$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa File: 4FF0079CC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: mF7kZS6Jy+xmheJVzwvgL67SCm3/Tv+kyRiKbt147Mc= Subject key identifier: 61:45:04:84:00:1F:9A:20:2A:B5:05:8B:B2:5C:E7:6A:18:AE:56:93 Certificate issuer: /CN=A91C7A69/serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Certificate serial: 037B Authority key identifier: CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa Signing time: Sat 11 Oct 2025 03:28:00 +0000 ROA not before: Sat 11 Oct 2025 03:28:00 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132742 IP address blocks: 43.249.76.0/22 maxlen: 24 103.40.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 891 (0x37b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7A69, serialNumber=CB9D41A6DA96F76A4FF0586B5E8A889FC0235457 Validity Not Before: Oct 11 03:28:00 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e9cebf-1ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:5c:19:7b:cc:be:e2:4e:94:36:94:18:18: bd:b2:40:b8:d5:d8:4d:f4:0d:67:c2:63:29:93:57: 7f:ba:7e:e6:4d:fa:f1:a4:b6:a9:2f:17:1d:dd:e1: f6:db:5c:2a:ff:96:eb:b2:75:dd:01:60:8e:a8:a3: 8a:1d:62:a7:77:19:84:db:94:8d:a1:8b:e9:e3:26: 56:a4:46:5b:9c:6a:b7:f4:78:f3:55:14:4d:49:f6: ea:49:64:e6:66:ba:ab:f1:87:a4:7e:62:67:df:6e: c5:8a:73:a3:24:bd:37:e6:57:5c:f4:3e:52:52:34: 50:d6:0b:57:1b:9c:13:a8:41:e3:89:6c:d9:95:ce: cc:fb:6c:7d:41:07:43:15:d0:50:43:34:0b:42:ad: 53:75:fe:c9:f9:41:9d:c1:84:bd:9a:ea:26:54:29: e3:3c:f1:ac:17:c9:94:4e:5d:8b:3a:31:e2:a5:71: 64:7d:9c:94:2d:9f:de:2f:0f:ca:9d:0f:c0:03:15: d5:f0:5d:86:4f:1a:87:0d:14:cd:dd:a2:e3:6d:ad: 21:f7:0b:71:24:5f:7d:59:7b:65:37:1b:70:25:a1: f0:79:cd:59:bc:26:05:5e:e3:83:79:c1:73:53:ed: 78:77:ef:18:14:15:d9:d3:72:f0:57:40:07:09:74: 6f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:04:84:00:1F:9A:20:2A:B5:05:8B:B2:5C:E7:6A:18:AE:56:93 X509v3 Authority Key Identifier: keyid:CB:9D:41:A6:DA:96:F7:6A:4F:F0:58:6B:5E:8A:88:9F:C0:23:54:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/y51BptqW92pP8FhrXoqIn8AjVFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y51BptqW92pP8FhrXoqIn8AjVFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7A69/8AF3D5B2C60311EC8B0D5D3DC4F9AE02/4FF0079CC6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.76.0/22 103.40.152.0/22 Signature Algorithm: sha256WithRSAEncryption c2:39:2d:02:e2:23:12:01:88:75:e9:79:e7:ba:65:fa:4e:e3: d0:d6:3d:49:9f:29:c2:60:ac:7b:07:e9:8c:90:08:87:c4:6e: f9:23:81:d4:f6:b8:4c:9d:67:3f:eb:3e:08:04:2a:4e:a3:f2: 57:39:21:c0:5d:70:ad:b0:44:b6:49:09:e2:f9:f8:02:f4:81: cd:1c:92:40:98:c5:7c:b9:75:dd:08:93:bd:35:b3:48:8d:21: 4b:3b:4b:12:4e:82:bf:02:b5:43:97:90:67:fa:25:04:b9:e3: 2c:e1:ca:6f:d9:14:87:60:b0:e4:fc:ab:e5:de:5f:58:91:9c: 59:cf:6b:d6:1b:f4:7a:37:e9:7c:be:19:60:16:43:68:1e:3b: 1a:9b:ea:4d:16:ce:6b:08:f1:20:df:bf:e0:e6:0e:19:d9:6d: 48:3f:f0:b2:8b:6b:df:d3:af:d9:40:62:64:a9:82:fd:42:3f: e6:9c:f1:97:5c:8b:28:a6:01:e5:8f:26:72:ae:da:03:f0:62: 84:46:97:ad:ea:ae:ca:10:2b:cb:c1:07:c2:ae:69:7f:90:b1: a6:60:6d:4c:6e:2e:1e:b8:00:6b:0b:80:78:3a:50:c8:1a:5d: 0a:f8:ec:e4:e8:ad:c0:b8:92:95:82:18:9d:1e:16:9f:22:e6: 8d:eb:0a:af -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICA3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdBNjkxMTAvBgNVBAUTKENCOUQ0MUE2REE5NkY3NkE0RkYwNTg2QjVFOEE4ODlG QzAyMzU0NTcwHhcNMjUxMDExMDMyODAwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU5Y2ViZi0xY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV9cGXvMvuJOlDaUGBi9skC41dhN9A1nwmMpk1d/un7mTfrxpLapLxcd3eH2 21wq/5brsnXdAWCOqKOKHWKndxmE25SNoYvp4yZWpEZbnGq39HjzVRRNSfbqSWTm Zrqr8YekfmJn327FinOjJL035ldc9D5SUjRQ1gtXG5wTqEHjiWzZlc7M+2x9QQdD FdBQQzQLQq1Tdf7J+UGdwYS9muomVCnjPPGsF8mUTl2LOjHipXFkfZyULZ/eLw/K nQ/AAxXV8F2GTxqHDRTN3aLjba0h9wtxJF99WXtlNxtwJaHwec1ZvCYFXuODecFz U+14d+8YFBXZ03LwV0AHCXRvDwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGFFBIQA H5ogKrUFi7Jc52oYrlaTMB8GA1UdIwQYMBaAFMudQabalvdqT/BYa16KiJ/AI1RX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0E2OS84QUYzRDVCMkM2 MDMxMUVDOEIwRDVEM0RDNEY5QUUwMi95NTFCcHRxVzkycFA4RmhyWG9xSW44QWpW RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k1MUJwdHFXOTJwUDhGaHJYb3FJbjhBalZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdBNjkvOEFGM0Q1QjJDNjAzMTFFQzhCMEQ1RDNEQzRGOUFFMDIvNEZGMDA3OUND NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+UwDBAJnKJgwDQYJKoZIhvcNAQELBQADggEBAMI5LQLi IxIBiHXpeee6ZfpO49DWPUmfKcJgrHsH6YyQCIfEbvkjgdT2uEydZz/rPggEKk6j 8lc5IcBdcK2wRLZJCeL5+AL0gc0ckkCYxXy5dd0Ik701s0iNIUs7SxJOgr8CtUOX kGf6JQS54yzhym/ZFIdgsOT8q+XeX1iRnFnPa9Yb9Ho36Xy+GWAWQ2geOxqb6k0W zmsI8SDfv+DmDhnZbUg/8LKLa9/Tr9lAYmSpgv1CP+ac8ZdciyimAeWPJnKu2gPw YoRGl63qrsoQK8vBB8KuaX+QsaZgbUxuLh64AGsLgHg6UMgaXQr47OTorcC4kpWC GJ0eFp8i5o3rCq8= -----END CERTIFICATE-----Generated at Mon Oct 20 11:32:41 2025 by rpki-client