$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa File: F0405FAA173E11F0886E164DC4F9AE02.roa (raw, json) Hash identifier: zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co= Subject key identifier: D9:84:DC:77:20:F0:4D:EB:BC:D4:18:C9:25:19:50:83:FD:16:AB:BD Certificate issuer: /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Certificate serial: 01B8 Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa Signing time: Sat 12 Apr 2025 01:55:31 +0000 ROA not before: Sat 12 Apr 2025 01:55:31 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9304 IP address blocks: 43.224.149.0/24 maxlen: 24 103.43.172.0/24 maxlen: 24 103.43.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B Validity Not Before: Apr 12 01:55:31 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67f9c813-678f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:76:0f:96:e5:8c:3b:c0:47:e5:21:bc:db: 0f:08:07:52:f2:67:f1:ab:87:a5:b5:b1:78:b5:69: 29:0f:06:a7:18:a6:45:07:99:4b:28:44:23:20:49: 5a:01:09:70:d9:70:70:e3:d8:c6:0b:44:5b:70:c8: ca:cf:e5:72:60:29:f8:79:cf:60:c6:56:bb:a5:b1: 67:6e:b1:61:56:13:0b:7d:92:75:03:a1:d6:45:00: 56:80:58:0d:9d:81:81:85:4d:58:87:f0:b1:eb:24: b1:aa:72:b5:10:4a:0e:56:24:12:30:12:1d:64:53: df:66:f1:17:31:83:9e:49:50:97:46:87:d7:ac:fc: 2e:92:ae:2f:95:f3:6a:5f:e1:22:27:8a:4c:25:da: 15:5f:38:b3:6f:a9:e6:ed:64:a8:09:87:f2:d1:a5: bd:c9:cf:b5:30:1e:93:27:fe:a8:a7:7e:04:20:7a: c7:26:b0:82:96:ba:14:01:af:49:15:d0:2c:68:1f: 05:a3:71:c5:bc:f1:fc:64:93:e0:6a:1f:8e:de:3d: 01:da:b6:bd:dd:2f:55:61:07:03:4a:80:cc:7f:fa: 0b:02:8f:06:0f:c3:83:6b:17:50:58:32:44:54:bf: 40:ee:86:6a:ec:71:8c:f2:99:18:36:c9:c0:b1:85: 56:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:84:DC:77:20:F0:4D:EB:BC:D4:18:C9:25:19:50:83:FD:16:AB:BD X509v3 Authority Key Identifier: keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.149.0/24 103.43.172.0/23 Signature Algorithm: sha256WithRSAEncryption 75:87:70:d0:22:b4:08:71:bd:76:e9:f0:3f:16:99:c8:30:81: 29:98:af:ee:96:31:5f:6c:82:8d:36:55:1e:72:80:64:d0:17: 39:f9:ce:8e:85:aa:e3:a7:4c:38:c0:a5:3c:8e:bb:92:57:dd: 18:ee:ac:13:0d:c6:63:1b:c7:c4:cd:9a:9c:aa:99:3f:b4:17: 2e:87:3d:0b:ed:be:c0:19:f2:5f:4f:77:c7:ed:ff:a0:16:7a: 3d:fe:6a:88:55:aa:39:a3:bd:9e:be:e7:7a:d4:3e:04:9a:98: b9:88:b4:cf:c1:87:d2:6a:a0:b9:2b:b2:07:31:0a:bd:99:af: fe:d0:26:9a:5b:7b:13:07:8d:8a:a0:63:ae:03:b2:85:d1:c2: 18:0a:38:0a:c1:cc:79:40:6a:3c:51:e4:26:d2:ed:d7:e2:71: 51:62:78:3f:fe:f5:d6:8b:01:c7:20:08:68:4c:14:2e:4a:06: 51:8e:f2:2e:71:ad:b5:76:2f:55:a4:ac:e9:00:db:ed:31:10: 3c:9d:2b:23:7d:4d:86:d5:ee:b4:a1:8d:b9:13:85:49:ff:62: 07:6c:76:ff:97:78:ac:1a:14:07:61:be:cf:68:06:e3:d3:01: e3:ea:d2:68:87:af:7f:79:7b:1b:93:32:82:df:bd:fe:a2:1e: 26:d8:1f:b5 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNDODcxMTAvBgNVBAUTKEVGOUZFMzgxREEzRDQyRUI3QzRFMEQwNDlDQ0FFNzIy OEUyOEZCNEIwHhcNMjUwNDEyMDE1NTMxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y5YzgxMy02NzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAua12D5bljDvAR+UhvNsPCAdS8mfxq4eltbF4tWkpDwanGKZFB5lLKEQjIEla AQlw2XBw49jGC0RbcMjKz+VyYCn4ec9gxla7pbFnbrFhVhMLfZJ1A6HWRQBWgFgN nYGBhU1Yh/Cx6ySxqnK1EEoOViQSMBIdZFPfZvEXMYOeSVCXRofXrPwukq4vlfNq X+EiJ4pMJdoVXzizb6nm7WSoCYfy0aW9yc+1MB6TJ/6op34EIHrHJrCClroUAa9J FdAsaB8Fo3HFvPH8ZJPgah+O3j0B2ra93S9VYQcDSoDMf/oLAo8GD8ODaxdQWDJE VL9A7oZq7HGM8pkYNsnAsYVWnQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNmE3Hcg 8E3rvNQYySUZUIP9Fqu9MB8GA1UdIwQYMBaAFO+f44HaPULrfE4NBJzK5yKOKPtL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0M4Ny9FNzgyODU0RUVG MEIxMUVEODFERDJENzJDNEY5QUUwMi83NV9qZ2RvOVF1dDhUZzBFbk1ybklvNG8t MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1X2pnZG85UXV0OFRnMEVuTXJuSW80by0wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNDODcvRTc4Mjg1NEVFRjBCMTFFRDgxREQyRDcyQzRGOUFFMDIvRjA0MDVGQUEx NzNFMTFGMDg4NkUxNjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr4JUDBAFnK6wwDQYJKoZIhvcNAQELBQADggEBAHWHcNAi tAhxvXbp8D8WmcgwgSmYr+6WMV9sgo02VR5ygGTQFzn5zo6FquOnTDjApTyOu5JX 3RjurBMNxmMbx8TNmpyqmT+0Fy6HPQvtvsAZ8l9Pd8ft/6AWej3+aohVqjmjvZ6+ 53rUPgSamLmItM/Bh9JqoLkrsgcxCr2Zr/7QJppbexMHjYqgY64DsoXRwhgKOArB zHlAajxR5CbS7dficVFieD/+9daLAccgCGhMFC5KBlGO8i5xrbV2L1WkrOkA2+0x EDydKyN9TYbV7rShjbkThUn/Ygdsdv+XeKwaFAdhvs9oBuPTAePq0miHr395exuT MoLfvf6iHibYH7U= -----END CERTIFICATE-----Generated at Wed Nov 5 04:00:05 2025 by rpki-client