$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa File: C416FBB02D6F11EEAC755B42C4F9AE02.roa (raw, json) Hash identifier: 8GoJZpCZ9P4ckdBt/ZtHhmXHWFZw1X3kEDMJv2TH3VQ= Subject key identifier: AA:5A:3D:05:B0:02:9D:D2:0C:89:21:20:EB:65:08:15:E2:10:77:3E Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 0199 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa Signing time: Sat 13 Sep 2025 03:39:54 +0000 ROA not before: Sat 13 Sep 2025 03:39:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151632 IP address blocks: 103.243.234.0/23 maxlen: 23 103.243.234.0/24 maxlen: 24 103.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F, serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: Sep 13 03:39:54 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68c4e789-5a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:87:0e:bb:a5:50:7e:5e:03:7a:a0:7c:a0:66: 75:b4:e2:01:a8:ff:fb:72:b3:d5:d5:2e:6c:2c:d3: ae:d7:8b:8b:01:fa:56:90:85:49:ac:7b:47:fc:83: fe:96:f1:4f:a4:ce:a3:b4:54:5e:1c:49:f3:a0:16: ac:94:72:44:b4:59:76:dc:03:86:ff:13:0a:59:c7: ca:ef:06:33:73:b7:f1:64:c0:c3:7b:a5:88:54:6e: 95:5b:d4:5c:da:b1:1e:a2:c9:f8:5e:04:d7:f2:cf: 07:96:b6:21:2e:63:48:36:ce:e5:35:53:f0:dc:a7: 8b:fe:84:66:6f:bc:51:5e:47:e6:f4:a0:6a:87:47: 7c:ae:28:38:40:8a:f8:e1:4a:e8:5a:4a:3b:6a:15: c8:f1:d6:ad:fe:87:4a:2d:d7:90:1a:cf:d0:14:89: 74:01:f1:30:bd:cd:ca:ec:09:57:8c:0a:73:d7:ab: 8c:fd:af:5c:d2:d2:31:81:4e:44:9b:54:e6:4e:37: 04:1f:98:ce:17:2e:b4:9b:cd:4e:bc:a6:af:01:31: 45:fc:de:9b:b1:94:23:7f:89:82:4e:83:d3:b9:ca: de:54:84:61:8e:73:50:69:9a:38:7a:23:9f:78:4e: 60:76:c1:4d:15:1b:38:e5:e9:42:a2:b2:6d:d5:97: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5A:3D:05:B0:02:9D:D2:0C:89:21:20:EB:65:08:15:E2:10:77:3E X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/C416FBB02D6F11EEAC755B42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.234.0/23 Signature Algorithm: sha256WithRSAEncryption 59:8e:cd:2e:cc:3b:5b:1c:7c:f3:fc:67:51:64:a5:34:dc:b5: 15:fc:41:69:67:14:cb:20:25:15:8a:e9:eb:e6:a9:a4:e2:17: fa:93:19:e1:f7:52:ad:1c:d8:3b:c8:69:22:80:63:21:4e:15: 3b:bb:3d:ea:4a:3a:c8:aa:ca:dd:6a:a4:f2:87:db:b1:a6:05: e6:e7:a5:f4:33:fd:cd:35:81:36:6d:87:f5:8e:e1:e4:82:8c: 9a:44:e2:3f:a6:fd:12:50:da:93:a8:34:04:ae:6f:1e:4f:c7: a1:56:a6:a6:b9:04:08:5b:be:8e:04:7e:c0:4d:a8:7c:30:95: 28:b0:5d:9a:0c:6d:a2:b5:99:18:49:4c:a9:da:d5:ad:db:3e: 3f:52:ea:23:a4:ab:63:f0:36:c1:84:9c:bc:82:d4:54:36:19: f6:39:a3:a8:85:d4:b9:ed:09:03:60:cb:7b:5c:2e:d9:70:55: 3e:0a:ac:dd:ef:01:75:38:0b:10:46:1a:e9:c7:e4:8f:74:6a: 43:47:ae:b4:bf:00:de:71:ce:34:ad:69:b3:a3:9c:36:21:6d: a2:41:e7:60:98:1e:b2:97:1d:ba:69:43:61:b9:ce:8e:1e:30: 16:04:3a:62:24:45:4d:1b:7d:26:ee:15:82:aa:8a:84:f4:b7: 9a:8b:39:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjUwOTEzMDMzOTU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM0ZTc4OS01YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ocOu6VQfl4DeqB8oGZ1tOIBqP/7crPV1S5sLNOu14uLAfpWkIVJrHtH/IP+ lvFPpM6jtFReHEnzoBaslHJEtFl23AOG/xMKWcfK7wYzc7fxZMDDe6WIVG6VW9Rc 2rEeosn4XgTX8s8HlrYhLmNINs7lNVPw3KeL/oRmb7xRXkfm9KBqh0d8rig4QIr4 4UroWko7ahXI8dat/odKLdeQGs/QFIl0AfEwvc3K7AlXjApz16uM/a9c0tIxgU5E m1TmTjcEH5jOFy60m81OvKavATFF/N6bsZQjf4mCToPTucreVIRhjnNQaZo4eiOf eE5gdsFNFRs45elCorJt1ZdyUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKpaPQWw Ap3SDIkhIOtlCBXiEHc+MB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ3M0YvMUQxN0VEQjQyQjkwMTFFRThCNURFNDcwQzRGOUFFMDIvQzQxNkZCQjAy RDZGMTFFRUFDNzU1QjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn8+owDQYJKoZIhvcNAQELBQADggEBAFmOzS7MO1scfPP8 Z1FkpTTctRX8QWlnFMsgJRWK6evmqaTiF/qTGeH3Uq0c2DvIaSKAYyFOFTu7PepK Osiqyt1qpPKH27GmBebnpfQz/c01gTZth/WO4eSCjJpE4j+m/RJQ2pOoNASubx5P x6FWpqa5BAhbvo4EfsBNqHwwlSiwXZoMbaK1mRhJTKna1a3bPj9S6iOkq2PwNsGE nLyC1FQ2GfY5o6iF1LntCQNgy3tcLtlwVT4KrN3vAXU4CxBGGunH5I90akNHrrS/ AN5xzjStabOjnDYhbaJB52CYHrKXHbppQ2G5zo4eMBYEOmIkRU0bfSbuFYKqioT0 t5qLOYA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:31 2025 by rpki-client