$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa File: 41C7DA1E037411EEB6D5D751C4F9AE02.roa (raw, json) Hash identifier: U23Q8s5gbVRyzCVW6Ue/wFJYMdq2O2tS7yfdF7NYwk0= Subject key identifier: 8F:8B:E5:DE:A4:FE:BF:96:0B:C9:92:C0:21:3E:AB:87:86:97:6D:B2 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D4F Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:54:31 +0000 ROA not before: Thu 28 Aug 2025 14:54:31 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149089 IP address blocks: 103.82.36.0/22 maxlen: 24 103.82.132.0/22 maxlen: 24 103.82.192.0/22 maxlen: 24 2407:5b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19791 (0x4d4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:54:31 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06da7-e062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:fd:b3:df:44:e6:53:6e:09:28:cd:04:89: c6:a1:60:37:58:21:fc:8c:4b:39:c6:83:22:11:ab: 96:43:8f:90:a6:ba:6c:3e:c7:62:f0:78:fa:55:9d: d6:2a:fc:8e:3b:07:10:b4:8d:a3:06:e7:7b:64:29: 3f:cb:af:f8:b0:82:cb:35:30:aa:ff:d0:73:fb:f5: 11:8b:98:9f:0a:4d:1f:80:b8:5c:9e:90:7e:bc:2f: d8:58:a8:28:87:0d:d1:28:f3:03:8f:9f:fa:8b:df: 48:6a:17:ea:1e:fd:d9:7e:f8:53:58:2a:e7:25:21: e1:b7:5f:db:84:c2:dd:32:71:56:e5:95:7d:d8:31: 2a:10:23:fb:98:70:0e:44:7c:59:e3:f2:ab:b5:33: 32:f0:c1:dd:6f:0a:06:cd:dd:da:a2:84:94:55:b6: b6:7f:db:8c:20:f2:c4:bf:f4:44:6d:15:c7:99:31: 32:6b:0a:be:eb:47:03:05:1d:be:4d:8f:44:d1:25: 05:c3:5c:0c:74:6c:08:44:1c:8b:18:2f:94:f1:9c: e5:d2:2e:f6:d4:29:0a:08:18:d0:65:cb:da:07:6d: fd:67:40:92:60:1a:64:26:fd:4b:3e:4d:98:f9:c8: fa:ec:3b:4b:c6:6a:92:4b:61:2a:17:aa:e0:c0:65: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8B:E5:DE:A4:FE:BF:96:0B:C9:92:C0:21:3E:AB:87:86:97:6D:B2 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/41C7DA1E037411EEB6D5D751C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.82.36.0/22 103.82.132.0/22 103.82.192.0/22 IPv6: 2407:5b40::/48 Signature Algorithm: sha256WithRSAEncryption af:ff:89:e0:e9:ae:88:ce:b4:51:27:b5:a9:b5:a7:d5:b9:95: 3f:96:3a:ad:d3:8d:42:34:a2:45:c6:43:3c:bb:65:98:47:00: fd:03:06:41:c9:bf:e8:d9:1d:13:61:de:94:df:ee:81:6a:69: 05:28:85:86:aa:99:90:4f:0c:b0:4b:f8:71:cb:19:f5:b2:c2: e8:bb:47:c5:28:31:59:c8:ff:24:d2:e4:47:9e:b8:82:06:2a: a6:e6:bd:c5:3d:84:e7:e9:8c:d8:03:ab:59:e8:4f:c2:95:f3: d9:f4:be:b8:7a:c7:57:67:31:67:ec:6d:1d:be:09:eb:f4:08: 8c:ce:5a:dd:ba:96:4b:66:28:09:98:3a:ad:a0:81:45:3c:a9: 2f:15:4f:fa:d7:5a:51:2c:62:3c:dc:6f:19:7f:c5:5d:44:34: fd:84:4f:63:a5:13:c0:67:c0:26:45:12:8c:cd:b8:cd:69:e9: b0:4e:c0:d9:de:36:c3:28:5a:24:4f:a3:6c:d0:4e:a6:3f:dd: 8b:0a:bb:6f:c2:5a:0d:05:bc:c1:0c:c6:ba:02:c1:7b:4b:8a: 07:58:2c:1b:b4:bd:8c:42:68:60:c5:fa:2e:04:26:44:9b:01: 71:92:29:e3:de:ff:80:9d:59:15:d0:10:b1:ec:c9:86:36:96: 53:3e:96:8e -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICTU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NDMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRhNy1lMDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBv9s99E5lNuCSjNBInGoWA3WCH8jEs5xoMiEauWQ4+QprpsPsdi8Hj6VZ3W KvyOOwcQtI2jBud7ZCk/y6/4sILLNTCq/9Bz+/URi5ifCk0fgLhcnpB+vC/YWKgo hw3RKPMDj5/6i99IahfqHv3ZfvhTWCrnJSHht1/bhMLdMnFW5ZV92DEqECP7mHAO RHxZ4/KrtTMy8MHdbwoGzd3aooSUVba2f9uMIPLEv/REbRXHmTEyawq+60cDBR2+ TY9E0SUFw1wMdGwIRByLGC+U8Zzl0i721CkKCBjQZcvaB239Z0CSYBpkJv1LPk2Y +cj67DtLxmqSS2EqF6rgwGW9vwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFI+L5d6k /r+WC8mSwCE+q4eGl22yMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDFDN0RBMUUw Mzc0MTFFRUI2RDVENzUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAJnUiQDBAJnUoQDBAJnUsAwDwQCAAIwCQMHACQHW0AAADAN BgkqhkiG9w0BAQsFAAOCAQEAr/+J4OmuiM60USe1qbWn1bmVP5Y6rdONQjSiRcZD PLtlmEcA/QMGQcm/6NkdE2HelN/ugWppBSiFhqqZkE8MsEv4ccsZ9bLC6LtHxSgx Wcj/JNLkR564ggYqpua9xT2E5+mM2AOrWehPwpXz2fS+uHrHV2cxZ+xtHb4J6/QI jM5a3bqWS2YoCZg6raCBRTypLxVP+tdaUSxiPNxvGX/FXUQ0/YRPY6UTwGfAJkUS jM24zWnpsE7A2d42wyhaJE+jbNBOpj/diwq7b8JaDQW8wQzGugLBe0uKB1gsG7S9 jEJoYMX6LgQmRJsBcZIp497/gJ1ZFdAQsezJhjaWUz6Wjg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:44 2025 by rpki-client