$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa File: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (raw, json) Hash identifier: s8LqKhU0mlyHDXwRVEe2I2DdTV3LpQ8xCPbFiUnPe0o= Subject key identifier: FB:92:59:0D:4B:48:EC:27:53:E0:66:43:4F:08:95:3F:D4:52:B8:45 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: EE Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa Signing time: Fri 01 Aug 2025 07:11:38 +0000 ROA not before: Fri 01 Aug 2025 07:11:38 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 55649 IP address blocks: 43.242.140.0/22 maxlen: 22 43.242.140.0/24 maxlen: 24 43.242.141.0/24 maxlen: 24 43.242.142.0/24 maxlen: 24 43.242.143.0/24 maxlen: 24 103.38.28.0/22 maxlen: 22 103.38.28.0/24 maxlen: 24 103.38.29.0/24 maxlen: 24 103.38.30.0/24 maxlen: 24 103.38.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Aug 1 07:11:38 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688c68aa-31f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:fd:ca:2c:88:60:58:16:67:82:da:5d:98: e2:ea:25:78:bd:f1:4a:52:be:36:6a:4a:92:73:03: 1c:0c:a0:6c:91:c9:b5:57:bc:6d:7d:04:bc:3b:2e: 96:2f:0e:3f:f7:4a:cd:25:6c:ae:80:6f:73:dc:ba: 98:51:f1:09:1a:a2:52:6f:3a:c3:bb:d1:37:30:19: 4d:52:41:97:13:55:24:94:b3:e3:dc:57:90:63:be: 4d:9f:ab:4a:d6:91:17:e4:0c:8f:12:ba:a5:a6:19: 24:19:5e:38:51:a0:96:fa:08:7c:63:e1:9d:59:97: 00:60:73:34:fd:a5:03:4a:33:36:6a:db:92:28:ee: b1:9f:1c:14:64:dc:7b:15:ad:f0:0b:1e:00:fb:27: fe:22:9f:e4:4d:54:46:bc:31:08:49:ee:d1:48:27: 16:50:41:04:f8:95:cb:c3:24:fa:62:92:df:0f:91: b4:8b:7b:c8:de:ca:91:93:15:0d:81:22:c8:53:10: cc:4c:78:f0:da:31:d4:62:27:df:61:c3:5d:cb:e9: 9f:f1:04:49:a5:38:cb:a5:75:51:be:00:a6:56:b7: ef:de:41:f8:a0:67:c5:1b:2f:35:67:b2:bf:9e:fb: 69:bf:52:e3:d0:19:78:49:b8:c3:a7:b1:ce:90:53: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:92:59:0D:4B:48:EC:27:53:E0:66:43:4F:08:95:3F:D4:52:B8:45 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.140.0/22 103.38.28.0/22 Signature Algorithm: sha256WithRSAEncryption e3:7e:ac:c8:f1:81:d9:52:4c:75:d0:7c:85:ed:5e:00:10:cb: a6:78:eb:dc:60:26:c1:eb:b4:f9:b1:76:07:2b:e5:79:e0:a2: ef:3e:9a:7c:e2:25:f6:59:29:80:e0:ce:cd:13:cb:5d:2f:ad: c7:f6:0f:e4:23:f8:cc:da:64:d3:e9:22:e4:49:26:e1:d9:01: fb:54:89:1b:c7:17:61:33:6e:de:e4:0f:5e:37:4e:cc:dc:28: 19:d2:04:44:66:58:9d:f2:9c:6f:d4:bc:aa:8d:3c:73:fa:16: 90:40:c9:d6:a2:4f:49:2c:7b:36:e9:33:5e:b5:0b:5e:ea:18: 57:a4:96:e5:1b:4b:5d:18:46:e0:35:dd:eb:5e:ab:11:91:63: d8:46:03:65:46:9f:68:bb:fb:e2:20:19:40:30:5d:bc:d7:2c: 99:68:87:24:3c:02:f5:d0:62:41:0d:8c:4a:15:aa:b5:c2:c1: e6:7b:ad:70:c3:b7:ee:5a:72:56:73:99:02:5b:b0:66:60:4f: 48:e1:30:7d:fc:cf:7f:86:55:32:fa:a6:5c:42:50:53:42:39: fd:59:90:a2:4d:f6:0d:cf:09:1c:51:17:54:51:b0:c5:5a:4e: 84:2a:3d:ab:48:fc:12:89:11:d1:38:91:bc:1e:58:34:be:73: d8:f4:63:e9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwODAxMDcxMTM4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjNjhhYS0zMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDz9yiyIYFgWZ4LaXZji6iV4vfFKUr42akqScwMcDKBskcm1V7xtfQS8Oy6W Lw4/90rNJWyugG9z3LqYUfEJGqJSbzrDu9E3MBlNUkGXE1UklLPj3FeQY75Nn6tK 1pEX5AyPErqlphkkGV44UaCW+gh8Y+GdWZcAYHM0/aUDSjM2atuSKO6xnxwUZNx7 Fa3wCx4A+yf+Ip/kTVRGvDEISe7RSCcWUEEE+JXLwyT6YpLfD5G0i3vI3sqRkxUN gSLIUxDMTHjw2jHUYiffYcNdy+mf8QRJpTjLpXVRvgCmVrfv3kH4oGfFGy81Z7K/ nvtpv1Lj0Bl4SbjDp7HOkFMIOwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPuSWQ1L SOwnU+BmQ08IlT/UUrhFMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjRFMkIvRjgzNkJERUMwQ0VDMTFFRjlGODFGNjNGQzRGOUFFMDIvNTZDQkFGMDYw Q0VFMTFFRjgwQ0I1NjQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr8owDBAJnJhwwDQYJKoZIhvcNAQELBQADggEBAON+rMjx gdlSTHXQfIXtXgAQy6Z469xgJsHrtPmxdgcr5Xngou8+mnziJfZZKYDgzs0Ty10v rcf2D+Qj+MzaZNPpIuRJJuHZAftUiRvHF2Ezbt7kD143TszcKBnSBERmWJ3ynG/U vKqNPHP6FpBAydaiT0ksezbpM161C17qGFekluUbS10YRuA13eteqxGRY9hGA2VG n2i7++IgGUAwXbzXLJlohyQ8AvXQYkENjEoVqrXCweZ7rXDDt+5aclZzmQJbsGZg T0jhMH38z3+GVTL6plxCUFNCOf1ZkKJN9g3PCRxRF1RRsMVaToQqPatI/BKJEdE4 kbweWDS+c9j0Y+k= -----END CERTIFICATE-----Generated at Sun Aug 10 20:59:26 2025 by rpki-client