$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa File: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (raw, json) Hash identifier: WL1wjvavlZNBJVifGm25dsfKzlKEpfNQuM2fEKaPYkY= Subject key identifier: 51:59:21:59:12:F4:28:2A:F4:03:F4:7A:9B:B9:60:41:DD:CB:89:4A Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 062A Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa Signing time: Fri 12 Sep 2025 23:04:13 +0000 ROA not before: Fri 12 Sep 2025 23:04:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 11158 IP address blocks: 117.103.120.0/24 maxlen: 24 117.103.121.0/24 maxlen: 24 117.103.122.0/24 maxlen: 24 117.103.123.0/24 maxlen: 24 117.103.126.0/24 maxlen: 24 117.103.127.0/24 maxlen: 24 119.31.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: Sep 12 23:04:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c4a6ed-c615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:b2:41:73:d2:49:aa:f2:dc:80:18:a4:a3: e8:6d:7d:40:39:f4:c5:29:44:2a:c8:8b:c6:51:62: 1c:e1:31:42:93:fc:49:a8:84:57:9d:5e:be:ab:45: 9f:c0:a7:e6:45:d6:e6:ba:37:66:b2:97:d6:34:bd: d0:19:57:06:bd:eb:bd:5f:88:72:f6:a3:bb:5e:47: 83:33:32:d7:77:2d:00:46:aa:99:bb:a7:c3:a3:09: b8:66:76:2f:c4:12:df:d9:92:95:e9:eb:d9:c5:ff: d3:12:d7:28:4b:31:53:92:67:13:2e:7f:50:4c:be: 6f:80:6b:31:4f:88:a5:86:dd:4f:59:48:ab:02:bc: 70:6e:60:5e:55:e6:2d:34:61:fb:c7:0f:d7:91:71: 0e:30:1c:81:e2:43:61:78:9c:46:e4:4c:9c:9b:cb: 7f:ff:81:2e:9d:fc:99:a8:3a:60:c2:56:6e:e5:42: 2f:08:4e:60:3f:f3:91:cb:2e:15:39:9a:a5:71:01: 15:e5:98:7b:91:63:4a:20:c2:3f:cd:c2:43:3a:fe: c9:5a:05:f6:13:8f:83:d5:a0:63:3d:91:7f:6f:00: e4:81:6a:76:be:33:89:8b:53:95:8b:e3:8f:62:10: 16:0d:c9:4d:ac:25:5c:d3:3f:14:91:7b:6c:6d:44: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:59:21:59:12:F4:28:2A:F4:03:F4:7A:9B:B9:60:41:DD:CB:89:4A X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.120.0/22 117.103.126.0/23 119.31.160.0/24 Signature Algorithm: sha256WithRSAEncryption ab:c2:d5:c8:34:15:e1:99:f9:24:3d:91:9a:11:50:61:59:a1: cf:87:c7:57:d1:ce:b0:dd:f6:21:c3:01:ee:85:ef:aa:43:e6: 6e:cc:b1:f4:60:79:5b:04:e1:59:25:17:5d:cb:61:14:45:17: 9f:e9:d2:91:4d:7c:61:cd:c2:27:f1:35:1b:e1:63:e9:e6:1d: 1c:7d:6a:24:ad:38:4d:af:9d:eb:2b:7f:a3:49:ae:a2:4d:7c: 86:de:6a:54:8a:6b:5a:2b:24:6e:d6:2c:50:ff:f7:6b:45:04: 59:3f:0d:9c:d6:e0:fc:48:39:63:79:f2:7c:e3:ed:da:0b:11: a5:02:66:57:97:d6:57:41:32:f3:f7:34:89:2f:42:43:fa:ea: 97:60:a3:49:5f:92:9e:80:7f:59:ba:d6:dc:a2:c3:b9:41:51: af:2f:78:6d:e7:e5:18:86:78:19:d9:2d:b3:63:34:80:1d:41: f4:ed:fb:a0:c3:6a:b3:fc:7a:48:97:3c:fb:eb:96:e4:11:c5: ac:a0:23:84:a5:61:ac:c2:67:3e:83:43:7e:3b:f9:01:d7:b6: 9c:17:7e:93:04:22:2c:54:f2:ae:f0:84:5b:74:3b:2e:44:7a: e2:71:4d:ed:8a:06:90:c9:e4:e0:ec:f1:71:5a:a0:48:fe:d9: 30:0a:48:6f -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUwOTEyMjMwNDEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0YTZlZC1jNjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yiyQXPSSary3IAYpKPobX1AOfTFKUQqyIvGUWIc4TFCk/xJqIRXnV6+q0Wf wKfmRdbmujdmspfWNL3QGVcGveu9X4hy9qO7XkeDMzLXdy0ARqqZu6fDowm4ZnYv xBLf2ZKV6evZxf/TEtcoSzFTkmcTLn9QTL5vgGsxT4ilht1PWUirArxwbmBeVeYt NGH7xw/XkXEOMByB4kNheJxG5Eycm8t//4EunfyZqDpgwlZu5UIvCE5gP/ORyy4V OZqlcQEV5Zh7kWNKIMI/zcJDOv7JWgX2E4+D1aBjPZF/bwDkgWp2vjOJi1OVi+OP YhAWDclNrCVc0z8UkXtsbUSEqQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFFFZIVkS 9Cgq9AP0epu5YEHdy4lKMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvREQ0NkJCOTJF REFCMTFFREJFOTFCQjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJ1Z3gDBAF1Z34DBAB3H6AwDQYJKoZIhvcNAQELBQADggEB AKvC1cg0FeGZ+SQ9kZoRUGFZoc+Hx1fRzrDd9iHDAe6F76pD5m7MsfRgeVsE4Vkl F13LYRRFF5/p0pFNfGHNwifxNRvhY+nmHRx9aiStOE2vnesrf6NJrqJNfIbealSK a1orJG7WLFD/92tFBFk/DZzW4PxIOWN58nzj7doLEaUCZleX1ldBMvP3NIkvQkP6 6pdgo0lfkp6Af1m61tyiw7lBUa8veG3n5RiGeBnZLbNjNIAdQfTt+6DDarP8ekiX PPvrluQRxaygI4SlYazCZz6DQ347+QHXtpwXfpMEIixU8q7whFt0Oy5EeuJxTe2K BpDJ5ODs8XFaoEj+2TAKSG8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:49:35 2025 by rpki-client