$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa File: CA4C06CA976711EAA651F944C4F9AE02.roa (raw, json) Hash identifier: IM9yFzmqS+Is/NhhSreqHJdhDGFnp0WA0QJtpqV2ULo= Subject key identifier: 92:43:CB:22:2B:B2:17:B5:C5:CF:1E:7C:A2:52:AE:E6:7E:C4:C1:2D Certificate issuer: /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Certificate serial: 0944 Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa Signing time: Thu 10 Apr 2025 20:30:26 +0000 ROA not before: Thu 10 Apr 2025 20:30:26 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138165 IP address blocks: 103.113.1.0/24 maxlen: 24 103.146.39.0/24 maxlen: 24 2407:40c0:2000::/36 maxlen: 36 2407:40c0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2372 (0x944) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349 Validity Not Before: Apr 10 20:30:26 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f82a61-062c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:14:15:0e:71:86:cd:6e:19:0f:2b:b4:41:8c: 39:db:63:59:f8:e9:c2:eb:08:8b:71:5f:38:e6:fe: 55:ea:71:3a:10:86:42:80:0c:a7:cd:0e:db:ec:05: 32:41:88:d3:ce:fc:47:41:65:54:eb:9e:6a:4d:d4: 44:ff:23:48:e2:4c:52:e4:d8:c7:e5:cd:50:c4:f4: 36:76:f3:c6:a9:72:0e:cb:60:72:e0:7a:02:e7:ab: 27:ac:b9:b9:8a:5a:29:fa:b2:83:dd:cb:b1:03:4d: 27:1a:cc:97:50:fd:24:c4:8e:44:e0:7f:16:65:c1: 06:ee:df:78:e6:7e:42:0f:02:fa:41:fb:4c:ba:58: e6:88:bf:a6:47:d5:1e:4b:03:69:97:2a:48:f1:f8: 71:4d:3b:22:a2:75:b8:f5:77:24:90:13:8d:a4:12: 28:5a:fd:e4:4b:03:f2:58:8d:77:68:67:4c:91:81: 9c:82:6f:70:ea:91:2b:b3:e5:56:7a:4d:83:26:f8: 1c:43:20:f5:78:7f:ba:c2:46:8e:b8:66:e8:01:bb: 17:27:ef:94:86:77:8d:89:f9:ad:71:73:a4:74:70: fe:fa:85:1f:2a:13:e1:89:f6:1f:0a:7d:f6:99:8a: f2:27:01:77:86:16:bd:56:ab:34:ab:aa:38:78:35: 54:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:43:CB:22:2B:B2:17:B5:C5:CF:1E:7C:A2:52:AE:E6:7E:C4:C1:2D X509v3 Authority Key Identifier: keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/CA4C06CA976711EAA651F944C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.1.0/24 103.146.39.0/24 IPv6: 2407:40c0:2000::/36 2407:40c0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 75:6f:ff:90:af:09:1c:cf:86:e9:7e:76:e2:be:ca:f9:f8:5e: c7:d8:be:00:1b:e6:68:80:e3:46:48:d1:2b:39:41:8a:fd:35: ea:92:f9:84:7d:10:5f:6a:b2:72:c7:60:7a:46:e4:85:f0:47: 74:aa:54:2f:3b:52:d3:b0:dc:ed:f7:f9:ac:41:af:93:3c:2c: 3a:d0:07:5f:31:d1:70:36:71:11:c7:89:a3:60:b8:c1:3b:90: fc:3f:5e:21:28:9c:23:88:5e:05:41:60:3a:8d:8d:eb:48:de: 65:c0:b4:14:aa:7e:8f:03:ec:d2:53:47:a0:68:8a:ac:54:da: 4c:1f:90:8c:3a:c5:99:54:7f:06:c7:ce:b9:ed:6e:d5:60:be: 92:42:a2:36:0f:5e:0f:ca:71:3d:0e:2a:b6:a7:e4:63:cd:6c: 5f:c9:e1:12:22:6b:15:f7:78:42:34:ea:bf:a4:b8:07:e2:1e: 79:85:36:e1:91:2a:e1:03:92:8d:8d:b4:4a:4d:b4:f0:f5:f9: ba:c5:81:eb:cf:24:ff:ef:14:86:f7:31:a0:2e:c6:36:d9:30: 1e:3a:11:74:af:6a:c8:36:e1:65:f7:64:31:3b:4f:80:49:47: 42:fa:5e:34:ed:f6:de:92:da:39:4a:ae:d0:7e:00:04:01:7a: 9d:9d:ce:e3 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NjYxMTAvBgNVBAUTKDc4NDFBMDk5REMxNEUyOTM3MUU0Q0MxODU0ODlGRkFF MjEzMjIzNDkwHhcNMjUwNDEwMjAzMDI2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4MmE2MS0wNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RQVDnGGzW4ZDyu0QYw522NZ+OnC6wiLcV845v5V6nE6EIZCgAynzQ7b7AUy QYjTzvxHQWVU655qTdRE/yNI4kxS5NjH5c1QxPQ2dvPGqXIOy2By4HoC56snrLm5 ilop+rKD3cuxA00nGsyXUP0kxI5E4H8WZcEG7t945n5CDwL6QftMuljmiL+mR9Ue SwNplypI8fhxTTsionW49XckkBONpBIoWv3kSwPyWI13aGdMkYGcgm9w6pErs+VW ek2DJvgcQyD1eH+6wkaOuGboAbsXJ++UhneNifmtcXOkdHD++oUfKhPhifYfCn32 mYryJwF3hha9Vqs0q6o4eDVUMwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFJJDyyIr she1xc8efKJSruZ+xMEtMB8GA1UdIwQYMBaAFHhBoJncFOKTceTMGFSJ/64hMiNJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk2Ni8zRUYyMjQwMjk3 NjYxMUVBOUVCNDk1NDJDNEY5QUUwMi9lRUdnbWR3VTRwTng1TXdZVkluX3JpRXlJ MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFR2dtZHdVNHBOeDVNd1lWSW5fcmlFeUkway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5NjYvM0VGMjI0MDI5NzY2MTFFQTlFQjQ5NTQyQzRGOUFFMDIvQ0E0QzA2Q0E5 NzY3MTFFQUE2NTFGOTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBABncQEDBABnkicwFgQCAAIwEAMGBCQHQMAgAwYEJAdAwEAw DQYJKoZIhvcNAQELBQADggEBAHVv/5CvCRzPhul+duK+yvn4XsfYvgAb5miA40ZI 0Ss5QYr9NeqS+YR9EF9qsnLHYHpG5IXwR3SqVC87UtOw3O33+axBr5M8LDrQB18x 0XA2cRHHiaNguME7kPw/XiEonCOIXgVBYDqNjetI3mXAtBSqfo8D7NJTR6BoiqxU 2kwfkIw6xZlUfwbHzrntbtVgvpJCojYPXg/KcT0OKran5GPNbF/J4RIiaxX3eEI0 6r+kuAfiHnmFNuGRKuEDko2NtEpNtPD1+brFgevPJP/vFIb3MaAuxjbZMB46EXSv asg24WX3ZDE7T4BJR0L6XjTt9t6S2jlKrtB+AAQBep2dzuM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:02:37 2025 by rpki-client