$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa File: 37F88500B23311EF8B03B736C4F9AE02.roa (raw, json) Hash identifier: tscltTd0sR4zLGQ5sKNuNgRSBnkAC+kCV9IJZj2rI6s= Subject key identifier: 75:09:38:44:C5:10:6E:A2:04:0E:0A:25:36:C4:2C:90:92:1D:B2:96 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4E95 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa Signing time: Wed 24 Sep 2025 09:03:35 +0000 ROA not before: Wed 24 Sep 2025 09:03:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150859 IP address blocks: 103.236.174.0/23 maxlen: 23 2001:df3:e8c0::/48 maxlen: 48 2001:df4:1cc0::/48 maxlen: 48 2401:9320::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20117 (0x4e95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 24 09:03:35 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68d3b3e7-e9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:41:22:d6:c6:1e:70:a6:7d:f4:67:ee:a5: 68:eb:54:65:42:f7:d8:0c:d9:56:d0:b9:92:df:36: 1b:e0:be:f2:ec:30:d7:24:b2:67:4f:26:9a:ad:f2: 93:79:6e:a9:96:25:72:bb:2b:c8:38:6e:71:3f:21: 97:85:7e:35:d4:6d:a4:ef:0e:d7:a8:e4:85:29:c2: 41:69:1c:05:dc:9a:ce:69:b6:a5:63:dc:9d:5c:91: ab:9d:6d:15:1f:6e:ec:f0:ad:d7:19:98:1d:af:58: 1d:dc:39:e4:a5:fd:c3:76:99:14:e3:74:4c:46:55: 4e:76:40:da:82:70:07:e1:f1:9c:9b:e9:e6:ab:ed: be:bb:cc:f3:20:d5:4b:15:4f:1c:17:c0:cd:c3:9b: ef:71:62:b8:3e:88:38:5f:0b:87:c1:31:31:d4:f3: dd:65:80:db:2c:78:b1:84:9f:9f:9b:73:75:c0:82: 83:20:a9:bc:0d:bf:cb:38:db:2a:89:1f:7f:91:7a: d0:2b:71:e0:d3:af:1a:21:b0:53:05:ae:8e:f3:e9: 8b:c6:13:3b:28:5e:38:8f:1c:6e:d6:c7:0a:38:21: 2f:8b:6a:b4:03:f7:10:a6:2d:10:79:18:d4:a5:a1: 5a:6a:f4:9e:bf:33:3e:43:27:b6:12:f6:79:b9:c7: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:09:38:44:C5:10:6E:A2:04:0E:0A:25:36:C4:2C:90:92:1D:B2:96 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/37F88500B23311EF8B03B736C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.236.174.0/23 IPv6: 2001:df3:e8c0::/48 2001:df4:1cc0::/48 2401:9320::/48 Signature Algorithm: sha256WithRSAEncryption 63:64:72:b0:14:70:16:d4:f2:b9:68:95:97:9c:9b:8a:71:c2: 92:98:cd:37:dd:c6:d1:58:22:4d:b9:24:9e:9c:82:9f:0d:9a: 78:c8:85:5b:55:52:a2:e0:a9:41:45:08:25:9a:82:90:2a:6e: c0:18:64:7a:b2:51:54:15:58:30:32:ec:3f:61:39:b2:f1:bd: 5e:97:bc:05:c9:9d:37:ac:e3:a6:85:eb:f1:20:77:5d:03:ed: dd:36:ac:ba:9f:e5:0c:bc:92:d1:f5:73:da:37:04:fb:d0:63: df:f8:2d:3d:8d:16:1b:c7:ad:e5:c0:4b:28:82:2f:76:09:65: 38:82:34:ae:d7:27:d1:d0:25:49:28:55:2c:3a:20:f2:84:63: 7a:34:4e:00:47:ea:a1:15:85:44:7f:b9:a1:4f:73:2c:97:86: 9b:2c:7a:0b:e3:08:96:af:82:26:82:c5:e1:3c:44:f0:60:43: b4:85:5c:89:00:1f:2a:58:a6:86:56:23:84:bf:4f:e1:d2:e9: 64:5e:c0:24:d5:bf:6f:32:8d:7f:8b:b1:c0:7d:b2:f8:8e:00: 3c:02:61:3c:74:30:1e:ed:1b:28:4c:c2:71:a0:b3:eb:60:ec: a1:fd:1a:03:1a:1c:23:98:a2:e3:24:a5:72:a4:35:d3:ac:08: 95:76:ad:70 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICTpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwOTI0MDkwMzM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQzYjNlNy1lOWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgBBItbGHnCmffRn7qVo61RlQvfYDNlW0LmS3zYb4L7y7DDXJLJnTyaarfKT eW6pliVyuyvIOG5xPyGXhX411G2k7w7XqOSFKcJBaRwF3JrOabalY9ydXJGrnW0V H27s8K3XGZgdr1gd3Dnkpf3DdpkU43RMRlVOdkDagnAH4fGcm+nmq+2+u8zzINVL FU8cF8DNw5vvcWK4Pog4XwuHwTEx1PPdZYDbLHixhJ+fm3N1wIKDIKm8Db/LONsq iR9/kXrQK3Hg068aIbBTBa6O8+mLxhM7KF44jxxu1scKOCEvi2q0A/cQpi0QeRjU paFaavSevzM+Qye2EvZ5ucd4zwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFHUJOETF EG6iBA4KJTbELJCSHbKWMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzdGODg1MDBC MjMzMTFFRjhCMDNCNzM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMAwEAgABMAYDBAFn7K4wIQQCAAIwGwMHACABDfPowAMHACABDfQcwAMHACQB kyAAADANBgkqhkiG9w0BAQsFAAOCAQEAY2RysBRwFtTyuWiVl5ybinHCkpjNN93G 0VgiTbkknpyCnw2aeMiFW1VSouCpQUUIJZqCkCpuwBhkerJRVBVYMDLsP2E5svG9 Xpe8BcmdN6zjpoXr8SB3XQPt3Tasup/lDLyS0fVz2jcE+9Bj3/gtPY0WG8et5cBL KIIvdgllOII0rtcn0dAlSShVLDog8oRjejROAEfqoRWFRH+5oU9zLJeGmyx6C+MI lq+CJoLF4TxE8GBDtIVciQAfKlimhlYjhL9P4dLpZF7AJNW/bzKNf4uxwH2y+I4A PAJhPHQwHu0bKEzCcaCz62Dsof0aAxocI5ii4ySlcqQ106wIlXatcA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:56 2025 by rpki-client