$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa File: A147B9B48CCD11ED93B2703DC4F9AE02.roa (raw, json) Hash identifier: 2lW2bPUEEKIiTF5qfQF53zWqNa7dAoZwt9FPzA5AkCI= Subject key identifier: 54:EE:32:07:BD:4D:73:4C:73:5E:21:EA:E0:87:CB:4D:A7:34:95:36 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4D75 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:55:02 +0000 ROA not before: Thu 28 Aug 2025 14:55:02 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149161 IP address blocks: 103.60.242.0/23 maxlen: 24 103.139.102.0/23 maxlen: 24 2400:cfe0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19829 (0x4d75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:02 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06dc5-99bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:67:9b:98:f9:d6:c8:28:26:2e:14:25:0e:88: 44:3c:c1:f1:b3:27:3b:18:ec:74:91:d0:2f:41:7e: a5:32:3f:ff:d8:47:4e:e8:e9:84:e9:f9:c1:54:0f: 67:51:4e:87:12:be:ed:37:9b:65:e3:9a:ee:fb:4a: 10:d6:92:a9:c5:ae:dc:9e:35:2f:6a:1c:4c:21:99: f1:ce:10:3a:2b:45:61:25:b4:42:ac:8d:0f:f2:98: b9:99:cb:ca:80:42:10:4e:98:24:4e:f5:cc:c3:a8: 84:d6:25:3a:5e:94:32:e4:48:f8:9b:2b:3b:fe:bc: df:36:32:24:31:35:58:ed:72:7a:5d:f3:89:ca:7b: 90:0e:ed:bc:be:2f:07:45:40:a0:39:45:c3:c1:74: b1:25:6d:84:4c:d8:d3:b6:8d:82:3c:05:26:93:74: 5b:c0:fb:e8:7a:90:b3:ef:64:22:b9:b2:ca:35:01: 77:52:91:47:72:c6:2c:ab:da:ff:51:5d:b6:89:d4: 78:5a:f8:c8:76:95:46:87:11:d2:b8:98:05:0a:86: 39:3e:61:e9:f8:84:1b:be:ae:8e:4c:59:43:8d:7f: 27:7e:b7:1c:da:f2:95:67:dd:32:46:de:bf:9f:0d: ff:2d:44:87:16:e5:83:9c:ed:ed:1f:15:7a:5a:54: 83:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EE:32:07:BD:4D:73:4C:73:5E:21:EA:E0:87:CB:4D:A7:34:95:36 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A147B9B48CCD11ED93B2703DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.242.0/23 103.139.102.0/23 IPv6: 2400:cfe0::/48 Signature Algorithm: sha256WithRSAEncryption 97:19:bd:ba:69:19:d6:47:a2:86:d1:8f:1a:2f:e2:8e:c2:3c: 7b:7f:8c:bd:af:43:9c:8a:7f:56:02:25:ed:98:f5:ab:f5:ad: 5f:af:29:ec:39:4d:31:c7:d8:34:0e:13:b7:1b:a1:50:80:cc: ee:8b:d2:08:34:2f:f1:43:69:81:ad:f7:ff:5d:ea:79:79:10: 41:ba:03:d3:76:a0:d6:1e:22:49:93:84:19:33:49:86:7d:58: ba:87:81:52:ed:86:a0:57:b0:89:33:cc:6e:7e:ad:e3:ef:fb: 95:57:43:b3:1d:1f:e3:40:6b:3a:51:49:d4:5a:3d:d2:b3:d2: f8:c7:07:73:5c:b8:12:96:73:8c:36:fb:fe:ae:f6:30:bc:5b: 6d:00:b8:11:35:c6:1a:9e:d1:0c:ee:be:da:d6:bc:92:18:a1: 04:b3:99:07:53:96:f5:b5:7d:87:b5:77:25:ad:12:e9:63:b6: bd:14:6b:0e:fe:c6:51:95:ad:8c:bf:aa:9f:96:d4:66:3d:3a: a1:af:35:a1:5d:fc:7e:b7:5d:10:14:c3:2d:ab:d3:6b:5e:85: 28:eb:dd:bc:54:79:c7:6d:7e:dd:ce:85:b7:21:a6:5b:e0:15: 5b:6d:2f:c0:3b:e7:6d:59:ed:22:2f:92:94:6f:ee:23:ed:4f: db:37:b7:0c -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICTXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTAyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmRjNS05OWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5WebmPnWyCgmLhQlDohEPMHxsyc7GOx0kdAvQX6lMj//2EdO6OmE6fnBVA9n UU6HEr7tN5tl45ru+0oQ1pKpxa7cnjUvahxMIZnxzhA6K0VhJbRCrI0P8pi5mcvK gEIQTpgkTvXMw6iE1iU6XpQy5Ej4mys7/rzfNjIkMTVY7XJ6XfOJynuQDu28vi8H RUCgOUXDwXSxJW2ETNjTto2CPAUmk3RbwPvoepCz72QiubLKNQF3UpFHcsYsq9r/ UV22idR4WvjIdpVGhxHSuJgFCoY5PmHp+IQbvq6OTFlDjX8nfrcc2vKVZ90yRt6/ nw3/LUSHFuWDnO3tHxV6WlSDZQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFTuMge9 TXNMc14h6uCHy02nNJU2MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTE0N0I5QjQ4 Q0NEMTFFRDkzQjI3MDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAFnPPIDBAFni2YwDwQCAAIwCQMHACQAz+AAADANBgkqhkiG 9w0BAQsFAAOCAQEAlxm9umkZ1keihtGPGi/ijsI8e3+Mva9DnIp/VgIl7Zj1q/Wt X68p7DlNMcfYNA4TtxuhUIDM7ovSCDQv8UNpga33/13qeXkQQboD03ag1h4iSZOE GTNJhn1YuoeBUu2GoFewiTPMbn6t4+/7lVdDsx0f40BrOlFJ1Fo90rPS+McHc1y4 EpZzjDb7/q72MLxbbQC4ETXGGp7RDO6+2ta8khihBLOZB1OW9bV9h7V3Ja0S6WO2 vRRrDv7GUZWtjL+qn5bUZj06oa81oV38frddEBTDLavTa16FKOvdvFR5x21+3c6F tyGmW+AVW20vwDvnbVntIi+SlG/uI+1P2ze3DA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:10 2025 by rpki-client