$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/3C4374804CEC11ECAE6AB280C4F9AE02.roa File: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (raw, json) Hash identifier: h/s9RyXLHAI1sqd9uwegBKrHWXm8UIc8RPznkO0q/SY= Subject key identifier: 6C:05:B8:17:CE:9A:D3:F7:7B:E7:3E:2C:1C:68:40:F3:01:F7:40:23 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 04B5 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/3C4374804CEC11ECAE6AB280C4F9AE02.roa Signing time: Fri 31 Oct 2025 00:14:10 +0000 ROA not before: Fri 31 Oct 2025 00:14:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63991 IP address blocks: 103.176.228.0/23 maxlen: 24 2400:36a0::/32 maxlen: 32 2400:36a0::/48 maxlen: 48 2400:36a0:3c::/48 maxlen: 48 2400:36a0:3f::/48 maxlen: 48 2400:36a0:54::/48 maxlen: 48 2400:36a0:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1205 (0x4b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Oct 31 00:14:10 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6903ff52-53c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:da:46:7b:57:0e:28:6a:6a:69:58:5d:88: a9:c5:11:3b:31:50:05:15:ec:21:53:ea:b7:8b:1e: 7a:7b:76:c4:02:da:80:c1:a8:83:0b:b9:0a:22:ba: 0a:ec:e8:58:22:df:da:31:23:ee:de:dc:7c:1d:67: 95:8b:ed:12:da:58:ce:81:98:b2:43:36:e5:69:5c: f5:46:3a:6e:8c:f4:43:36:43:28:1a:de:45:12:45: d6:16:af:c9:2a:d3:1d:ed:af:d2:db:20:eb:11:ae: 35:b9:8a:66:3b:ad:6e:78:41:82:ca:22:2e:b8:40: 51:85:aa:43:39:49:8e:bd:be:36:10:93:1c:5c:04: 0b:81:fe:78:62:11:e2:8d:d9:2e:60:bd:58:e3:92: 29:09:55:c0:0e:14:b2:e8:1f:4f:b2:80:2a:7d:a3: a6:9e:55:b9:ff:e9:d4:b7:ab:4c:de:70:b3:e8:59: d4:b0:74:c3:59:a7:9e:f0:23:da:0d:04:e3:bc:aa: 68:b1:76:7b:c8:c6:51:d0:58:40:66:31:2e:19:ba: cc:42:dc:14:e5:22:be:4c:2a:02:63:d3:9c:63:61: f9:18:49:d6:04:8f:20:f1:65:bf:d9:f5:5e:7a:87: 7e:76:70:27:d9:c3:5e:13:a9:ae:5f:ed:9b:77:49: 75:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:05:B8:17:CE:9A:D3:F7:7B:E7:3E:2C:1C:68:40:F3:01:F7:40:23 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/3C4374804CEC11ECAE6AB280C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.176.228.0/23 IPv6: 2400:36a0::/32 Signature Algorithm: sha256WithRSAEncryption 46:49:40:37:34:9a:0a:6b:83:f4:57:01:52:fc:5d:d6:13:9e: c5:4d:78:71:c6:04:c0:09:ee:73:67:aa:72:30:f0:6b:ab:ad: c2:1b:4a:0e:72:7e:f4:5d:b6:2b:72:92:e8:d9:95:4d:02:0c: a4:09:d9:ed:be:f4:83:d0:60:4f:37:f3:fe:b1:53:19:07:8b: 65:3c:3a:e3:6a:dc:10:c7:91:8e:40:37:1f:a8:14:eb:ff:3d: a8:3c:f1:95:41:c4:ed:e9:7c:b5:9d:f2:cd:c8:5b:73:25:21: 0d:d6:46:93:6c:09:7b:f9:b3:2c:07:b8:89:51:4a:5d:7a:3e: 1e:5f:b8:dd:01:e4:b4:97:fd:10:07:eb:c2:32:68:c1:ff:a8: 6f:1b:88:3c:de:61:6f:78:98:57:c9:6d:11:f1:ed:76:53:6e: e0:52:38:03:53:ae:60:96:29:f3:b8:cb:02:ea:1b:1e:8b:6e: 4a:f1:d7:32:5a:7d:dd:be:6f:3a:f8:5e:07:45:28:26:44:ef: dd:4f:f0:62:95:2d:c2:00:7c:3e:23:04:fb:2c:f8:55:74:8d: 67:db:74:60:6c:fd:26:c1:79:a7:0f:10:cb:9a:3d:65:e5:70: c4:76:e4:47:eb:97:cc:1d:92:9f:de:4b:aa:a8:64:a4:05:78: fd:2d:35:29 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUxMDMxMDAxNDEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAzZmY1Mi01M2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3bHaRntXDihqamlYXYipxRE7MVAFFewhU+q3ix56e3bEAtqAwaiDC7kKIroK 7OhYIt/aMSPu3tx8HWeVi+0S2ljOgZiyQzblaVz1RjpujPRDNkMoGt5FEkXWFq/J KtMd7a/S2yDrEa41uYpmO61ueEGCyiIuuEBRhapDOUmOvb42EJMcXAQLgf54YhHi jdkuYL1Y45IpCVXADhSy6B9PsoAqfaOmnlW5/+nUt6tM3nCz6FnUsHTDWaee8CPa DQTjvKposXZ7yMZR0FhAZjEuGbrMQtwU5SK+TCoCY9OcY2H5GEnWBI8g8WW/2fVe eod+dnAn2cNeE6muX+2bd0l15QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFGwFuBfO mtP3e+c+LBxoQPMB90AjMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjIwODkvRTFDNEE0MUU0Q0U4MTFFQ0JEMDVGQTdDQzRGOUFFMDIvM0M0Mzc0ODA0 Q0VDMTFFQ0FFNkFCMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnsOQwDQQCAAIwBwMFACQANqAwDQYJKoZIhvcNAQELBQAD ggEBAEZJQDc0mgprg/RXAVL8XdYTnsVNeHHGBMAJ7nNnqnIw8GurrcIbSg5yfvRd titykujZlU0CDKQJ2e2+9IPQYE838/6xUxkHi2U8OuNq3BDHkY5ANx+oFOv/Pag8 8ZVBxO3pfLWd8s3IW3MlIQ3WRpNsCXv5sywHuIlRSl16Ph5fuN0B5LSX/RAH68Iy aMH/qG8biDzeYW94mFfJbRHx7XZTbuBSOANTrmCWKfO4ywLqGx6Lbkrx1zJafd2+ bzr4XgdFKCZE791P8GKVLcIAfD4jBPss+FV0jWfbdGBs/SbBeacPEMuaPWXlcMR2 5Efrl8wdkp/eS6qoZKQFeP0tNSk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:49 2025 by rpki-client