$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa File: 42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa (raw, json) Hash identifier: gSlDlQAH92l7BbriHa0x4CPAMfKfJr6lJU+OFfmjaYM= Subject key identifier: 0B:E7:50:68:01:94:54:E7:E5:57:F3:FB:83:72:CF:50:CA:3A:0A:C7 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CC4 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:34 +0000 ROA not before: Thu 28 Aug 2025 14:52:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131386 IP address blocks: 45.119.80.0/22 maxlen: 24 45.119.84.0/22 maxlen: 24 103.2.228.0/22 maxlen: 24 103.27.236.0/22 maxlen: 24 103.87.220.0/22 maxlen: 24 103.89.92.0/22 maxlen: 24 103.95.156.0/22 maxlen: 24 103.200.24.0/22 maxlen: 24 2403:bf40::/48 maxlen: 48 2403:bf40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19652 (0x4cc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d31-5c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bd:b9:12:51:88:e8:7b:22:5e:8a:d0:e4:ae: e8:ab:ac:b3:00:15:a7:7f:08:4f:3e:0a:f1:77:d6: 8e:f6:a4:02:4b:a2:7d:19:b0:8e:3c:e4:34:7e:c6: cc:24:15:4a:23:d5:1a:c4:45:5b:db:26:c1:cf:89: c5:57:ab:93:a1:0b:ab:04:a5:4c:ee:ad:c4:94:af: 95:6c:83:30:07:ca:98:76:74:c3:c4:23:4d:51:21: 64:bc:6b:18:01:87:35:63:2e:dc:9b:46:5b:39:48: 97:91:88:3f:72:11:28:2a:03:7f:88:34:90:b6:38: 8f:3b:e3:c4:5c:ec:90:3a:ab:61:d3:09:e4:40:01: 5f:14:21:b5:ae:31:95:ac:86:7d:65:75:9b:b6:a3: 80:02:3d:f7:cf:40:7a:33:83:ea:fb:9b:f1:46:51: d9:7b:96:ef:1d:89:68:1c:40:11:a6:a2:64:81:f2: 64:8c:d5:25:c9:ab:7c:e3:35:0e:10:84:15:68:42: 6c:7d:ec:e4:fc:88:30:60:e7:9c:63:08:c5:b8:b8: 1a:38:c7:f8:98:c7:cf:f0:d7:c2:ad:86:43:f4:92: b0:ec:86:48:9d:94:04:2f:dc:44:0e:ef:1b:60:9a: 1b:2e:ce:86:99:ce:56:e1:e6:e6:76:e0:66:b0:7d: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E7:50:68:01:94:54:E7:E5:57:F3:FB:83:72:CF:50:CA:3A:0A:C7 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.80.0/21 103.2.228.0/22 103.27.236.0/22 103.87.220.0/22 103.89.92.0/22 103.95.156.0/22 103.200.24.0/22 IPv6: 2403:bf40::/48 2403:bf40:2::/48 Signature Algorithm: sha256WithRSAEncryption 5b:ee:d6:c8:8f:ba:c4:36:e7:1a:ae:b2:0c:61:af:ea:bd:b1: 6d:cf:2d:c0:c6:28:af:9c:31:f6:d2:7c:58:cf:5e:c1:9e:3f: 9a:05:c5:37:c9:b8:c7:1a:ba:18:45:82:2c:c1:06:82:56:6b: fc:b6:7e:c9:6a:f5:d8:14:95:22:5a:d2:aa:ab:c6:c5:d4:e5: fb:c4:07:9f:74:8e:f1:0f:09:8b:c3:70:68:0b:0a:21:6d:0b: 58:de:c2:7b:ce:30:33:cd:ee:c2:56:37:5c:29:58:cb:b4:52: 3a:f4:40:84:9c:e7:ca:ac:29:0a:b3:f4:aa:26:aa:82:27:24: d6:95:65:7d:3e:80:47:f4:ea:88:7a:74:88:25:1d:78:ca:b9: b0:26:f6:f6:56:88:d2:55:db:e2:90:68:58:1e:4c:38:f1:fe: 08:02:d0:59:1d:78:03:75:fb:34:1d:3b:a2:98:d5:59:ca:03: 02:f5:bb:31:05:39:d0:0e:89:c5:e8:7f:3d:f6:83:65:f0:38: 81:21:38:69:af:0f:91:6d:be:99:d3:3c:57:13:a2:5a:89:d2: a0:ac:15:92:2a:63:aa:42:cf:fb:25:27:b8:71:e3:9b:91:e4: e3:3c:0f:18:f7:4e:8e:de:38:2a:83:c5:f2:84:f8:bc:9d:c6: 9a:97:39:c7 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgICTMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQzMS01Yzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r25ElGI6HsiXorQ5K7oq6yzABWnfwhPPgrxd9aO9qQCS6J9GbCOPOQ0fsbM JBVKI9UaxEVb2ybBz4nFV6uToQurBKVM7q3ElK+VbIMwB8qYdnTDxCNNUSFkvGsY AYc1Yy7cm0ZbOUiXkYg/chEoKgN/iDSQtjiPO+PEXOyQOqth0wnkQAFfFCG1rjGV rIZ9ZXWbtqOAAj33z0B6M4Pq+5vxRlHZe5bvHYloHEARpqJkgfJkjNUlyat84zUO EIQVaEJsfezk/IgwYOecYwjFuLgaOMf4mMfP8NfCrYZD9JKw7IZInZQEL9xEDu8b YJobLs6Gmc5W4ebmduBmsH2pgwIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFAvnUGgB lFTn5Vfz+4Nyz1DKOgrHMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJDRTJBRjRD RTNEMTFFRkI2NEMyRDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXQYIKwYBBQUHAQcBAf8E TjBMMDAEAgABMCoDBAMtd1ADBAJnAuQDBAJnG+wDBAJnV9wDBAJnWVwDBAJnX5wD BAJnyBgwGAQCAAIwEgMHACQDv0AAAAMHACQDv0AAAjANBgkqhkiG9w0BAQsFAAOC AQEAW+7WyI+6xDbnGq6yDGGv6r2xbc8twMYor5wx9tJ8WM9ewZ4/mgXFN8m4xxq6 GEWCLMEGglZr/LZ+yWr12BSVIlrSqqvGxdTl+8QHn3SO8Q8Ji8NwaAsKIW0LWN7C e84wM83uwlY3XClYy7RSOvRAhJznyqwpCrP0qiaqgick1pVlfT6AR/TqiHp0iCUd eMq5sCb29laI0lXb4pBoWB5MOPH+CALQWR14A3X7NB07opjVWcoDAvW7MQU50A6J xeh/PfaDZfA4gSE4aa8PkW2+mdM8VxOiWonSoKwVkipjqkLP+yUnuHHjm5Hk4zwP GPdOjt44KoPF8oT4vJ3Gmpc5xw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:50 2025 by rpki-client