$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa File: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (raw, json) Hash identifier: g/PqYTlTdyVd5TL7Ya9Fxql1eZOCVQF2uz0biFh+Gw8= Subject key identifier: 58:43:5B:77:A9:98:60:12:6C:23:7C:3F:AF:B1:2F:66:F2:3E:9D:27 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D55 Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa Signing time: Sun 21 Sep 2025 08:23:22 +0000 ROA not before: Sun 21 Sep 2025 08:23:22 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139667 IP address blocks: 103.143.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Sep 21 08:23:22 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68cfb5fa-3ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:f5:92:c3:fb:6b:80:d2:26:c4:1c:c9:76: 74:4d:97:78:cf:34:81:55:7a:eb:eb:47:4b:63:46: 53:70:d2:44:c3:c1:92:00:29:aa:2f:cd:fd:ba:fb: 44:f6:a5:60:46:de:c3:3f:7e:2c:0a:e4:65:b8:bf: 34:b5:ab:f3:c3:a0:1e:dc:15:38:70:42:93:03:22: 38:15:9d:b9:8b:5c:7b:d3:48:d4:dd:2b:55:23:a0: 47:cc:79:dc:82:b2:33:64:35:c2:91:19:77:8c:9b: 58:89:76:35:c1:12:13:b1:fb:2d:d5:10:70:60:93: 1a:ca:72:9e:a6:01:01:b7:7f:87:d8:6d:e8:88:3b: e8:9d:62:4e:b3:24:ed:0e:d0:1e:9c:85:69:d8:63: 69:cc:b3:70:02:45:1d:1a:7d:f6:99:99:8d:25:90: 6b:8e:db:0d:6b:94:2b:b7:8f:23:8a:5a:87:cb:98: 57:4f:68:54:f5:96:14:7a:b9:6e:64:97:8a:03:f3: 2e:61:8e:f9:4c:7b:eb:3c:83:f8:04:c7:85:3e:d9: d6:7a:0c:53:10:61:e0:ce:11:45:ca:9e:48:d8:e5: 3d:d1:fb:d9:ce:72:1e:01:88:9e:18:44:ce:d2:b5: 92:66:45:0e:6f:7a:9a:c1:c5:a6:c4:01:23:56:cc: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:5B:77:A9:98:60:12:6C:23:7C:3F:AF:B1:2F:66:F2:3E:9D:27 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.88.0/24 Signature Algorithm: sha256WithRSAEncryption 92:ac:c9:38:96:e0:a5:6c:ad:99:cf:24:99:b5:8e:8a:0d:95: a7:87:a3:e9:5e:ee:9f:ac:c1:66:d0:ef:20:ce:d0:b6:f6:1f: 0e:b5:03:8a:42:ed:e0:b3:10:04:94:bd:98:39:9b:25:b2:54: 0a:99:af:5d:26:f4:f6:a4:d6:ba:8f:72:e5:6a:53:f9:24:0a: ae:10:ab:e4:3a:a0:af:b0:2f:63:36:92:2a:cd:ac:17:4b:ae: ef:9b:78:b9:f9:68:f6:c6:20:26:54:ee:fd:70:ca:16:ec:10: 2a:7e:0a:81:b7:35:79:c6:77:9b:ad:50:3f:26:21:43:d4:8a: 4f:56:af:5b:55:c8:42:52:ec:74:87:12:35:13:8a:68:8b:12: 0c:78:47:61:81:78:e7:65:dc:92:5c:c8:ee:be:f3:a9:7f:c9: 02:ef:c0:8e:cf:96:e5:55:cd:37:a7:06:b7:04:db:db:fd:81: 89:48:d5:e0:e4:d6:1e:cb:4e:6f:d6:7b:60:2e:22:83:03:07: f1:30:3f:d1:b8:cb:0f:04:eb:28:ed:42:11:bf:f8:c0:d4:89: 4e:cb:fb:0f:b7:8a:3e:0c:c8:39:2b:fb:47:38:a9:b3:b3:46: d3:f3:a3:cf:19:08:80:ed:ea:2b:a3:ab:a1:91:d6:71:36:5b: 05:c6:44:c5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUwOTIxMDgyMzIyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNmYjVmYS0zZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukT1ksP7a4DSJsQcyXZ0TZd4zzSBVXrr60dLY0ZTcNJEw8GSACmqL839uvtE 9qVgRt7DP34sCuRluL80tavzw6Ae3BU4cEKTAyI4FZ25i1x700jU3StVI6BHzHnc grIzZDXCkRl3jJtYiXY1wRITsfst1RBwYJMaynKepgEBt3+H2G3oiDvonWJOsyTt DtAenIVp2GNpzLNwAkUdGn32mZmNJZBrjtsNa5Qrt48jilqHy5hXT2hU9ZYUerlu ZJeKA/MuYY75THvrPIP4BMeFPtnWegxTEGHgzhFFyp5I2OU90fvZznIeAYieGETO 0rWSZkUOb3qawcWmxAEjVszDMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFhDW3ep mGASbCN8P6+xL2byPp0nMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFEQTYvREIxOEI4RTZERERGMTFFOTk5M0NGMjY1QzRGOUFFMDIvM0M0NjU4MUU5 NkM0MTFGMEFBOEE1RDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnj1gwDQYJKoZIhvcNAQELBQADggEBAJKsyTiW4KVsrZnP JJm1jooNlaeHo+le7p+swWbQ7yDO0Lb2Hw61A4pC7eCzEASUvZg5myWyVAqZr10m 9Pak1rqPcuVqU/kkCq4Qq+Q6oK+wL2M2kirNrBdLru+beLn5aPbGICZU7v1wyhbs ECp+CoG3NXnGd5utUD8mIUPUik9Wr1tVyEJS7HSHEjUTimiLEgx4R2GBeOdl3JJc yO6+86l/yQLvwI7PluVVzTenBrcE29v9gYlI1eDk1h7LTm/We2AuIoMDB/EwP9G4 yw8E6yjtQhG/+MDUiU7L+w+3ij4MyDkr+0c4qbOzRtPzo88ZCIDt6iujq6GR1nE2 WwXGRMU= -----END CERTIFICATE-----Generated at Mon Oct 20 21:26:52 2025 by rpki-client