$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa File: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (raw, json) Hash identifier: rmQtPBzLnmMnKWqEbpn/ZFyPKybx/x0dYiK1HD1kfdo= Subject key identifier: 06:5E:02:8E:14:C0:BF:39:DD:AF:C5:23:AA:0E:44:BE:5C:21:10:69 Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Certificate serial: 03 Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa Signing time: Fri 17 Oct 2025 02:59:12 +0000 ROA not before: Fri 17 Oct 2025 02:59:12 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38562 IP address blocks: 103.175.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3 Validity Not Before: Oct 17 02:59:12 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68f1b0ff-fcbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:6a:8d:9a:d6:1a:3b:fb:ea:12:74:58:65: 01:96:26:20:17:c0:9d:53:3b:34:8d:ae:e5:d6:cd: 5b:5e:4f:51:b2:b3:5b:11:40:12:ce:33:77:fd:a7: 5a:04:7f:3c:fa:07:ba:7e:24:c0:61:85:18:54:69: e9:ca:e4:f1:a8:49:c9:fe:5c:93:61:f4:81:d2:64: 58:b6:00:a7:1d:8a:09:45:e6:95:65:5f:54:4a:60: 26:30:39:0d:c8:e6:61:4e:8d:5c:45:dd:af:a7:41: bd:88:04:38:6b:66:af:bc:a9:2c:40:df:97:f5:f1: 81:c4:d2:72:0e:d6:bd:48:2a:46:db:73:3b:1e:9a: 99:ba:76:b6:7e:48:58:95:27:f1:c0:82:41:bf:21: e4:e8:73:05:44:0b:aa:9d:5b:2b:1e:82:04:03:37: f9:b5:84:59:b2:eb:e4:09:44:11:12:1c:78:89:47: 0e:b2:11:09:8e:0e:b6:06:fa:38:27:4c:7c:88:39: 9c:59:8b:ed:09:d9:ca:8c:f9:13:0a:ad:07:33:d2: 9a:ca:48:01:ce:60:b1:45:5f:34:43:7b:a5:6f:06: 7f:fe:65:fc:21:11:43:58:0b:f0:b9:54:70:df:c7: a7:2b:f3:b7:94:25:b5:58:44:43:9b:d9:47:71:b3: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:02:8E:14:C0:BF:39:DD:AF:C5:23:AA:0E:44:BE:5C:21:10:69 X509v3 Authority Key Identifier: keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/41D7A1D4AB0511F0AD64C814C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.175.127.0/24 Signature Algorithm: sha256WithRSAEncryption 27:af:9b:44:b9:5a:73:43:b0:2f:ad:92:46:a1:cc:94:37:99: c8:7c:db:fa:09:0e:57:ec:94:ba:03:ea:35:3c:16:86:6a:7d: 57:4d:87:4e:4c:30:77:73:e4:17:9f:c9:d7:fb:61:25:59:64: 0f:5f:b4:46:ff:a7:4e:53:b7:a8:3d:a7:86:3b:43:a8:20:6b: 0f:2f:ef:cb:ca:20:3a:ab:3f:2e:54:9f:09:ba:09:14:1b:60: 7a:e8:c2:29:57:1e:03:c6:8b:c2:29:d9:78:dd:dc:57:ae:18: 09:f5:ac:87:88:a1:5b:8c:a8:a3:0b:26:6a:32:cf:1a:40:56: 55:58:0b:87:dc:0a:e7:cd:08:15:f3:fa:79:8a:f3:13:ab:c1: 42:75:7b:10:59:dc:08:9f:17:f0:8c:f0:9d:e5:24:b8:2b:86: cc:8c:79:04:c9:86:7b:62:bc:69:3f:85:73:76:cb:72:ec:b7: 4e:5e:6b:0b:ad:9c:f1:db:9d:ca:a2:7b:79:95:aa:a2:74:37: 69:87:ee:00:0a:3a:a1:71:96:a2:10:92:df:ba:f2:c3:b7:14: 94:ab:6f:70:60:6f:6e:77:f9:b5:ae:1e:04:b1:77:28:a0:8d: 58:1a:84:f7:be:92:e8:02:c5:65:19:b6:f8:a7:91:62:5f:88: 99:25:a9:08 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RENEOTExMC8GA1UEBRMoM0QwNjkyOUQ4RDVFMUY2OEVFMjNFQ0EzRjk0OENGRjdB MkU0OTVCMzAeFw0yNTEwMTcwMjU5MTJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjFiMGZmLWZjYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZvWqNmtYaO/vqEnRYZQGWJiAXwJ1TOzSNruXWzVteT1Gys1sRQBLOM3f9p1oE fzz6B7p+JMBhhRhUaenK5PGoScn+XJNh9IHSZFi2AKcdiglF5pVlX1RKYCYwOQ3I 5mFOjVxF3a+nQb2IBDhrZq+8qSxA35f18YHE0nIO1r1IKkbbczsempm6drZ+SFiV J/HAgkG/IeTocwVEC6qdWyseggQDN/m1hFmy6+QJRBESHHiJRw6yEQmODrYG+jgn THyIOZxZi+0J2cqM+RMKrQcz0prKSAHOYLFFXzRDe6VvBn/+ZfwhEUNYC/C5VHDf x6cr87eUJbVYREOb2Udxs68VAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBl4CjhTA vzndr8Ujqg5EvlwhEGkwHwYDVR0jBBgwFoAUPQaSnY1eH2juI+yj+UjP96LklbMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREQ0Q5LzQxMEJCQzE0NEU2 QzExRUE4OTA0OTc0N0M0RjlBRTAyL1BRYVNuWTFlSDJqdUkteWotVWpQOTZMa2xi TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFFhU25ZMWVIMmp1SS15ai1ValA5NkxrbGJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENEOS80MTBCQkMxNDRFNkMxMUVBODkwNDk3NDdDNEY5QUUwMi80MUQ3QTFENEFC MDUxMUYwQUQ2NEM4MTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGevfzANBgkqhkiG9w0BAQsFAAOCAQEAJ6+bRLlac0OwL62S RqHMlDeZyHzb+gkOV+yUugPqNTwWhmp9V02HTkwwd3PkF5/J1/thJVlkD1+0Rv+n TlO3qD2nhjtDqCBrDy/vy8ogOqs/LlSfCboJFBtgeujCKVceA8aLwinZeN3cV64Y CfWsh4ihW4yoowsmajLPGkBWVVgLh9wK580IFfP6eYrzE6vBQnV7EFncCJ8X8Izw neUkuCuGzIx5BMmGe2K8aT+Fc3bLcuy3Tl5rC62c8dudyqJ7eZWqonQ3aYfuAAo6 oXGWohCS37ryw7cUlKtvcGBvbnf5ta4eBLF3KKCNWBqE976S6ALFZRm2+KeRYl+I mSWpCA== -----END CERTIFICATE-----Generated at Mon Oct 20 17:59:15 2025 by rpki-client