$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa File: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (raw, json) Hash identifier: 2hOid2u5TsPs2BD6knP6FFumSUPv3Pl24PKpE2g7tdc= Subject key identifier: 32:DF:19:85:27:91:84:94:65:52:01:2B:95:26:BF:1E:3D:18:D5:C3 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 06B6 Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa Signing time: Thu 02 Oct 2025 22:23:30 +0000 ROA not before: Thu 02 Oct 2025 22:23:30 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45230 IP address blocks: 45.112.60.0/24 maxlen: 24 45.112.61.0/24 maxlen: 24 45.112.62.0/24 maxlen: 24 45.112.63.0/24 maxlen: 24 103.74.208.0/24 maxlen: 24 103.74.209.0/24 maxlen: 24 103.74.210.0/24 maxlen: 24 103.74.211.0/24 maxlen: 24 202.49.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Oct 2 22:23:30 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68defb62-1124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ec:a0:01:4e:1d:82:30:53:88:d2:a6:a7:02: 9d:5f:bf:e9:2f:ea:3f:bb:41:5d:03:a7:ed:40:bf: 59:a9:d0:e5:5e:e4:35:4d:bd:92:9d:8f:05:e4:fc: 85:7e:1b:3a:5a:5b:d9:18:5e:e3:01:cf:b4:e7:a8: a8:fb:a2:6a:47:8c:f5:94:12:4a:7c:fb:f6:54:0c: 8c:83:a3:5f:cd:49:2c:fe:67:64:5a:25:6a:82:46: 8f:77:e2:f6:52:36:0b:94:da:ae:0d:7c:8c:87:f9: 7c:3b:64:4d:1d:7b:6a:d5:da:63:89:94:67:38:f6: 6b:0a:c1:43:b8:82:86:59:18:31:5c:af:94:9f:dc: ac:5b:d3:a8:ee:84:9d:3c:42:40:27:71:a1:99:2f: 74:b5:18:cd:32:30:85:d2:28:b5:dd:9e:ba:c1:68: ed:07:aa:96:ce:a6:3a:ad:88:6d:a1:f7:a7:9e:0f: 6c:ab:cc:1e:c0:73:a1:81:b4:98:1e:98:26:e4:e6: 52:63:d2:a9:54:e3:3a:cf:66:a8:7d:ac:d3:c8:e2: 3a:17:d3:e9:f3:cc:29:0c:a2:b4:54:ca:06:7a:44: e3:93:89:fa:db:f8:2a:10:f8:08:8c:80:ef:b1:e1: 71:ba:b3:79:e8:0b:d2:2b:53:57:8b:3e:f8:c6:f8: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DF:19:85:27:91:84:94:65:52:01:2B:95:26:BF:1E:3D:18:D5:C3 X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/1B25BF167FE111EBB6C0941AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.112.60.0/22 103.74.208.0/22 202.49.41.0/24 Signature Algorithm: sha256WithRSAEncryption 32:0d:5c:50:70:29:aa:35:d0:07:65:bd:5e:c7:2a:cd:63:53: 46:da:97:b1:21:05:7f:fe:e4:91:f4:8c:12:04:6c:22:16:d5: 57:ff:9c:ec:c9:d2:16:d1:ac:d9:bd:27:50:cb:9c:b0:31:44: 3f:1f:a5:25:7e:08:37:10:06:a7:ef:67:41:23:70:40:d9:2e: bc:d3:2d:32:02:05:21:ce:e5:10:2a:7a:d1:5e:0f:96:47:a9: 09:2d:a3:62:c2:e9:1a:00:f1:42:6c:27:a0:1b:2a:a7:ea:8d: e1:5f:17:b5:98:22:8c:05:b8:23:b4:3a:32:7f:1b:9d:70:99: 73:85:93:9d:3b:e5:46:05:d4:d9:fc:89:24:69:27:69:36:99: bc:a0:61:cf:e5:86:6f:5e:ff:86:b6:62:5f:f4:0f:13:ab:17: 39:60:83:b0:d3:5c:f6:97:53:53:3b:89:3e:60:63:11:0e:0f: 6a:66:e1:c4:c1:1e:13:41:ba:11:2c:47:cc:18:d1:7c:b3:58: 0b:b7:4b:a7:58:9e:d6:73:a6:b7:0a:3c:31:b9:f4:cc:97:ea: 05:ee:6f:c1:7f:ab:df:93:7e:1b:9f:37:3d:f3:ef:b7:51:16: 5d:1b:0a:0e:66:0b:5c:96:e9:b6:e5:08:5a:b0:38:f4:77:ab: 58:f5:82:f1 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjUxMDAyMjIyMzMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGRlZmI2Mi0xMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuygAU4dgjBTiNKmpwKdX7/pL+o/u0FdA6ftQL9ZqdDlXuQ1Tb2SnY8F5PyF fhs6WlvZGF7jAc+056io+6JqR4z1lBJKfPv2VAyMg6NfzUks/mdkWiVqgkaPd+L2 UjYLlNquDXyMh/l8O2RNHXtq1dpjiZRnOPZrCsFDuIKGWRgxXK+Un9ysW9Oo7oSd PEJAJ3GhmS90tRjNMjCF0ii13Z66wWjtB6qWzqY6rYhtofenng9sq8wewHOhgbSY Hpgm5OZSY9KpVOM6z2aofazTyOI6F9Pp88wpDKK0VMoGekTjk4n62/gqEPgIjIDv seFxurN56AvSK1NXiz74xvj54QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDLfGYUn kYSUZVIBK5Umvx49GNXDMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDRFNDUvRjhGMUMxOTQ3RkRFMTFFQkExODhDRjE0QzRGOUFFMDIvMUIyNUJGMTY3 RkUxMTFFQkI2QzA5NDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAItcDwDBAJnStADBADKMSkwDQYJKoZIhvcNAQELBQADggEB ADINXFBwKao10AdlvV7HKs1jU0bal7EhBX/+5JH0jBIEbCIW1Vf/nOzJ0hbRrNm9 J1DLnLAxRD8fpSV+CDcQBqfvZ0EjcEDZLrzTLTICBSHO5RAqetFeD5ZHqQkto2LC 6RoA8UJsJ6AbKqfqjeFfF7WYIowFuCO0OjJ/G51wmXOFk5075UYF1Nn8iSRpJ2k2 mbygYc/lhm9e/4a2Yl/0DxOrFzlgg7DTXPaXU1M7iT5gYxEOD2pm4cTBHhNBuhEs R8wY0XyzWAu3S6dYntZzprcKPDG59MyX6gXub8F/q9+TfhufNz3z77dRFl0bCg5m C1yW6bblCFqwOPR3q1j1gvE= -----END CERTIFICATE-----Generated at Tue Oct 21 00:29:15 2025 by rpki-client