$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa File: 4D38774A86E611EF9D6F5581C4F9AE02.roa (raw, json) Hash identifier: RrGFGjBqFWbDXGLRFPlWMlsiau/aq6m1Jz59fpXuJf0= Subject key identifier: B0:7E:1D:63:5C:80:6E:1E:FF:88:66:F9:AF:76:AE:E3:80:B6:59:CA Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 0618 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa Signing time: Wed 08 Oct 2025 22:53:47 +0000 ROA not before: Wed 08 Oct 2025 22:53:47 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132139 IP address blocks: 103.101.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1560 (0x618) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Oct 8 22:53:47 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e6eb7b-8e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:a2:3e:41:5d:fa:d9:1a:55:b2:f6:0b:a6: b8:6e:10:1d:7d:f5:df:a4:86:ef:b3:ab:39:96:ce: 87:99:45:14:91:d9:01:a1:42:e1:96:b7:6e:ac:ab: 0c:1c:8d:e7:89:95:33:16:3e:b1:ee:a7:8a:47:19: 0f:60:12:4c:a9:17:5a:97:a6:19:79:0c:a4:f6:30: e2:fc:f9:69:cf:54:4e:7d:11:73:f9:cd:83:3f:13: 1d:bd:28:df:f4:01:38:ad:83:f3:41:ee:1c:94:da: be:4b:9f:e3:1a:c8:b9:11:d7:b1:11:53:59:80:48: 60:98:d5:48:d0:74:e0:1c:a4:3e:84:8e:57:ae:81: 67:a1:6e:1b:2a:26:e1:5c:b7:38:66:50:b8:34:9c: 2e:81:9c:2d:eb:ec:cf:90:77:83:26:e5:71:e7:76: cb:cb:30:14:cc:ae:d3:6c:c0:c8:7e:28:d8:89:4c: 43:d3:a5:8c:f2:5f:85:8f:c0:a9:f5:c7:63:a3:0e: 30:c6:87:46:49:3e:3b:3d:3e:e8:a3:29:b3:b0:cf: 7a:8c:97:76:16:be:c2:fe:23:cb:2d:43:08:d3:af: 8f:60:71:bd:27:50:fa:bd:2f:6a:fd:d1:c8:44:ff: c8:39:eb:9d:68:5e:d5:fd:57:90:bc:11:1d:e6:e9: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7E:1D:63:5C:80:6E:1E:FF:88:66:F9:AF:76:AE:E3:80:B6:59:CA X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/4D38774A86E611EF9D6F5581C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.206.0/23 Signature Algorithm: sha256WithRSAEncryption 27:37:3a:25:0c:90:82:d8:90:58:5c:20:ee:95:27:5d:ba:78: 21:00:41:82:d7:5d:6d:64:92:4f:4a:f3:cb:b0:e5:78:14:03: e2:53:60:c2:8d:2e:35:86:a4:c7:c1:72:1a:04:c9:cd:74:fc: ab:38:dd:f9:13:7c:19:0d:fd:61:70:7f:c2:04:8e:a2:d3:2a: 23:12:18:16:f5:32:45:01:81:0e:d0:58:68:3e:2e:d8:11:7d: 69:c8:1e:3c:67:f8:32:8f:6e:72:91:e2:fb:3d:8d:59:b7:a9: 83:a5:dc:59:18:7b:b4:92:9b:3a:01:5f:db:bd:a1:de:a4:a2: 8d:64:b9:a6:17:a3:64:52:07:ce:ac:01:37:9b:31:5b:a4:bb: 7c:81:a7:0e:6d:0c:1a:18:36:81:87:df:2c:03:36:74:7b:3b: 6e:ec:e6:78:ed:8b:66:86:5d:72:c4:76:80:97:1b:b9:41:22: d5:5e:de:19:a8:3e:aa:62:eb:25:b9:6f:8a:93:02:b8:f3:55: e8:d7:5c:84:07:b4:85:eb:23:7e:f0:7d:d8:6c:07:a1:fd:4e: 1b:d5:fd:23:86:99:8d:da:19:bb:54:45:bc:a1:7b:64:08:90: c6:70:ac:fd:97:c1:0a:bb:0d:dd:d1:1c:5f:cb:d2:c4:49:c9: 75:f7:ea:83 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjUxMDA4MjI1MzQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU2ZWI3Yi04ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva2iPkFd+tkaVbL2C6a4bhAdffXfpIbvs6s5ls6HmUUUkdkBoULhlrdurKsM HI3niZUzFj6x7qeKRxkPYBJMqRdal6YZeQyk9jDi/Plpz1ROfRFz+c2DPxMdvSjf 9AE4rYPzQe4clNq+S5/jGsi5EdexEVNZgEhgmNVI0HTgHKQ+hI5XroFnoW4bKibh XLc4ZlC4NJwugZwt6+zPkHeDJuVx53bLyzAUzK7TbMDIfijYiUxD06WM8l+Fj8Cp 9cdjow4wxodGST47PT7ooymzsM96jJd2Fr7C/iPLLUMI06+PYHG9J1D6vS9q/dHI RP/IOeudaF7V/VeQvBEd5umYOQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLB+HWNc gG4e/4hm+a92ruOAtlnKMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvNEQzODc3NEE4 NkU2MTFFRjlENkY1NTgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnZc4wDQYJKoZIhvcNAQELBQADggEBACc3OiUMkILYkFhc IO6VJ126eCEAQYLXXW1kkk9K88uw5XgUA+JTYMKNLjWGpMfBchoEyc10/Ks43fkT fBkN/WFwf8IEjqLTKiMSGBb1MkUBgQ7QWGg+LtgRfWnIHjxn+DKPbnKR4vs9jVm3 qYOl3FkYe7SSmzoBX9u9od6koo1kuaYXo2RSB86sATebMVuku3yBpw5tDBoYNoGH 3ywDNnR7O27s5njti2aGXXLEdoCXG7lBItVe3hmoPqpi6yW5b4qTArjzVejXXIQH tIXrI37wfdhsB6H9ThvV/SOGmY3aGbtURbyhe2QIkMZwrP2XwQq7Dd3RHF/L0sRJ yXX36oM= -----END CERTIFICATE-----Generated at Mon Oct 20 16:26:17 2025 by rpki-client