$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7D0DFE0A5A3211EDB637E665C4F9AE02.roa File: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (raw, json) Hash identifier: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg= Subject key identifier: B6:FC:6C:BF:FD:15:97:20:2F:4A:D8:8A:18:CD:65:4B:D0:9C:46:D6 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 0289 Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7D0DFE0A5A3211EDB637E665C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:16:59 +0000 ROA not before: Wed 19 Nov 2025 00:18:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 140045 IP address blocks: 103.23.252.0/23 maxlen: 23 103.23.252.0/24 maxlen: 24 103.23.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Nov 19 00:18:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4586b-8db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:ba:c6:76:5f:49:5f:fd:26:b8:1a:aa:4b:2a: 0d:32:f1:f3:86:15:b1:de:bc:b3:ed:52:5f:c8:63: a8:2c:9f:d8:f5:73:f4:7e:66:e8:21:6d:a2:1a:68: 18:97:2a:75:67:ac:45:f9:be:3a:43:8d:00:cc:f5: 08:af:ee:3a:1c:d5:53:ce:a4:73:74:d0:a8:46:38: da:94:ee:9e:2b:c6:3f:a8:44:8b:dd:51:51:89:66: c8:48:db:a8:d6:75:c7:93:6a:9c:d0:ff:b0:97:08: 0a:24:52:67:24:67:5b:e1:ea:30:71:4c:67:86:54: 2e:bf:6c:bb:50:9c:33:ed:1d:7b:ce:99:4a:0b:c1: 26:42:fc:b4:30:59:30:b0:4b:fe:57:e9:4b:29:c6: 74:f6:cc:ec:8d:cd:78:35:e8:7e:bc:3d:70:c9:42: 53:b8:4c:97:00:3c:e5:ea:21:75:43:e0:cc:c5:61: 34:8e:a3:89:21:1f:5c:3d:38:fd:bc:a9:13:3f:11: 41:06:fc:9c:89:52:3b:d7:7d:0b:a4:23:61:cc:61: 03:15:01:a9:5a:5b:b7:d2:e7:a6:32:b0:91:a1:ad: 24:6a:3f:68:35:c2:7a:10:a7:d1:3a:be:32:9c:03: 91:cc:09:25:f8:d8:95:9e:ad:8f:bf:9c:13:4c:cb: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FC:6C:BF:FD:15:97:20:2F:4A:D8:8A:18:CD:65:4B:D0:9C:46:D6 X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/7D0DFE0A5A3211EDB637E665C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.23.252.0/23 Signature Algorithm: sha256WithRSAEncryption 66:ec:fd:25:48:d4:bb:6c:fd:92:36:b8:a5:dc:47:18:eb:e4: 2d:e6:69:78:a6:d2:26:a4:97:af:e2:f9:81:31:4b:71:14:0f: e1:b1:90:ab:f3:67:cd:f0:7b:7e:2f:ed:db:74:c1:ed:34:ed: 11:89:63:86:f9:33:3b:dd:89:45:90:41:62:b4:2f:20:b9:65: a0:75:36:3c:29:68:a6:25:d6:c7:ff:6e:b1:ef:f7:7d:69:db: 2c:42:33:3e:49:fd:c9:d7:de:7b:df:21:fe:2f:44:88:63:88: 42:e8:ec:62:10:ca:c3:5c:b3:43:81:a7:ee:93:56:11:e9:ee: 5a:de:f5:71:7f:9a:0e:f5:8b:24:40:26:fe:01:7f:28:20:4b: 18:fe:64:f1:61:b7:df:1c:ab:ff:85:53:78:06:b5:d0:5d:40: 63:67:4f:77:2e:ab:bd:75:36:a7:4f:f1:5a:1e:98:22:bb:75: da:94:0e:f1:5f:c6:a8:86:52:01:52:ad:6f:2e:b8:a4:1f:10: a8:ac:f6:21:54:bd:17:38:b9:28:72:e9:85:55:53:46:45:14: ac:1f:5d:76:16:2f:1d:3c:36:3a:a3:52:06:09:a4:30:39:e7: 4b:90:99:21:77:5e:2a:c8:6f:7a:21:89:ae:4a:59:ec:90:9b: c3:a0:4b:53 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjUxMTE5MDAxODAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTg2Yi04ZGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+brGdl9JX/0muBqqSyoNMvHzhhWx3ryz7VJfyGOoLJ/Y9XP0fmboIW2iGmgY lyp1Z6xF+b46Q40AzPUIr+46HNVTzqRzdNCoRjjalO6eK8Y/qESL3VFRiWbISNuo 1nXHk2qc0P+wlwgKJFJnJGdb4eowcUxnhlQuv2y7UJwz7R17zplKC8EmQvy0MFkw sEv+V+lLKcZ09szsjc14Neh+vD1wyUJTuEyXADzl6iF1Q+DMxWE0jqOJIR9cPTj9 vKkTPxFBBvyciVI7130LpCNhzGEDFQGpWlu30uemMrCRoa0kaj9oNcJ6EKfROr4y nAORzAkl+NiVnq2Pv5wTTMt7fwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLb8bL/9 FZcgL0rYihjNZUvQnEbWMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzE0QkMvN0ZEMDE2NkM1QTJGMTFFREExOUU1RTYxQzRGOUFFMDIvN0QwREZFMEE1 QTMyMTFFREI2MzdFNjY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZxf8MA0GCSqGSIb3DQEBCwUAA4IBAQBm7P0lSNS7bP2SNril3EcY 6+Qt5ml4ptImpJev4vmBMUtxFA/hsZCr82fN8Ht+L+3bdMHtNO0RiWOG+TM73YlF kEFitC8guWWgdTY8KWimJdbH/26x7/d9adssQjM+Sf3J19573yH+L0SIY4hC6Oxi EMrDXLNDgafuk1YR6e5a3vVxf5oO9YskQCb+AX8oIEsY/mTxYbffHKv/hVN4BrXQ XUBjZ093Lqu9dTanT/FaHpgiu3XalA7xX8aohlIBUq1vLrikHxCorPYhVL0XOLko cumFVVNGRRSsH112Fi8dPDY6o1IGCaQwOedLkJkhd14qyG96IYmuSlnskJvDoEtT -----END CERTIFICATE-----Generated at Mon Mar 2 16:24:47 2026 by rpki-client