$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/049C5BF84ACB11EE9CB50538C4F9AE02.roa File: 049C5BF84ACB11EE9CB50538C4F9AE02.roa (raw, json) Hash identifier: yL6ZRwTXhyUQOCbmgwdpXW/cxXexzW0IC+NCYSMtGY8= Subject key identifier: CA:BF:CC:A9:B8:A7:93:CA:79:C3:83:72:19:C2:67:01:B4:B1:EA:A1 Certificate issuer: /CN=A91BA0DE/serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA Certificate serial: 0165 Authority key identifier: 7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/049C5BF84ACB11EE9CB50538C4F9AE02.roa Signing time: Tue 15 Jul 2025 04:40:42 +0000 ROA not before: Tue 15 Jul 2025 04:40:42 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151398 IP address blocks: 103.215.92.0/23 maxlen: 23 103.215.92.0/24 maxlen: 24 103.215.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA0DE, serialNumber=7EEBFAEF79BF883EBF07077A9BF410EA31EFF7CA Validity Not Before: Jul 15 04:40:42 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6875dbc9-e04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:d1:e0:be:39:95:1e:8c:b6:67:ce:20:2d: a8:b2:54:24:ba:f9:ac:94:31:ec:53:50:91:9a:6d: e6:74:0f:db:92:5f:ba:f2:a6:c5:a6:53:67:20:49: 47:6e:6d:30:4d:d7:e9:26:4a:f0:62:8e:e9:e2:f0: 27:c9:93:05:e0:cd:59:6a:5a:f0:e7:2e:2d:60:08: 05:2d:d5:76:1a:0d:ab:6a:61:b9:9c:d0:26:ab:a1: 8e:61:a0:c5:ca:48:59:40:d5:b7:86:98:d8:67:df: 5e:53:95:5f:70:b9:d0:42:23:57:e2:22:43:95:39: f9:eb:59:1e:f6:6e:e6:0e:69:9c:2a:b8:4a:de:e3: dd:ea:d1:41:5c:ef:f9:ca:62:42:d9:2a:04:8e:ca: 17:2d:cc:6a:06:18:2f:c2:d0:68:16:51:be:54:96: 45:b9:b9:dc:f8:a6:f1:a9:c3:46:2e:8e:02:05:53: 75:64:5e:ff:27:65:f5:8d:8d:65:0f:6c:b6:67:a6: 1f:ec:61:c4:2e:48:d1:b0:46:1f:00:bb:95:a2:84: 8d:a7:71:3f:a3:41:77:d0:9e:ae:a3:b3:bb:3e:27: d7:be:9a:82:24:32:e7:71:27:1c:06:41:3a:d8:e8: 77:98:92:7c:cb:cc:f3:b7:a5:17:b3:33:2e:0b:ba: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BF:CC:A9:B8:A7:93:CA:79:C3:83:72:19:C2:67:01:B4:B1:EA:A1 X509v3 Authority Key Identifier: keyid:7E:EB:FA:EF:79:BF:88:3E:BF:07:07:7A:9B:F4:10:EA:31:EF:F7:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/fuv673m_iD6_Bwd6m_QQ6jHv98o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuv673m_iD6_Bwd6m_QQ6jHv98o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0DE/CEF181DC4AC911EEAD89E528C4F9AE02/049C5BF84ACB11EE9CB50538C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.215.92.0/23 Signature Algorithm: sha256WithRSAEncryption 34:ca:d7:89:c6:8c:50:d9:8b:de:1e:ae:d5:f1:a5:18:05:0c: 8b:88:d9:55:ba:c6:9b:a8:41:14:86:9a:db:7c:b1:8a:df:bc: 6b:3e:db:75:ab:1a:7c:0f:59:f4:30:df:60:4e:93:42:84:0a: 97:c0:c1:09:d3:22:20:3d:15:d3:e1:b6:49:ec:61:c8:1c:68: 57:65:85:eb:ef:1b:54:2b:fc:89:09:b8:f5:5e:63:d6:3c:8f: 47:cc:39:40:b3:3e:52:ef:f0:85:ae:a1:b4:04:88:6a:16:52: 45:c2:39:e4:ee:9f:79:60:e5:4b:64:57:4a:73:9d:91:e3:e3: 7e:10:cd:54:cf:fe:07:e1:d2:47:e9:b9:ea:86:cc:c4:60:48: 79:fe:6a:f8:74:b7:fa:9e:9b:d2:30:9b:55:45:1b:c4:79:d5: 5a:d4:42:4f:5f:0a:a1:7c:7e:37:de:07:69:ce:c5:3d:a2:15: d7:f8:ed:2a:65:b3:6b:65:0a:06:9f:14:1e:d6:f8:38:a3:84: a4:8f:39:4e:49:7c:ed:99:9d:1d:43:d8:4f:2e:16:a8:ba:ab: 39:65:1f:79:4a:8c:58:f2:02:62:1d:98:6d:6b:5a:dc:7c:09: 11:ec:40:6b:2a:a1:e3:5a:1f:86:19:f5:87:90:3a:79:74:7e: a7:f1:89:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEwREUxMTAvBgNVBAUTKDdFRUJGQUVGNzlCRjg4M0VCRjA3MDc3QTlCRjQxMEVB MzFFRkY3Q0EwHhcNMjUwNzE1MDQ0MDQyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc1ZGJjOS1lMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3prR4L45lR6MtmfOIC2oslQkuvmslDHsU1CRmm3mdA/bkl+68qbFplNnIElH bm0wTdfpJkrwYo7p4vAnyZMF4M1Zalrw5y4tYAgFLdV2Gg2ramG5nNAmq6GOYaDF ykhZQNW3hpjYZ99eU5VfcLnQQiNX4iJDlTn561ke9m7mDmmcKrhK3uPd6tFBXO/5 ymJC2SoEjsoXLcxqBhgvwtBoFlG+VJZFubnc+KbxqcNGLo4CBVN1ZF7/J2X1jY1l D2y2Z6Yf7GHELkjRsEYfALuVooSNp3E/o0F30J6uo7O7PifXvpqCJDLncSccBkE6 2Oh3mJJ8y8zzt6UXszMuC7pH7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMq/zKm4 p5PKecODchnCZwG0seqhMB8GA1UdIwQYMBaAFH7r+u95v4g+vwcHepv0EOox7/fK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTBERS9DRUYxODFEQzRB QzkxMUVFQUQ4OUU1MjhDNEY5QUUwMi9mdXY2NzNtX2lENl9Cd2Q2bV9RUTZqSHY5 OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1djY3M21faUQ2X0J3ZDZtX1FRNmpIdjk4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkEwREUvQ0VGMTgxREM0QUM5MTFFRUFEODlFNTI4QzRGOUFFMDIvMDQ5QzVCRjg0 QUNCMTFFRTlDQjUwNTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn11wwDQYJKoZIhvcNAQELBQADggEBADTK14nGjFDZi94e rtXxpRgFDIuI2VW6xpuoQRSGmtt8sYrfvGs+23WrGnwPWfQw32BOk0KECpfAwQnT IiA9FdPhtknsYcgcaFdlhevvG1Qr/IkJuPVeY9Y8j0fMOUCzPlLv8IWuobQEiGoW UkXCOeTun3lg5UtkV0pznZHj434QzVTP/gfh0kfpueqGzMRgSHn+avh0t/qem9Iw m1VFG8R51VrUQk9fCqF8fjfeB2nOxT2iFdf47Spls2tlCgafFB7W+DijhKSPOU5J fO2ZnR1D2E8uFqi6qzllH3lKjFjyAmIdmG1rWtx8CRHsQGsqoeNaH4YZ9YeQOnl0 fqfxie8= -----END CERTIFICATE-----Generated at Wed Nov 5 20:53:59 2025 by rpki-client