$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa File: 4140D222AB0511F0AD64C814C4F9AE02.roa (raw, json) Hash identifier: OQA1xcKI/hiAbUi76rdd20yEjY2R6araSSWLUXcKQG8= Subject key identifier: 66:9A:15:D1:D6:43:D4:1A:71:E6:CA:3D:A0:B1:AA:0A:C4:B8:70:5D Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Certificate serial: 02 Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa Signing time: Fri 17 Oct 2025 02:59:11 +0000 ROA not before: Fri 17 Oct 2025 02:59:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139223 IP address blocks: 103.139.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Validity Not Before: Oct 17 02:59:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68f1b0fe-2d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:66:38:cf:c4:8e:66:93:89:87:1c:6f:c9: 60:c0:e8:e0:24:e2:fc:4e:86:40:dc:7c:93:78:1d: 4c:ac:5e:0c:8c:6c:f0:9d:16:cd:81:9a:a6:47:08: 84:4a:1e:99:4f:7c:f4:64:22:64:05:87:ad:c2:6b: c2:e9:16:70:8e:d5:99:f2:75:72:f7:92:e3:b2:47: c1:c4:5b:cc:e7:5c:d4:00:6f:68:45:8c:32:39:3f: 12:c3:3a:97:9c:0c:18:8b:43:02:ed:17:9e:6d:68: 0f:c0:88:59:2f:9f:3b:8a:80:ca:b8:26:ce:e0:86: 07:a1:3b:5d:c7:8c:c3:45:31:e4:32:67:4c:d9:d0: b2:aa:11:65:c6:47:80:1c:3e:6f:50:95:34:7f:4e: d1:0c:9d:f8:c8:27:aa:fa:38:4d:ec:d8:39:51:a3: 79:f1:ac:ae:1c:56:ad:b8:74:63:43:4c:54:cf:dd: 4a:4d:53:14:ac:a5:82:2e:6b:dc:fb:b8:10:86:b3: 2f:ef:54:5d:d0:03:43:24:c9:33:f8:ff:28:7c:d7: f9:4a:43:de:0b:f5:65:53:32:9c:52:76:0f:69:ea: 88:b2:ab:e3:ef:f6:b3:ad:29:ff:1d:c0:83:cb:47: 3e:a6:a4:98:f7:48:80:46:eb:b7:9e:f4:78:ad:6f: 60:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9A:15:D1:D6:43:D4:1A:71:E6:CA:3D:A0:B1:AA:0A:C4:B8:70:5D X509v3 Authority Key Identifier: keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/4140D222AB0511F0AD64C814C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.139.253.0/24 Signature Algorithm: sha256WithRSAEncryption ae:33:44:90:92:55:7c:10:c5:18:9d:e1:3b:bf:1e:d2:8f:d0: 92:ac:72:0d:7b:38:0a:26:2a:7b:5c:6e:88:75:d5:60:b2:f8: ca:92:a1:96:49:96:fa:9f:1e:46:35:ec:69:a7:4e:fb:ce:d3: 1b:84:b9:65:06:7f:04:b8:5e:2a:8e:54:53:a6:2f:a9:97:e7: dc:a4:b8:95:61:c7:48:1a:b9:84:7d:9a:4e:e6:82:c4:45:48: c9:78:f1:eb:e6:ed:5f:63:91:6b:7d:2f:28:d5:72:09:69:b5: 56:23:e1:47:df:2a:05:05:46:6f:ae:90:8a:0b:37:e8:a0:91: df:a8:0d:98:2c:56:50:59:37:f9:1c:e9:54:71:89:6f:d5:de: ca:51:c5:60:e6:49:eb:10:85:44:1f:7a:d4:24:b1:ad:48:bc: 70:96:e8:97:36:e8:ad:74:61:71:cd:ed:98:13:d9:de:5a:31: 8a:fb:99:8c:6e:46:0a:61:88:26:bf:ed:c0:60:12:8b:4d:84: 67:8c:46:c9:69:1c:5b:b4:67:2b:07:ce:96:2b:01:7f:1f:e0: cf:43:21:b3:5a:b0:11:d7:34:7f:c6:06:68:e3:5d:46:6c:ec: 29:84:01:d0:ab:ba:36:3e:b3:90:28:4f:64:fc:a3:54:dd:37: 77:26:9a:89 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RENEOTExMC8GA1UEBRMoM0QwNjkyOUQ4RDVFMUY2OEVFMjNFQ0EzRjk0OENGRjdB MkU0OTVCMzAeFw0yNTEwMTcwMjU5MTFaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjFiMGZlLTJkNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC37WY4z8SOZpOJhxxvyWDA6OAk4vxOhkDcfJN4HUysXgyMbPCdFs2BmqZHCIRK HplPfPRkImQFh63Ca8LpFnCO1ZnydXL3kuOyR8HEW8znXNQAb2hFjDI5PxLDOpec DBiLQwLtF55taA/AiFkvnzuKgMq4Js7ghgehO13HjMNFMeQyZ0zZ0LKqEWXGR4Ac Pm9QlTR/TtEMnfjIJ6r6OE3s2DlRo3nxrK4cVq24dGNDTFTP3UpNUxSspYIua9z7 uBCGsy/vVF3QA0MkyTP4/yh81/lKQ94L9WVTMpxSdg9p6oiyq+Pv9rOtKf8dwIPL Rz6mpJj3SIBG67ee9Hitb2D1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZpoV0dZD 1Bpx5so9oLGqCsS4cF0wHwYDVR0jBBgwFoAUPQaSnY1eH2juI+yj+UjP96LklbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQ0Q5LzQxMEJCQzE0NEU2 QzExRUE4OTA0OTc0N0M0RjlBRTAyL1BRYVNuWTFlSDJqdUkteWotVWpQOTZMa2xi TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFFhU25ZMWVIMmp1SS15ai1ValA5NkxrbGJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi80MTQwRDIyMkFC MDUxMUYwQUQ2NEM4MTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeL/TANBgkqhkiG9w0BAQsFAAOCAQEArjNEkJJVfBDFGJ3h O78e0o/QkqxyDXs4CiYqe1xuiHXVYLL4ypKhlkmW+p8eRjXsaadO+87TG4S5ZQZ/ BLheKo5UU6YvqZfn3KS4lWHHSBq5hH2aTuaCxEVIyXjx6+btX2ORa30vKNVyCWm1 ViPhR98qBQVGb66Qigs36KCR36gNmCxWUFk3+RzpVHGJb9XeylHFYOZJ6xCFRB96 1CSxrUi8cJbolzborXRhcc3tmBPZ3loxivuZjG5GCmGIJr/twGASi02EZ4xGyWkc W7RnKwfOlisBfx/gz0Mhs1qwEdc0f8YGaONdRmzsKYQB0Ku6Nj6zkChPZPyjVN03 dyaaiQ== -----END CERTIFICATE-----Generated at Mon Oct 20 17:58:36 2025 by rpki-client