$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa File: 4034878C531411F0B5969F4DC4F9AE02.roa (raw, json) Hash identifier: v7IuFE0BzPTXRSJLbaCUBczf3498SLFTOxfRoorPtF0= Subject key identifier: 17:43:B7:E1:89:93:2E:BF:E6:74:0A:8E:6A:47:16:80:FF:9D:87:0C Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 013B Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa Signing time: Mon 03 Nov 2025 04:49:01 +0000 ROA not before: Mon 03 Nov 2025 04:49:01 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 9734 IP address blocks: 203.20.114.0/24 maxlen: 24 2001:df3:b540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Nov 3 04:49:01 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6908343c-385a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:49:de:5a:18:4e:85:33:ba:e8:c8:24:c2: af:51:86:cc:5c:86:86:d7:a1:0f:0b:b9:d0:2f:65: 72:be:19:09:2a:88:d1:0e:53:0f:74:94:e5:fb:6f: 1c:6f:55:ec:6b:5c:69:9d:f4:bd:36:7a:d3:bf:59: 14:be:e3:3d:56:f8:e4:9d:ba:00:d0:f7:b9:c1:4e: 7a:ea:ce:75:05:27:19:76:ce:20:0b:0f:96:f6:a6: 1c:b8:bb:27:3b:b8:fa:9f:0f:50:60:b8:5b:0b:14: f2:1c:08:4b:d3:6a:d7:1c:ff:9f:cd:98:b4:14:25: 32:cf:90:bb:a1:e6:70:0d:a7:fb:63:54:17:f2:6c: 4a:ba:c6:27:93:7e:06:a4:fc:52:35:d6:37:82:08: 9c:f3:6e:ca:11:d1:15:02:ce:b9:87:d4:74:82:44: 11:12:94:f6:d0:68:46:8c:23:c5:10:f1:64:0b:74: fa:d1:67:02:fc:ca:b9:d7:46:94:df:35:30:22:52: 45:ba:64:17:d8:b3:d2:8f:7c:8f:8e:e3:33:db:38: 5d:e6:6c:52:cd:ff:52:06:ee:af:51:9a:fd:f5:59: fa:e0:af:e2:66:f7:51:0e:76:c8:0d:3f:83:67:64: 74:ef:81:9c:52:53:33:1d:96:68:0c:db:f0:e9:75: 0d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:B7:E1:89:93:2E:BF:E6:74:0A:8E:6A:47:16:80:FF:9D:87:0C X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.114.0/24 IPv6: 2001:df3:b540::/48 Signature Algorithm: sha256WithRSAEncryption 88:d2:6b:78:4d:0f:e3:64:46:1e:2c:e6:ed:f0:15:da:1a:1e: af:8e:ab:02:c2:51:a0:fb:0f:8d:43:c9:0f:e2:8e:57:9b:de: 58:41:e6:b8:3a:42:d7:1c:0b:92:88:a2:2b:c9:44:1f:bd:cc: 6b:89:5c:a9:7f:b8:70:bd:4a:1b:58:ea:1f:6c:30:92:38:ce: 9b:7d:01:f6:25:d2:54:8b:89:49:52:97:02:60:95:b3:f5:22: 8f:61:68:0f:5d:42:8a:61:90:53:46:c0:1e:e6:9c:ef:cd:c1: 82:11:54:bb:6b:de:02:95:be:a3:88:95:3a:e3:95:6b:99:3f: 8b:9a:c5:6e:0c:13:7c:c2:ef:e3:49:ce:dc:d0:38:1d:6e:5f: dd:ea:67:54:0f:a3:7f:e4:74:32:e9:d0:b5:0b:db:80:ee:29: 92:6e:c8:36:cc:8e:ba:00:0b:fa:a0:d5:25:d1:f9:7c:31:83: b5:eb:60:b6:ad:3a:b3:cd:ca:35:ff:20:57:55:04:be:16:04: 9e:18:03:59:d9:3e:8c:cd:39:d9:bd:50:17:f9:69:a0:c3:5f: 39:20:00:1d:08:4a:ba:2b:7a:bd:8d:8f:30:04:c1:ce:a7:0d: e5:ef:16:1d:65:df:bf:10:02:75:89:c8:65:d1:b0:62:40:fc: 6a:61:23:d2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUxMTAzMDQ0OTAxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MzQzYy0zODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEhJ3loYToUzuujIJMKvUYbMXIaG16EPC7nQL2VyvhkJKojRDlMPdJTl+28c b1Xsa1xpnfS9NnrTv1kUvuM9VvjknboA0Pe5wU566s51BScZds4gCw+W9qYcuLsn O7j6nw9QYLhbCxTyHAhL02rXHP+fzZi0FCUyz5C7oeZwDaf7Y1QX8mxKusYnk34G pPxSNdY3ggic827KEdEVAs65h9R0gkQREpT20GhGjCPFEPFkC3T60WcC/Mq510aU 3zUwIlJFumQX2LPSj3yPjuMz2zhd5mxSzf9SBu6vUZr99Vn64K/iZvdRDnbIDT+D Z2R074GcUlMzHZZoDNvw6XUNfwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFBdDt+GJ ky6/5nQKjmpHFoD/nYcMMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0RkUvRDYxMTdERjZGNkU5MTFFRUFEQkZGQjUyQzRGOUFFMDIvNDAzNDg3OEM1 MzE0MTFGMEI1OTY5RjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLFHIwDwQCAAIwCQMHACABDfO1QDANBgkqhkiG9w0BAQsF AAOCAQEAiNJreE0P42RGHizm7fAV2hoer46rAsJRoPsPjUPJD+KOV5veWEHmuDpC 1xwLkoiiK8lEH73Ma4lcqX+4cL1KG1jqH2wwkjjOm30B9iXSVIuJSVKXAmCVs/Ui j2FoD11CimGQU0bAHuac783BghFUu2veApW+o4iVOuOVa5k/i5rFbgwTfMLv40nO 3NA4HW5f3epnVA+jf+R0MunQtQvbgO4pkm7INsyOugAL+qDVJdH5fDGDtetgtq06 s83KNf8gV1UEvhYEnhgDWdk+jM052b1QF/lpoMNfOSAAHQhKuit6vY2PMATBzqcN 5e8WHWXfvxACdYnIZdGwYkD8amEj0g== -----END CERTIFICATE-----Generated at Wed Nov 5 20:59:26 2025 by rpki-client