$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/D875D57EF30611EEAFFC0C66C4F9AE02.roa File: D875D57EF30611EEAFFC0C66C4F9AE02.roa (raw, json) Hash identifier: qatvyS4SyJTNURVM2FsClClDPfP+4FEBMIeJZ8wIqMA= Subject key identifier: C5:E1:76:94:F7:16:88:90:B7:01:3B:D3:9F:15:A9:0A:28:F7:F1:3C Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 0189 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/D875D57EF30611EEAFFC0C66C4F9AE02.roa Signing time: Tue 07 Oct 2025 04:01:22 +0000 ROA not before: Tue 07 Oct 2025 04:01:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138311 IP address blocks: 103.6.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Oct 7 04:01:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68e49091-561d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:2e:20:c0:5b:d5:8d:c9:bb:4e:f1:9a:a0: 95:01:e4:85:0c:88:97:09:62:bb:01:fd:d7:8d:89: 83:7e:e2:d2:97:0d:c8:00:23:4e:56:28:fc:d8:b6: cd:17:48:5f:9f:d3:56:3d:1f:b8:ec:a7:fd:7d:f4: 55:9e:bf:ef:16:e2:07:6a:0f:9b:80:c5:e4:0a:a3: 6e:c6:a8:e4:5d:90:2b:9a:8c:25:82:b2:64:fa:bd: 50:71:2f:77:49:13:55:a7:6c:96:3e:83:65:36:dc: 08:9f:ed:cb:f1:03:3e:4f:1c:38:54:93:78:56:29: 45:48:ff:ae:2b:28:a0:22:cb:e0:a0:10:ce:a0:15: 7f:2f:bb:5a:65:4c:0b:78:75:ff:32:80:8a:90:7f: 6c:7e:7d:1d:a9:04:fe:73:b4:c9:ae:5e:7a:ac:81: 26:42:32:58:85:24:4c:0a:90:6d:9e:41:59:4e:ab: 4f:7d:46:3d:bb:4c:62:57:0f:69:54:07:2d:fd:35: 0f:17:c1:c2:56:f8:d0:2b:95:0a:05:e8:af:57:e1: 34:8f:5c:ce:fa:92:9a:c3:1e:40:67:48:5f:30:5a: b2:09:b4:7d:35:74:cd:c3:dc:a3:51:b8:06:45:f8: cb:a2:e3:fe:6d:1a:a8:3b:63:fa:c6:56:d2:71:17: 71:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E1:76:94:F7:16:88:90:B7:01:3B:D3:9F:15:A9:0A:28:F7:F1:3C X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/D875D57EF30611EEAFFC0C66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.120.0/23 Signature Algorithm: sha256WithRSAEncryption c7:b7:f3:ae:67:d2:f2:e6:ed:87:22:12:a9:e0:d3:ad:8d:9d: 1c:4e:d0:22:39:c0:9b:80:19:b3:1a:6a:8a:89:7f:50:df:ea: ba:70:ef:57:65:b9:ce:fc:98:00:dd:ec:1e:36:09:a2:2f:f1: 56:f4:38:ee:a7:48:50:bf:ae:76:d1:2f:cd:bf:67:48:86:02: 07:88:c1:93:f5:5a:aa:86:8f:fe:54:86:88:ed:11:69:fe:23: 86:f8:7c:63:4e:26:5a:26:37:3f:f9:d2:f6:5b:f8:0f:d7:02: 98:b6:d8:80:fa:10:65:54:dc:aa:28:bc:f0:e7:a0:dc:2a:85: f7:cb:b9:0d:38:65:71:bf:6b:06:70:a6:e3:41:b6:23:3f:48: a5:8a:80:0c:2f:e8:9d:7f:e8:b5:ca:76:fa:5a:98:16:f1:56: 25:71:be:34:37:b8:fb:11:f9:5c:d9:32:b1:38:58:f3:2d:ea: 4c:31:a3:fd:ea:98:b5:31:44:12:13:e4:5e:85:81:0a:d6:56: 12:7c:10:1b:7d:44:d4:b0:da:ca:e3:e6:9a:3b:22:de:42:f7: e6:c3:5c:3c:86:c7:d6:86:51:e1:43:72:89:bb:8d:2f:e4:85: f7:7e:9a:7d:bd:04:98:1b:f5:2b:66:bd:af:1c:35:67:95:08: 3d:15:e2:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjUxMDA3MDQwMTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU0OTA5MS01NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQUuIMBb1Y3Ju07xmqCVAeSFDIiXCWK7Af3XjYmDfuLSlw3IACNOVij82LbN F0hfn9NWPR+47Kf9ffRVnr/vFuIHag+bgMXkCqNuxqjkXZArmowlgrJk+r1QcS93 SRNVp2yWPoNlNtwIn+3L8QM+Txw4VJN4VilFSP+uKyigIsvgoBDOoBV/L7taZUwL eHX/MoCKkH9sfn0dqQT+c7TJrl56rIEmQjJYhSRMCpBtnkFZTqtPfUY9u0xiVw9p VAct/TUPF8HCVvjQK5UKBeivV+E0j1zO+pKawx5AZ0hfMFqyCbR9NXTNw9yjUbgG RfjLouP+bRqoO2P6xlbScRdxswIDAQABo4IClTCCApEwHQYDVR0OBBYEFMXhdpT3 FoiQtwE7058VqQoo9/E8MB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRCM0YvMUNERjg3RTQ1MTYwMTFFRUIwQTU4MjZBQzRGOUFFMDIvRDg3NUQ1N0VG MzA2MTFFRUFGRkMwQzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnBngwDQYJKoZIhvcNAQELBQADggEBAMe3865n0vLm7Yci Eqng062NnRxO0CI5wJuAGbMaaoqJf1Df6rpw71dluc78mADd7B42CaIv8Vb0OO6n SFC/rnbRL82/Z0iGAgeIwZP1WqqGj/5UhojtEWn+I4b4fGNOJlomNz/50vZb+A/X Api22ID6EGVU3KoovPDnoNwqhffLuQ04ZXG/awZwpuNBtiM/SKWKgAwv6J1/6LXK dvpamBbxViVxvjQ3uPsR+VzZMrE4WPMt6kwxo/3qmLUxRBIT5F6FgQrWVhJ8EBt9 RNSw2srj5po7It5C9+bDXDyGx9aGUeFDcom7jS/khfd+mn29BJgb9Stmva8cNWeV CD0V4m8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:46 2025 by rpki-client