$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa File: 13C88472A8C311EC8F560C42C4F9AE02.roa (raw, json) Hash identifier: vyv0rYAYQC0Q3K3KC5OhHZgXLu7M3jJRYoDyg5ENLSU= Subject key identifier: 99:02:D5:5C:4B:F5:A1:0B:BB:76:79:AB:B0:38:5E:26:E9:00:0E:A1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CBB Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:26 +0000 ROA not before: Thu 28 Aug 2025 14:52:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131367 IP address blocks: 45.118.148.0/22 maxlen: 24 103.20.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19643 (0x4cbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d29-9651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:03:66:1a:47:cc:d7:59:f3:7c:d7:22:35: a9:f2:55:1a:2c:8f:90:e0:aa:db:a6:64:00:24:8a: 1d:05:40:be:a6:55:6b:27:8b:a6:3e:09:d6:4b:c8: a7:29:8b:17:c3:78:29:69:49:cd:a1:eb:da:ef:f8: 4b:90:0f:1a:34:6b:49:f2:75:6c:77:3f:4e:4e:ca: 08:38:ba:b3:d1:8b:f4:5e:e1:27:04:89:48:50:ca: f3:d5:c2:5d:30:07:d0:f9:b0:0c:6d:86:ab:96:a0: e2:a5:b5:b0:f2:94:31:06:59:4e:88:15:29:b7:3a: 5d:64:c3:49:e0:a9:11:b3:9d:51:e0:dd:ec:1f:e6: 29:98:e8:a9:e3:53:d8:bf:42:03:98:92:ad:6f:0a: ab:dc:52:4b:36:f1:3f:6b:0e:9a:85:21:4f:2a:83: fa:99:d5:bc:b1:89:b3:97:12:e5:6e:30:21:f7:fb: 35:7c:fa:24:9d:1e:bc:55:b4:30:56:85:e1:da:44: e9:b8:14:8e:00:46:1a:96:5b:ac:b9:37:2f:a5:fe: 94:80:e7:07:22:80:33:88:96:40:2a:b1:19:9a:22: 9b:b8:6f:10:7d:00:c9:84:01:f0:01:6b:a5:a9:9f: a4:a7:86:0c:c3:e6:4d:28:d9:c4:2f:46:4a:4b:4f: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:02:D5:5C:4B:F5:A1:0B:BB:76:79:AB:B0:38:5E:26:E9:00:0E:A1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/13C88472A8C311EC8F560C42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.148.0/22 103.20.148.0/22 Signature Algorithm: sha256WithRSAEncryption 96:96:f7:c2:8d:79:1e:55:b5:74:ec:db:a8:b4:48:76:ad:36: 07:00:6d:dd:bc:11:00:8a:5a:2f:83:a9:00:5e:0a:d2:49:be: d4:06:04:e5:0e:0c:23:b0:24:ff:75:87:c7:11:89:35:27:cf: 31:61:ed:65:3e:54:05:04:9d:c5:77:12:98:88:ef:15:66:a6: 03:6a:f0:2f:d9:5b:21:4a:ff:86:58:9c:cb:39:ef:4e:bc:93: 49:af:af:25:11:59:6d:00:9b:5a:a5:c8:49:f0:bc:68:3c:4f: 72:72:e7:41:03:cd:02:17:ba:33:45:05:6f:aa:4d:ef:d3:6a: c7:b2:59:70:3c:bd:3d:35:06:6c:9e:f0:08:69:05:a3:a0:cf: 5a:69:dc:ae:93:6f:35:de:97:60:e0:d0:fe:9e:f6:d0:ee:ee: 37:74:be:e2:7c:77:56:a9:ec:60:79:0a:f0:c6:55:ca:bd:6f: 72:28:6e:25:2f:6d:42:8f:bf:f4:94:37:39:55:bb:28:cb:64: d4:0c:06:48:0d:f7:62:be:fe:8f:ed:89:0c:10:8d:b7:cd:97: 2a:2a:f1:1c:2c:15:5a:e8:67:f8:d3:f2:ef:25:98:87:e4:db: 3d:8f:50:99:22:2d:8a:2e:f2:92:d7:32:eb:c2:90:f5:7f:bb: 8e:e7:cd:b0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICTLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQyOS05NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuSADZhpHzNdZ83zXIjWp8lUaLI+Q4KrbpmQAJIodBUC+plVrJ4umPgnWS8in KYsXw3gpaUnNoeva7/hLkA8aNGtJ8nVsdz9OTsoIOLqz0Yv0XuEnBIlIUMrz1cJd MAfQ+bAMbYarlqDipbWw8pQxBllOiBUptzpdZMNJ4KkRs51R4N3sH+YpmOip41PY v0IDmJKtbwqr3FJLNvE/aw6ahSFPKoP6mdW8sYmzlxLlbjAh9/s1fPoknR68VbQw VoXh2kTpuBSOAEYallusuTcvpf6UgOcHIoAziJZAKrEZmiKbuG8QfQDJhAHwAWul qZ+kp4YMw+ZNKNnEL0ZKS0+9hwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJkC1VxL 9aELu3Z5q7A4XibpAA6hMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTNDODg0NzJB OEMzMTFFQzhGNTYwQzQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItdpQDBAJnFJQwDQYJKoZIhvcNAQELBQADggEBAJaW98KN eR5VtXTs26i0SHatNgcAbd28EQCKWi+DqQBeCtJJvtQGBOUODCOwJP91h8cRiTUn zzFh7WU+VAUEncV3EpiI7xVmpgNq8C/ZWyFK/4ZYnMs57068k0mvryURWW0Am1ql yEnwvGg8T3Jy50EDzQIXujNFBW+qTe/TaseyWXA8vT01Bmye8AhpBaOgz1pp3K6T bzXel2Dg0P6e9tDu7jd0vuJ8d1ap7GB5CvDGVcq9b3IobiUvbUKPv/SUNzlVuyjL ZNQMBkgN92K+/o/tiQwQjbfNlyoq8RwsFVroZ/jT8u8lmIfk2z2PUJkiLYou8pLX MuvCkPV/u47nzbA= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:49 2025 by rpki-client