$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/4B1E3E947EB411E994ED5B25C4F9AE02.roa File: 4B1E3E947EB411E994ED5B25C4F9AE02.roa (raw, json) Hash identifier: UyCHDG2qAGPzolKitsZ8J2AXElrKooslUCGA3T3LeQ0= Subject key identifier: 71:6B:63:C4:EF:95:13:11:EC:84:5D:6E:93:2E:9D:06:AF:41:BE:C0 Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F56 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/4B1E3E947EB411E994ED5B25C4F9AE02.roa Signing time: Tue 04 Nov 2025 18:06:37 +0000 ROA not before: Tue 04 Nov 2025 18:06:37 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45780 IP address blocks: 103.100.149.0/24 maxlen: 24 2001:df2:7d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3926 (0xf56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Nov 4 18:06:37 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=690a40ad-0e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:bf:04:78:fb:ee:f0:ed:a2:cd:8a:59:52: 38:67:43:3e:ad:36:34:5c:c2:63:54:80:12:67:f5: 3e:a1:1e:37:55:64:f4:b8:c5:a6:03:e4:4b:cf:02: c1:1e:c6:a6:ca:38:03:ec:c7:c5:81:4b:c3:0b:e0: b3:4d:68:01:62:d2:4c:d9:c3:de:09:fc:a1:03:e1: 69:30:43:ed:38:ad:b5:34:c1:da:e4:f1:37:0e:f3: fb:29:4b:de:15:d2:21:c4:c2:5f:93:6c:25:1a:5f: f2:df:b2:fb:38:2f:a0:b3:b0:1f:8b:ad:3b:cb:e8: 06:5e:ac:d4:ad:05:35:b3:87:80:f1:19:ca:69:59: c3:8f:f8:d2:29:ca:4f:1c:fd:d2:3c:0d:90:f2:27: 92:e8:50:ad:11:00:68:35:f9:f1:31:11:ad:f1:f0: e4:53:ad:84:82:41:89:ac:86:17:ed:60:09:08:5f: 32:89:e0:75:7e:5f:17:c7:ce:ab:31:6e:d1:21:d4: 80:79:e7:c5:26:cf:42:75:5c:83:fa:96:66:b7:a2: ee:54:b7:a5:e2:b5:4e:0b:5f:2e:a0:61:27:84:3e: 8e:ea:a3:cb:0b:dc:ed:6d:32:cc:13:50:b8:59:ce: 4e:34:77:2b:9f:a8:22:51:4a:40:81:73:f6:2b:94: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6B:63:C4:EF:95:13:11:EC:84:5D:6E:93:2E:9D:06:AF:41:BE:C0 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/4B1E3E947EB411E994ED5B25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.149.0/24 IPv6: 2001:df2:7d00::/48 Signature Algorithm: sha256WithRSAEncryption 54:46:eb:5a:21:2b:4d:d3:8e:16:cb:7e:8a:4e:7d:3a:1c:0f: 84:02:1c:23:86:03:f1:5e:f8:8d:29:b6:83:54:aa:b9:eb:4a: e4:2f:3d:6c:42:bc:60:12:4b:08:e3:5e:6e:09:72:ec:9e:49: 41:ae:9d:51:8f:94:db:53:ba:92:a1:f6:e0:32:d2:5f:06:34: 17:8f:4b:9f:8b:4e:eb:fa:3d:26:f8:c6:ad:04:7e:65:31:41: b0:71:94:c3:30:1f:dd:eb:83:0e:a7:b0:74:d4:27:a3:c7:9e: 4b:3a:3c:d6:fe:a0:99:a0:0c:e3:0d:02:1f:ca:86:b1:10:eb: 03:b3:c1:e4:a3:9c:13:95:21:49:48:f8:68:d6:59:ee:35:ba: eb:07:d5:49:d0:0c:6b:51:bd:61:d2:81:47:de:6d:21:e7:cb: da:eb:51:84:9f:b9:c5:2c:75:59:d8:fa:17:2c:30:8d:c5:a2: a7:2f:75:ce:1a:74:1e:cd:86:37:bc:09:c9:73:de:08:d1:b1: 51:20:9d:20:c9:c0:2b:00:07:d8:03:83:18:a9:b4:e5:89:77: 75:2e:bf:7b:37:e4:06:8e:95:5b:8a:b8:4b:17:2d:df:ac:7b: da:ad:10:58:db:7b:bd:b4:49:36:27:78:49:6b:5a:eb:e2:ab: 14:e6:24:18 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICD1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUxMTA0MTgwNjM3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhNDBhZC0wZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOq/BHj77vDtos2KWVI4Z0M+rTY0XMJjVIASZ/U+oR43VWT0uMWmA+RLzwLB HsamyjgD7MfFgUvDC+CzTWgBYtJM2cPeCfyhA+FpMEPtOK21NMHa5PE3DvP7KUve FdIhxMJfk2wlGl/y37L7OC+gs7Afi607y+gGXqzUrQU1s4eA8RnKaVnDj/jSKcpP HP3SPA2Q8ieS6FCtEQBoNfnxMRGt8fDkU62EgkGJrIYX7WAJCF8yieB1fl8Xx86r MW7RIdSAeefFJs9CdVyD+pZmt6LuVLel4rVOC18uoGEnhD6O6qPLC9ztbTLME1C4 Wc5ONHcrn6giUUpAgXP2K5RvOQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFHFrY8Tv lRMR7IRdbpMunQavQb7AMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTExNTUvNTM5OThBMzQ3RUIzMTFFOUFCOUM3QjI0QzRGOUFFMDIvNEIxRTNFOTQ3 RUI0MTFFOTk0RUQ1QjI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnZJUwDwQCAAIwCQMHACABDfJ9ADANBgkqhkiG9w0BAQsF AAOCAQEAVEbrWiErTdOOFst+ik59OhwPhAIcI4YD8V74jSm2g1SquetK5C89bEK8 YBJLCONebgly7J5JQa6dUY+U21O6kqH24DLSXwY0F49Ln4tO6/o9JvjGrQR+ZTFB sHGUwzAf3euDDqewdNQno8eeSzo81v6gmaAM4w0CH8qGsRDrA7PB5KOcE5UhSUj4 aNZZ7jW66wfVSdAMa1G9YdKBR95tIefL2utRhJ+5xSx1Wdj6FywwjcWipy91zhp0 Hs2GN7wJyXPeCNGxUSCdIMnAKwAH2AODGKm05Yl3dS6/ezfkBo6VW4q4Sxct36x7 2q0QWNt7vbRJNid4SWta6+KrFOYkGA== -----END CERTIFICATE-----Generated at Wed Nov 5 13:06:53 2025 by rpki-client