$ rpki-client -vvf rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/AA51390A822B11EE8B95E475C4F9AE02.roa File: AA51390A822B11EE8B95E475C4F9AE02.roa (raw, json) Hash identifier: iVoQ4DzarwOJUrSELiNWak+s+ohZp/LfOai+uGXnZZw= Subject key identifier: 18:0A:EE:C4:35:EF:F6:C1:DB:8A:48:F9:C6:89:AA:9A:11:B1:0B:FB Certificate issuer: /CN=A91B31CE/serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Certificate serial: 0677 Authority key identifier: 4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/AA51390A822B11EE8B95E475C4F9AE02.roa Signing time: Tue 22 Apr 2025 22:23:50 +0000 ROA not before: Tue 22 Apr 2025 22:23:50 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 0 IP address blocks: 103.162.254.0/24 maxlen: 24 103.248.201.0/24 maxlen: 24 2001:df3:1540::/48 maxlen: 48 2001:df6:480::/48 maxlen: 48 2001:df6:481::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B31CE, serialNumber=4B47C9C64D3C23217A15DDAB8747C39DC30184F2 Validity Not Before: Apr 22 22:23:50 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680816f5-f05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:c4:34:c8:24:03:fa:97:fd:53:02:63:6d: 23:52:81:24:56:ef:5c:9d:b3:78:c1:50:81:b5:bd: f5:d8:b6:a6:26:3d:bf:29:8d:f5:58:6a:1d:94:9b: 3c:03:02:22:e7:21:96:45:6d:fc:21:b2:43:cf:d2: f4:7c:45:08:0c:c6:d8:92:53:af:29:e2:c7:a9:0f: 7b:53:3b:d5:74:c0:68:55:0d:fc:f9:8c:7a:a1:fe: c1:4b:db:eb:b6:38:cf:13:9b:7d:64:7e:81:cb:66: fa:0f:b1:8a:02:14:25:f7:66:36:8a:0f:76:b4:dd: 7d:f2:8f:4e:5d:57:e8:85:70:b2:d0:96:72:b3:08: 28:82:71:ac:71:c5:2c:21:f6:54:63:36:e2:33:0d: 31:cf:9a:14:d9:3c:8f:49:60:a0:33:a3:58:41:aa: 5e:60:56:35:ea:c9:05:50:19:20:2b:94:78:51:a7: fa:6e:99:93:d5:37:62:8d:31:9f:f1:61:7b:ef:b7: 35:08:bd:48:7e:01:8e:a5:4d:ee:07:17:16:6c:ee: a7:ae:1e:82:a0:ef:d7:33:f0:46:6b:f8:6a:d6:52: 4e:27:3e:d1:3e:aa:47:a2:ec:1e:9f:0a:aa:00:f2: 99:23:d7:19:2e:83:cb:08:f9:3b:25:00:41:2c:a1: 21:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0A:EE:C4:35:EF:F6:C1:DB:8A:48:F9:C6:89:AA:9A:11:B1:0B:FB X509v3 Authority Key Identifier: keyid:4B:47:C9:C6:4D:3C:23:21:7A:15:DD:AB:87:47:C3:9D:C3:01:84:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/S0fJxk08IyF6Fd2rh0fDncMBhPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0fJxk08IyF6Fd2rh0fDncMBhPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B31CE/6B05607A7CCD11EBAEC6A974C4F9AE02/AA51390A822B11EE8B95E475C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.162.254.0/24 103.248.201.0/24 IPv6: 2001:df3:1540::/48 2001:df6:480::/47 Signature Algorithm: sha256WithRSAEncryption 75:07:2a:2e:93:8d:64:2c:d5:4b:b2:00:94:7a:7b:0a:81:ad: b4:d8:e9:76:22:1e:2a:3d:1a:65:1b:c1:cd:30:7d:63:2d:37: f4:19:e2:03:68:d7:0e:dd:42:55:99:22:9e:e2:f6:10:b3:5a: 60:56:1b:b3:27:e2:6b:d4:e5:79:4c:05:3a:a5:76:35:90:50: a3:73:28:93:e5:25:22:27:f0:d3:07:b5:b3:93:46:2b:2f:e6: b1:f4:43:d8:56:c0:a8:74:c8:52:f7:b8:31:bd:48:7d:13:6e: 17:e6:68:f8:61:19:af:89:84:2e:79:df:86:3c:20:ff:ac:c3: 95:74:23:c4:54:b4:9c:17:bd:62:74:f3:da:d5:b9:d7:78:76: f1:05:bb:11:63:35:6b:7c:4c:4d:6c:6a:5d:7f:6c:30:13:f3: d2:77:e3:68:bb:51:55:e5:54:fa:a3:07:c4:50:e5:48:4c:f2: b7:49:30:ef:a7:e8:f8:e1:5e:3f:d4:03:e3:b9:c1:c3:50:b8: 14:88:c3:51:3a:76:6f:3c:e6:62:28:5d:c8:69:7e:85:14:a5: 2d:35:89:1c:3f:aa:bb:5d:ba:ae:76:33:6b:11:29:7b:4c:e8: 26:3f:22:ad:a1:a4:2a:73:fd:b6:4e:63:83:7d:d8:b5:08:2f: 46:c7:21:c3 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMxQ0UxMTAvBgNVBAUTKDRCNDdDOUM2NEQzQzIzMjE3QTE1RERBQjg3NDdDMzlE QzMwMTg0RjIwHhcNMjUwNDIyMjIyMzUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODA4MTZmNS1mMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYrENMgkA/qX/VMCY20jUoEkVu9cnbN4wVCBtb312LamJj2/KY31WGodlJs8 AwIi5yGWRW38IbJDz9L0fEUIDMbYklOvKeLHqQ97UzvVdMBoVQ38+Yx6of7BS9vr tjjPE5t9ZH6By2b6D7GKAhQl92Y2ig92tN198o9OXVfohXCy0JZyswgognGsccUs IfZUYzbiMw0xz5oU2TyPSWCgM6NYQapeYFY16skFUBkgK5R4Uaf6bpmT1TdijTGf 8WF777c1CL1IfgGOpU3uBxcWbO6nrh6CoO/XM/BGa/hq1lJOJz7RPqpHouwenwqq APKZI9cZLoPLCPk7JQBBLKEhhQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFBgK7sQ1 7/bB24pI+caJqpoRsQv7MB8GA1UdIwQYMBaAFEtHycZNPCMhehXdq4dHw53DAYTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzFDRS82QjA1NjA3QTdD Q0QxMUVCQUVDNkE5NzRDNEY5QUUwMi9TMGZKeGswOEl5RjZGZDJyaDBmRG5jTUJo UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwZkp4azA4SXlGNkZkMnJoMGZEbmNNQmhQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMxQ0UvNkIwNTYwN0E3Q0NEMTFFQkFFQzZBOTc0QzRGOUFFMDIvQUE1MTM5MEE4 MjJCMTFFRThCOTVFNDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBABnov4DBABn+MkwGAQCAAIwEgMHACABDfMVQAMHASABDfYE gDANBgkqhkiG9w0BAQsFAAOCAQEAdQcqLpONZCzVS7IAlHp7CoGttNjpdiIeKj0a ZRvBzTB9Yy039BniA2jXDt1CVZkinuL2ELNaYFYbsyfia9TleUwFOqV2NZBQo3Mo k+UlIifw0we1s5NGKy/msfRD2FbAqHTIUve4Mb1IfRNuF+Zo+GEZr4mELnnfhjwg /6zDlXQjxFS0nBe9YnTz2tW513h28QW7EWM1a3xMTWxqXX9sMBPz0nfjaLtRVeVU +qMHxFDlSEzyt0kw76fo+OFeP9QD47nBw1C4FIjDUTp2bzzmYihdyGl+hRSlLTWJ HD+qu126rnYzaxEpe0zoJj8iraGkKnP9tk5jg33YtQgvRschww== -----END CERTIFICATE-----Generated at Wed Nov 5 01:57:04 2025 by rpki-client