$ rpki-client -vvf rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/E2348176D54D11EF8A899250C4F9AE02.roa File: E2348176D54D11EF8A899250C4F9AE02.roa (raw, json) Hash identifier: 306xxmMO0L8F4kDhDkLe1fwHAL2pRNtzpCEiuu3Fy6g= Subject key identifier: 9C:55:AA:F6:91:D4:D3:1B:65:D8:8A:CA:8B:B2:25:14:91:0D:06:88 Certificate issuer: /CN=A91716DE/serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Certificate serial: 044E Authority key identifier: 4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/E2348176D54D11EF8A899250C4F9AE02.roa Signing time: Sat 11 Oct 2025 02:26:58 +0000 ROA not before: Sat 11 Oct 2025 02:26:58 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153494 IP address blocks: 43.243.44.0/22 maxlen: 24 103.38.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91716DE, serialNumber=4CC904E94C5C9B93A44A4F65EFB20A800D6DD7E7 Validity Not Before: Oct 11 02:26:58 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e9c072-5160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:65:7d:be:b5:de:75:35:d0:d6:d0:82:f6:c2: 41:05:53:84:37:3a:e9:4a:cd:1d:eb:1b:f7:06:84: 22:42:e8:44:d8:4c:98:34:bb:f6:ba:30:6a:9f:3b: cc:31:0a:00:d4:0a:d1:bc:36:e1:c9:da:f5:92:2e: c0:86:e8:70:89:8c:5b:f5:80:54:74:f2:ae:c0:64: 13:12:2f:ed:23:c1:47:67:58:26:ad:4c:2b:19:e4: c2:29:8f:cc:f7:36:2e:4f:f6:c5:bf:19:aa:62:23: 24:34:0e:ca:1f:de:0c:b3:88:cc:70:1d:fb:34:85: 80:b9:5f:9f:57:ad:e2:92:f1:4c:d7:57:85:a6:19: ec:27:61:ae:7b:0e:58:21:d3:e0:44:3d:24:ed:68: ab:e9:c0:05:d3:d4:1c:c0:15:f1:49:cb:8f:50:18: 26:48:91:aa:7a:5e:60:d5:6c:6b:72:cb:fa:8b:fc: 23:90:bf:5e:26:7d:b5:c8:82:cf:43:8b:06:92:7c: 54:6a:60:43:20:1e:65:71:23:5a:18:1a:52:96:53: 9a:ba:fc:57:d5:eb:c8:d0:65:6c:79:22:0b:b3:4a: 95:05:ab:89:7c:ed:44:ed:7e:b6:76:11:76:ef:2a: 07:44:7b:cb:31:92:d8:4c:ae:66:41:ca:9b:c2:bf: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:55:AA:F6:91:D4:D3:1B:65:D8:8A:CA:8B:B2:25:14:91:0D:06:88 X509v3 Authority Key Identifier: keyid:4C:C9:04:E9:4C:5C:9B:93:A4:4A:4F:65:EF:B2:0A:80:0D:6D:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/TMkE6Uxcm5OkSk9l77IKgA1t1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TMkE6Uxcm5OkSk9l77IKgA1t1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91716DE/8F340DD0752D11EC9C748D54C4F9AE02/E2348176D54D11EF8A899250C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.44.0/22 103.38.156.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:9f:05:d6:c9:d6:ef:01:2b:3b:65:c5:b2:93:15:d0:47:46: 14:e7:50:cc:1b:ba:d7:8d:7a:e2:f2:55:94:40:fd:aa:2f:e3: 28:4e:fc:4c:8b:ac:d4:43:6b:b1:6f:fd:05:a8:f0:c7:27:d4: 06:63:a8:eb:b5:58:aa:3f:f4:68:bc:a4:2f:6e:76:f0:68:a9: 8d:ff:e3:dc:35:3e:07:fa:e9:dc:e4:ed:79:e6:af:d3:80:b8: 9b:c0:b5:4e:8f:cc:43:e5:44:b6:25:8b:b5:89:23:e2:cf:f7: a0:22:8c:b9:24:f1:c8:61:23:e8:d1:9f:d1:5b:8d:aa:21:79: f7:91:dc:79:02:e4:ca:31:59:9d:f9:4a:41:0d:1a:16:3a:f6: 1a:c9:a4:08:9e:bc:28:15:ad:85:90:a1:de:10:9f:be:bb:9e: aa:c2:26:8f:81:52:a8:60:2e:55:f9:73:2a:fa:5a:b4:41:28: 58:fe:b7:3f:82:18:67:3b:9a:aa:e3:94:d0:d3:ac:88:5f:38: 0c:29:2d:78:81:32:f0:db:cf:c9:a0:75:88:61:4a:9b:fc:58: cf:e8:08:ea:dd:e0:f9:64:0c:64:a0:0d:0e:34:56:f9:37:97: f5:8e:cf:07:f8:03:0f:7b:c9:cc:8d:67:48:91:b6:8a:20:b1: 03:3c:c4:fa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE2REUxMTAvBgNVBAUTKDRDQzkwNEU5NEM1QzlCOTNBNDRBNEY2NUVGQjIwQTgw MEQ2REQ3RTcwHhcNMjUxMDExMDIyNjU4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU5YzA3Mi01MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42V9vrXedTXQ1tCC9sJBBVOENzrpSs0d6xv3BoQiQuhE2EyYNLv2ujBqnzvM MQoA1ArRvDbhydr1ki7AhuhwiYxb9YBUdPKuwGQTEi/tI8FHZ1gmrUwrGeTCKY/M 9zYuT/bFvxmqYiMkNA7KH94Ms4jMcB37NIWAuV+fV63ikvFM11eFphnsJ2Guew5Y IdPgRD0k7Wir6cAF09QcwBXxScuPUBgmSJGqel5g1Wxrcsv6i/wjkL9eJn21yILP Q4sGknxUamBDIB5lcSNaGBpSllOauvxX1evI0GVseSILs0qVBauJfO1E7X62dhF2 7yoHRHvLMZLYTK5mQcqbwr9OwQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJxVqvaR 1NMbZdiKyouyJRSRDQaIMB8GA1UdIwQYMBaAFEzJBOlMXJuTpEpPZe+yCoANbdfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTZERS84RjM0MEREMDc1 MkQxMUVDOUM3NDhENTRDNEY5QUUwMi9UTWtFNlV4Y201T2tTazlsNzdJS2dBMXQx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RNa0U2VXhjbTVPa1NrOWw3N0lLZ0ExdDEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE2REUvOEYzNDBERDA3NTJEMTFFQzlDNzQ4RDU0QzRGOUFFMDIvRTIzNDgxNzZE NTREMTFFRjhBODk5MjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr8ywDBAJnJpwwDQYJKoZIhvcNAQELBQADggEBAE2fBdbJ 1u8BKztlxbKTFdBHRhTnUMwbuteNeuLyVZRA/aov4yhO/EyLrNRDa7Fv/QWo8Mcn 1AZjqOu1WKo/9Gi8pC9udvBoqY3/49w1Pgf66dzk7Xnmr9OAuJvAtU6PzEPlRLYl i7WJI+LP96AijLkk8chhI+jRn9FbjaohefeR3HkC5MoxWZ35SkENGhY69hrJpAie vCgVrYWQod4Qn767nqrCJo+BUqhgLlX5cyr6WrRBKFj+tz+CGGc7mqrjlNDTrIhf OAwpLXiBMvDbz8mgdYhhSpv8WM/oCOrd4PlkDGSgDQ40Vvk3l/WOzwf4Aw97ycyN Z0iRtoogsQM8xPo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:25:39 2025 by rpki-client