$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa File: 3D543A66B32611ED847D3C6CC4F9AE02.roa (raw, json) Hash identifier: ZEwL0sUNOuIHKeP4vhBI9xdGiuic72okVdCJMJPl14g= Subject key identifier: 8B:B0:39:19:AE:66:F5:5A:EF:56:FA:68:48:67:59:C8:6F:FE:1C:A6 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D4B Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:54:27 +0000 ROA not before: Thu 28 Aug 2025 14:54:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149078 IP address blocks: 103.72.68.0/23 maxlen: 24 103.72.70.0/23 maxlen: 24 103.75.72.0/23 maxlen: 24 103.85.246.0/23 maxlen: 24 103.122.162.0/23 maxlen: 24 103.228.126.0/23 maxlen: 24 2400:6720::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19787 (0x4d4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:54:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06da3-e89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8a:c9:ab:c5:f1:3b:e2:4c:33:f9:4b:95:eb: 5c:b1:9f:03:62:dd:83:ee:14:df:40:d4:4d:3d:36: 60:bb:67:17:9c:8e:1a:9d:93:2b:33:b7:3b:00:0b: f0:8c:ac:1b:28:87:b2:9b:0a:84:81:1b:b1:f6:de: 6e:6d:69:a4:86:40:f2:55:8e:2f:58:b4:a1:01:a0: cc:b0:8d:5e:86:eb:f0:ac:1c:00:14:2e:d9:9f:4e: 7b:c1:7c:e6:dd:f9:e4:ce:ff:36:b2:69:b6:cd:c1: 9c:c3:da:6e:37:26:72:df:85:e6:7e:92:14:b3:d2: cb:c7:8c:21:d7:78:33:0a:4d:26:9e:b7:ef:99:ca: e1:63:40:54:ed:26:b0:5f:a9:80:df:b4:bd:50:7a: bc:0e:f1:45:44:5a:db:73:f9:ed:22:48:f1:a3:b9: 7c:10:a3:07:3c:e4:1c:fb:94:51:f5:a6:95:dd:17: 5a:c1:5d:80:bd:61:95:e3:01:82:c5:06:35:50:3e: f2:9b:ae:87:2b:ef:fd:dd:27:24:83:5d:0f:7d:3f: e9:86:b1:2d:ad:89:ea:3d:8d:41:c9:4e:62:2b:99: 7d:db:35:e5:33:0f:dd:26:91:4b:21:08:ac:31:8e: 37:96:a5:2b:f7:84:eb:47:bf:7c:dc:bd:f8:4e:65: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B0:39:19:AE:66:F5:5A:EF:56:FA:68:48:67:59:C8:6F:FE:1C:A6 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D543A66B32611ED847D3C6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.68.0/22 103.75.72.0/23 103.85.246.0/23 103.122.162.0/23 103.228.126.0/23 IPv6: 2400:6720::/48 Signature Algorithm: sha256WithRSAEncryption 86:64:d7:34:8d:b6:ad:99:bc:26:58:5e:dd:6d:a5:69:7f:d2: e4:66:36:6d:60:d1:33:77:aa:66:b1:b9:f5:9b:ad:b3:ae:e0: 05:bb:ed:52:8c:25:f0:f2:3b:92:b0:c4:69:74:36:88:70:8b: 70:5b:70:f0:c7:a1:79:21:ec:1d:c5:38:fa:65:44:86:6e:5c: d3:46:f6:ee:3e:d6:a3:71:62:7e:96:df:63:07:d4:0c:42:33: 63:8f:56:5d:4e:ce:61:9c:d5:a2:00:54:b6:47:13:f4:89:e0: 61:62:dd:65:f7:af:6c:93:18:be:73:ff:8e:da:9c:c1:e1:53: 24:28:78:46:7f:cd:34:53:5d:34:0c:be:6d:9e:c5:d3:8e:8f: ca:19:ed:6d:b5:90:34:2a:39:e3:a8:a5:e4:f0:9b:75:30:89: 3a:13:25:6d:95:0f:f7:03:f9:c9:18:36:26:c7:4e:e1:fb:cc: 2b:0a:72:13:a1:43:75:f2:75:0f:aa:66:81:2d:c7:f3:12:7d: bf:9a:c2:f4:99:bd:94:e4:b1:56:40:68:9b:21:74:d6:87:67: ce:57:4d:e3:01:d3:cc:63:30:59:5f:a4:bb:06:30:b7:fa:42: 3e:db:25:72:e0:66:0e:0e:1b:fe:36:57:a0:d7:ed:37:24:7c: 47:35:9d:e8 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICTUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NDI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRhMy1lODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84rJq8XxO+JMM/lLletcsZ8DYt2D7hTfQNRNPTZgu2cXnI4anZMrM7c7AAvw jKwbKIeymwqEgRux9t5ubWmkhkDyVY4vWLShAaDMsI1ehuvwrBwAFC7Zn057wXzm 3fnkzv82smm2zcGcw9puNyZy34XmfpIUs9LLx4wh13gzCk0mnrfvmcrhY0BU7Saw X6mA37S9UHq8DvFFRFrbc/ntIkjxo7l8EKMHPOQc+5RR9aaV3RdawV2AvWGV4wGC xQY1UD7ym66HK+/93Sckg10PfT/phrEtrYnqPY1ByU5iK5l92zXlMw/dJpFLIQis MY43lqUr94TrR7983L34TmU49wIDAQABo4ICvjCCArowHQYDVR0OBBYEFIuwORmu ZvVa71b6aEhnWchv/hymMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0Q1NDNBNjZC MzI2MTFFRDg0N0QzQzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MCQEAgABMB4DBAJnSEQDBAFnS0gDBAFnVfYDBAFneqIDBAFn5H4wDwQCAAIw CQMHACQAZyAAADANBgkqhkiG9w0BAQsFAAOCAQEAhmTXNI22rZm8Jlhe3W2laX/S 5GY2bWDRM3eqZrG59Zuts67gBbvtUowl8PI7krDEaXQ2iHCLcFtw8MeheSHsHcU4 +mVEhm5c00b27j7Wo3FifpbfYwfUDEIzY49WXU7OYZzVogBUtkcT9IngYWLdZfev bJMYvnP/jtqcweFTJCh4Rn/NNFNdNAy+bZ7F046PyhntbbWQNCo546il5PCbdTCJ OhMlbZUP9wP5yRg2JsdO4fvMKwpyE6FDdfJ1D6pmgS3H8xJ9v5rC9Jm9lOSxVkBo myF01odnzldN4wHTzGMwWV+kuwYwt/pCPtslcuBmDg4b/jZXoNftNyR8RzWd6A== -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:54 2025 by rpki-client