$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/4FFFD8D41D7211EFA095B25AC4F9AE02.roa File: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (raw, json) Hash identifier: 7t/pdYKTKmwUGR/lE+qnEM4TrcYeXROZCsv49aYTSqk= Subject key identifier: 1D:E6:8F:7F:BB:AA:D3:0C:5B:AB:6C:AB:C4:1E:9D:39:68:AD:10:01 Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: BD Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/4FFFD8D41D7211EFA095B25AC4F9AE02.roa Signing time: Fri 09 May 2025 05:17:05 +0000 ROA not before: Fri 09 May 2025 05:17:05 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152730 IP address blocks: 203.14.108.0/24 maxlen: 24 2001:df0:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: May 9 05:17:05 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=681d8fd1-3bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c1:c0:d4:49:60:f5:30:98:af:5f:91:3a:39: da:82:ee:89:d6:05:07:5a:0b:2e:c4:ae:2b:03:ce: 42:99:a0:29:60:c7:50:2d:c8:91:ba:a3:f4:d5:0b: e7:90:31:ae:af:58:78:5c:22:e8:70:bd:18:25:33: 23:c4:86:82:4e:0b:e3:b1:20:fe:01:32:0f:14:fb: c1:52:8c:64:42:bb:61:3e:cd:0c:b5:42:da:78:49: 4e:ff:6b:34:d6:66:5b:3b:fc:d9:8e:4e:4f:a3:de: 5a:d5:56:51:e4:00:19:f7:06:e2:e8:bb:99:6b:c4: 31:b6:24:25:02:3b:54:92:e8:7f:8f:6f:a7:56:f9: ba:0a:11:6b:37:b6:f9:1d:88:92:19:09:a6:0b:fb: f2:fc:f5:f7:49:33:b1:25:3b:f5:be:03:a4:0d:fd: 94:80:95:c7:e1:e9:0b:51:0d:02:8d:59:62:5a:ff: 21:3f:8c:29:96:ed:b5:56:9b:ce:dd:f4:e1:0d:92: 83:9d:88:b0:b0:80:fc:7e:61:3c:8b:5e:a9:b2:46: 62:3b:20:9d:30:3c:d4:2d:c2:6c:16:27:af:f2:2f: 42:34:2e:44:16:7b:1f:0c:aa:59:87:73:f2:48:63: a3:66:a9:27:52:1a:df:77:ca:e5:e6:af:bd:a4:2b: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E6:8F:7F:BB:AA:D3:0C:5B:AB:6C:AB:C4:1E:9D:39:68:AD:10:01 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/4FFFD8D41D7211EFA095B25AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.14.108.0/24 IPv6: 2001:df0:c340::/48 Signature Algorithm: sha256WithRSAEncryption 56:28:0b:38:17:d8:c1:cc:bb:03:d7:55:c7:00:a2:11:63:d6: 95:8f:cb:cf:ad:37:2e:ef:a0:15:10:a3:69:ee:a6:c3:a8:33: ac:9a:51:cd:7b:12:3d:9e:b4:33:6f:ae:fb:e4:2e:69:02:69: b2:b0:48:ba:a7:95:ea:59:29:8d:99:5c:3e:ad:bf:9e:48:e5: 7d:45:be:20:23:28:2d:a4:ec:56:d7:3f:9a:18:28:d8:82:6a: 32:78:04:5c:25:44:18:dd:f1:6b:1c:56:67:61:a6:4d:0d:2f: 03:01:02:a3:6d:66:fa:f6:90:37:33:f9:f9:07:8c:d3:1f:31: c9:fe:41:4a:76:5b:43:84:30:fd:9e:2a:f1:7b:ea:1c:fd:bf: 06:35:51:39:37:bd:8e:09:13:ee:fc:7c:a8:2a:c5:ef:d7:c3: 77:66:93:fa:ce:cb:35:7c:27:82:41:d9:66:60:2e:c6:f7:95: c9:c9:c2:d5:8e:e3:69:b1:b7:9a:5b:3d:7e:dc:56:e3:04:7f: ec:2a:d9:b0:61:d1:de:a5:64:5a:d7:f5:fd:97:74:dd:37:a6: cd:ee:22:04:7b:2d:6f:5b:7b:c0:ca:73:03:8a:55:66:90:e0: 9a:94:d8:79:73:43:e9:de:1b:f4:0f:31:06:73:46:cd:d6:27: 02:37:f4:d8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjUwNTA5MDUxNzA1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkOGZkMS0zYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsHA1Elg9TCYr1+ROjnagu6J1gUHWgsuxK4rA85CmaApYMdQLciRuqP01Qvn kDGur1h4XCLocL0YJTMjxIaCTgvjsSD+ATIPFPvBUoxkQrthPs0MtULaeElO/2s0 1mZbO/zZjk5Po95a1VZR5AAZ9wbi6LuZa8QxtiQlAjtUkuh/j2+nVvm6ChFrN7b5 HYiSGQmmC/vy/PX3STOxJTv1vgOkDf2UgJXH4ekLUQ0CjVliWv8hP4wplu21VpvO 3fThDZKDnYiwsID8fmE8i16pskZiOyCdMDzULcJsFiev8i9CNC5EFnsfDKpZh3Py SGOjZqknUhrfd8rl5q+9pCsyBwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB3mj3+7 qtMMW6tsq8QenTlorRABMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDAzRkMvQzdCMDkzNTYxRDcxMTFFRjk1RTI2ODQwQzRGOUFFMDIvNEZGRkQ4RDQx RDcyMTFFRkEwOTVCMjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLDmwwDwQCAAIwCQMHACABDfDDQDANBgkqhkiG9w0BAQsF AAOCAQEAVigLOBfYwcy7A9dVxwCiEWPWlY/Lz603Lu+gFRCjae6mw6gzrJpRzXsS PZ60M2+u++QuaQJpsrBIuqeV6lkpjZlcPq2/nkjlfUW+ICMoLaTsVtc/mhgo2IJq MngEXCVEGN3xaxxWZ2GmTQ0vAwECo21m+vaQNzP5+QeM0x8xyf5BSnZbQ4Qw/Z4q 8XvqHP2/BjVROTe9jgkT7vx8qCrF79fDd2aT+s7LNXwngkHZZmAuxveVycnC1Y7j abG3mls9ftxW4wR/7CrZsGHR3qVkWtf1/Zd03Temze4iBHstb1t7wMpzA4pVZpDg mpTYeXND6d4b9A8xBnNGzdYnAjf02A== -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:22 2025 by rpki-client