$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/48B639C8B85E11F0B0F0B01CC4F9AE02.roa File: 48B639C8B85E11F0B0F0B01CC4F9AE02.roa (raw, json) Hash identifier: 7WPqwG1SjXeSVpDuyJqejWY1jhEBBefx5pu/jvpGXtc= Subject key identifier: 79:45:5E:FA:61:B3:5C:5D:AD:92:19:FF:00:8E:C1:35:50:53:39:C1 Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 028D Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/48B639C8B85E11F0B0F0B01CC4F9AE02.roa Signing time: Mon 03 Nov 2025 02:39:14 +0000 ROA not before: Mon 03 Nov 2025 02:39:13 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 4764 IP address blocks: 103.242.32.0/22 maxlen: 22 113.52.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Nov 3 02:39:13 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=690815d1-e174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:4a:d0:57:ff:e5:b7:d2:23:1c:5d:45:8b: 04:83:8e:31:12:74:30:88:49:30:50:bf:71:93:58: 4f:55:98:04:dd:31:25:9d:95:e0:85:46:5d:95:d5: 83:7a:31:22:84:1a:96:31:8b:a4:8b:aa:d1:9c:98: 35:b8:83:82:19:8c:d9:94:0f:7f:04:84:9c:a5:b9: bc:9e:bf:6b:f8:2c:62:87:7f:ec:b2:1d:b2:68:10: ee:b3:f5:04:18:84:4c:25:17:3c:95:5b:a2:c1:f8: 78:fe:a9:b5:2b:03:ef:83:2f:31:01:9c:de:a7:d8: 0c:45:c3:16:68:2c:5c:72:8b:35:2a:eb:d3:d3:82: f9:b9:88:e5:1f:a1:53:cf:2b:09:b0:26:bb:ef:79: 00:96:77:e2:f8:e6:c8:5c:a7:82:d6:05:f0:27:9a: b8:89:90:5c:59:43:09:1d:bd:92:34:f9:33:b2:e6: 61:2c:a6:ad:9a:b4:13:53:ed:93:40:46:09:38:d6: 1c:a1:e2:b3:60:d4:ca:fd:38:d8:f3:d4:10:87:40: 17:bb:d3:23:15:46:0c:70:8b:d9:31:6c:1e:b6:7d: ed:b7:94:6c:08:02:64:d7:93:58:f6:70:34:bf:37: b1:3f:31:40:60:19:0c:52:fc:70:1d:42:34:0e:d0: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:45:5E:FA:61:B3:5C:5D:AD:92:19:FF:00:8E:C1:35:50:53:39:C1 X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/48B639C8B85E11F0B0F0B01CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.242.32.0/22 113.52.0.0/20 Signature Algorithm: sha256WithRSAEncryption 71:cb:1d:68:64:59:3a:94:99:4c:54:f0:b9:d1:29:3c:ee:96: c6:95:ae:88:99:2c:18:f1:0b:71:74:1e:1e:74:29:a7:fc:bd: 79:99:11:be:d9:c4:81:49:ab:0e:3d:14:9d:07:cb:27:0d:bf: 65:73:ad:98:ce:e3:2a:34:64:54:4d:79:2b:a2:1f:5c:b5:43: eb:7b:59:ec:c9:9f:15:06:e1:69:0c:05:24:8b:7a:77:82:23: 48:2b:78:03:6c:d3:25:a7:4a:ac:5d:ca:91:64:13:80:ff:2c: 4c:09:a4:b5:62:13:a4:e7:46:3b:4d:41:e6:cd:ea:18:28:e8: be:54:5b:6e:34:fc:cc:8b:13:a5:b1:35:ed:c3:95:cf:74:db: ce:54:72:d6:1c:9c:19:10:00:f1:f2:0a:9c:f7:eb:40:f0:56: 14:63:06:54:d2:98:0c:f8:aa:57:6b:47:e2:ce:31:e8:ea:2b: 24:34:b8:d5:56:c8:2d:92:d1:92:fa:11:b8:8d:8e:cc:6d:ff: 54:27:62:9a:87:70:56:c4:b0:98:1c:cd:d6:b1:4b:09:7c:80: 82:3e:05:52:c4:f0:18:63:87:e8:08:28:13:89:04:c7:ac:10: 58:b4:47:a5:91:65:bf:7d:7d:f0:3b:b5:49:ed:73:51:4a:d4: 06:4a:aa:33 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUxMTAzMDIzOTEzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4MTVkMS1lMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXxK0Ff/5bfSIxxdRYsEg44xEnQwiEkwUL9xk1hPVZgE3TElnZXghUZdldWD ejEihBqWMYuki6rRnJg1uIOCGYzZlA9/BIScpbm8nr9r+Cxih3/ssh2yaBDus/UE GIRMJRc8lVuiwfh4/qm1KwPvgy8xAZzep9gMRcMWaCxccos1KuvT04L5uYjlH6FT zysJsCa773kAlnfi+ObIXKeC1gXwJ5q4iZBcWUMJHb2SNPkzsuZhLKatmrQTU+2T QEYJONYcoeKzYNTK/TjY89QQh0AXu9MjFUYMcIvZMWwetn3tt5RsCAJk15NY9nA0 vzexPzFAYBkMUvxwHUI0DtAZTQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHlFXvph s1xdrZIZ/wCOwTVQUznBMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk3RjUvOTE3MEM0MkEyNzQ0MTFFRDhDMTM5QjUxQzRGOUFFMDIvNDhCNjM5QzhC ODVFMTFGMEIwRjBCMDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn8iADBARxNAAwDQYJKoZIhvcNAQELBQADggEBAHHLHWhk WTqUmUxU8LnRKTzulsaVroiZLBjxC3F0Hh50Kaf8vXmZEb7ZxIFJqw49FJ0HyycN v2VzrZjO4yo0ZFRNeSuiH1y1Q+t7WezJnxUG4WkMBSSLeneCI0greANs0yWnSqxd ypFkE4D/LEwJpLViE6TnRjtNQebN6hgo6L5UW240/MyLE6WxNe3Dlc90285UctYc nBkQAPHyCpz360DwVhRjBlTSmAz4qldrR+LOMejqKyQ0uNVWyC2S0ZL6EbiNjsxt /1QnYpqHcFbEsJgczdaxSwl8gII+BVLE8Bhjh+gIKBOJBMesEFi0R6WRZb99ffA7 tUntc1FK1AZKqjM= -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:49 2025 by rpki-client