$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa File: 448983A8892D11EEB4AA276EC4F9AE02.roa (raw, json) Hash identifier: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U= Subject key identifier: 3C:D3:51:BC:40:A7:6A:F7:9D:68:5E:10:D6:31:72:F0:6B:ED:B6:D0 Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Certificate serial: 0120 Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa Signing time: Sat 31 May 2025 04:33:54 +0000 ROA not before: Sat 31 May 2025 04:33:54 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151325 IP address blocks: 103.254.91.0/24 maxlen: 24 2001:df2:6b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761 Validity Not Before: May 31 04:33:54 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=683a86b2-1529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:73:56:c9:e3:a5:da:fd:56:37:40:73:10:35: b0:64:db:2f:25:f9:9a:33:1f:a5:3f:0e:8f:c3:e5: 16:7d:da:69:f6:7e:ba:99:ad:60:ef:cb:87:89:c1: df:da:90:64:38:2a:fd:03:58:04:6f:e7:dc:b0:08: b8:aa:0d:42:f7:42:8e:8a:67:0e:a5:30:9d:ff:3a: 38:dd:ce:fa:bb:b2:0c:db:26:14:32:fa:c0:c4:93: ea:b7:29:96:93:58:33:02:9c:c8:ff:b7:15:25:ed: 53:3e:31:96:f0:49:f6:13:2c:5d:dc:8e:45:04:a6: 80:9d:3d:03:ce:bb:84:64:1f:a8:34:79:db:60:13: 74:7f:c7:48:ba:b0:4a:c1:be:3e:92:9e:b1:20:a0: 6b:9d:7c:4e:4e:23:4c:10:6d:b0:1f:e0:cf:fc:bc: e8:22:b9:34:df:19:c5:de:08:d9:e7:89:b6:57:51: d6:84:c5:bb:d7:b1:83:0f:cb:91:58:58:c7:b0:f8: 77:92:f1:6a:da:c5:59:5e:d3:55:63:54:ea:c2:2f: e0:72:6c:78:ff:12:0c:df:a2:b7:8c:d4:6e:b9:85: 30:0e:e7:a4:bb:3c:8b:1d:4c:c5:bd:5f:04:57:8d: f1:3c:e3:ce:27:26:38:9c:d1:7d:3c:d0:8a:12:66: 42:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:51:BC:40:A7:6A:F7:9D:68:5E:10:D6:31:72:F0:6B:ED:B6:D0 X509v3 Authority Key Identifier: keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/448983A8892D11EEB4AA276EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.254.91.0/24 IPv6: 2001:df2:6b40::/48 Signature Algorithm: sha256WithRSAEncryption a7:ca:94:ef:ad:78:9a:61:f7:32:e5:b3:fc:5a:d2:a6:30:c1: be:ba:e6:96:52:17:3c:33:8a:f2:d9:fe:2f:59:bb:f6:94:a4: 69:31:46:39:60:cd:f4:7a:c8:12:1b:30:61:a6:1e:fd:bc:d2: 5a:21:ab:87:bd:81:be:46:c9:b6:db:54:f1:bb:5f:92:27:ee: 5d:ad:d1:59:29:e0:e1:a0:06:93:a5:23:40:9d:5c:6a:70:33: fa:41:db:b9:80:4c:e9:7e:36:4e:f3:95:76:af:b7:a9:3d:71: 37:a2:dc:0f:8b:9f:aa:e7:b1:0f:46:eb:71:f1:7e:57:50:b2: 92:61:6a:91:2b:74:18:da:f9:0b:dc:78:83:52:d9:6c:d5:db: 60:09:94:d9:d4:d1:31:82:65:e8:14:86:b9:56:3a:3d:47:72: d2:8b:49:8f:ed:5e:55:0f:92:6c:2b:92:a6:50:0b:f2:30:3e: 95:59:0f:c0:5f:c5:8f:d4:55:9e:9b:5c:4d:6e:a2:f1:10:df: 15:88:df:df:4f:3c:3b:ce:61:43:c1:59:f4:8d:d6:3e:e0:51: 50:a1:b2:70:f4:9f:21:48:15:f8:80:c1:3e:d7:a3:49:9e:ce: 16:fa:23:49:d9:0f:5a:5e:e4:3f:a6:4b:42:2c:a8:e3:05:a9: 9a:87:e7:3d -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk1OTExMTAvBgNVBAUTKDlBRDM0OUY0NTQ4NTNCQjE4OTJBRkVGNjA0OEMxODcy NTgwNTc3NjEwHhcNMjUwNTMxMDQzMzU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNhODZiMi0xNTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnNWyeOl2v1WN0BzEDWwZNsvJfmaMx+lPw6Pw+UWfdpp9n66ma1g78uHicHf 2pBkOCr9A1gEb+fcsAi4qg1C90KOimcOpTCd/zo43c76u7IM2yYUMvrAxJPqtymW k1gzApzI/7cVJe1TPjGW8En2Eyxd3I5FBKaAnT0DzruEZB+oNHnbYBN0f8dIurBK wb4+kp6xIKBrnXxOTiNMEG2wH+DP/LzoIrk03xnF3gjZ54m2V1HWhMW717GDD8uR WFjHsPh3kvFq2sVZXtNVY1Tqwi/gcmx4/xIM36K3jNRuuYUwDuekuzyLHUzFvV8E V43xPOPOJyY4nNF9PNCKEmZCaQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDzTUbxA p2r3nWheENYxcvBr7bbQMB8GA1UdIwQYMBaAFJrTSfRUhTuxiSr+9gSMGHJYBXdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTU5MS9ERUQ4MzU2ODg5 MkMxMUVFOTQ3NzgxNkRDNEY5QUUwMi9tdE5KOUZTRk83R0pLdjcyQkl3WWNsZ0Zk MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL210Tko5RlNGTzdHSkt2NzJCSXdZY2xnRmQyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk1OTEvREVEODM1Njg4OTJDMTFFRTk0Nzc4MTZEQzRGOUFFMDIvNDQ4OTgzQTg4 OTJEMTFFRUI0QUEyNzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABn/lswDwQCAAIwCQMHACABDfJrQDANBgkqhkiG9w0BAQsF AAOCAQEAp8qU7614mmH3MuWz/FrSpjDBvrrmllIXPDOK8tn+L1m79pSkaTFGOWDN 9HrIEhswYaYe/bzSWiGrh72BvkbJtttU8btfkifuXa3RWSng4aAGk6UjQJ1canAz +kHbuYBM6X42TvOVdq+3qT1xN6LcD4ufquexD0brcfF+V1CykmFqkSt0GNr5C9x4 g1LZbNXbYAmU2dTRMYJl6BSGuVY6PUdy0otJj+1eVQ+SbCuSplAL8jA+lVkPwF/F j9RVnptcTW6i8RDfFYjf3088O85hQ8FZ9I3WPuBRUKGycPSfIUgV+IDBPtejSZ7O FvojSdkPWl7kP6ZLQiyo4wWpmofnPQ== -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:27 2025 by rpki-client