154.156.0/23 Signature Algorithm: sha256WithRSAEncryption d2:78:bd:d8:eb:94:4e:e4:69:fc:38:91:f3:27:f3:6b:82:b1: 5c:34:d5:8d:40:af:cf:6d:79:43:4f:21:ec:6b:3b:0b:c2:ff: bb:cd:da:3c:a1:e4:64:6f:5c:d6:c1:d0:ff:cb:cc:85:72:5b: 02:89:f7:4f:c8:09:fd:33:e5:92:80:80:8e:f8:bb:bd:42:d2: b9:5f:d2:f9:2f:c8:cd:b8:6e:6f:5b:1b:19:89:bc:db:a6:10: cc:8a:24:62:7e:44:d6:82:cb:ec:f4:8b:da:50:e5:d1:e5:0e: 1b:4c:ca:83:c8:02:6b:cc:15:94:35:8c:63:37:a2:07:b8:56: 70:6c:17:d6:f7:98:5d:94:0d:a2:bd:1d:fd:5f:67:23:c7:ab: 0f:c4:f9:ff:45:85:08:ea:f4:0e:f5:97:c1:b9:c3:53:b2:8c: 76:43:42:dd:68:4d:56:9b:c7:5d:73:41:a6:05:98:cd:46:f8: 4f:43:63:06:b5:b7:18:32:fb:ea:d3:7b:ee:67:7a:b6:66:2d: 25:77:2b:32:d2:16:80:36:1a:c3:05:87:ae:0f:bc:68:1a:82: 66:b8:27:d8:77:ee:55:c1:2e:62:e3:96:73:08:f9:70:62:ce: f3:50:d7:26:63:9b:c4:57:7b:a3:89:3a:e4:4b:d4:07:99:36: b5:d8:e5:c9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMwRDAxMTAvBgNVBAUTKEFERDdFOUZCOTU2QkJFRThGMDEyRURERTk1NDI0OEQ5 QjVENjU4QzYwHhcNMjUwOTE4MjEwMjE4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNjNzM1YS05YzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApu1Syg8yPt2m6mCq8WoGlrba6m5bDEB6s7i3fidsKTKto022hZpLqnX7Rra9 /DIByV5q2EDKJarq1zotYyzKmJPlUwbjUsvKN5hGw8Kw9dsLKUD0yZJtIorgTR61 QggKmyxSuAvdjC893BO/gLsX/XlfFQymr8jBVPj+gUZHl3lgWoUE6EP2XtFSMEAf /DnhQEHowq9NSZ0rmeaLHz9VjwGzlv15ceHALzaBFidvDfIyymST1cEOa9k+oEMo i0ksN5HuCw8KZ/HY+LwbgOFIT3rKuoUBLGxeLkeB/Rdc4OxcWhsvIDUqGHQbTla6 ch5skpHvKuJeDe9penejvJzaVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPPIhTky kbzWlV8Wt8wCZIKmcDxFMB8GA1UdIwQYMBaAFK3X6fuVa77o8BLt3pVCSNm11ljG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzBEMC85ODc5OUM2Q0Uy MDcxMUVBQjhBMENCNjBDNEY5QUUwMi9yZGZwLTVWcnZ1andFdTNlbFVKSTJiWFdX TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkZnAtNVZydnVqd0V1M2VsVUpJMmJYV1dNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzMwRDAvOTg3OTlDNkNFMjA3MTFFQUI4QTBDQjYwQzRGOUFFMDIvQTQ3MTFDNEEy M0JBMTFFRkE4QkFDRjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnmpwwDQYJKoZIhvcNAQELBQADggEBANJ4vdjrlE7kafw4 kfMn82uCsVw01Y1Ar89teUNPIexrOwvC/7vN2jyh5GRvXNbB0P/LzIVyWwKJ90/I Cf0z5ZKAgI74u71C0rlf0vkvyM24bm9bGxmJvNumEMyKJGJ+RNaCy+z0i9pQ5dHl DhtMyoPIAmvMFZQ1jGM3oge4VnBsF9b3mF2UDaK9Hf1fZyPHqw/E+f9FhQjq9A71 l8G5w1OyjHZDQt1oTVabx11zQaYFmM1G+E9DYwa1txgy++rTe+5nerZmLSV3KzLS FoA2GsMFh64PvGgagma4J9h37lXBLmLjlnMI+XBizvNQ1yZjm8RXe6OJOuRL1AeZ NrXY5ck= -----END CERTIFICATE-----Generated at Mon Oct 20 13:24:10 2025 by rpki-client