$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa File: 38E45CE08C2511EDB64DB410C4F9AE02.roa (raw, json) Hash identifier: qmc/H0ByapLSZ1bg3nVk+PyVwmov94i2JIkcZK53qgY= Subject key identifier: 6D:E9:A1:26:81:C0:7F:EB:29:3B:93:73:A7:9A:72:7C:92:DB:05:0E Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Certificate serial: 0236 Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa Signing time: Fri 31 Oct 2025 02:17:00 +0000 ROA not before: Fri 31 Oct 2025 02:17:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 131471 IP address blocks: 103.152.42.0/24 maxlen: 24 103.152.43.0/24 maxlen: 24 2001:df7:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9 Validity Not Before: Oct 31 02:17:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69041c1b-008d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:2c:06:4f:c7:e6:94:7a:66:6a:a1:86:cc: bf:70:44:6d:c1:1f:ce:90:7f:ac:c6:17:54:17:ba: 6f:c2:1a:e8:42:8c:42:ce:3d:55:e7:93:3b:7d:36: c0:4c:1f:75:20:48:dd:3b:0a:57:0b:eb:06:de:8b: e9:8d:87:71:e6:4b:cf:d2:00:ff:b2:12:eb:86:87: 1d:4a:62:00:cf:86:ec:59:42:55:40:57:e9:fc:21: 00:c2:bc:cd:a6:12:56:81:86:1a:b6:8e:ec:c8:c3: 28:33:c3:47:36:f7:59:ca:9b:82:a6:0f:1c:b8:0e: cc:c7:e5:f5:28:a1:f4:70:3b:61:51:bf:78:cf:9c: 32:cc:7b:cf:c1:4d:46:cb:2d:6b:8f:63:0f:55:af: 6f:3d:81:d9:d2:98:20:45:ed:a6:e8:ab:6b:6a:dd: 32:63:a1:59:ab:ba:67:0c:0c:11:c6:68:24:5b:e7: 4a:5c:3d:4e:d4:1a:ff:63:c0:0a:13:83:aa:0d:3a: 0b:83:e2:88:30:96:47:a2:19:1e:9d:c4:7a:22:4c: b9:96:fe:49:96:6a:d3:f7:6d:4c:de:61:e0:4d:63: 7f:fe:31:7f:2f:54:f9:d4:83:34:c1:7e:a9:91:fd: 9f:ac:17:88:f7:cc:3a:f1:98:3d:9a:a6:a6:d5:d3: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E9:A1:26:81:C0:7F:EB:29:3B:93:73:A7:9A:72:7C:92:DB:05:0E X509v3 Authority Key Identifier: keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/38E45CE08C2511EDB64DB410C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.42.0/23 IPv6: 2001:df7:1f80::/48 Signature Algorithm: sha256WithRSAEncryption 56:25:05:86:ce:87:3a:81:e6:88:39:a5:3e:96:bc:f0:aa:00: 72:13:f3:9f:1c:99:be:69:12:e5:5d:a0:35:2a:9c:fc:4f:84: d4:9d:ba:54:57:b8:61:f2:60:55:00:c3:52:44:7c:63:40:2e: a8:98:c1:72:21:3e:d8:a8:2f:77:b5:a1:f9:70:1f:49:cf:cd: 53:f2:11:63:d1:48:6e:eb:38:e7:fb:74:94:73:85:e8:5c:93: 7f:d0:92:53:ba:e6:6a:62:bf:c8:20:a6:ce:52:11:f6:c8:cc: 27:e0:97:0a:89:75:c5:0a:c2:1e:c4:4d:b8:b8:90:68:eb:64: 46:76:1c:13:69:7f:66:41:49:50:8c:64:d1:2f:da:af:6b:d5: 5c:09:c6:74:91:12:59:c7:e1:f4:59:ab:ef:47:6f:78:59:88: db:37:4a:cc:5e:aa:8e:c0:d8:ea:57:48:29:45:f5:ed:db:a5: 48:38:90:c1:61:e5:92:1d:5a:48:0f:3a:0b:d0:50:ab:21:89: 18:4b:f4:73:d8:27:f0:3e:ae:79:35:32:bd:f9:f3:56:8b:ee: af:35:58:c4:89:a1:67:b8:b1:d2:45:39:67:7f:b2:e8:23:08: 3b:fb:e9:f1:40:e0:69:2d:d0:20:3c:f5:f9:24:42:3f:95:e7: 49:94:df:bb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQUUxMTAvBgNVBAUTKDY5NzYyMDUxNUU3QjFFRThBQzdGM0Y2RDEzQkVBRUJB NjJDNEVEQTkwHhcNMjUxMDMxMDIxNzAwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0MWMxYi0wMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pAsBk/H5pR6Zmqhhsy/cERtwR/OkH+sxhdUF7pvwhroQoxCzj1V55M7fTbA TB91IEjdOwpXC+sG3ovpjYdx5kvP0gD/shLrhocdSmIAz4bsWUJVQFfp/CEAwrzN phJWgYYato7syMMoM8NHNvdZypuCpg8cuA7Mx+X1KKH0cDthUb94z5wyzHvPwU1G yy1rj2MPVa9vPYHZ0pggRe2m6Ktrat0yY6FZq7pnDAwRxmgkW+dKXD1O1Br/Y8AK E4OqDToLg+KIMJZHohkencR6Iky5lv5JlmrT921M3mHgTWN//jF/L1T51IM0wX6p kf2frBeI98w68Zg9mqam1dP1pwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG3poSaB wH/rKTuTc6eacnyS2wUOMB8GA1UdIwQYMBaAFGl2IFFeex7orH8/bRO+rrpixO2p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJBRS9DNzBGRUEyQThD MjAxMUVEQURENUM4MDlDNEY5QUUwMi9hWFlnVVY1N0h1aXNmejl0RTc2dXVtTEU3 YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FYWWdVVjU3SHVpc2Z6OXRFNzZ1dW1MRTdhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUyQUUvQzcwRkVBMkE4QzIwMTFFREFERDVDODA5QzRGOUFFMDIvMzhFNDVDRTA4 QzI1MTFFREI2NERCNDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmCowDwQCAAIwCQMHACABDfcfgDANBgkqhkiG9w0BAQsF AAOCAQEAViUFhs6HOoHmiDmlPpa88KoAchPznxyZvmkS5V2gNSqc/E+E1J26VFe4 YfJgVQDDUkR8Y0AuqJjBciE+2Kgvd7Wh+XAfSc/NU/IRY9FIbus45/t0lHOF6FyT f9CSU7rmamK/yCCmzlIR9sjMJ+CXCol1xQrCHsRNuLiQaOtkRnYcE2l/ZkFJUIxk 0S/ar2vVXAnGdJESWcfh9Fmr70dveFmI2zdKzF6qjsDY6ldIKUX17dulSDiQwWHl kh1aSA86C9BQqyGJGEv0c9gn8D6ueTUyvfnzVovurzVYxImhZ7ix0kU5Z3+y6CMI O/vp8UDgaS3QIDz1+SRCP5XnSZTfuw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:03:20 2025 by rpki-client