$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/452DDFB4011611EA972FFC57C4F9AE02.roa File: 452DDFB4011611EA972FFC57C4F9AE02.roa (raw, json) Hash identifier: EAQL7hv/BTjKApjc3ZIYKNpClj0rUyMUA1WrPrbN2NU= Subject key identifier: 5A:ED:9A:46:B4:F4:C5:85:72:26:20:E1:5F:62:BD:B0:6A:FC:55:4F Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0CA7 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/452DDFB4011611EA972FFC57C4F9AE02.roa Signing time: Sat 04 Oct 2025 18:18:05 +0000 ROA not before: Sat 04 Oct 2025 18:18:05 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135562 IP address blocks: 103.123.30.0/24 maxlen: 24 103.123.31.0/24 maxlen: 24 2403:9bc0::/48 maxlen: 48 2403:9bc0:1::/48 maxlen: 48 2403:9bc0:2::/48 maxlen: 48 2403:9bc0:3::/48 maxlen: 48 2403:9bc0:4::/48 maxlen: 48 2403:9bc0:5::/48 maxlen: 48 2403:9bc0:6::/48 maxlen: 48 2403:9bc0:7::/48 maxlen: 48 2403:9bc0:8::/48 maxlen: 48 2403:9bc0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Oct 4 18:18:05 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e164dd-0fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:6a:45:b1:13:46:98:ea:1f:1e:b0:93:0e: 43:51:91:7a:b5:db:dd:b3:60:a2:f9:62:3a:b1:86: 8b:f6:79:96:61:64:c1:6b:cb:2e:46:36:f8:88:98: 7c:94:a1:c9:77:e2:ed:63:19:f8:a5:a8:a4:39:dc: f2:98:65:98:e9:f3:c6:53:d6:a4:0a:32:bb:5a:d2: 57:ba:af:6b:58:6a:be:4d:43:14:e7:63:bd:f5:84: a8:6a:78:92:aa:05:5d:40:d4:88:d1:e8:0f:24:91: df:a9:63:fc:27:4f:77:bd:af:19:42:7c:23:b6:b0: 51:72:b2:64:32:d6:e9:da:61:59:55:11:eb:05:12: 2b:dc:f3:34:2a:9f:50:9c:01:2d:62:d9:54:c9:14: 86:c1:cb:dd:39:6e:ed:fe:9a:b9:84:f3:ce:9d:99: e6:25:ae:4a:dc:2f:07:02:c7:fa:d8:27:c1:e2:4e: 99:77:5d:f0:7d:52:ad:a7:2f:8f:fe:06:14:32:6e: 30:9f:18:78:f7:6f:06:55:1d:7e:f5:81:92:64:26: 7d:a2:e3:89:2a:5f:6f:78:c1:84:52:7f:dc:1c:f7: 24:f3:13:dd:b8:97:b6:d2:c7:6c:b4:87:4d:0f:d1: 79:fa:36:e0:40:08:79:8a:97:80:a8:35:58:0f:c0: 0e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:ED:9A:46:B4:F4:C5:85:72:26:20:E1:5F:62:BD:B0:6A:FC:55:4F X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/452DDFB4011611EA972FFC57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.123.30.0/23 IPv6: 2403:9bc0::-2403:9bc0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 15:3f:23:dd:1e:ab:09:49:b4:9f:77:1a:1c:10:24:54:85:90: 4f:9b:d4:f2:b3:bf:23:28:73:af:9a:09:71:df:0b:a6:7c:eb: 5f:d0:dd:9f:87:0e:6f:67:53:3b:26:49:a8:98:81:70:33:4e: 04:a9:b0:54:6a:1b:3b:37:36:9f:e9:21:02:80:46:f2:6b:26: a7:e8:f5:64:3e:88:0e:48:d4:78:da:70:73:9c:4d:e2:7b:77: 1f:a8:c6:61:dd:80:75:48:a4:7f:0b:2a:0f:7f:d7:2a:1d:ed: e0:27:a7:52:24:89:49:40:5a:1d:28:bd:d5:a8:95:de:fb:40: 37:d2:68:2b:fd:38:f2:bf:42:1b:01:44:3d:38:5f:97:19:9a: 9e:89:fd:31:d4:f5:8c:50:00:24:b1:94:2d:4a:48:4d:8a:a1: c4:04:2a:18:47:1c:55:45:1f:62:1f:a4:0a:2b:cc:0f:62:0d: ca:27:32:86:3b:41:cb:2e:3a:24:c4:ba:a1:51:99:82:95:02: 84:30:0c:84:d5:b0:ea:ec:91:54:57:8e:eb:5e:96:24:6c:59: e0:e0:c1:46:ee:b0:ad:ac:3c:01:25:e1:1e:8d:ef:ee:d2:6b: 60:85:f3:d5:32:e8:f6:d1:df:d2:e1:a3:0e:ed:e9:21:b9:59: d2:cf:47:01 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUxMDA0MTgxODA1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGUxNjRkZC0wZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmT1qRbETRpjqHx6wkw5DUZF6tdvds2Ci+WI6sYaL9nmWYWTBa8suRjb4iJh8 lKHJd+LtYxn4paikOdzymGWY6fPGU9akCjK7WtJXuq9rWGq+TUMU52O99YSoaniS qgVdQNSI0egPJJHfqWP8J093va8ZQnwjtrBRcrJkMtbp2mFZVRHrBRIr3PM0Kp9Q nAEtYtlUyRSGwcvdOW7t/pq5hPPOnZnmJa5K3C8HAsf62CfB4k6Zd13wfVKtpy+P /gYUMm4wnxh4928GVR1+9YGSZCZ9ouOJKl9veMGEUn/cHPck8xPduJe20sdstIdN D9F5+jbgQAh5ipeAqDVYD8AOaQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFFrtmka0 9MWFciYg4V9ivbBq/FVPMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU4QzUvMDUyQzg0RkMwMTE1MTFFQUE5OEE2MjU1QzRGOUFFMDIvNDUyRERGQjQw MTE2MTFFQTk3MkZGQzU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBAFnex4wGAQCAAIwEjAQAwUGJAObwAMHASQDm8AACDANBgkq hkiG9w0BAQsFAAOCAQEAFT8j3R6rCUm0n3caHBAkVIWQT5vU8rO/Iyhzr5oJcd8L pnzrX9Ddn4cOb2dTOyZJqJiBcDNOBKmwVGobOzc2n+khAoBG8msmp+j1ZD6IDkjU eNpwc5xN4nt3H6jGYd2AdUikfwsqD3/XKh3t4CenUiSJSUBaHSi91aiV3vtAN9Jo K/048r9CGwFEPThflxmanon9MdT1jFAAJLGULUpITYqhxAQqGEccVUUfYh+kCivM D2INyicyhjtByy46JMS6oVGZgpUChDAMhNWw6uyRVFeO616WJGxZ4ODBRu6wraw8 ASXhHo3v7tJrYIXz1TLo9tHf0uGjDu3pIblZ0s9HAQ== -----END CERTIFICATE-----Generated at Mon Oct 20 08:49:19 2025 by rpki-client