$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa File: A433C1262D0311F0A91F647CC4F9AE02.roa (raw, json) Hash identifier: TjQlu0F+YIffgV7FQsn/LMUGbUdqPRgHuxAxeA1KSRY= Subject key identifier: CA:16:B8:07:9D:8F:C9:39:9C:9F:14:9E:2B:13:7F:6D:A5:DD:71:6A Certificate issuer: /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Certificate serial: 67 Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa Signing time: Fri 17 Oct 2025 11:13:49 +0000 ROA not before: Fri 17 Oct 2025 11:13:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45382 IP address blocks: 103.140.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D Validity Not Before: Oct 17 11:13:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68f224ec-c1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d1:a1:fa:1c:a8:95:06:2b:12:1a:5e:b0:41: f5:fc:27:4b:de:40:c8:34:58:b3:15:49:c9:35:1f: cf:ae:4c:83:9a:54:40:63:30:4a:f0:9f:39:21:87: 07:2a:c3:cc:c5:14:cc:90:dd:78:56:a2:f1:23:42: 85:07:d2:b9:59:8f:ef:0b:26:bf:d5:a4:a5:ec:ba: 13:6e:3f:37:92:2e:13:bd:4f:5c:73:ef:65:91:11: 18:3a:8f:4b:da:f7:88:f1:e7:2c:f3:4c:15:ed:2a: e1:45:63:4b:d5:4d:16:26:b3:f9:a4:90:6a:12:61: 82:1b:26:c6:aa:91:28:8d:85:4f:f6:41:12:ce:ff: cd:a5:f7:a9:d3:d0:46:9e:bc:4f:86:fe:5d:5e:eb: c3:c5:11:15:f9:cc:3a:79:df:d7:65:c5:3a:42:52: 48:99:46:ad:5a:ae:76:fc:35:42:23:8a:ef:23:11: a7:83:1f:00:ba:ee:24:ce:6b:fe:b1:e9:8b:64:2a: da:15:f2:59:75:c1:9c:74:b6:1d:37:55:55:16:b1: 90:c9:96:dc:84:59:55:b9:35:fd:68:d9:2f:fa:c2: 87:48:a2:e6:4e:f1:40:0d:ae:a6:c4:45:dd:aa:4d: b4:03:3a:68:f6:93:c8:90:ca:4d:fc:62:50:7a:e6: 53:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:16:B8:07:9D:8F:C9:39:9C:9F:14:9E:2B:13:7F:6D:A5:DD:71:6A X509v3 Authority Key Identifier: keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/A433C1262D0311F0A91F647CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.140.45.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:00:97:fb:73:ca:4f:48:ee:1d:b8:47:6e:09:11:44:73:26: d9:73:af:4f:fd:30:ba:43:7f:77:cd:bb:e8:a7:4e:6f:6e:c0: d6:b2:73:c5:8c:71:2a:c0:4b:cc:ec:09:94:87:3c:97:ec:c2: 8f:21:39:e9:f3:6b:cf:c3:1f:02:cb:1e:45:5e:b8:54:16:8b: dc:37:2b:fd:1b:46:1b:3c:71:ea:b6:ed:cf:91:cd:cd:98:cf: 70:ac:63:55:db:c9:b9:d1:6b:3a:0e:d5:b8:81:2c:89:87:57: dd:4b:12:dd:06:cd:1d:82:14:af:e7:b3:af:da:b9:bb:0e:ca: 25:b9:24:ee:82:a2:8e:55:2c:99:70:4f:cf:59:b5:55:ba:af: 24:86:ba:10:a8:82:f1:f4:71:a6:0c:20:af:46:06:6b:0d:a0: bc:00:04:68:6f:a4:df:8d:c9:15:0e:ac:9c:f8:31:10:31:08: 17:4f:8f:e9:1b:3a:ea:e4:b1:bf:ee:84:74:43:75:06:e7:ae: ef:d6:6b:81:9e:93:3d:af:da:6a:da:e3:8f:e1:02:ca:d8:ee: ea:79:03:3a:f3:78:86:61:14:7a:61:44:09:47:97:9c:4e:a9: c2:f4:55:10:d4:b9:ef:4e:d3:54:b2:b8:fe:66:ee:b2:49:6c: a4:14:fe:a3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjIyMTExMC8GA1UEBRMoQUVFMTdEREI4QzZCMzU5OTY0NjE4N0QwODFFN0M4Rjc5 ODgzRTE5RDAeFw0yNTEwMTcxMTEzNDlaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjIyNGVjLWMxZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj0aH6HKiVBisSGl6wQfX8J0veQMg0WLMVSck1H8+uTIOaVEBjMErwnzkhhwcq w8zFFMyQ3XhWovEjQoUH0rlZj+8LJr/VpKXsuhNuPzeSLhO9T1xz72WRERg6j0va 94jx5yzzTBXtKuFFY0vVTRYms/mkkGoSYYIbJsaqkSiNhU/2QRLO/82l96nT0Eae vE+G/l1e68PFERX5zDp539dlxTpCUkiZRq1arnb8NUIjiu8jEaeDHwC67iTOa/6x 6YtkKtoV8ll1wZx0th03VVUWsZDJltyEWVW5Nf1o2S/6wodIouZO8UANrqbERd2q TbQDOmj2k8iQyk38YlB65lOzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUyha4B52P yTmcnxSeKxN/baXdcWowHwYDVR0jBBgwFoAUruF924xrNZlkYYfQgefI95iD4Z0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMjIxLzMzRUFBQzY4MkQw MzExRjA4M0VCQjM3QUM0RjlBRTAyL3J1RjkyNHhyTlpsa1lZZlFnZWZJOTVpRDRa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnVGOTI0eHJOWmxrWVlmUWdlZkk5NWlENFowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyMS8zM0VBQUM2ODJEMDMxMUYwODNFQkIzN0FDNEY5QUUwMi9BNDMzQzEyNjJE MDMxMUYwQTkxRjY0N0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeMLTANBgkqhkiG9w0BAQsFAAOCAQEAnACX+3PKT0juHbhH bgkRRHMm2XOvT/0wukN/d8276KdOb27A1rJzxYxxKsBLzOwJlIc8l+zCjyE56fNr z8MfAsseRV64VBaL3Dcr/RtGGzxx6rbtz5HNzZjPcKxjVdvJudFrOg7VuIEsiYdX 3UsS3QbNHYIUr+ezr9q5uw7KJbkk7oKijlUsmXBPz1m1VbqvJIa6EKiC8fRxpgwg r0YGaw2gvAAEaG+k343JFQ6snPgxEDEIF0+P6Rs66uSxv+6EdEN1Bueu79ZrgZ6T Pa/aatrjj+ECytju6nkDOvN4hmEUemFECUeXnE6pwvRVENS5707TVLK4/mbuskls pBT+ow== -----END CERTIFICATE-----Generated at Mon Oct 20 13:50:41 2025 by rpki-client