$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa File: 140A3D0CEECC11EF9AF7B312C4F9AE02.roa (raw, json) Hash identifier: zpsdHye4Xc853SRoJ5uf3GuDHiIFnx2bJmVMzJ1/JQ0= Subject key identifier: B3:4F:A5:A0:63:ED:7C:38:A6:77:74:32:4C:B0:BC:EF:7F:E0:A1:7D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CDD Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:54 +0000 ROA not before: Thu 28 Aug 2025 14:52:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131423 IP address blocks: 42.96.16.0/20 maxlen: 24 45.119.212.0/22 maxlen: 24 103.2.224.0/22 maxlen: 24 103.48.84.0/22 maxlen: 24 103.48.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19677 (0x4cdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:54 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d46-a612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ff:d9:19:47:d0:36:65:80:ea:c1:85:c2:d5: 9d:36:d3:ca:37:38:5e:55:4a:3d:d4:8f:7e:d3:57: 2d:81:2b:3b:38:ff:a1:82:97:10:a1:bb:b2:a8:8d: 85:7a:3e:55:07:c9:ed:dd:ba:57:7e:44:4b:72:58: fd:fd:98:b6:f4:f3:7e:d5:58:3c:31:23:ef:ca:69: d3:46:75:c5:02:70:a0:6b:64:a0:a2:b7:f2:0a:c8: d4:53:00:72:63:1f:23:9d:27:7b:3d:d3:5d:29:2e: bd:85:39:ac:1e:6f:93:c3:fd:c1:87:8b:d9:5c:28: 8d:0c:50:f1:6d:7b:6e:c5:50:0c:0f:56:f5:45:51: 18:2c:09:99:d3:22:25:45:1e:18:f3:cc:7d:96:e6: c1:bd:2a:29:ed:82:4c:2a:0b:88:b3:47:a8:9a:fb: 72:b1:93:4b:35:6f:65:fb:3d:62:38:3c:5b:a1:c4: d0:9e:02:13:50:a7:77:d7:00:7a:0f:13:39:bf:dc: 16:7f:49:9b:90:25:14:19:5a:c0:75:8a:49:98:16: bf:b9:da:12:bd:62:9c:f0:24:3f:16:76:ff:a9:23: b0:3a:e2:1f:71:53:b8:61:06:dd:04:dd:c0:1b:2f: 6e:e7:5d:13:57:c0:7b:8a:fd:6e:77:26:a7:10:d4: 9f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4F:A5:A0:63:ED:7C:38:A6:77:74:32:4C:B0:BC:EF:7F:E0:A1:7D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/140A3D0CEECC11EF9AF7B312C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.96.16.0/20 45.119.212.0/22 103.2.224.0/22 103.48.84.0/22 103.48.192.0/22 Signature Algorithm: sha256WithRSAEncryption 83:48:f7:b1:ff:9e:cc:2c:44:ae:ec:36:b7:2c:42:1a:20:8f: cc:44:6f:f5:b3:c3:78:7f:49:33:ba:87:75:9f:4f:72:35:03: c3:2e:de:de:b7:97:de:e3:69:fa:b9:4f:b8:6a:8d:27:56:6e: 29:66:f9:fc:9d:11:bf:8b:78:b8:14:fc:2c:87:34:7e:16:0e: 9e:2f:ae:ea:b3:39:57:0b:43:d8:7d:c6:8a:02:48:ac:d4:4c: 04:55:a7:ad:e4:1a:0d:1b:c1:b3:ea:41:1d:76:8e:15:6f:59: 86:e5:b6:13:92:de:77:e2:08:39:c3:15:89:bb:a7:82:ed:6e: bb:82:4b:b5:ca:a6:2c:4a:25:16:69:ee:64:f7:3f:34:7e:30: 05:b8:f1:db:db:c0:76:83:c0:cb:ac:0f:0a:43:44:07:87:6c: 46:28:98:56:08:08:16:1d:76:4f:88:e8:b5:ec:8c:6b:79:e9: 6a:55:76:ca:a6:9c:cf:cf:d8:fd:f9:d7:78:8b:5c:5e:19:5c: eb:83:57:79:47:14:bc:9f:66:2d:34:f5:44:43:04:0f:bb:eb: 01:ed:d6:af:80:05:cf:a4:2c:32:36:9c:0b:b1:4b:7f:f9:60: 75:aa:10:ca:42:b1:1b:d8:2c:84:ee:0c:7a:07:4f:3f:1f:3e: 2b:9f:3b:e3 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICTN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ0Ni1hNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3v/ZGUfQNmWA6sGFwtWdNtPKNzheVUo91I9+01ctgSs7OP+hgpcQobuyqI2F ej5VB8nt3bpXfkRLclj9/Zi29PN+1Vg8MSPvymnTRnXFAnCga2SgorfyCsjUUwBy Yx8jnSd7PdNdKS69hTmsHm+Tw/3Bh4vZXCiNDFDxbXtuxVAMD1b1RVEYLAmZ0yIl RR4Y88x9lubBvSop7YJMKguIs0eomvtysZNLNW9l+z1iODxbocTQngITUKd31wB6 DxM5v9wWf0mbkCUUGVrAdYpJmBa/udoSvWKc8CQ/Fnb/qSOwOuIfcVO4YQbdBN3A Gy9u510TV8B7iv1udyanENSfHwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLNPpaBj 7Xw4pnd0MkywvO9/4KF9MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTQwQTNEMENF RUNDMTFFRjlBRjdCMzEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAQqYBADBAItd9QDBAJnAuADBAJnMFQDBAJnMMAwDQYJKoZI hvcNAQELBQADggEBAINI97H/nswsRK7sNrcsQhogj8xEb/Wzw3h/STO6h3WfT3I1 A8Mu3t63l97jafq5T7hqjSdWbilm+fydEb+LeLgU/CyHNH4WDp4vruqzOVcLQ9h9 xooCSKzUTARVp63kGg0bwbPqQR12jhVvWYblthOS3nfiCDnDFYm7p4LtbruCS7XK pixKJRZp7mT3PzR+MAW48dvbwHaDwMusDwpDRAeHbEYomFYICBYddk+I6LXsjGt5 6WpVdsqmnM/P2P3513iLXF4ZXOuDV3lHFLyfZi009URDBA+76wHt1q+ABc+kLDI2 nAuxS3/5YHWqEMpCsRvYLITuDHoHTz8fPiufO+M= -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:43 2025 by rpki-client