$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3C2E004221F411F0848CDE7EC4F9AE02.roa File: 3C2E004221F411F0848CDE7EC4F9AE02.roa (raw, json) Hash identifier: maMIBW8WqwpEw8k3CdK6BFRqFVm8airXL8KIFqvlGQs= Subject key identifier: 4B:23:08:E1:5B:63:1F:CB:C2:D7:4A:B1:85:29:73:E1:01:AD:2A:67 Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: 1A Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3C2E004221F411F0848CDE7EC4F9AE02.roa Signing time: Tue 03 Jun 2025 08:17:52 +0000 ROA not before: Tue 03 Jun 2025 08:17:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 17378 IP address blocks: 203.23.39.0/24 maxlen: 24 203.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Jun 3 08:17:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=683eafb0-b447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:1e:f5:ac:15:75:41:98:5f:03:72:90:7a: 11:95:a5:61:6c:5e:13:0f:a5:e1:4a:5c:05:62:04: 3a:38:bf:ee:33:39:e4:64:a5:fb:a6:54:56:d8:b1: a2:00:56:dd:7e:ea:ac:94:2b:08:bc:fe:b6:10:72: cb:23:f8:52:26:f4:c0:9f:07:d6:39:ce:89:f7:f3: 92:7e:d7:18:5c:29:81:9e:fa:96:58:5f:61:6f:87: 53:35:3b:6b:e5:56:00:50:22:22:39:a2:e4:38:a8: d5:df:38:30:2b:85:cb:34:91:55:64:6b:ab:fc:70: cb:83:92:30:15:f9:55:85:75:0a:e9:68:e1:da:d9: ce:db:cd:a2:1a:19:62:04:c7:69:c6:a5:0f:9e:79: 74:b5:6b:a5:36:30:ee:53:7e:c3:2d:dc:82:0c:95: f4:6f:f3:69:3c:3f:4a:16:d5:39:14:ff:2c:a0:8d: 51:d6:c6:10:62:d3:b7:d6:02:dd:19:72:65:ef:6d: be:39:d4:dd:89:77:82:26:f8:cf:48:35:7e:1a:f7: ed:82:9f:27:da:54:f6:fd:5d:4a:15:4b:79:fe:86: 18:36:c9:f1:01:9a:d1:0f:59:5a:12:bd:7b:0b:f9: 11:17:79:a2:6b:74:90:2d:0b:fd:47:06:c7:88:be: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:08:E1:5B:63:1F:CB:C2:D7:4A:B1:85:29:73:E1:01:AD:2A:67 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3C2E004221F411F0848CDE7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.39.0/24 203.33.231.0/24 Signature Algorithm: sha256WithRSAEncryption 92:7a:d6:ad:4b:ec:29:96:47:26:9b:81:6c:ed:02:c8:4e:34: 9c:82:f9:82:a2:0a:d7:10:47:e6:9a:6c:08:cd:e8:7e:41:53: 32:69:9c:20:3f:1d:30:fd:cb:7a:f7:be:8d:26:d5:79:a1:94: 12:86:f6:b7:2f:3b:d5:ce:11:20:98:c9:08:a5:2e:21:94:18: f1:28:cd:a7:cb:6d:24:5b:d5:5a:1e:f2:f6:61:ad:2c:53:43: c2:c5:d1:71:c1:79:ec:97:a3:04:d1:41:a2:fc:ea:11:19:45: d2:ec:60:d8:2c:d9:5d:21:1b:84:cd:7b:32:2b:59:9d:c2:ef: 5b:33:e8:b7:29:d9:e4:02:7a:ba:1d:93:ea:10:41:fb:2c:ff: eb:9e:de:67:85:cd:cb:0d:bc:3d:cf:4b:96:d1:d8:e9:71:07: 8a:a4:9e:84:ed:d5:ab:4f:f0:28:9e:17:b7:b7:2f:f9:a0:3b: a6:9f:d1:38:ae:16:20:e9:e9:aa:14:fd:12:3f:8f:77:f6:93: 2f:fe:ad:4a:cd:36:f7:ff:ab:dd:8d:0a:97:73:5f:8e:dd:a1: c9:c4:31:eb:4c:13:9c:c1:11:72:a5:13:b8:1e:32:ec:a0:30: 5c:b3:81:5d:63:68:57:11:cc:c1:f9:13:e3:f2:46:e3:4f:59: f1:58:d2:74 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzdBQjExMC8GA1UEBRMoOTRDOEVGM0YyQTkyMkVFMTQ0QUE2RjBCNjY0MzZDQTQ2 NkNDNEIwQTAeFw0yNTA2MDMwODE3NTJaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4M2VhZmIwLWI0NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jR71rBV1QZhfA3KQehGVpWFsXhMPpeFKXAViBDo4v+4zOeRkpfumVFbYsaIA Vt1+6qyUKwi8/rYQcssj+FIm9MCfB9Y5zon385J+1xhcKYGe+pZYX2Fvh1M1O2vl VgBQIiI5ouQ4qNXfODArhcs0kVVka6v8cMuDkjAV+VWFdQrpaOHa2c7bzaIaGWIE x2nGpQ+eeXS1a6U2MO5TfsMt3IIMlfRv82k8P0oW1TkU/yygjVHWxhBi07fWAt0Z cmXvbb451N2Jd4Im+M9INX4a9+2CnyfaVPb9XUoVS3n+hhg2yfEBmtEPWVoSvXsL +REXeaJrdJAtC/1HBseIvkpfAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUSyMI4Vtj H8vC10qxhSlz4QGtKmcwHwYDVR0jBBgwFoAUlMjvPyqSLuFEqm8LZkNspGbMSwow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzN0FCLzI2NDg0NTkwMjFG MzExRjBBMjgxMzU3QUM0RjlBRTAyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbE1qdlB5cVNMdUZFcW04TFprTnNwR2JNU3dvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzdBQi8yNjQ4NDU5MDIxRjMxMUYwQTI4MTM1N0FDNEY5QUUwMi8zQzJFMDA0MjIx RjQxMUYwODQ4Q0RFN0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAMsXJwMEAMsh5zANBgkqhkiG9w0BAQsFAAOCAQEAknrWrUvs KZZHJpuBbO0CyE40nIL5gqIK1xBH5ppsCM3ofkFTMmmcID8dMP3Leve+jSbVeaGU Eob2ty871c4RIJjJCKUuIZQY8SjNp8ttJFvVWh7y9mGtLFNDwsXRccF57JejBNFB ovzqERlF0uxg2CzZXSEbhM17MitZncLvWzPotynZ5AJ6uh2T6hBB+yz/657eZ4XN yw28Pc9LltHY6XEHiqSehO3Vq0/wKJ4Xt7cv+aA7pp/ROK4WIOnpqhT9Ej+Pd/aT L/6tSs029/+r3Y0Kl3Nfjt2hycQx60wTnMERcqUTuB4y7KAwXLOBXWNoVxHMwfkT 4/JG409Z8VjSdA== -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:50 2025 by rpki-client