$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa File: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (raw, json) Hash identifier: 4rxa1nn9pIW4f6C2tqJ4BWqQLDcGWeXHub2QF8i41eo= Subject key identifier: B8:76:6F:63:FD:8D:E9:48:94:A4:28:BA:8E:7A:2E:D4:C2:11:DF:BE Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: 011D Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa Signing time: Thu 23 Oct 2025 07:19:24 +0000 ROA not before: Thu 23 Oct 2025 07:19:24 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 32787 IP address blocks: 103.37.228.0/24 maxlen: 24 103.55.52.0/24 maxlen: 24 103.55.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Oct 23 07:19:24 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f9d6fc-cd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:78:0e:9b:4b:75:af:f4:5c:8a:b6:aa:88:d7: e1:3b:5a:6b:8f:7e:f8:c1:91:7d:a0:b2:2b:f8:e0: 3c:40:0d:48:1d:a5:e1:4c:27:48:2c:0c:fb:18:75: e8:e4:87:cf:46:c1:c3:ec:46:be:41:fa:f3:d1:7f: 3f:fe:87:85:38:66:74:74:35:86:03:b3:4a:bf:4f: c9:c4:34:4a:94:67:38:2a:4c:7d:80:da:af:d8:50: 12:97:fa:b3:7f:c2:69:de:3b:c2:62:4e:91:ae:70: 04:d2:f8:50:3d:43:05:d5:f2:fa:25:fb:3b:34:2f: b2:4f:24:b6:8c:7b:51:2d:dd:3a:60:90:18:81:5e: 9a:d7:df:2d:5f:aa:a8:10:ad:da:08:e3:de:40:70: 18:29:83:8d:27:aa:1e:d1:d2:90:e5:fe:d0:52:28: c3:3e:cb:4e:65:a1:d0:79:c8:d9:1e:17:1c:db:53: da:28:6d:0a:ae:d7:2f:27:80:28:85:d1:1e:45:ff: 48:79:e4:60:80:6e:f2:13:e5:a1:f6:88:be:58:4f: 52:c7:e3:6f:07:97:f6:f8:3e:d7:09:19:56:1d:74: 9a:7c:3c:24:59:e1:c3:64:88:83:f9:e9:94:c9:12: ef:e9:1f:ec:ba:24:b1:cc:5d:8d:e3:61:2a:3a:f2: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:76:6F:63:FD:8D:E9:48:94:A4:28:BA:8E:7A:2E:D4:C2:11:DF:BE X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/41A8950C272F11EF9D0A0C5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.37.228.0/24 103.55.52.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:8c:ca:02:15:72:a3:78:c0:ea:33:e7:e4:a1:53:84:72:33: be:81:97:eb:e9:5c:fd:15:5f:12:c6:9c:4e:9f:c9:dc:a3:a6: 41:a0:d9:2f:bf:d8:7e:e1:d2:bb:af:3c:59:b5:a1:f8:5f:6e: ae:85:4e:8b:be:9a:e1:9a:e7:5c:40:50:a7:48:5a:94:57:f4: 2b:5d:73:dc:4e:db:eb:aa:a8:c7:9d:6d:4e:44:6d:48:4e:18: 3c:3e:5a:9a:fb:c2:5b:23:08:a1:b4:e8:ad:83:ec:0f:a3:c5: 0b:8a:a8:9f:6c:90:cb:e8:51:50:d8:15:23:29:b8:d7:b3:b5: 6d:17:3d:b3:03:f6:6f:b8:82:53:17:b1:3d:4a:b3:0f:a2:a2: e0:8c:7c:25:72:8d:94:6c:f0:b5:86:3b:d7:ae:9d:d4:bb:f3: 87:97:d6:15:70:ff:ee:60:97:ca:6b:6d:1c:3b:c8:f3:cc:7b: 2e:89:76:53:8b:85:cb:57:e6:ee:ec:1d:e4:b0:2c:fc:aa:84: 42:6c:13:1c:24:fa:44:cf:92:28:2b:3e:cf:15:c8:89:ec:c8: db:08:87:fe:3e:19:83:20:56:f0:07:ae:9a:d1:bd:a9:9c:85: 66:53:cb:5a:df:1b:79:5b:da:0c:5d:21:56:90:85:c5:8d:6c: 05:02:b7:de -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUxMDIzMDcxOTI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5ZDZmYy1jZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHgOm0t1r/RciraqiNfhO1prj374wZF9oLIr+OA8QA1IHaXhTCdILAz7GHXo 5IfPRsHD7Ea+Qfrz0X8//oeFOGZ0dDWGA7NKv0/JxDRKlGc4Kkx9gNqv2FASl/qz f8Jp3jvCYk6RrnAE0vhQPUMF1fL6Jfs7NC+yTyS2jHtRLd06YJAYgV6a198tX6qo EK3aCOPeQHAYKYONJ6oe0dKQ5f7QUijDPstOZaHQecjZHhcc21PaKG0KrtcvJ4Ao hdEeRf9IeeRggG7yE+Wh9oi+WE9Sx+NvB5f2+D7XCRlWHXSafDwkWeHDZIiD+emU yRLv6R/suiSxzF2N42EqOvK0YwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLh2b2P9 jelIlKQouo56LtTCEd++MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDOEEvNjFFQzQ5MTYyNEM5MTFFRjlDOEM2MjU5QzRGOUFFMDIvNDFBODk1MEMy NzJGMTFFRjlEMEEwQzVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnJeQDBAFnNzQwDQYJKoZIhvcNAQELBQADggEBAF2MygIV cqN4wOoz5+ShU4RyM76Bl+vpXP0VXxLGnE6fydyjpkGg2S+/2H7h0ruvPFm1ofhf bq6FTou+muGa51xAUKdIWpRX9Ctdc9xO2+uqqMedbU5EbUhOGDw+Wpr7wlsjCKG0 6K2D7A+jxQuKqJ9skMvoUVDYFSMpuNeztW0XPbMD9m+4glMXsT1Ksw+iouCMfCVy jZRs8LWGO9eundS784eX1hVw/+5gl8prbRw7yPPMey6JdlOLhctX5u7sHeSwLPyq hEJsExwk+kTPkigrPs8VyInsyNsIh/4+GYMgVvAHrprRvamchWZTy1rfG3lb2gxd IVaQhcWNbAUCt94= -----END CERTIFICATE-----Generated at Tue Nov 4 17:18:18 2025 by rpki-client