$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/D18B56F408DD11ED830BEB5CC4F9AE02.roa File: D18B56F408DD11ED830BEB5CC4F9AE02.roa (raw, json) Hash identifier: 4GuPHy/Lus1nkrgty0dsCrHIRZYa95o0Quv9w9TYCWg= Subject key identifier: 39:42:41:DE:9A:D2:8F:2C:AB:C1:03:CB:CF:94:EC:A2:CA:CD:59:9A Certificate issuer: /CN=A91D4190/serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC Certificate serial: 0261 Authority key identifier: 57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/D18B56F408DD11ED830BEB5CC4F9AE02.roa Signing time: Tue 11 Mar 2025 01:47:40 +0000 ROA not before: Tue 11 Mar 2025 01:47:40 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136512 IP address blocks: 103.91.104.0/23 maxlen: 24 2001:df1:700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 609 (0x261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4190, serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC Validity Not Before: Mar 11 01:47:40 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67cf963c-5477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:79:0f:11:ce:86:7b:db:9e:6b:97:17:96: e1:7c:7e:a1:4e:6a:fb:9b:f0:d4:c4:b9:0e:56:6f: 05:24:24:31:df:95:4b:bf:ae:b0:65:de:0b:9c:6c: be:15:49:44:86:55:d7:6e:52:2a:9b:6e:27:3d:e7: 78:9d:98:eb:90:db:df:71:6e:d6:56:71:3b:4e:ef: 2c:da:83:51:03:33:dc:66:ac:01:20:08:ea:3b:7f: c0:9a:51:f1:f6:b3:2f:e9:2f:b3:eb:f4:fb:60:20: 59:0b:1b:59:d7:71:1e:87:40:d5:25:59:6b:ee:f9: b1:38:ae:7d:a3:18:77:54:06:87:0b:79:f2:03:e5: 7a:c1:8f:7e:a5:05:4f:2e:db:71:d3:ff:88:f2:c3: c7:07:78:c2:bc:73:ff:25:00:23:0d:74:e8:e9:de: 9f:92:6b:0e:fd:ce:af:97:65:71:1e:4c:54:56:11: fb:d9:da:54:c5:07:36:1b:0c:41:ae:66:a3:87:ca: ca:6a:95:97:77:dc:f4:6d:ac:8f:35:37:88:e1:28: a7:94:52:42:02:3e:65:bd:ae:83:2c:42:7c:50:87: a6:96:09:e9:f2:13:36:f0:c7:fe:b9:2f:3b:65:71: 13:68:9c:94:fd:9f:27:4e:22:d4:eb:12:54:83:d4: 6c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:42:41:DE:9A:D2:8F:2C:AB:C1:03:CB:CF:94:EC:A2:CA:CD:59:9A X509v3 Authority Key Identifier: keyid:57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/D18B56F408DD11ED830BEB5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.91.104.0/23 IPv6: 2001:df1:700::/48 Signature Algorithm: sha256WithRSAEncryption 56:1e:ec:06:66:bc:fc:17:d4:53:98:66:25:f1:c0:76:74:ca: 4f:54:a7:eb:bc:c6:25:40:34:2d:a0:0d:ef:b1:47:50:57:26: be:dc:66:87:d0:ca:58:40:19:00:b7:f9:a7:47:2e:f7:c6:eb: da:ed:fc:4e:55:97:e7:4a:b6:3d:10:d9:cc:2d:aa:ab:ed:17: 92:eb:51:62:1a:3a:64:92:e8:ec:a9:80:9b:97:33:62:17:58: 00:4e:23:6d:dd:64:e8:9b:b0:5e:fc:01:ff:ba:4c:c8:3e:a5: c5:88:50:8c:37:97:20:66:e3:f8:35:a7:33:19:50:03:48:71: 21:99:15:8b:6b:39:52:e0:ff:30:58:e2:e0:3b:03:92:38:97: f0:3d:48:c2:1d:db:d2:3a:5e:8b:9c:79:da:72:56:fd:a0:71: ef:e5:29:7f:77:71:9f:4d:76:d1:53:18:13:64:98:7f:50:ca: 82:a8:9c:0e:96:f6:99:53:41:42:1b:cf:41:5e:e7:7b:70:e2: 0e:f7:14:c3:37:0f:60:fe:5a:d3:f8:d9:bb:37:60:13:e9:5d: 46:06:2f:1f:52:2f:45:3f:05:fe:ba:d3:2d:a6:7d:6d:ac:c4: c4:90:ad:2d:cf:cb:80:7b:22:ce:4b:d1:60:22:81:7b:26:c9: 2e:6a:03:f9 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQxOTAxMTAvBgNVBAUTKDU3RTc1OURDMjc5QjU0NkVEQTgxQjdFRkRBRjU1Nzg1 MTZCODBBRkMwHhcNMjUwMzExMDE0NzQwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmOTYzYy01NDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzLN5DxHOhnvbnmuXF5bhfH6hTmr7m/DUxLkOVm8FJCQx35VLv66wZd4LnGy+ FUlEhlXXblIqm24nPed4nZjrkNvfcW7WVnE7Tu8s2oNRAzPcZqwBIAjqO3/AmlHx 9rMv6S+z6/T7YCBZCxtZ13Eeh0DVJVlr7vmxOK59oxh3VAaHC3nyA+V6wY9+pQVP Lttx0/+I8sPHB3jCvHP/JQAjDXTo6d6fkmsO/c6vl2VxHkxUVhH72dpUxQc2GwxB rmajh8rKapWXd9z0bayPNTeI4SinlFJCAj5lva6DLEJ8UIemlgnp8hM28Mf+uS87 ZXETaJyU/Z8nTiLU6xJUg9RsMQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDlCQd6a 0o8sq8EDy8+U7KLKzVmaMB8GA1UdIwQYMBaAFFfnWdwnm1Ru2oG379r1V4UWuAr8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE5MC9GOURFNzZDQTA4 REExMUVEOTQwMkQzNTdDNEY5QUUwMi9WLWRaM0NlYlZHN2FnYmZ2MnZWWGhSYTRD dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YtZFozQ2ViVkc3YWdiZnYydlZYaFJhNEN2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQxOTAvRjlERTc2Q0EwOERBMTFFRDk0MDJEMzU3QzRGOUFFMDIvRDE4QjU2RjQw OEREMTFFRDgzMEJFQjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnW2gwDwQCAAIwCQMHACABDfEHADANBgkqhkiG9w0BAQsF AAOCAQEAVh7sBma8/BfUU5hmJfHAdnTKT1Sn67zGJUA0LaAN77FHUFcmvtxmh9DK WEAZALf5p0cu98br2u38TlWX50q2PRDZzC2qq+0XkutRYho6ZJLo7KmAm5czYhdY AE4jbd1k6JuwXvwB/7pMyD6lxYhQjDeXIGbj+DWnMxlQA0hxIZkVi2s5UuD/MFji 4DsDkjiX8D1Iwh3b0jpei5x52nJW/aBx7+Upf3dxn0120VMYE2SYf1DKgqicDpb2 mVNBQhvPQV7ne3DiDvcUwzcPYP5a0/jZuzdgE+ldRgYvH1IvRT8F/rrTLaZ9bazE xJCtLc/LgHsizkvRYCKBeybJLmoD+Q== -----END CERTIFICATE-----Generated at Wed Nov 5 11:25:13 2025 by rpki-client