$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa File: 1733DE66945D11F09E173B0CC4F9AE02.roa (raw, json) Hash identifier: 7XJqHJEnhdUplCJ4iz+cv5gM2kcVkpUwLnhh4FUX6U8= Subject key identifier: FF:C3:69:A3:3D:2A:31:7A:EB:65:AB:0E:15:BA:B4:89:C0:9D:D0:3A Certificate issuer: /CN=A91AD8CB/serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Certificate serial: 34E0 Authority key identifier: E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa Signing time: Sat 04 Oct 2025 14:40:40 +0000 ROA not before: Sat 04 Oct 2025 14:40:40 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17559 IP address blocks: 43.224.60.0/22 maxlen: 22 103.80.40.0/24 maxlen: 24 103.80.43.0/24 maxlen: 24 202.68.169.0/24 maxlen: 24 2406:7300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13536 (0x34e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD8CB, serialNumber=E02DC43AF8ADF8D1DB2E74E4A6C28EF96155BF15 Validity Not Before: Oct 4 14:40:40 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e131e8-3c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:78:25:2c:c6:e4:5e:85:d0:b8:28:08:d6: 0d:13:c3:ec:4e:0f:b5:c3:60:a3:03:90:30:1e:16: 83:89:19:73:08:24:92:35:e4:e7:3d:47:ee:37:4c: a9:07:dd:4a:d7:ef:2a:a2:f0:a1:ac:ff:ce:82:98: cc:2d:48:2f:14:0e:90:03:34:41:a9:d9:c3:dc:0b: c5:d8:2b:a9:ec:ca:eb:54:21:01:a2:96:f1:88:dc: 45:69:7d:ee:ba:6d:3b:1a:6d:01:fe:b1:39:4e:ea: 58:21:82:6b:fc:8e:bd:65:bb:61:49:9c:1a:cf:13: 59:1b:ce:22:b7:99:72:a4:51:02:1a:24:bf:31:ab: 1c:63:a2:e8:f0:55:d7:bd:7b:cc:91:ae:6e:6d:f0: d4:ca:da:86:1d:b8:7f:36:3b:ab:39:a0:a2:a1:9c: f6:46:f0:e4:5a:ba:91:1d:b0:69:51:71:91:2e:43: fe:a1:89:7b:93:62:13:59:a5:67:84:88:14:be:70: fe:b6:80:82:c0:b0:5b:f7:49:8c:87:be:53:46:f3: 4e:52:ae:e5:80:20:b1:96:e2:27:e6:20:fa:92:77: e1:c6:1a:23:38:1a:c6:70:52:f3:8a:f3:ea:db:05: 32:b0:d5:6e:92:c3:8b:18:42:10:57:5a:0a:22:5d: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C3:69:A3:3D:2A:31:7A:EB:65:AB:0E:15:BA:B4:89:C0:9D:D0:3A X509v3 Authority Key Identifier: keyid:E0:2D:C4:3A:F8:AD:F8:D1:DB:2E:74:E4:A6:C2:8E:F9:61:55:BF:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/4C3EOvit-NHbLnTkpsKO-WFVvxU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4C3EOvit-NHbLnTkpsKO-WFVvxU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD8CB/328ED1541D8B11E29049BCE508B02CD2/1733DE66945D11F09E173B0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.60.0/22 103.80.40.0/24 103.80.43.0/24 202.68.169.0/24 IPv6: 2406:7300::/32 Signature Algorithm: sha256WithRSAEncryption 49:c8:c2:38:fc:d1:fe:07:91:e8:bf:fa:3d:d5:9d:38:08:0c: 8e:74:41:eb:ec:83:7b:77:65:20:46:0d:d7:c9:14:67:1a:b6: 4a:6f:2d:2e:45:0e:d4:a7:1a:41:2e:e6:39:cb:5d:08:ac:f8: 07:8b:f4:b2:98:d4:c8:52:36:6c:8e:65:94:46:db:0e:46:77: ca:75:ec:8a:00:26:2b:80:45:93:e2:6e:02:a2:95:fe:b6:30: 51:5d:0f:0c:f7:43:9a:1f:31:3c:77:ba:ad:5b:43:35:d3:47: 39:3d:0f:ac:2a:1b:ef:aa:b3:26:15:a5:88:11:26:77:24:71: 87:19:f1:e3:81:d2:fd:19:f0:21:ef:04:0d:1d:47:a8:17:0d: f8:7a:08:45:7c:fa:3c:08:7d:29:b5:0e:07:e9:dd:e6:f7:c4: 4d:fb:37:da:b1:d5:71:c5:7c:04:c5:83:a1:20:dc:f3:30:af: 19:f6:e5:ee:36:16:60:90:f0:5e:50:3c:87:b8:e9:68:42:87: fc:59:fa:7f:62:37:ae:4a:73:a0:36:dc:e6:07:4b:3e:f5:2f: 43:c8:0b:c1:a7:15:e4:66:1f:0e:db:68:4b:28:69:78:d5:09: 71:fd:2d:26:1a:fc:8a:99:77:22:54:1b:f1:84:30:20:e1:6e: 37:f9:3a:f0 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICNOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ4Q0IxMTAvBgNVBAUTKEUwMkRDNDNBRjhBREY4RDFEQjJFNzRFNEE2QzI4RUY5 NjE1NUJGMTUwHhcNMjUxMDA0MTQ0MDQwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxMzFlOC0zYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmB4JSzG5F6F0LgoCNYNE8PsTg+1w2CjA5AwHhaDiRlzCCSSNeTnPUfuN0yp B91K1+8qovChrP/OgpjMLUgvFA6QAzRBqdnD3AvF2Cup7MrrVCEBopbxiNxFaX3u um07Gm0B/rE5TupYIYJr/I69ZbthSZwazxNZG84it5lypFECGiS/MascY6Lo8FXX vXvMka5ubfDUytqGHbh/NjurOaCioZz2RvDkWrqRHbBpUXGRLkP+oYl7k2ITWaVn hIgUvnD+toCCwLBb90mMh75TRvNOUq7lgCCxluIn5iD6knfhxhojOBrGcFLzivPq 2wUysNVuksOLGEIQV1oKIl1T/wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFP/DaaM9 KjF662WrDhW6tInAndA6MB8GA1UdIwQYMBaAFOAtxDr4rfjR2y505KbCjvlhVb8V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDhDQi8zMjhFRDE1NDFE OEIxMUUyOTA0OUJDRTUwOEIwMkNEMi80QzNFT3ZpdC1OSGJMblRrcHNLTy1XRlZ2 eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDM0VPdml0LU5IYkxuVGtwc0tPLVdGVnZ4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ4Q0IvMzI4RUQxNTQxRDhCMTFFMjkwNDlCQ0U1MDhCMDJDRDIvMTczM0RFNjY5 NDVEMTFGMDlFMTczQjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr4DwDBABnUCgDBABnUCsDBADKRKkwDQQCAAIwBwMFACQG cwAwDQYJKoZIhvcNAQELBQADggEBAEnIwjj80f4Hkei/+j3VnTgIDI50Qevsg3t3 ZSBGDdfJFGcatkpvLS5FDtSnGkEu5jnLXQis+AeL9LKY1MhSNmyOZZRG2w5Gd8p1 7IoAJiuARZPibgKilf62MFFdDwz3Q5ofMTx3uq1bQzXTRzk9D6wqG++qsyYVpYgR JnckcYcZ8eOB0v0Z8CHvBA0dR6gXDfh6CEV8+jwIfSm1Dgfp3eb3xE37N9qx1XHF fATFg6Eg3PMwrxn25e42FmCQ8F5QPIe46WhCh/xZ+n9iN65Kc6A23OYHSz71L0PI C8GnFeRmHw7baEsoaXjVCXH9LSYa/IqZdyJUG/GEMCDhbjf5OvA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:57:55 2025 by rpki-client