$ rpki-client -vvf rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/47DADED8EC5211EFBF551F6DC4F9AE02.roa File: 47DADED8EC5211EFBF551F6DC4F9AE02.roa (raw, json) Hash identifier: Ns3EqlAuypXsdC/A5rNqIcQNoK/ntkU/96rQkctaiRc= Subject key identifier: BA:A2:91:00:B8:CA:9C:D3:D8:FA:EB:FB:80:45:FE:1D:88:27:37:14 Certificate issuer: /CN=A91B25F2/serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Certificate serial: 0C7C Authority key identifier: B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/47DADED8EC5211EFBF551F6DC4F9AE02.roa Signing time: Tue 20 May 2025 12:39:50 +0000 ROA not before: Tue 20 May 2025 12:39:50 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135881 IP address blocks: 43.230.211.0/24 maxlen: 24 103.78.224.0/22 maxlen: 24 2407:ff80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3196 (0xc7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B25F2, serialNumber=B6C87BB58728F76F6F90A09DFD6BAA1AD4E73BCA Validity Not Before: May 20 12:39:50 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=682c7815-5201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:93:b8:e3:8c:cc:65:60:ad:f8:b2:e9:37:d5: b8:54:ea:49:d4:42:b7:22:30:29:15:d3:60:aa:c0: e4:70:84:4f:ca:97:b7:e5:17:59:a7:7a:a8:d6:40: ec:b2:70:e6:5d:02:f2:0c:48:6a:d8:1e:f7:c2:04: 71:6a:b8:d9:3a:02:6e:0f:3b:cf:78:fb:da:d7:c1: 59:ac:ae:bd:25:c1:66:f7:ab:6f:c3:42:49:f4:8e: d5:18:fa:ed:a4:95:bb:59:27:1f:c9:51:6b:27:46: a9:88:21:e9:ab:1a:52:2a:8f:8d:fb:49:c4:d4:24: 9b:40:a9:f2:5b:1b:01:40:68:45:9f:97:d1:29:f1: e4:8c:65:aa:1b:fc:f3:34:90:19:d7:a1:cf:98:23: 0a:f9:14:23:2e:3a:f1:a9:7b:da:1a:de:af:e0:3d: 3c:76:11:5b:2b:48:3c:ed:d0:d6:12:74:8a:e4:d0: a2:a6:a8:30:1a:66:8b:3b:eb:c1:00:0f:a3:75:a8: 51:e3:5d:ba:fc:1e:c0:f3:cb:fc:10:76:a9:b6:66: 1c:f5:99:4a:8d:60:83:dd:c3:90:01:4e:f7:91:1e: 73:86:1d:b7:15:d1:df:7b:61:fd:d5:d1:9e:25:df: f1:5b:f0:4f:13:e2:23:a3:75:df:19:2c:51:fe:a6: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A2:91:00:B8:CA:9C:D3:D8:FA:EB:FB:80:45:FE:1D:88:27:37:14 X509v3 Authority Key Identifier: keyid:B6:C8:7B:B5:87:28:F7:6F:6F:90:A0:9D:FD:6B:AA:1A:D4:E7:3B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/tsh7tYco929vkKCd_WuqGtTnO8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsh7tYco929vkKCd_WuqGtTnO8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B25F2/EF90CD4E03B011EA85F02934C4F9AE02/47DADED8EC5211EFBF551F6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.211.0/24 103.78.224.0/22 IPv6: 2407:ff80::/32 Signature Algorithm: sha256WithRSAEncryption 24:2b:dd:bf:5b:91:fe:ec:c0:a6:79:6e:7a:f3:18:b4:8e:10: f9:94:ea:14:75:23:b0:21:9d:80:36:ef:8c:84:b9:16:ad:17: cd:c8:69:6b:82:c5:fa:03:59:65:a5:4c:74:7d:6d:93:26:e7: ab:90:bf:c3:67:8b:b4:06:d3:b3:aa:25:56:97:52:97:5a:9f: 10:9f:54:ab:c9:78:5c:de:ce:a5:26:5c:43:90:b7:74:b7:78: b1:a7:b4:c4:fe:45:fb:fe:71:2e:f4:d3:a8:65:ba:21:27:d5: cb:18:13:08:d9:2a:9a:f5:2f:fd:3c:e1:1e:18:d3:10:7c:7a: 76:7b:12:58:1e:11:62:3e:4b:02:ea:f4:d5:67:47:b6:7f:05: f5:00:19:65:7c:a9:87:78:0a:15:97:76:f9:79:cb:d2:46:11: f2:92:8b:55:0d:4f:ff:42:f1:73:fc:76:da:07:21:58:a3:51: af:45:03:9a:94:5c:06:58:f5:f8:b2:aa:b2:fb:c7:c1:72:70: 0e:f2:64:9a:f5:24:4a:6c:c1:8e:ce:55:92:7a:61:f5:b9:6f: 86:8b:1e:82:bb:22:f1:8e:ff:5e:16:5e:ac:48:8a:17:0a:d9: 07:38:53:9f:55:b3:14:01:aa:93:67:e7:a7:22:0e:c0:66:38: f8:70:46:c7 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI1RjIxMTAvBgNVBAUTKEI2Qzg3QkI1ODcyOEY3NkY2RjkwQTA5REZENkJBQTFB RDRFNzNCQ0EwHhcNMjUwNTIwMTIzOTUwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJjNzgxNS01MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpO444zMZWCt+LLpN9W4VOpJ1EK3IjApFdNgqsDkcIRPype35RdZp3qo1kDs snDmXQLyDEhq2B73wgRxarjZOgJuDzvPePva18FZrK69JcFm96tvw0JJ9I7VGPrt pJW7WScfyVFrJ0apiCHpqxpSKo+N+0nE1CSbQKnyWxsBQGhFn5fRKfHkjGWqG/zz NJAZ16HPmCMK+RQjLjrxqXvaGt6v4D08dhFbK0g87dDWEnSK5NCipqgwGmaLO+vB AA+jdahR4126/B7A88v8EHaptmYc9ZlKjWCD3cOQAU73kR5zhh23FdHfe2H91dGe Jd/xW/BPE+Ijo3XfGSxR/qaOEwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLqikQC4 ypzT2Prr+4BF/h2IJzcUMB8GA1UdIwQYMBaAFLbIe7WHKPdvb5Cgnf1rqhrU5zvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjVGMi9FRjkwQ0Q0RTAz QjAxMUVBODVGMDI5MzRDNEY5QUUwMi90c2g3dFljbzkyOXZrS0NkX1d1cUd0VG5P OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RzaDd0WWNvOTI5dmtLQ2RfV3VxR3RUbk84by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI1RjIvRUY5MENENEUwM0IwMTFFQTg1RjAyOTM0QzRGOUFFMDIvNDdEQURFRDhF QzUyMTFFRkJGNTUxRjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAAr5tMDBAJnTuAwDQQCAAIwBwMFACQH/4AwDQYJKoZIhvcN AQELBQADggEBACQr3b9bkf7swKZ5bnrzGLSOEPmU6hR1I7AhnYA274yEuRatF83I aWuCxfoDWWWlTHR9bZMm56uQv8Nni7QG07OqJVaXUpdanxCfVKvJeFzezqUmXEOQ t3S3eLGntMT+Rfv+cS7006hluiEn1csYEwjZKpr1L/084R4Y0xB8enZ7ElgeEWI+ SwLq9NVnR7Z/BfUAGWV8qYd4ChWXdvl5y9JGEfKSi1UNT/9C8XP8dtoHIVijUa9F A5qUXAZY9fiyqrL7x8FycA7yZJr1JEpswY7OVZJ6YfW5b4aLHoK7IvGO/14WXqxI ihcK2Qc4U59VsxQBqpNn56ciDsBmOPhwRsc= -----END CERTIFICATE-----Generated at Thu Nov 6 01:52:18 2025 by rpki-client