$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/9F46C468355711EBA5B81020C4F9AE02.roa File: 9F46C468355711EBA5B81020C4F9AE02.roa (raw, json) Hash identifier: rnWfH5zifMRcEg8xSpzN9vlamGOWwSh9ly8y02BYf6Q= Subject key identifier: E1:6E:60:84:71:7B:DB:67:05:EF:01:52:09:3F:2B:86:F0:EA:A6:29 Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Certificate serial: 077E Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/9F46C468355711EBA5B81020C4F9AE02.roa Signing time: Wed 29 Oct 2025 05:24:23 +0000 ROA not before: Wed 29 Oct 2025 05:24:23 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135356 IP address blocks: 45.251.104.0/24 maxlen: 24 45.251.105.0/24 maxlen: 24 45.251.106.0/24 maxlen: 24 45.251.107.0/24 maxlen: 24 45.251.108.0/24 maxlen: 24 45.251.109.0/24 maxlen: 24 45.251.110.0/24 maxlen: 24 45.251.111.0/24 maxlen: 24 103.220.72.0/24 maxlen: 24 103.220.73.0/24 maxlen: 24 103.220.74.0/24 maxlen: 24 103.220.75.0/24 maxlen: 24 103.220.76.0/24 maxlen: 24 103.220.77.0/24 maxlen: 24 103.220.78.0/24 maxlen: 24 103.220.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B Validity Not Before: Oct 29 05:24:23 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6901a507-6957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:89:15:6d:93:ff:d7:22:bf:e9:80:96:5c: 5b:87:7b:af:87:41:6c:13:0f:f4:cc:40:b3:4b:55: 9e:ee:73:7b:de:07:98:ea:e1:43:97:49:3c:ec:56: 2f:bc:56:f6:26:e8:2d:c6:09:36:a6:7d:75:63:85: bf:9c:b9:fd:7a:75:73:fc:3b:bf:1e:2b:69:4d:f2: e6:6d:8f:7b:7c:52:a8:19:35:52:6d:fd:36:c4:e7: ec:bd:6c:01:ce:5e:aa:d9:ac:0c:2b:f1:87:1f:4e: 9e:49:48:e4:36:cf:87:81:10:83:71:9f:5b:6a:e6: b2:de:dc:06:8f:b5:3a:15:06:1f:df:71:8f:85:b8: 43:c9:71:67:69:a8:05:8a:e5:9c:79:51:d1:9e:cb: a7:b7:44:ed:ab:8e:be:66:d6:f2:d3:0e:40:93:d7: 25:2c:8b:b1:95:86:2b:9d:b1:f0:86:5c:1c:cf:56: d2:ed:73:ec:b7:6d:e9:3b:a1:75:9d:45:3e:c5:5f: 8e:38:22:1e:9d:ad:ea:27:f2:6b:6f:f9:6b:56:78: f9:61:f1:ba:38:43:88:83:2e:5a:31:44:6e:32:d1: b2:b1:7f:96:a1:9c:6e:21:f0:f8:b5:bf:a4:9e:ec: c4:7e:e7:57:a9:3b:ec:c2:ba:0d:9b:4c:6f:1b:1d: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6E:60:84:71:7B:DB:67:05:EF:01:52:09:3F:2B:86:F0:EA:A6:29 X509v3 Authority Key Identifier: keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/9F46C468355711EBA5B81020C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.251.104.0/21 103.220.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1b:97:7d:7b:a3:6a:42:01:79:3d:fd:d7:fd:e1:27:bc:61:32: 46:a0:cb:36:92:e5:20:ed:14:e4:42:50:82:45:cb:48:25:f9: 47:6c:90:28:6e:f4:c1:66:20:76:81:e2:c8:5e:6d:e2:b9:61: 6e:a3:f3:cb:ac:9c:80:ba:2c:4c:e0:12:16:b7:a5:31:ff:bb: 7c:12:80:95:41:54:4c:0f:48:2f:a7:f8:62:45:3d:81:21:2e: d7:db:a8:16:c8:b6:49:7e:30:eb:01:64:74:a4:2a:b9:15:1b: 61:d6:43:22:cc:23:f1:e9:ba:72:ee:8f:2a:09:b4:71:be:f7: 1c:88:bd:53:3c:4e:c1:76:2c:85:0f:4a:ff:87:a8:80:e7:1f: 85:ec:23:46:e5:5b:40:67:31:a3:be:24:cc:91:c3:5a:26:6e: 55:fc:51:a1:48:b8:3f:95:3e:74:2f:8d:cc:61:f4:ef:67:52: e1:31:af:b3:13:ad:bc:9b:e3:7a:dc:4c:45:3f:ef:a8:b0:99: ad:d8:a0:b9:ad:02:fd:35:cd:6f:9c:b4:ef:3b:d9:13:c6:fd: c9:3c:e9:f6:c8:67:d4:88:d1:a0:2b:40:ef:c2:84:a3:a5:51: 9b:c9:ec:bf:4f:5f:dc:7d:89:9f:63:1e:25:27:df:3a:9f:c2: 46:a7:17:d2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE4ODcxMTAvBgNVBAUTKEUwRTlCOTM5OUI4QTRBNUZEQ0RFMjA5RkM1QkVDMDc4 QUY5NUNGN0IwHhcNMjUxMDI5MDUyNDIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxYTUwNy02OTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtIGJFW2T/9civ+mAllxbh3uvh0FsEw/0zECzS1We7nN73geY6uFDl0k87FYv vFb2Jugtxgk2pn11Y4W/nLn9enVz/Du/HitpTfLmbY97fFKoGTVSbf02xOfsvWwB zl6q2awMK/GHH06eSUjkNs+HgRCDcZ9bauay3twGj7U6FQYf33GPhbhDyXFnaagF iuWceVHRnsunt0Ttq46+Ztby0w5Ak9clLIuxlYYrnbHwhlwcz1bS7XPst23pO6F1 nUU+xV+OOCIena3qJ/Jrb/lrVnj5YfG6OEOIgy5aMURuMtGysX+WoZxuIfD4tb+k nuzEfudXqTvswroNm0xvGx0kCwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOFuYIRx e9tnBe8BUgk/K4bw6qYpMB8GA1UdIwQYMBaAFODpuTmbikpf3N4gn8W+wHivlc97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTg4Ny84NEVFOEI2MDM1 NTExMUVCOUY0MTk1MEVDNEY5QUUwMi80T201T1p1S1NsX2MzaUNmeGI3QWVLLVZ6 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRPbTVPWnVLU2xfYzNpQ2Z4YjdBZUstVnozcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE4ODcvODRFRThCNjAzNTUxMTFFQjlGNDE5NTBFQzRGOUFFMDIvOUY0NkM0Njgz NTU3MTFFQkE1QjgxMDIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAMt+2gDBANn3EgwDQYJKoZIhvcNAQELBQADggEBABuXfXuj akIBeT391/3hJ7xhMkagyzaS5SDtFORCUIJFy0gl+UdskChu9MFmIHaB4shebeK5 YW6j88usnIC6LEzgEha3pTH/u3wSgJVBVEwPSC+n+GJFPYEhLtfbqBbItkl+MOsB ZHSkKrkVG2HWQyLMI/HpunLujyoJtHG+9xyIvVM8TsF2LIUPSv+HqIDnH4XsI0bl W0BnMaO+JMyRw1omblX8UaFIuD+VPnQvjcxh9O9nUuExr7MTrbyb43rcTEU/76iw ma3YoLmtAv01zW+ctO872RPG/ck86fbIZ9SI0aArQO/ChKOlUZvJ7L9PX9x9iZ9j HiUn3zqfwkanF9I= -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:43 2025 by rpki-client