$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa File: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (raw, json) Hash identifier: eQjSLvcTPm64WJsuRzl8viIdz6G/ld4B/GelvP5rP4g= Subject key identifier: 66:87:C2:1B:08:BE:3F:B1:AA:8B:9E:D5:7A:9D:DC:23:34:6E:D5:D7 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0B89 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa Signing time: Sat 18 Oct 2025 19:58:52 +0000 ROA not before: Sat 18 Oct 2025 19:58:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138320 IP address blocks: 103.122.252.0/22 maxlen: 22 103.122.252.0/23 maxlen: 23 103.122.252.0/24 maxlen: 24 103.122.253.0/24 maxlen: 24 103.122.254.0/23 maxlen: 23 103.122.254.0/24 maxlen: 24 103.122.255.0/24 maxlen: 24 2403:98c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2953 (0xb89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Oct 18 19:58:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68f3f17c-b0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:0b:e9:c9:21:a8:ae:9c:a7:49:73:52:db: a0:95:53:7b:a5:c8:91:a0:7b:fc:de:4e:ae:f9:04: 27:de:6d:2d:e6:57:e9:4b:68:8f:13:9c:a9:a8:3c: 43:b2:d9:40:d9:b3:d6:5c:d0:3d:27:ec:2d:c5:7e: 32:94:50:f0:52:45:d7:bb:f4:de:0b:a1:a6:c6:cd: f3:58:3d:48:1d:00:57:ef:b1:e7:b6:e2:cf:db:69: 1e:11:b0:b7:79:1f:8c:59:7f:15:91:d1:dc:74:73: c1:b5:3c:9c:b6:bc:78:a6:3f:7f:bf:f9:5e:ea:aa: 0d:b6:33:9a:d9:b5:a8:9c:e3:48:3b:78:95:54:67: 95:8c:1e:09:a5:32:c8:68:86:22:6c:2f:fa:fd:24: de:d4:11:d9:96:8d:4d:2a:50:ff:6f:c9:17:3e:6c: 7f:80:f2:a6:21:13:6b:70:ed:85:66:96:2d:49:59: cb:f1:2e:f9:1d:59:fe:9c:42:0c:55:ae:f0:5a:70: 98:a7:c9:00:50:07:2b:2a:73:ec:02:05:1e:0b:3f: ce:87:b1:f2:32:7a:e2:2d:11:de:b6:07:cc:d5:c9: 1f:48:38:ce:9f:fe:c0:11:7a:d7:c3:e1:1a:b3:96: 01:fb:b8:37:0c:b3:db:5d:c9:01:d7:ca:76:46:93: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:87:C2:1B:08:BE:3F:B1:AA:8B:9E:D5:7A:9D:DC:23:34:6E:D5:D7 X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.122.252.0/22 IPv6: 2403:98c0::/32 Signature Algorithm: sha256WithRSAEncryption 94:4a:de:ed:ed:96:85:f3:9b:ae:ff:2f:3a:df:ba:85:ba:ad: f3:8a:04:49:6a:af:ce:28:76:a7:d8:80:a6:c6:53:8a:27:c7: 45:6e:fc:de:ff:2b:dd:fb:89:11:cd:cc:35:68:6e:b5:a7:58: 32:02:dd:6f:c5:09:70:0b:03:73:18:4f:b7:8f:89:f3:61:01: 0f:c2:a1:70:cb:10:81:71:7f:f8:ac:21:28:59:e3:89:84:b1: 75:f4:0f:0d:91:de:a8:05:d5:f0:e1:8c:d0:b3:5d:d4:cb:eb: 92:f2:43:cf:4d:18:55:22:37:e4:ea:c2:51:ef:d9:24:29:7c: 30:f0:2e:63:e1:8e:cd:d8:ab:81:91:71:4a:29:5d:79:2d:40: 21:f0:ba:90:07:c9:16:c4:32:ac:a5:c9:5b:91:f2:73:06:91: 46:97:1f:e1:7d:9c:83:ae:45:d2:e9:72:ee:2f:bf:71:49:44: ff:d3:04:9b:65:40:61:09:2a:b1:e5:e2:d2:d4:79:c6:29:79: f6:71:31:c9:71:bf:ac:df:a0:c8:83:19:04:37:59:82:22:8d: 28:e7:cc:e8:fe:bc:e6:cd:7d:f4:36:d6:fb:94:f4:4d:7f:5c: ef:0f:26:5c:64:29:a5:c2:69:6e:d4:a1:12:bc:74:64:0e:5e: 87:59:f7:f5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICC4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUxMDE4MTk1ODUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYzZjE3Yy1iMGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTcL6ckhqK6cp0lzUtuglVN7pciRoHv83k6u+QQn3m0t5lfpS2iPE5ypqDxD stlA2bPWXNA9J+wtxX4ylFDwUkXXu/TeC6Gmxs3zWD1IHQBX77HntuLP22keEbC3 eR+MWX8VkdHcdHPBtTyctrx4pj9/v/le6qoNtjOa2bWonONIO3iVVGeVjB4JpTLI aIYibC/6/STe1BHZlo1NKlD/b8kXPmx/gPKmIRNrcO2FZpYtSVnL8S75HVn+nEIM Va7wWnCYp8kAUAcrKnPsAgUeCz/Oh7HyMnriLRHetgfM1ckfSDjOn/7AEXrXw+Ea s5YB+7g3DLPbXckB18p2RpOoVQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGaHwhsI vj+xqoue1Xqd3CM0btXXMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM5QjQvMUVFMTgyOUUzREExMTFFQThCNjdFOTRGQzRGOUFFMDIvNDZGNTdDRjgx MzdCMTFFQkEzQjQ3RTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnevwwDQQCAAIwBwMFACQDmMAwDQYJKoZIhvcNAQELBQAD ggEBAJRK3u3tloXzm67/LzrfuoW6rfOKBElqr84odqfYgKbGU4onx0Vu/N7/K937 iRHNzDVobrWnWDIC3W/FCXALA3MYT7ePifNhAQ/CoXDLEIFxf/isIShZ44mEsXX0 Dw2R3qgF1fDhjNCzXdTL65LyQ89NGFUiN+TqwlHv2SQpfDDwLmPhjs3Yq4GRcUop XXktQCHwupAHyRbEMqylyVuR8nMGkUaXH+F9nIOuRdLpcu4vv3FJRP/TBJtlQGEJ KrHl4tLUecYpefZxMclxv6zfoMiDGQQ3WYIijSjnzOj+vObNffQ21vuU9E1/XO8P JlxkKaXCaW7UoRK8dGQOXodZ9/U= -----END CERTIFICATE-----Generated at Tue Nov 4 22:27:42 2025 by rpki-client