$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/40FBB32CA37B11F0B7BCBD52C4F9AE02.roa File: 40FBB32CA37B11F0B7BCBD52C4F9AE02.roa (raw, json) Hash identifier: IlTR0UDiNLHy/Bv8TuWFa0YAgg72rMp8Vk25louq+bg= Subject key identifier: 24:29:42:40:D9:CF:FD:4A:62:D8:73:7A:A2:BF:7E:D9:A2:A5:17:B1 Certificate issuer: /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Certificate serial: 0384 Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/40FBB32CA37B11F0B7BCBD52C4F9AE02.roa Signing time: Tue 28 Oct 2025 04:30:43 +0000 ROA not before: Tue 28 Oct 2025 04:30:43 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.26.11.0/24 maxlen: 24 103.243.117.0/24 maxlen: 24 103.243.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396 Validity Not Before: Oct 28 04:30:43 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=690046f2-d858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2a:0d:d9:0a:33:be:55:0a:ad:71:2b:cb:a3: f7:ae:c9:41:4f:7f:f3:9c:ca:8b:7c:7b:50:7e:7c: 3f:27:b9:a9:ba:c9:20:8b:5f:08:64:a3:63:d7:2d: af:12:46:85:c4:01:a1:ea:5f:9e:fd:16:03:00:86: 68:19:65:00:e8:99:23:85:62:07:0b:9c:75:71:c4: 0f:e1:e4:b9:91:02:8d:ae:e9:bd:1e:8d:1c:8b:dc: bc:1d:be:4b:b7:a1:64:3d:58:44:c6:a3:c5:8e:20: c0:c0:63:e9:79:78:58:3d:20:26:70:97:e6:fb:5e: c0:96:09:6c:c8:21:63:ef:dc:33:4b:71:ea:93:c2: c4:65:65:90:8f:f2:49:aa:cb:87:c0:5c:ed:bb:57: 06:61:2d:55:83:1b:58:08:f4:93:88:d9:38:0d:d7: e1:68:a5:58:f0:31:3e:4a:fd:c0:0d:f6:2e:c3:a9: 7a:cd:6b:fc:31:2a:71:e3:6c:76:91:fd:c1:cd:e7: a0:2b:f3:c9:ff:f9:10:77:38:b7:bd:cb:1a:89:bf: ca:89:da:ca:3f:ac:50:c6:6f:d2:38:08:5c:1e:b4: c1:65:49:3e:c3:e2:fe:d2:ab:fa:0f:b2:84:5c:d7: 73:68:6d:f3:51:01:2b:0d:54:db:d3:39:62:84:25: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:29:42:40:D9:CF:FD:4A:62:D8:73:7A:A2:BF:7E:D9:A2:A5:17:B1 X509v3 Authority Key Identifier: keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/40FBB32CA37B11F0B7BCBD52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.26.11.0/24 103.243.117.0/24 103.243.119.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:f7:d8:e2:80:6c:e3:bf:59:cf:2e:22:a5:69:86:bd:24:bc: 90:3b:6a:7d:4f:a3:a4:5e:c0:3e:2a:63:64:70:f5:a0:ed:7a: 96:e2:02:e7:b4:8a:13:a0:79:51:0c:83:e7:29:1c:3d:a8:e3: 5d:19:21:5d:9e:69:24:da:74:20:05:53:bb:b5:38:df:7f:06: ec:1f:a1:d1:c0:2d:36:a2:a0:23:1f:f2:9b:59:c7:4f:fd:1a: 79:d2:b1:83:f4:9c:a8:10:e0:3a:60:17:55:7f:ce:26:c0:7d: de:e9:74:d8:a0:09:2a:7a:79:09:bc:48:2b:a0:15:cd:39:da: 3e:3d:21:8d:82:e2:73:c8:c7:b1:34:fd:8a:5e:a1:9c:e5:f0: 23:10:2e:0c:c2:7f:0a:92:8b:cd:bc:43:37:24:ed:b3:30:ca: b5:c1:99:25:aa:f2:88:50:95:67:4f:79:08:07:76:8b:2f:92: 00:78:f5:56:a2:ea:00:2a:c1:72:7f:0a:1f:44:7b:cf:2f:71: 45:f6:0b:20:e9:6d:b7:45:ba:16:0b:02:95:bc:e1:0a:c9:71: af:d1:62:12:09:80:2f:e4:fc:90:43:0a:81:db:c4:0b:36:9c: cb:62:45:2d:e0:0b:7f:8c:09:58:6f:93:7f:42:09:f6:97:d9: 78:f3:36:e6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFMzIxMTAvBgNVBAUTKEExODVDMEM1NzQ4MjlDNUZDRDcxNDQ1NDQ5RTUzNENE QUVGNDEzOTYwHhcNMjUxMDI4MDQzMDQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwNDZmMi1kODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SoN2QozvlUKrXEry6P3rslBT3/znMqLfHtQfnw/J7mpuskgi18IZKNj1y2v EkaFxAGh6l+e/RYDAIZoGWUA6JkjhWIHC5x1ccQP4eS5kQKNrum9Ho0ci9y8Hb5L t6FkPVhExqPFjiDAwGPpeXhYPSAmcJfm+17AlglsyCFj79wzS3Hqk8LEZWWQj/JJ qsuHwFztu1cGYS1VgxtYCPSTiNk4DdfhaKVY8DE+Sv3ADfYuw6l6zWv8MSpx42x2 kf3BzeegK/PJ//kQdzi3vcsaib/KidrKP6xQxm/SOAhcHrTBZUk+w+L+0qv6D7KE XNdzaG3zUQErDVTb0zlihCVG7QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCQpQkDZ z/1KYthzeqK/ftmipRexMB8GA1UdIwQYMBaAFKGFwMV0gpxfzXFEVEnlNM2u9BOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEUzMi83MjA5NTlGQzAx QzAxMUVEQkQ3QzZGNThDNEY5QUUwMi9vWVhBeFhTQ25GX05jVVJVU2VVMHphNzBF NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29ZWEF4WFNDbkZfTmNVUlVTZVUwemE3MEU1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRFMzIvNzIwOTU5RkMwMUMwMTFFREJEN0M2RjU4QzRGOUFFMDIvNDBGQkIzMkNB MzdCMTFGMEI3QkNCRDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnGgsDBABn83UDBABn83cwDQYJKoZIhvcNAQELBQADggEB AFz32OKAbOO/Wc8uIqVphr0kvJA7an1Po6RewD4qY2Rw9aDtepbiAue0ihOgeVEM g+cpHD2o410ZIV2eaSTadCAFU7u1ON9/BuwfodHALTaioCMf8ptZx0/9GnnSsYP0 nKgQ4DpgF1V/zibAfd7pdNigCSp6eQm8SCugFc052j49IY2C4nPIx7E0/YpeoZzl 8CMQLgzCfwqSi828Qzck7bMwyrXBmSWq8ohQlWdPeQgHdosvkgB49Vai6gAqwXJ/ Ch9Ee88vcUX2CyDpbbdFuhYLApW84QrJca/RYhIJgC/k/JBDCoHbxAs2nMtiRS3g C3+MCVhvk39CCfaX2XjzNuY= -----END CERTIFICATE-----Generated at Tue Nov 4 22:35:01 2025 by rpki-client