$ rpki-client -vvf rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/5541D6A21F9A11EE9BB7905DC4F9AE02.roa File: 5541D6A21F9A11EE9BB7905DC4F9AE02.roa (raw, json) Hash identifier: xKdkCB2h23p2t0hwohlQLPhMtE2tKQRuZAO7jjr5JQo= Subject key identifier: 57:81:0A:B1:99:3F:16:62:C6:EE:71:07:7B:86:25:73:32:56:DA:39 Certificate issuer: /CN=A91F583B/serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Certificate serial: 01A9 Authority key identifier: CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/5541D6A21F9A11EE9BB7905DC4F9AE02.roa Signing time: Mon 29 Sep 2025 02:30:30 +0000 ROA not before: Mon 29 Sep 2025 02:30:30 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151491 IP address blocks: 103.239.105.0/24 maxlen: 24 203.9.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F583B, serialNumber=CA7CEEF918807E671B1624E63AB6F68103DFD5E3 Validity Not Before: Sep 29 02:30:30 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d9ef46-bad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:3f:16:99:4a:65:d0:71:79:d6:20:18:ec: 19:21:84:82:b8:a6:7d:0a:d7:23:3a:6e:9b:c3:74: 98:55:2f:1d:c1:7f:29:23:d5:03:15:97:9b:ea:88: 95:12:21:af:1e:fb:51:05:d9:a1:88:96:65:bd:15: 1b:17:e9:e7:99:56:e4:b8:9f:3f:9f:3d:6f:71:fb: c9:5b:27:c2:7f:f4:98:2d:25:a6:f3:74:6c:31:29: 1d:29:36:a3:ad:35:dd:c6:59:ee:70:3f:8b:df:c4: 47:39:4b:0d:a4:f2:97:ec:83:da:a2:18:79:60:42: 75:b7:03:b2:56:99:d3:10:03:c7:1d:6c:6f:3e:5c: 33:94:c3:b1:ae:fe:07:1a:f9:11:f4:f0:61:c4:d1: e9:44:9c:34:dd:a5:e2:25:5e:c2:4a:9f:d3:33:93: 21:bb:97:13:c7:d3:3e:64:a3:37:61:03:ee:e6:1e: e7:b6:ac:9b:64:2b:8d:4f:52:af:99:2e:28:10:2a: c0:1c:c9:a6:cf:94:76:b8:6c:8e:26:34:f6:71:47: c8:a0:a9:e0:49:32:c1:1b:21:78:47:ce:f9:f5:df: d4:a2:15:ab:6d:ff:c5:a0:e8:16:dc:fd:83:d9:b6: fe:fa:65:85:d9:63:ba:87:65:f0:f8:b2:e4:30:c4: 31:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:81:0A:B1:99:3F:16:62:C6:EE:71:07:7B:86:25:73:32:56:DA:39 X509v3 Authority Key Identifier: keyid:CA:7C:EE:F9:18:80:7E:67:1B:16:24:E6:3A:B6:F6:81:03:DF:D5:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/ynzu-RiAfmcbFiTmOrb2gQPf1eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynzu-RiAfmcbFiTmOrb2gQPf1eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F583B/5AF0419C1BE411EE9B8FAB53C4F9AE02/5541D6A21F9A11EE9BB7905DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.239.105.0/24 203.9.219.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b3:3f:fe:84:ae:33:47:be:68:a5:0b:6f:43:f2:8d:b3:c1: 5b:22:e0:38:43:d0:f0:32:4b:5b:a2:c3:d5:90:ac:89:3f:cc: ce:00:79:fb:19:b1:82:40:3e:86:62:83:a9:85:cc:42:f8:70: a1:74:e9:41:a0:91:f3:c9:c4:2a:62:8c:2b:d2:8f:46:79:7d: c2:7d:64:0a:98:3e:23:3b:43:4e:cf:03:ef:9e:56:f5:33:62: 40:10:5c:cf:61:99:71:9b:21:34:2e:25:c8:ec:de:ef:4e:b7: f0:aa:a1:38:4f:34:2c:73:58:93:14:79:e0:59:d6:89:44:e3: 7a:80:5f:d5:7f:00:74:5a:a1:7b:99:4a:61:0f:f5:18:a8:e5: 83:c8:99:ef:7e:9e:19:45:c1:e6:9a:60:9f:82:4e:fd:81:68: 75:6f:85:ad:8f:ca:a9:e8:bb:5c:12:99:d8:9b:42:9b:08:fe: 36:4f:f3:c9:5e:de:a0:ab:8d:43:89:20:12:7b:2f:4e:eb:9c: 13:fd:f1:00:dc:ff:ba:86:b3:ee:2e:c4:77:21:c8:02:2c:03: dd:81:cb:10:5f:f1:4c:d5:2e:4f:b5:18:db:1b:d6:51:07:75: 4f:45:ac:a0:08:1f:c3:fc:7a:a3:ee:7e:ae:88:bb:18:c4:8b: 5c:e6:60:ee -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4M0IxMTAvBgNVBAUTKENBN0NFRUY5MTg4MDdFNjcxQjE2MjRFNjNBQjZGNjgx MDNERkQ1RTMwHhcNMjUwOTI5MDIzMDMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQ5ZWY0Ni1iYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/g/FplKZdBxedYgGOwZIYSCuKZ9CtcjOm6bw3SYVS8dwX8pI9UDFZeb6oiV EiGvHvtRBdmhiJZlvRUbF+nnmVbkuJ8/nz1vcfvJWyfCf/SYLSWm83RsMSkdKTaj rTXdxlnucD+L38RHOUsNpPKX7IPaohh5YEJ1twOyVpnTEAPHHWxvPlwzlMOxrv4H GvkR9PBhxNHpRJw03aXiJV7CSp/TM5Mhu5cTx9M+ZKM3YQPu5h7ntqybZCuNT1Kv mS4oECrAHMmmz5R2uGyOJjT2cUfIoKngSTLBGyF4R8759d/UohWrbf/FoOgW3P2D 2bb++mWF2WO6h2Xw+LLkMMQx6QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFeBCrGZ PxZixu5xB3uGJXMyVto5MB8GA1UdIwQYMBaAFMp87vkYgH5nGxYk5jq29oED39Xj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgzQi81QUYwNDE5QzFC RTQxMUVFOUI4RkFCNTNDNEY5QUUwMi95bnp1LVJpQWZtY2JGaVRtT3JiMmdRUGYx ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3luenUtUmlBZm1jYkZpVG1PcmIyZ1FQZjFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4M0IvNUFGMDQxOUMxQkU0MTFFRTlCOEZBQjUzQzRGOUFFMDIvNTU0MUQ2QTIx RjlBMTFFRTlCQjc5MDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABn72kDBADLCdswDQYJKoZIhvcNAQELBQADggEBADizP/6E rjNHvmilC29D8o2zwVsi4DhD0PAyS1uiw9WQrIk/zM4AefsZsYJAPoZig6mFzEL4 cKF06UGgkfPJxCpijCvSj0Z5fcJ9ZAqYPiM7Q07PA++eVvUzYkAQXM9hmXGbITQu Jcjs3u9Ot/CqoThPNCxzWJMUeeBZ1olE43qAX9V/AHRaoXuZSmEP9Rio5YPIme9+ nhlFweaaYJ+CTv2BaHVvha2Pyqnou1wSmdibQpsI/jZP88le3qCrjUOJIBJ7L07r nBP98QDc/7qGs+4uxHchyAIsA92ByxBf8UzVLk+1GNsb1lEHdU9FrKAIH8P8eqPu fq6IuxjEi1zmYO4= -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:24 2025 by rpki-client