$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa File: CD1C75D8B98A11F0A26C3854C4F9AE02.roa (raw, json) Hash identifier: QF4RGp/e9uxGVWxRkpZcmyBEIK+c31pCcfLGh7O93y0= Subject key identifier: 3E:C5:CF:D7:6B:60:F2:D1:89:D7:06:A8:2C:C4:68:61:A0:9D:31:E1 Certificate issuer: /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Certificate serial: 01BE Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa Signing time: Tue 04 Nov 2025 14:30:25 +0000 ROA not before: Tue 04 Nov 2025 14:30:25 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 147314 IP address blocks: 103.228.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596 Validity Not Before: Nov 4 14:30:25 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=690a0e00-40a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:54:2f:12:90:53:47:bb:d0:c0:9f:ff:0d: a0:4a:91:44:e9:cb:90:23:0f:2d:86:6c:ef:25:46: 17:e4:91:be:29:c1:17:7b:3f:e8:cc:18:6c:2e:96: 99:92:8a:82:38:fa:bb:c7:7b:a5:e3:f7:77:09:52: a0:3a:a0:af:e7:7b:10:16:e0:ed:93:f3:94:8e:5a: a6:46:2c:90:bb:8b:4c:40:22:07:4f:9b:0c:db:77: 1e:28:5b:a6:50:d1:c7:c6:f5:7c:e2:8d:48:ca:4b: 67:b6:95:48:c6:43:51:38:11:b2:2b:47:51:04:57: f9:f9:db:f8:05:57:ea:86:2c:c5:d1:03:33:dc:d4: e1:c6:02:9c:e5:e8:b6:d3:2a:04:f2:a0:22:d6:37: 90:d1:db:0b:e2:26:fe:47:5c:ad:67:8d:8d:21:ce: 0a:53:cb:14:99:01:8f:0c:84:b1:ff:40:1c:32:3d: 90:cb:b9:5a:aa:5b:db:4c:f0:38:13:b1:be:9f:4a: 2a:1c:16:41:03:0d:a2:5d:82:ed:ef:b4:a9:db:5e: 14:6c:ea:a4:fc:36:99:83:2a:82:2a:e5:36:ce:51: 00:30:4e:e1:06:be:5c:a6:16:d8:89:99:e2:59:93: f0:51:29:65:6a:de:fb:92:63:d7:47:fa:d2:56:0f: 4b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C5:CF:D7:6B:60:F2:D1:89:D7:06:A8:2C:C4:68:61:A0:9D:31:E1 X509v3 Authority Key Identifier: keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/CD1C75D8B98A11F0A26C3854C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.228.11.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ed:9c:b1:66:e9:c1:41:58:3b:b6:fe:40:d4:70:32:eb:43: db:f8:b5:4a:d6:05:34:b9:e9:9f:ec:d9:04:7a:e9:5a:c1:98: 70:34:be:f9:e3:e0:64:55:6d:76:6a:82:60:d2:f8:f0:98:72: 81:a8:06:e2:d1:f4:8b:e9:6f:ba:2c:cb:5c:70:1a:54:68:57: 22:ff:c4:b2:68:e5:80:6a:c5:b3:05:87:2e:f3:12:04:7f:68: 3b:d7:3f:4a:f9:75:1c:95:f6:4c:6b:9d:04:6f:d4:50:a6:7d: a9:3f:e6:89:46:73:f3:99:a5:06:8d:83:e5:de:90:4f:0f:8f: 4a:9a:2f:51:10:46:14:c0:57:3b:13:ff:fe:cf:ee:6d:ec:5f: 31:87:bf:61:88:a7:75:30:11:a0:4b:1d:d5:b3:a4:0a:9d:c5: 7d:a9:9a:cb:39:09:57:05:ed:92:d9:57:4b:b6:33:7e:d2:c8: e0:95:c7:a3:96:90:bf:35:fe:fc:e3:35:94:8b:1e:da:ad:cf: c9:8a:64:99:53:78:7f:1c:a1:d5:41:06:d2:ef:70:99:32:75: 01:75:10:65:14:a3:aa:20:b0:08:6e:eb:81:2f:9a:fe:d9:8d: 32:17:23:73:75:6c:c5:94:0d:f0:48:ad:b3:bb:3d:bc:8c:8b: 75:86:ab:00 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDQzMxMTAvBgNVBAUTKERFNTVBMzY5QUVEOTE4Njk4QzJENjNDMzJFRjYxQkRC QzU5ODA1OTYwHhcNMjUxMTA0MTQzMDI1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhMGUwMC00MGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueFULxKQU0e70MCf/w2gSpFE6cuQIw8thmzvJUYX5JG+KcEXez/ozBhsLpaZ koqCOPq7x3ul4/d3CVKgOqCv53sQFuDtk/OUjlqmRiyQu4tMQCIHT5sM23ceKFum UNHHxvV84o1IyktntpVIxkNROBGyK0dRBFf5+dv4BVfqhizF0QMz3NThxgKc5ei2 0yoE8qAi1jeQ0dsL4ib+R1ytZ42NIc4KU8sUmQGPDISx/0AcMj2Qy7laqlvbTPA4 E7G+n0oqHBZBAw2iXYLt77Sp214UbOqk/DaZgyqCKuU2zlEAME7hBr5cphbYiZni WZPwUSllat77kmPXR/rSVg9LsQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD7Fz9dr YPLRidcGqCzEaGGgnTHhMB8GA1UdIwQYMBaAFN5Vo2mu2RhpjC1jwy72G9vFmAWW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUNDMy82NDE2RDgzODE0 QzAxMUVFOTZFQTU0MjFDNEY5QUUwMi8zbFdqYWE3WkdHbU1MV1BETHZZYjI4V1lC WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNsV2phYTdaR0dtTUxXUERMdlliMjhXWUJaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVDQzMvNjQxNkQ4MzgxNEMwMTFFRTk2RUE1NDIxQzRGOUFFMDIvQ0QxQzc1RDhC OThBMTFGMEEyNkMzODU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5AswDQYJKoZIhvcNAQELBQADggEBAHDtnLFm6cFBWDu2 /kDUcDLrQ9v4tUrWBTS56Z/s2QR66VrBmHA0vvnj4GRVbXZqgmDS+PCYcoGoBuLR 9Ivpb7osy1xwGlRoVyL/xLJo5YBqxbMFhy7zEgR/aDvXP0r5dRyV9kxrnQRv1FCm fak/5olGc/OZpQaNg+XekE8Pj0qaL1EQRhTAVzsT//7P7m3sXzGHv2GIp3UwEaBL HdWzpAqdxX2pmss5CVcF7ZLZV0u2M37SyOCVx6OWkL81/vzjNZSLHtqtz8mKZJlT eH8codVBBtLvcJkydQF1EGUUo6ogsAhu64Evmv7ZjTIXI3N1bMWUDfBIrbO7PbyM i3WGqwA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:14:08 2025 by rpki-client