$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa File: 4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa (raw, json) Hash identifier: JrgXyhe/ZBiLMiqpguwMxQYnYLTsK7NzW7LJdocKtjo= Subject key identifier: 77:76:BF:20:31:5B:22:7C:28:D7:0D:14:F4:7F:E2:AE:BA:6F:6C:6E Certificate issuer: /CN=A91F3806/serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Certificate serial: 0C5B Authority key identifier: 98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa Signing time: Fri 12 Sep 2025 18:58:25 +0000 ROA not before: Fri 12 Sep 2025 18:58:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58695 IP address blocks: 103.15.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3806, serialNumber=986E4167D6B3807F49F7C2600D60F9C2609A7096 Validity Not Before: Sep 12 18:58:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c46d51-14e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:d6:ae:c4:1b:86:41:f5:35:bd:2d:bd:ae:65: 49:12:89:19:53:9f:0a:26:57:cf:98:1b:89:fb:c0: 77:42:3c:5b:70:e1:d1:1f:5b:1d:bf:0a:93:04:c4: 4c:43:d9:c4:3f:7f:89:38:29:84:7a:96:dc:63:17: 49:8d:b7:38:eb:d4:1a:68:32:76:38:52:fb:ee:68: 58:71:93:4f:6c:99:81:a4:ff:82:ea:39:6d:e9:57: a4:4f:c1:d8:a3:92:3c:76:fe:b2:d9:3a:60:05:93: c5:53:5d:b5:f6:18:70:8d:ab:b5:18:be:f3:55:cc: 9d:70:76:b9:1c:74:3a:bc:83:aa:e8:f0:3e:38:a8: be:ef:00:f9:d5:71:77:54:e4:4e:3c:bd:89:84:90: e4:ca:05:31:eb:0c:3f:e0:a1:8f:e1:6c:7e:dc:a0: d0:bb:01:f9:71:7f:87:63:0e:35:80:33:05:f0:09: 49:9b:d5:e4:f7:6f:11:f2:b9:94:5a:d6:83:9c:b2: e3:e2:6b:18:4f:13:39:33:02:cc:d5:3c:ce:a7:d1: 4b:54:cf:cf:99:70:a6:89:ee:9c:0e:92:05:87:04: 88:38:d1:c3:04:7c:26:65:91:0f:c7:d6:05:09:a4: a8:c6:9d:d2:5c:34:a0:02:3a:64:25:03:14:ad:c7: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:76:BF:20:31:5B:22:7C:28:D7:0D:14:F4:7F:E2:AE:BA:6F:6C:6E X509v3 Authority Key Identifier: keyid:98:6E:41:67:D6:B3:80:7F:49:F7:C2:60:0D:60:F9:C2:60:9A:70:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/mG5BZ9azgH9J98JgDWD5wmCacJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mG5BZ9azgH9J98JgDWD5wmCacJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3806/B472FE2A0B7C11EA8083E936C4F9AE02/4E54AA4C0B7E11EA9D8BA43CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.15.224.0/23 Signature Algorithm: sha256WithRSAEncryption 77:81:88:b9:eb:31:41:6e:f8:db:09:78:dc:5a:2d:48:cf:5a: e3:de:8b:34:ab:2f:26:83:c9:7c:be:9c:88:3e:34:a0:aa:3d: ea:ed:c7:57:99:20:fe:df:00:2d:bc:98:fd:4d:0d:b6:29:20: c6:d4:4a:18:90:a6:57:7a:af:54:a2:ae:f5:e0:40:e2:c1:6a: e4:f8:aa:f9:4b:66:3f:40:4b:3b:18:c4:d0:4c:ec:5b:74:99: 5b:ad:f1:02:20:ac:6a:8c:2c:ec:6b:7b:f1:b1:a2:9c:51:98: 44:ef:87:f6:f7:48:67:b3:37:60:87:e4:e1:5e:fe:86:51:f1: 2f:f9:3f:50:23:09:5a:15:49:98:6a:30:71:4c:19:29:bf:46: 54:14:25:24:13:49:c2:d4:3d:7f:0d:bc:b4:5d:14:d6:e9:fe: 3c:90:fa:c4:8f:78:3d:42:43:97:e1:43:1e:a1:d9:fa:b0:d3: 8a:6e:e8:7d:e5:b7:63:8a:d2:c2:bf:f3:c6:a4:b1:d1:cd:b5: 49:74:90:9a:f0:10:38:ca:2b:02:46:74:b2:1a:a0:c6:b6:64: c3:b5:7e:10:8a:19:4b:8c:5e:2a:77:69:ea:1a:25:2e:15:90: f6:c7:70:50:5a:b2:5d:8b:c2:be:15:d7:54:58:6d:16:14:c1: 07:75:2b:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM4MDYxMTAvBgNVBAUTKDk4NkU0MTY3RDZCMzgwN0Y0OUY3QzI2MDBENjBGOUMy NjA5QTcwOTYwHhcNMjUwOTEyMTg1ODI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0NmQ1MS0xNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+tauxBuGQfU1vS29rmVJEokZU58KJlfPmBuJ+8B3QjxbcOHRH1sdvwqTBMRM Q9nEP3+JOCmEepbcYxdJjbc469QaaDJ2OFL77mhYcZNPbJmBpP+C6jlt6VekT8HY o5I8dv6y2TpgBZPFU1219hhwjau1GL7zVcydcHa5HHQ6vIOq6PA+OKi+7wD51XF3 VOROPL2JhJDkygUx6ww/4KGP4Wx+3KDQuwH5cX+HYw41gDMF8AlJm9Xk928R8rmU WtaDnLLj4msYTxM5MwLM1TzOp9FLVM/PmXCmie6cDpIFhwSIONHDBHwmZZEPx9YF CaSoxp3SXDSgAjpkJQMUrceTQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHd2vyAx WyJ8KNcNFPR/4q66b2xuMB8GA1UdIwQYMBaAFJhuQWfWs4B/SffCYA1g+cJgmnCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzgwNi9CNDcyRkUyQTBC N0MxMUVBODA4M0U5MzZDNEY5QUUwMi9tRzVCWjlhemdIOUo5OEpnRFdENXdtQ2Fj SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21HNUJaOWF6Z0g5Sjk4SmdEV0Q1d21DYWNKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM4MDYvQjQ3MkZFMkEwQjdDMTFFQTgwODNFOTM2QzRGOUFFMDIvNEU1NEFBNEMw QjdFMTFFQTlEOEJBNDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnD+AwDQYJKoZIhvcNAQELBQADggEBAHeBiLnrMUFu+NsJ eNxaLUjPWuPeizSrLyaDyXy+nIg+NKCqPertx1eZIP7fAC28mP1NDbYpIMbUShiQ pld6r1SirvXgQOLBauT4qvlLZj9ASzsYxNBM7Ft0mVut8QIgrGqMLOxre/GxopxR mETvh/b3SGezN2CH5OFe/oZR8S/5P1AjCVoVSZhqMHFMGSm/RlQUJSQTScLUPX8N vLRdFNbp/jyQ+sSPeD1CQ5fhQx6h2fqw04pu6H3lt2OK0sK/88aksdHNtUl0kJrw EDjKKwJGdLIaoMa2ZMO1fhCKGUuMXip3aeoaJS4VkPbHcFBasl2Lwr4V11RYbRYU wQd1Kyk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:20 2025 by rpki-client