$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa File: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (raw, json) Hash identifier: pAtkMYoP9pyBPl/xXuNkKMm/3mhUwbxuTSTQt0etagU= Subject key identifier: CD:1B:4D:DD:CC:54:E9:12:E4:2F:2B:66:32:21:A0:2A:26:4B:F9:81 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 0822 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa Signing time: Wed 02 Jul 2025 21:30:09 +0000 ROA not before: Wed 02 Jul 2025 21:30:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140924 IP address blocks: 103.152.78.0/24 maxlen: 24 2001:df3:ff80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Jul 2 21:30:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6865a4e1-e47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:48:f2:dc:90:68:47:c7:eb:d8:95:a4:5e:64: 9d:f1:c2:5c:c7:09:c6:eb:0f:02:3b:8c:31:f7:fa: 86:8f:bc:55:55:db:8f:10:a2:f0:d6:8c:c6:e8:3f: 0e:4a:2a:cb:77:37:37:7d:16:ca:50:c9:f7:0f:49: de:ec:12:35:62:44:71:ec:6f:4b:bf:23:df:e3:b1: 28:bd:65:d6:e0:11:31:d6:95:be:a6:c6:80:1b:a3: 8c:77:35:71:cb:02:86:da:0e:9c:77:6d:4c:b7:b3: 69:f2:89:39:04:6f:cd:b9:23:fe:5f:24:ad:ad:ab: e0:8a:62:56:6f:d4:7d:3c:78:e9:43:c8:45:b0:58: be:3f:24:dc:b9:47:cb:fd:97:c6:c4:60:bf:47:6c: b6:5f:68:33:42:da:7a:bb:e4:7b:02:66:3e:cf:df: 4b:8f:95:90:2b:49:cb:a9:df:9a:30:2f:7c:7b:44: 40:b7:c3:ab:51:ac:7e:7e:2d:04:09:8e:ab:49:6c: 18:63:0f:d2:3c:a3:8f:34:48:85:24:93:e5:0a:72: 03:18:65:42:4a:12:cd:8b:b8:38:3a:05:d3:7c:87: 57:3c:9f:02:f6:26:0d:83:34:0e:f5:31:43:9e:41: b4:50:69:d9:de:b9:c1:06:fb:46:cd:a1:52:29:e0: fc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1B:4D:DD:CC:54:E9:12:E4:2F:2B:66:32:21:A0:2A:26:4B:F9:81 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.78.0/24 IPv6: 2001:df3:ff80::/48 Signature Algorithm: sha256WithRSAEncryption 42:05:66:2e:53:f2:c2:04:0d:39:95:49:d2:45:5a:3c:1a:b1: 07:4d:6c:80:26:13:87:31:0d:d0:ae:07:45:80:8b:1c:4d:27: ca:ed:32:93:14:98:f1:f1:a9:52:28:73:57:ac:3d:44:86:00: b6:db:78:0b:e3:3c:69:bd:50:34:61:9c:07:a0:a4:ee:b5:fe: 9a:a2:99:66:2e:9c:7b:cb:3e:fe:3f:4a:14:5b:91:3e:b5:97: 88:86:46:0e:46:98:42:4f:2d:57:87:6c:01:c6:fe:97:84:7c: ac:7d:67:ba:4d:f5:a1:a1:58:31:19:d9:17:2d:8d:62:4b:7b: 68:52:de:b5:71:44:ab:b4:f2:b8:4f:2c:33:1b:4f:9f:2a:ef: d3:4c:a5:80:d7:e2:df:30:08:cf:5e:d1:a6:84:22:2f:19:85: 46:9a:cf:a8:a8:88:5a:ef:ba:a9:98:1a:3f:6c:98:b1:59:0d: 46:02:90:87:7e:03:75:01:af:14:8d:50:c1:91:59:04:7c:83: d1:15:49:44:bf:b0:98:24:d8:2f:8e:44:61:d0:3d:34:f9:62: 07:bf:85:4b:61:3b:22:99:f9:57:80:37:ce:bf:64:95:4d:b0: fa:e9:08:18:46:76:62:54:86:d6:25:b1:01:04:7c:b7:92:6e: 37:36:a7:72 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwNzAyMjEzMDA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1YTRlMS1lNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Ejy3JBoR8fr2JWkXmSd8cJcxwnG6w8CO4wx9/qGj7xVVduPEKLw1ozG6D8O SirLdzc3fRbKUMn3D0ne7BI1YkRx7G9LvyPf47EovWXW4BEx1pW+psaAG6OMdzVx ywKG2g6cd21Mt7Np8ok5BG/NuSP+XyStravgimJWb9R9PHjpQ8hFsFi+PyTcuUfL /ZfGxGC/R2y2X2gzQtp6u+R7AmY+z99Lj5WQK0nLqd+aMC98e0RAt8OrUax+fi0E CY6rSWwYYw/SPKOPNEiFJJPlCnIDGGVCShLNi7g4OgXTfIdXPJ8C9iYNgzQO9TFD nkG0UGnZ3rnBBvtGzaFSKeD89QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM0bTd3M VOkS5C8rZjIhoComS/mBMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1NDMvNTdFRjlGNkNERDFBMTFFQThBNDM5RjEzQzRGOUFFMDIvQjNDNDFBNjBE RDFCMTFFQUFDOUEwOTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnmE4wDwQCAAIwCQMHACABDfP/gDANBgkqhkiG9w0BAQsF AAOCAQEAQgVmLlPywgQNOZVJ0kVaPBqxB01sgCYThzEN0K4HRYCLHE0nyu0ykxSY 8fGpUihzV6w9RIYAttt4C+M8ab1QNGGcB6Ck7rX+mqKZZi6ce8s+/j9KFFuRPrWX iIZGDkaYQk8tV4dsAcb+l4R8rH1nuk31oaFYMRnZFy2NYkt7aFLetXFEq7TyuE8s MxtPnyrv00ylgNfi3zAIz17RpoQiLxmFRprPqKiIWu+6qZgaP2yYsVkNRgKQh34D dQGvFI1QwZFZBHyD0RVJRL+wmCTYL45EYdA9NPliB7+FS2E7Ipn5V4A3zr9klU2w +ukIGEZ2YlSG1iWxAQR8t5JuNzancg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:25 2025 by rpki-client