$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/44E001183C5C11F095C6A259C4F9AE02.roa File: 44E001183C5C11F095C6A259C4F9AE02.roa (raw, json) Hash identifier: +MuiZcKVfagn/EUscOGtM+jo03HbljVKVbfVcrdmvSk= Subject key identifier: 17:EA:23:AD:D3:16:C4:5B:E7:66:48:7E:AD:89:D3:6E:DD:10:CC:F1 Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 66 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/44E001183C5C11F095C6A259C4F9AE02.roa Signing time: Fri 17 Oct 2025 11:13:48 +0000 ROA not before: Fri 17 Oct 2025 11:13:48 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 40676 IP address blocks: 103.140.44.0/24 maxlen: 24 2001:df0:a880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Oct 17 11:13:48 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f224eb-f0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:d7:4f:95:f8:21:26:fe:45:da:66:11:89: 9d:78:de:cc:ab:81:5e:34:16:f0:96:73:a8:67:5c: f0:2f:46:74:ab:41:1f:69:08:dc:90:9e:b4:52:01: 0d:7b:dd:ef:17:0e:57:ba:f7:89:b9:dc:50:67:30: 82:44:f0:8f:79:68:9b:8d:c2:47:1d:58:2e:da:7a: e1:d9:1b:f1:9f:51:6d:66:4a:bf:a5:fd:2e:95:21: f2:4e:a9:82:63:13:b4:9c:0a:c4:ef:8f:bd:3f:9a: 53:cb:cb:f9:7b:dd:f0:60:eb:bf:ea:9e:8d:07:8c: b6:cc:72:67:6b:08:0c:d1:60:86:8f:57:f5:64:ae: c7:9b:43:5d:ad:a2:5a:2d:65:0e:df:6c:f8:55:f5: 49:2c:8e:fb:f6:4e:f2:f2:bb:23:e7:fb:41:62:33: 9c:9c:4e:aa:c1:59:1e:64:08:dc:37:46:c8:62:13: 21:94:47:e7:79:78:cb:9e:bd:41:5f:8e:73:64:60: 91:50:3c:3a:e3:58:e0:c8:1b:17:bd:d7:17:2a:a4: d0:f0:55:25:c7:de:af:8a:98:aa:21:f2:a4:ea:ee: bd:06:ad:00:5a:da:a6:24:d8:13:bb:28:0a:23:44: 18:ee:93:b2:3b:14:1b:5d:88:ec:d2:29:fa:85:bd: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EA:23:AD:D3:16:C4:5B:E7:66:48:7E:AD:89:D3:6E:DD:10:CC:F1 X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/44E001183C5C11F095C6A259C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.44.0/24 IPv6: 2001:df0:a880::/48 Signature Algorithm: sha256WithRSAEncryption 83:48:5c:86:54:75:7a:9b:dc:f7:22:a6:34:b0:4c:d6:89:57: 95:cd:e1:a5:64:81:34:49:80:0b:7d:fa:00:08:f6:41:0e:9f: 21:ea:25:8e:d3:2f:87:57:d4:e0:37:e3:46:b9:74:5d:c9:87: 03:26:32:f3:35:c8:98:2b:de:92:25:71:74:32:a6:49:64:a5: f9:33:52:41:57:69:db:a8:58:d0:a4:a5:7f:da:0e:86:c1:3c: b5:c2:aa:78:a6:6d:4c:48:50:45:e7:8d:a0:03:d4:58:3a:7e: 46:2b:bb:21:0d:b8:13:4d:9e:80:97:9a:1b:29:97:27:88:8d: d6:e1:e7:45:45:a8:f5:d0:a0:73:6d:fc:4f:63:11:a8:22:7a: c6:34:c9:db:d3:ef:19:5f:68:58:f6:8c:1a:20:3d:82:d4:ca: 93:7e:1b:da:1d:fa:60:15:a7:63:e5:17:c5:a0:34:b5:8c:59: 80:e6:ad:f4:3e:4c:e9:a7:79:49:e0:ea:38:6f:21:88:02:eb: 72:e4:be:e3:67:21:2e:4f:de:a9:c9:bb:71:31:05:af:a3:8f: 74:ec:df:36:13:98:f6:72:9e:c0:ba:5f:3a:d9:79:87:92:99: f7:c7:96:6c:36:71:ac:41:b4:6c:0d:e7:58:30:02:29:5d:6c: ef:0b:43:34 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTEwMTcxMTEzNDhaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjIyNGViLWYwYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFbNdPlfghJv5F2mYRiZ143syrgV40FvCWc6hnXPAvRnSrQR9pCNyQnrRSAQ17 3e8XDle694m53FBnMIJE8I95aJuNwkcdWC7aeuHZG/GfUW1mSr+l/S6VIfJOqYJj E7ScCsTvj70/mlPLy/l73fBg67/qno0HjLbMcmdrCAzRYIaPV/VkrsebQ12tolot ZQ7fbPhV9Uksjvv2TvLyuyPn+0FiM5ycTqrBWR5kCNw3RshiEyGUR+d5eMuevUFf jnNkYJFQPDrjWODIGxe91xcqpNDwVSXH3q+KmKoh8qTq7r0GrQBa2qYk2BO7KAoj RBjuk7I7FBtdiOzSKfqFvSIpAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUF+ojrdMW xFvnZkh+rYnTbt0QzPEwHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyMS8zM0VBQUM2ODJEMDMxMUYwODNFQkIzN0FDNEY5QUUwMi80NEUwMDExODND NUMxMUYwOTVDNkEyNTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAGeMLDAPBAIAAjAJAwcAIAEN8KiAMA0GCSqGSIb3DQEBCwUA A4IBAQCDSFyGVHV6m9z3IqY0sEzWiVeVzeGlZIE0SYALffoACPZBDp8h6iWO0y+H V9TgN+NGuXRdyYcDJjLzNciYK96SJXF0MqZJZKX5M1JBV2nbqFjQpKV/2g6GwTy1 wqp4pm1MSFBF542gA9RYOn5GK7shDbgTTZ6Al5obKZcniI3W4edFRaj10KBzbfxP YxGoInrGNMnb0+8ZX2hY9owaID2C1MqTfhvaHfpgFadj5RfFoDS1jFmA5q30Pkzp p3lJ4Oo4byGIAuty5L7jZyEuT96pybtxMQWvo4907N82E5j2cp7Aul862XmHkpn3 x5ZsNnGsQbRsDedYMAIpXWzvC0M0 -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:24 2025 by rpki-client