$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa File: 4072F91E9C8211EC86AE3D68C4F9AE02.roa (raw, json) Hash identifier: nhOxYzG0rAWYRSzTLJPw39uwciMl2MDnLaJCFvQHhfM= Subject key identifier: 32:3A:90:6D:52:71:AA:FA:90:2F:FC:B4:AE:DE:5D:AE:62:1B:42:73 Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0CAA Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa Signing time: Tue 14 Oct 2025 19:48:02 +0000 ROA not before: Tue 14 Oct 2025 19:48:02 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139009 IP address blocks: 103.143.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Oct 14 19:48:02 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68eea8f2-a424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:8b:50:da:f7:eb:57:d5:db:c6:68:43:ce: c6:be:09:9e:18:b4:50:98:6b:f3:0e:87:07:10:16: ac:d1:4c:46:16:ae:81:73:db:cd:41:e6:a6:f0:d5: 96:fc:e7:ef:4c:7e:83:fe:89:42:13:e3:22:f4:c3: 99:d5:67:64:aa:ce:25:3b:a5:42:8d:ea:36:ee:b2: 72:9f:5d:0e:6e:e3:00:f0:c0:97:a3:7e:5e:38:ca: 3d:c6:63:a5:12:e1:93:24:a8:77:4a:32:a5:9b:7d: 70:fb:07:ed:ff:ad:3b:25:8f:3e:89:ca:ad:80:40: 70:42:40:94:63:c8:e4:bc:4e:bd:52:f5:ee:7e:97: b8:6a:bd:5b:d6:22:6d:6e:2d:62:6f:fd:88:00:51: e7:1b:28:7c:a0:68:8d:90:d2:d6:a0:5b:99:d5:79: d7:c7:aa:7e:e8:2c:a7:1e:1b:68:98:85:ba:1f:8b: 6a:c6:de:ed:ef:8a:aa:f5:f4:ac:36:88:f5:40:ea: 19:60:b3:aa:55:b8:4b:0e:70:92:1c:ac:46:ca:a6: 5c:3b:5d:93:dd:2c:74:84:3b:2b:ea:48:8a:70:f6: 82:c1:c2:66:19:17:d5:8d:67:1b:dc:15:5d:77:df: d7:e7:f5:5d:ba:77:ae:50:77:c6:e3:0a:cf:7b:b8: be:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3A:90:6D:52:71:AA:FA:90:2F:FC:B4:AE:DE:5D:AE:62:1B:42:73 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/4072F91E9C8211EC86AE3D68C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.139.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:41:d8:c7:f1:9b:7b:96:ae:52:d3:f4:a5:5e:5e:90:93:8d: 69:cb:14:99:c9:f4:e2:87:a4:1b:4c:77:6e:2e:d0:d0:7e:e5: dd:72:a6:89:88:61:29:76:01:88:f4:0a:86:c6:fd:78:39:44: a5:8d:3e:42:22:13:ff:04:aa:cb:45:4a:e7:4b:58:95:40:e0: c0:39:be:26:1b:ca:75:1d:ea:86:52:b0:67:5b:6c:90:19:cd: 8d:eb:70:e1:f1:df:a2:09:48:b5:2d:c1:4e:3f:75:c7:01:af: 7e:2e:65:15:85:5d:7d:52:cc:00:d4:9f:47:ec:00:82:f4:30: 3f:c1:c7:80:d4:41:c4:f4:c7:13:95:81:c3:00:af:0c:12:a7: 57:ac:98:92:1a:27:1b:2e:3b:19:28:e8:1d:82:79:cb:90:f2: 9f:05:d2:fe:04:de:a9:eb:e1:5b:79:5a:62:d6:3b:95:f7:7b: 3d:35:4b:38:bc:b8:ab:79:4f:7b:10:25:b8:33:03:f9:2f:1f: 19:00:a6:2a:63:ab:65:a7:b9:a1:2c:cd:4d:46:01:bc:5c:29: 9f:41:d4:4b:ec:c5:ba:fa:bd:05:11:c4:8e:66:1d:1a:29:5b: 2b:ed:f8:07:d4:4e:ed:42:14:e0:8a:59:e3:81:62:c4:fc:7e: 45:73:29:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUxMDE0MTk0ODAyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGVlYThmMi1hNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMqLUNr361fV28ZoQ87GvgmeGLRQmGvzDocHEBas0UxGFq6Bc9vNQeam8NWW /OfvTH6D/olCE+Mi9MOZ1Wdkqs4lO6VCjeo27rJyn10ObuMA8MCXo35eOMo9xmOl EuGTJKh3SjKlm31w+wft/607JY8+icqtgEBwQkCUY8jkvE69UvXufpe4ar1b1iJt bi1ib/2IAFHnGyh8oGiNkNLWoFuZ1XnXx6p+6CynHhtomIW6H4tqxt7t74qq9fSs Noj1QOoZYLOqVbhLDnCSHKxGyqZcO12T3Sx0hDsr6kiKcPaCwcJmGRfVjWcb3BVd d9/X5/VduneuUHfG4wrPe7i+ZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDI6kG1S car6kC/8tK7eXa5iG0JzMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBFM0EvOEU0M0Y1RDYwNkM0MTFFQThCRUI0MTE4QzRGOUFFMDIvNDA3MkY5MUU5 QzgyMTFFQzg2QUUzRDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnj4swDQYJKoZIhvcNAQELBQADggEBADpB2Mfxm3uWrlLT 9KVeXpCTjWnLFJnJ9OKHpBtMd24u0NB+5d1ypomIYSl2AYj0CobG/Xg5RKWNPkIi E/8EqstFSudLWJVA4MA5viYbynUd6oZSsGdbbJAZzY3rcOHx36IJSLUtwU4/dccB r34uZRWFXX1SzADUn0fsAIL0MD/Bx4DUQcT0xxOVgcMArwwSp1esmJIaJxsuOxko 6B2CecuQ8p8F0v4E3qnr4Vt5WmLWO5X3ez01Szi8uKt5T3sQJbgzA/kvHxkApipj q2WnuaEszU1GAbxcKZ9B1Evsxbr6vQURxI5mHRopWyvt+AfUTu1CFOCKWeOBYsT8 fkVzKaM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:55 2025 by rpki-client