$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa File: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (raw, json) Hash identifier: jEIejTZE4y5/nDEgx6mik+hQ7BxADqtxZpUBPhdWvAo= Subject key identifier: D9:77:10:C7:8A:12:2E:9E:96:19:E7:49:86:8D:7F:72:BE:69:D6:24 Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Certificate serial: 0D6E Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa Signing time: Fri 31 Oct 2025 10:53:22 +0000 ROA not before: Fri 31 Oct 2025 10:53:22 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139667 IP address blocks: 103.143.88.0/24 maxlen: 24 103.143.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752 Validity Not Before: Oct 31 10:53:22 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69049521-483f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:8d:9f:e0:4d:6d:98:78:b5:7e:1d:7b:07: f4:a9:54:54:05:36:1f:5d:31:ad:f7:ba:9c:da:a0: 7d:b9:95:9c:d2:34:82:63:a4:67:f6:80:02:3c:ea: 03:2b:a1:73:41:98:38:06:7f:e3:e4:f4:01:6e:09: b6:fd:6f:a4:a7:b7:41:37:98:52:c9:51:b9:dd:fc: e9:b7:84:0f:82:e9:c6:e7:e0:72:ed:13:82:7f:5b: 02:c2:2f:93:61:5e:65:89:14:fc:29:81:b2:6c:7f: fc:eb:e2:99:86:a9:80:f8:46:29:c0:70:a3:b5:f3: 6c:b4:52:41:1d:f0:24:37:e0:b3:a2:09:87:2a:d1: 77:3a:13:d1:74:f6:ae:f3:92:79:ca:3a:bb:1f:7c: a2:39:ce:3f:c2:1c:71:d2:d2:e4:a0:67:49:30:a8: b2:4c:1b:db:03:fb:b7:18:fe:c1:e8:47:0c:d8:b3: f9:50:91:6d:e7:7c:eb:f3:ed:7f:ad:26:bd:50:aa: f2:64:bd:e0:a8:c2:ea:b0:7b:e9:06:ea:99:b1:a2: b3:1d:86:63:7b:ed:6a:21:ad:60:d2:3e:70:a0:bf: 59:53:35:46:62:c2:24:e5:c4:d0:97:2f:a5:af:36: 06:51:a5:4a:8a:b3:ed:ca:d0:16:2f:6f:2c:9f:1b: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:10:C7:8A:12:2E:9E:96:19:E7:49:86:8D:7F:72:BE:69:D6:24 X509v3 Authority Key Identifier: keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/3C46581E96C411F0AA8A5D32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.143.88.0/23 Signature Algorithm: sha256WithRSAEncryption 77:8b:57:24:72:74:de:49:ad:04:87:78:9c:e3:98:b1:f1:27: e8:2d:b4:3b:5c:5b:d1:f9:e2:95:ce:17:7c:13:07:a2:06:97: d0:b5:86:4d:dd:eb:39:4b:e0:e0:85:bc:a2:24:d9:33:98:ac: de:46:96:c6:94:ee:2b:19:34:94:ee:d9:56:a7:ff:a6:28:02: 04:35:cf:63:73:e2:4c:a1:48:16:e2:bd:29:25:34:64:46:59: 93:f1:20:1b:9f:3f:77:0e:df:73:a6:c3:a5:83:1f:b6:29:4b: 31:57:67:f1:1b:75:b3:57:2d:b2:a0:b9:6b:c3:c7:87:41:99: a7:53:89:83:06:cd:de:74:b5:51:d1:74:b3:05:9e:af:20:6b: 5b:ef:a7:61:43:ca:8c:4b:d8:31:57:79:49:da:2c:02:ea:1e: 18:d0:c7:71:5f:0a:4a:08:65:b1:03:15:7e:81:7f:07:e5:a6: 3f:58:78:85:37:d1:ab:54:e8:c1:0d:52:47:39:d4:2e:56:d2: d7:b8:6a:ae:3f:8a:24:d1:3a:2a:0a:9a:ae:d8:58:0c:69:b4: 77:25:4a:03:29:3f:0d:49:1c:13:c2:86:fb:2c:f5:0b:e2:0b: b5:db:d5:82:20:76:1e:1c:c6:08:de:b3:57:34:a5:3a:e6:d8: 3d:17:8e:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQTYxMTAvBgNVBAUTKEQyNkRGQ0M0NTlDNTMxQzUwNDk4MDM2Q0M2Q0U2NzA2 QjgwNjE3NTIwHhcNMjUxMDMxMTA1MzIyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0OTUyMS00ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOWNn+BNbZh4tX4dewf0qVRUBTYfXTGt97qc2qB9uZWc0jSCY6Rn9oACPOoD K6FzQZg4Bn/j5PQBbgm2/W+kp7dBN5hSyVG53fzpt4QPgunG5+By7ROCf1sCwi+T YV5liRT8KYGybH/86+KZhqmA+EYpwHCjtfNstFJBHfAkN+CzogmHKtF3OhPRdPau 85J5yjq7H3yiOc4/whxx0tLkoGdJMKiyTBvbA/u3GP7B6EcM2LP5UJFt53zr8+1/ rSa9UKryZL3gqMLqsHvpBuqZsaKzHYZje+1qIa1g0j5woL9ZUzVGYsIk5cTQly+l rzYGUaVKirPtytAWL28snxvE1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNl3EMeK Ei6elhnnSYaNf3K+adYkMB8GA1UdIwQYMBaAFNJt/MRZxTHFBJgDbMbOZwa4BhdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURBNi9EQjE4QjhFNkRE REYxMUU5OTkzQ0YyNjVDNEY5QUUwMi8wbTM4eEZuRk1jVUVtQU5zeHM1bkJyZ0dG MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBtMzh4Rm5GTWNVRW1BTnN4czVuQnJnR0YxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFEQTYvREIxOEI4RTZERERGMTFFOTk5M0NGMjY1QzRGOUFFMDIvM0M0NjU4MUU5 NkM0MTFGMEFBOEE1RDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnj1gwDQYJKoZIhvcNAQELBQADggEBAHeLVyRydN5JrQSH eJzjmLHxJ+gttDtcW9H54pXOF3wTB6IGl9C1hk3d6zlL4OCFvKIk2TOYrN5GlsaU 7isZNJTu2Van/6YoAgQ1z2Nz4kyhSBbivSklNGRGWZPxIBufP3cO33Omw6WDH7Yp SzFXZ/EbdbNXLbKguWvDx4dBmadTiYMGzd50tVHRdLMFnq8ga1vvp2FDyoxL2DFX eUnaLALqHhjQx3FfCkoIZbEDFX6Bfwflpj9YeIU30atU6MENUkc51C5W0te4aq4/ iiTROioKmq7YWAxptHclSgMpPw1JHBPChvss9QviC7Xb1YIgdh4cxgjes1c0pTrm 2D0Xjrs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:22 2025 by rpki-client