$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/485FA3D4A8E511EB889D8A32C4F9AE02.roa File: 485FA3D4A8E511EB889D8A32C4F9AE02.roa (raw, json) Hash identifier: qiNzIkrmnwKFw1/CFk/jB5HugsFY2O1VFHHfi5tLWU0= Subject key identifier: 83:A3:F5:47:96:FF:EB:EB:88:45:45:84:9C:20:3D:AE:1C:80:8D:77 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D2F Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/485FA3D4A8E511EB889D8A32C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:54:05 +0000 ROA not before: Thu 28 Aug 2025 14:54:05 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140775 IP address blocks: 103.161.122.0/23 maxlen: 24 103.161.124.0/23 maxlen: 24 103.161.126.0/23 maxlen: 24 2407:1c0::/48 maxlen: 48 2407:240::/48 maxlen: 48 2407:2c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19759 (0x4d2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:54:05 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d8d-ebc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:a4:0f:d5:ad:19:f5:6c:38:eb:0e:53:63: 4d:98:1f:8b:eb:b6:e4:90:af:36:89:46:61:86:c9: 2a:e7:e5:3f:37:5d:91:51:48:7b:a9:6f:35:44:49: 4b:7d:5d:57:4a:b8:be:c8:ff:0f:5a:f2:3a:1f:4b: 11:61:20:24:f0:54:06:c4:53:a4:e4:3b:4b:b6:01: af:f8:7c:ab:2c:2e:47:1e:1d:fb:3d:0e:de:55:db: 2b:2b:17:0e:54:1c:6b:b1:cd:cd:fa:3c:44:04:9e: 1e:25:b5:89:e7:88:9f:16:d8:18:8c:4e:97:1f:ca: d2:f2:85:ff:94:5d:ef:57:ab:06:9f:c5:3a:8f:c1: a3:e5:e2:99:40:03:de:6a:c4:e1:14:04:2c:e4:45: 75:a3:8a:38:05:5a:0f:5c:15:2b:9f:13:f5:71:c9: 89:e7:e3:73:a0:8f:42:21:ac:e9:f5:e4:f8:9a:88: 47:6b:4b:15:3c:4b:85:a4:e5:19:58:de:bd:94:72: 98:f5:61:7e:d1:72:d2:a1:df:3d:2d:eb:04:f1:73: 6b:47:12:5f:9d:2d:6e:36:f6:78:a3:58:64:11:39: 1e:90:ec:63:71:57:55:08:5c:87:44:e8:bb:5d:5f: 19:c5:a7:b6:c6:9f:04:e6:e3:9d:70:73:2e:20:9d: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A3:F5:47:96:FF:EB:EB:88:45:45:84:9C:20:3D:AE:1C:80:8D:77 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/485FA3D4A8E511EB889D8A32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.122.0-103.161.127.255 IPv6: 2407:1c0::/48 2407:240::/48 2407:2c0::/48 Signature Algorithm: sha256WithRSAEncryption 94:29:ec:bc:14:ac:f2:b0:8d:99:78:34:a2:f2:67:64:d7:68: 9c:30:5c:72:0d:28:37:f5:f9:36:a2:38:82:51:2b:97:f8:71: dc:ac:37:84:44:58:fc:5a:1c:f2:5c:cc:99:d9:bb:b9:20:9d: bb:eb:b2:5d:f5:78:a0:f2:09:a0:40:ac:10:83:cd:e6:0a:5f: e4:53:6d:a6:a7:a3:b5:6a:80:e5:ae:5d:e5:f6:8b:ba:12:6c: 79:37:17:39:7c:7f:11:09:53:a1:78:52:2f:cb:74:b2:68:3a: 61:99:f4:16:67:40:ba:d6:0d:ae:0a:fe:24:47:61:7d:12:63: b8:f9:51:ad:6a:2b:0c:ce:f5:51:64:58:53:b9:d6:ac:89:c5: 99:3c:a7:64:a4:aa:ae:79:c5:e8:4f:42:93:39:05:2a:4a:b1: ae:78:02:24:10:b6:0c:9f:1c:3e:7e:0a:d4:fa:55:1e:83:a3: 78:53:88:a0:64:cb:b3:f9:23:f9:bd:10:c7:9c:ce:d0:5e:85: 13:a8:d3:ec:fe:7a:7a:31:66:e9:ac:5c:5d:ba:59:f2:bb:18: 6f:65:1e:97:c2:c0:32:06:3c:92:50:a2:9e:24:88:43:98:5f: 42:06:a2:5c:37:d8:e1:be:17:67:79:65:d2:f5:80:24:fc:44: 17:a4:10:7c -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICTS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NDA1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQ4ZC1lYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeakD9WtGfVsOOsOU2NNmB+L67bkkK82iUZhhskq5+U/N12RUUh7qW81RElL fV1XSri+yP8PWvI6H0sRYSAk8FQGxFOk5DtLtgGv+HyrLC5HHh37PQ7eVdsrKxcO VBxrsc3N+jxEBJ4eJbWJ54ifFtgYjE6XH8rS8oX/lF3vV6sGn8U6j8Gj5eKZQAPe asThFAQs5EV1o4o4BVoPXBUrnxP1ccmJ5+NzoI9CIazp9eT4mohHa0sVPEuFpOUZ WN69lHKY9WF+0XLSod89LesE8XNrRxJfnS1uNvZ4o1hkETkekOxjcVdVCFyHROi7 XV8Zxae2xp8E5uOdcHMuIJ3CSwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFIOj9UeW /+vriEVFhJwgPa4cgI13MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDg1RkEzRDRB OEU1MTFFQjg4OUQ4QTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MBQEAgABMA4wDAMEAWehegMEB2ehADAhBAIAAjAbAwcAJAcBwAAAAwcAJAcC QAAAAwcAJAcCwAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCUKey8FKzysI2ZeDSi8mdk 12icMFxyDSg39fk2ojiCUSuX+HHcrDeERFj8WhzyXMyZ2bu5IJ2767Jd9Xig8gmg QKwQg83mCl/kU22mp6O1aoDlrl3l9ou6Emx5Nxc5fH8RCVOheFIvy3SyaDphmfQW Z0C61g2uCv4kR2F9EmO4+VGtaisMzvVRZFhTudasicWZPKdkpKquecXoT0KTOQUq SrGueAIkELYMnxw+fgrU+lUeg6N4U4igZMuz+SP5vRDHnM7QXoUTqNPs/np6MWbp rFxdulnyuxhvZR6XwsAyBjySUKKeJIhDmF9CBqJcN9jhvhdneWXS9YAk/EQXpBB8 -----END CERTIFICATE-----Generated at Mon Oct 20 14:20:46 2025 by rpki-client