$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/44B3B572011611EA972FFC57C4F9AE02.roa File: 44B3B572011611EA972FFC57C4F9AE02.roa (raw, json) Hash identifier: 9COC4JU57eLtq+93AZXJxKxezKMRUvq8Ungs1T3DP7c= Subject key identifier: 33:00:57:94:08:8C:92:BB:81:C4:29:FA:94:39:2B:65:C5:A9:B5:79 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0CA6 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/44B3B572011611EA972FFC57C4F9AE02.roa Signing time: Sat 04 Oct 2025 18:18:03 +0000 ROA not before: Sat 04 Oct 2025 18:18:03 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132829 IP address blocks: 103.123.28.0/24 maxlen: 24 103.123.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3238 (0xca6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Oct 4 18:18:03 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e164da-472e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4e:ca:37:17:6d:6b:0c:0d:98:a4:b7:2a:9b: 16:4b:68:47:84:ee:d3:ef:57:e3:37:0e:8e:a0:01: e5:dc:73:25:83:cd:fc:e0:14:fc:0e:7a:f1:68:92: 23:92:98:76:d1:72:53:e5:52:25:55:ef:9d:8c:b4: 1f:4f:65:ae:92:a5:16:77:55:64:d0:e9:29:cf:52: bf:e0:8c:68:b2:ca:19:b8:cb:87:37:cf:0a:11:d0: 41:9e:8a:0f:ea:2d:b6:86:83:6d:9f:82:db:7f:29: 86:11:aa:9e:9a:cf:90:36:6e:2b:c2:86:17:e5:d1: 70:7c:99:5a:2a:4e:1e:57:c9:60:67:8c:09:15:51: 29:fe:05:0b:f3:be:9b:49:35:ab:26:34:b3:63:93: a9:6f:66:d9:7b:95:fd:c8:46:8e:6a:dc:5c:3b:d9: 47:15:f5:3b:71:4b:ab:04:bc:04:df:c3:da:87:44: 36:64:0d:54:bc:ed:33:cc:b4:83:84:af:75:69:3a: c0:be:24:e0:10:5b:be:45:2c:e3:e5:ba:d9:f4:a6: 53:4b:15:d4:f3:3d:63:dd:f0:77:72:d4:77:b7:33: f8:74:27:41:d9:10:55:e0:00:f0:cd:d8:d2:e1:95: 0e:3d:e8:61:1a:1a:f4:f7:f8:7b:2d:0c:77:8f:7b: 68:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:00:57:94:08:8C:92:BB:81:C4:29:FA:94:39:2B:65:C5:A9:B5:79 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/44B3B572011611EA972FFC57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.28.0/23 Signature Algorithm: sha256WithRSAEncryption 73:ea:d0:7b:dc:66:26:5c:71:f1:f7:e6:4d:db:1d:80:cc:5b: e5:f5:23:d4:25:87:3b:94:f6:73:24:e1:c5:7e:22:8d:a4:cc: 0a:4e:77:49:29:c5:f5:dc:59:bb:0b:18:fd:f5:0a:0d:5e:eb: 46:a7:f1:05:3b:82:c6:49:b0:e8:08:bd:9b:04:50:fe:06:e6: f4:04:5e:20:68:6e:f4:07:f3:57:a7:6b:a7:63:66:b5:8f:b5: f4:24:d8:02:c0:bf:f4:de:46:c5:40:80:10:8a:d0:0a:70:50: 5b:04:6e:6f:1e:43:f3:c2:70:07:64:79:a3:be:a1:5d:cf:eb: 66:68:73:5d:14:01:7c:2d:d6:c8:f6:b9:78:c8:93:3c:c3:b7: dc:f7:26:e9:bd:4a:9f:21:55:16:d7:22:87:82:3f:33:83:f1: 8c:78:cf:c5:dc:11:4e:0d:96:3a:51:c8:a3:31:c7:c2:7e:9e: 1f:26:cd:1a:c2:d9:d7:6d:a0:0f:d2:ca:99:1d:49:68:21:7d: 40:79:1e:f3:17:86:0d:ae:85:52:3d:cb:dd:c1:e9:01:b0:44: 0e:8b:62:0d:15:c7:6e:80:85:0b:ea:93:05:dd:e2:08:b2:1a: 49:c7:99:dc:bb:9e:3a:4c:10:bf:ac:d4:8c:7a:d9:aa:a1:40: a5:46:c7:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUxMDA0MTgxODAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxNjRkYS00NzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA007KNxdtawwNmKS3KpsWS2hHhO7T71fjNw6OoAHl3HMlg8384BT8DnrxaJIj kph20XJT5VIlVe+djLQfT2WukqUWd1Vk0Okpz1K/4IxossoZuMuHN88KEdBBnooP 6i22hoNtn4LbfymGEaqems+QNm4rwoYX5dFwfJlaKk4eV8lgZ4wJFVEp/gUL876b STWrJjSzY5Opb2bZe5X9yEaOatxcO9lHFfU7cUurBLwE38Pah0Q2ZA1UvO0zzLSD hK91aTrAviTgEFu+RSzj5brZ9KZTSxXU8z1j3fB3ctR3tzP4dCdB2RBV4ADwzdjS 4ZUOPehhGhr09/h7LQx3j3toZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDMAV5QI jJK7gcQp+pQ5K2XFqbV5MB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU4QzUvMDUyQzg0RkMwMTE1MTFFQUE5OEE2MjU1QzRGOUFFMDIvNDRCM0I1NzIw MTE2MTFFQTk3MkZGQzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnexwwDQYJKoZIhvcNAQELBQADggEBAHPq0HvcZiZccfH3 5k3bHYDMW+X1I9QlhzuU9nMk4cV+Io2kzApOd0kpxfXcWbsLGP31Cg1e60an8QU7 gsZJsOgIvZsEUP4G5vQEXiBobvQH81ena6djZrWPtfQk2ALAv/TeRsVAgBCK0Apw UFsEbm8eQ/PCcAdkeaO+oV3P62Zoc10UAXwt1sj2uXjIkzzDt9z3Jum9Sp8hVRbX IoeCPzOD8Yx4z8XcEU4NljpRyKMxx8J+nh8mzRrC2ddtoA/SypkdSWghfUB5HvMX hg2uhVI9y93B6QGwRA6LYg0Vx26AhQvqkwXd4giyGknHmdy7njpMEL+s1Ix62aqh QKVGx6M= -----END CERTIFICATE-----Generated at Mon Oct 20 19:11:31 2025 by rpki-client