$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa File: 498ED6046FD011EDA007D478C4F9AE02.roa (raw, json) Hash identifier: EXipC6OYrG4xeoR92F5aiQdIl63tLIL8qGG+4ZrC6cg= Subject key identifier: 3E:F2:2E:A6:BA:96:7D:55:D6:2C:52:E3:95:D7:3E:58:C9:62:3E:2D Certificate issuer: /CN=A91B62BF/serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Certificate serial: 0C5B Authority key identifier: D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa Signing time: Tue 26 Aug 2025 18:57:58 +0000 ROA not before: Tue 26 Aug 2025 18:57:58 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137959 IP address blocks: 103.31.178.0/23 maxlen: 24 103.118.76.0/22 maxlen: 24 2403:2e40:1::/48 maxlen: 48 2403:2e40:2::/48 maxlen: 48 2403:2e40:3::/48 maxlen: 48 2403:2e40:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B62BF, serialNumber=D0B97DC01D89F23A805FBE5861EE37BF099C3FF0 Validity Not Before: Aug 26 18:57:58 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae03b5-53ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8d:9d:d8:a0:17:e2:7c:81:a3:fe:50:4c:16: 87:f2:4d:0c:0a:b4:55:ce:5e:8a:f4:be:7e:6c:ed: c7:5e:43:d5:c0:15:88:8d:b9:06:86:44:7c:04:c4: 94:01:5a:53:1d:7d:24:7f:3e:6e:fd:b9:cb:2d:74: 15:4e:fe:1e:a4:68:da:77:66:67:11:63:c3:c8:4c: f2:9d:78:a4:3b:27:42:d4:bd:8e:50:96:d1:0c:64: c6:30:ea:5c:98:e2:c9:a3:57:7f:a1:00:c9:5c:68: b0:9a:f1:8f:10:28:5b:9b:95:f4:ad:c8:44:bb:de: 7a:79:4c:aa:56:82:2d:e3:62:58:67:f4:26:3f:3e: 73:22:e3:2c:4d:e3:4f:0d:18:10:ea:36:12:23:9e: 25:ef:e8:58:63:8d:16:2d:17:87:14:ea:4a:25:13: e6:c7:bb:44:f6:54:43:58:78:8d:6a:5a:f7:2e:d4: 86:93:6d:d6:cf:f4:2a:49:a9:c2:17:53:1f:14:63: 1d:0c:5d:17:f1:6a:0e:c3:07:37:6a:a8:02:41:ab: 56:5c:24:37:f9:da:53:25:0d:ff:1c:21:0f:c1:89: 47:34:4d:62:8f:3e:10:d8:41:9f:de:76:60:f1:92: 36:27:9c:63:72:b6:28:70:91:dc:e1:31:38:3f:4b: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F2:2E:A6:BA:96:7D:55:D6:2C:52:E3:95:D7:3E:58:C9:62:3E:2D X509v3 Authority Key Identifier: keyid:D0:B9:7D:C0:1D:89:F2:3A:80:5F:BE:58:61:EE:37:BF:09:9C:3F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/0Ll9wB2J8jqAX75YYe43vwmcP_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Ll9wB2J8jqAX75YYe43vwmcP_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62BF/44EC5106103011EAB112A232C4F9AE02/498ED6046FD011EDA007D478C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.31.178.0/23 103.118.76.0/22 IPv6: 2403:2e40:1::-2403:2e40:3:ffff:ffff:ffff:ffff:ffff 2403:2e40:10::/48 Signature Algorithm: sha256WithRSAEncryption 3b:3b:7a:82:5f:f8:69:e9:d9:f2:5e:c6:e0:17:cd:b6:20:4f: 28:61:9b:e4:7a:f8:aa:66:31:74:ca:10:01:1e:cb:e1:31:a0: 64:eb:92:53:80:ce:a4:c3:2a:1e:cd:57:34:74:cc:6e:00:54: fb:d1:9d:a5:04:c1:70:15:b5:9e:f4:f5:17:4d:d4:5c:45:e7: a6:c8:77:8d:96:52:95:f5:3f:71:c5:14:70:0a:e7:40:ee:76: 04:d7:90:15:10:20:da:0b:1d:d0:e9:5c:bf:7e:48:fb:29:48: 1a:9e:ab:0b:6d:03:80:77:2f:12:3b:84:2a:a0:36:55:e7:97: b0:90:45:fd:83:9d:86:d1:97:66:d5:0a:3d:4a:2c:5d:e4:8a: e9:e4:44:e9:77:8f:d9:c1:af:cd:44:88:f3:77:64:b7:c2:7e: 7e:3d:9b:fa:3b:f0:0a:94:2e:48:3f:3a:98:ae:cc:6a:1a:51: 2e:de:26:a1:15:80:ab:07:43:d2:4c:a6:15:26:82:7a:03:b2: 2f:8d:05:12:79:b5:44:f0:36:25:b0:2c:ed:af:be:2c:b5:1f: 7d:e0:6c:96:d0:11:ea:83:43:e9:0e:b1:e7:9e:c0:1e:dd:4d: a3:ad:5b:22:e9:2f:b5:19:21:1f:1f:dc:72:0a:6d:d1:65:41: 05:b3:bd:45 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyQkYxMTAvBgNVBAUTKEQwQjk3REMwMUQ4OUYyM0E4MDVGQkU1ODYxRUUzN0JG MDk5QzNGRjAwHhcNMjUwODI2MTg1NzU4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlMDNiNS01M2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmo2d2KAX4nyBo/5QTBaH8k0MCrRVzl6K9L5+bO3HXkPVwBWIjbkGhkR8BMSU AVpTHX0kfz5u/bnLLXQVTv4epGjad2ZnEWPDyEzynXikOydC1L2OUJbRDGTGMOpc mOLJo1d/oQDJXGiwmvGPEChbm5X0rchEu956eUyqVoIt42JYZ/QmPz5zIuMsTeNP DRgQ6jYSI54l7+hYY40WLReHFOpKJRPmx7tE9lRDWHiNalr3LtSGk23Wz/QqSanC F1MfFGMdDF0X8WoOwwc3aqgCQatWXCQ3+dpTJQ3/HCEPwYlHNE1ijz4Q2EGf3nZg 8ZI2J5xjcrYocJHc4TE4P0v3BwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFD7yLqa6 ln1V1ixS45XXPljJYj4tMB8GA1UdIwQYMBaAFNC5fcAdifI6gF++WGHuN78JnD/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjJCRi80NEVDNTEwNjEw MzAxMUVBQjExMkEyMzJDNEY5QUUwMi8wTGw5d0IySjhqcUFYNzVZWWU0M3Z3bWNQ X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBMbDl3QjJKOGpxQVg3NVlZZTQzdndtY1BfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyQkYvNDRFQzUxMDYxMDMwMTFFQUIxMTJBMjMyQzRGOUFFMDIvNDk4RUQ2MDQ2 RkQwMTFFREEwMDdENDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MBIEAgABMAwDBAFnH7IDBAJndkwwIwQCAAIwHTASAwcAJAMuQAABAwcCJAMu QAAAAwcAJAMuQAAQMA0GCSqGSIb3DQEBCwUAA4IBAQA7O3qCX/hp6dnyXsbgF822 IE8oYZvkeviqZjF0yhABHsvhMaBk65JTgM6kwyoezVc0dMxuAFT70Z2lBMFwFbWe 9PUXTdRcReemyHeNllKV9T9xxRRwCudA7nYE15AVECDaCx3Q6Vy/fkj7KUganqsL bQOAdy8SO4QqoDZV55ewkEX9g52G0Zdm1Qo9Sixd5Irp5ETpd4/Zwa/NRIjzd2S3 wn5+PZv6O/AKlC5IPzqYrsxqGlEu3iahFYCrB0PSTKYVJoJ6A7IvjQUSebVE8DYl sCztr74stR994GyW0BHqg0PpDrHnnsAe3U2jrVsi6S+1GSEfH9xyCm3RZUEFs71F -----END CERTIFICATE-----Generated at Mon Oct 20 16:25:44 2025 by rpki-client