$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/E146B994B51F11EA9146DD58C4F9AE02.roa File: E146B994B51F11EA9146DD58C4F9AE02.roa (raw, json) Hash identifier: hfrhHFCjm9A1IZZ68jj/fGY3wp72/JwweOhEQKmJp+w= Subject key identifier: AC:36:E2:84:43:2E:EF:94:38:E4:FC:C2:A1:FE:89:1F:DF:BC:A9:05 Certificate issuer: /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Certificate serial: 08E2 Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/E146B994B51F11EA9146DD58C4F9AE02.roa Signing time: Wed 02 Jul 2025 20:59:50 +0000 ROA not before: Wed 02 Jul 2025 20:59:50 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140843 IP address blocks: 103.152.102.0/23 maxlen: 23 103.152.102.0/24 maxlen: 24 103.152.103.0/24 maxlen: 24 2001:df4:980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2274 (0x8e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142 Validity Not Before: Jul 2 20:59:50 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68659dc6-03e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:46:01:e7:c2:52:10:ef:af:de:53:e9:1b:ca: a7:50:82:e0:de:c6:09:1e:fd:79:0c:f5:5e:4c:62: 67:02:eb:0c:1f:a2:2f:00:d7:9c:7c:8d:81:0f:e8: 1b:24:c3:c8:38:1b:fb:9c:86:fe:a1:c4:f0:52:b6: 83:5a:9d:e6:33:f2:dd:25:ac:2e:84:1c:e8:d5:16: 08:28:19:33:6d:85:b1:fb:2f:fb:72:79:89:21:6b: c0:58:62:4b:fb:cd:3d:73:a7:80:58:bd:2d:af:46: 50:b5:97:03:9e:ea:94:74:cc:6e:cd:ce:e5:d3:07: 7c:db:b5:f4:24:1e:fa:c6:12:71:06:c0:7c:cc:e6: c3:9c:5b:0d:06:bf:eb:4d:7e:5d:43:58:51:e2:a2: 95:e8:89:ea:d9:42:8e:77:eb:b0:bd:fb:9e:e8:f3: 6e:4b:d3:a8:ba:2a:f5:82:d0:81:48:16:39:0f:0c: 70:bb:ff:72:72:a9:71:09:4b:4e:ff:d6:d2:a3:70: f9:47:36:32:5c:b2:9b:f0:98:31:00:9f:8d:4d:2c: 08:0a:e3:91:02:13:17:49:62:8d:77:9d:5a:4f:12: 92:a0:f3:c8:43:ba:8c:f0:e7:1c:96:e3:18:4f:06: 27:aa:3b:09:fb:46:3b:30:9e:97:9b:82:91:b6:d0: bc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:36:E2:84:43:2E:EF:94:38:E4:FC:C2:A1:FE:89:1F:DF:BC:A9:05 X509v3 Authority Key Identifier: keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/E146B994B51F11EA9146DD58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.152.102.0/23 IPv6: 2001:df4:980::/48 Signature Algorithm: sha256WithRSAEncryption 7a:91:0b:4c:1e:93:a5:fe:20:9f:29:d9:84:dc:8c:33:1d:7a: ca:16:f4:e8:4b:17:d9:82:d8:fd:e4:e6:d0:ba:94:e1:f8:40: ed:65:04:00:37:9b:a4:7c:4a:56:54:b6:06:b0:aa:0c:2f:4a: ef:eb:50:42:7f:e5:02:53:80:2f:f4:ab:c4:ce:ea:92:b4:bf: 00:0f:4f:42:7d:55:01:fb:67:27:6f:b2:c1:54:c5:aa:48:c8: 63:b8:d8:d7:9f:67:3a:42:d6:7b:66:71:e4:1d:9d:e4:0c:d5: 6c:89:b9:84:c3:ed:a1:58:85:28:a4:31:6a:02:c9:45:91:19: c7:ef:04:8f:d6:72:c5:fc:aa:f6:9a:50:4d:90:c0:b0:e7:13: 00:b0:11:0a:3d:78:d8:20:7f:4a:cf:a5:ec:57:f5:4a:18:ac: 3e:b1:d7:9b:db:1d:95:81:c9:64:6f:d9:6b:4d:d8:a3:16:4b: 9f:ec:f5:e2:9a:a3:ec:17:45:a6:bd:71:31:78:9e:db:a9:f2: f6:4b:92:7d:fd:40:88:f4:96:31:79:01:f1:4a:cb:2e:f6:cd: 85:fe:c6:89:98:23:39:f0:2e:37:2c:dd:73:90:27:31:e1:39: a1:1f:94:c3:81:fe:4c:36:ae:dc:3e:ea:bd:59:da:e0:2d:41: a4:8b:d7:5a -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICCOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRDNkIxMTAvBgNVBAUTKEUyNjg3M0I0NUY4OEQxRjVEODgzQzE3RTRDQ0Y3MEEy NDUxNjIxNDIwHhcNMjUwNzAyMjA1OTUwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1OWRjNi0wM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUYB58JSEO+v3lPpG8qnUILg3sYJHv15DPVeTGJnAusMH6IvANecfI2BD+gb JMPIOBv7nIb+ocTwUraDWp3mM/LdJawuhBzo1RYIKBkzbYWx+y/7cnmJIWvAWGJL +809c6eAWL0tr0ZQtZcDnuqUdMxuzc7l0wd827X0JB76xhJxBsB8zObDnFsNBr/r TX5dQ1hR4qKV6Inq2UKOd+uwvfue6PNuS9Oouir1gtCBSBY5Dwxwu/9ycqlxCUtO /9bSo3D5RzYyXLKb8JgxAJ+NTSwICuORAhMXSWKNd51aTxKSoPPIQ7qM8OccluMY TwYnqjsJ+0Y7MJ6Xm4KRttC81wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKw24oRD Lu+UOOT8wqH+iR/fvKkFMB8GA1UdIwQYMBaAFOJoc7RfiNH12IPBfkzPcKJFFiFC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEM2Qi8yNzhBQTNFNEI1 MUYxMUVBOUZFOEJENThDNEY5QUUwMi80bWh6dEYtSTBmWFlnOEYtVE05d29rVVdJ VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRtaHp0Ri1JMGZYWWc4Ri1UTTl3b2tVV0lVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRDNkIvMjc4QUEzRTRCNTFGMTFFQTlGRThCRDU4QzRGOUFFMDIvRTE0NkI5OTRC NTFGMTFFQTkxNDZERDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnmGYwDwQCAAIwCQMHACABDfQJgDANBgkqhkiG9w0BAQsF AAOCAQEAepELTB6Tpf4gnynZhNyMMx16yhb06EsX2YLY/eTm0LqU4fhA7WUEADeb pHxKVlS2BrCqDC9K7+tQQn/lAlOAL/SrxM7qkrS/AA9PQn1VAftnJ2+ywVTFqkjI Y7jY159nOkLWe2Zx5B2d5AzVbIm5hMPtoViFKKQxagLJRZEZx+8Ej9Zyxfyq9ppQ TZDAsOcTALARCj142CB/Ss+l7Ff1ShisPrHXm9sdlYHJZG/Za03YoxZLn+z14pqj 7BdFpr1xMXie26ny9kuSff1AiPSWMXkB8UrLLvbNhf7GiZgjOfAuNyzdc5AnMeE5 oR+Uw4H+TDau3D7qvVna4C1BpIvXWg== -----END CERTIFICATE-----Generated at Wed Nov 5 20:54:44 2025 by rpki-client