$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/5DCB0A0C410C11EA8A6C412DC4F9AE02.roa File: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (raw, json) Hash identifier: KED1QmVTHiqC0tXqfgrpZXRP+qrWOki9BhFfYuc7XlY= Subject key identifier: C9:E3:7D:9B:29:19:82:A3:CE:E7:FC:0B:65:C2:55:89:82:03:9F:C8 Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0BA9 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/5DCB0A0C410C11EA8A6C412DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:58:12 +0000 ROA not before: Tue 04 Nov 2025 19:38:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63844 IP address blocks: 103.41.244.0/23 maxlen: 24 103.77.252.0/23 maxlen: 24 116.206.252.0/22 maxlen: 24 2405:9140::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2985 (0xba9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Nov 4 19:38:06 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a445f3-cfda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:68:8e:c2:7e:16:8c:b7:3f:f3:81:79:2c: 4d:65:a6:ef:0f:d8:e6:ff:be:9c:25:c7:de:8e:99: 1b:e2:d5:20:db:f4:f4:db:6e:d5:99:9b:90:5b:c3: ae:5b:08:e0:0d:ae:d3:94:82:18:d7:c3:b2:a6:55: 87:7c:3d:a2:17:a0:95:8e:95:d6:1b:8b:0c:3a:74: 33:4c:32:b9:c0:7e:9d:29:e4:9d:8b:63:91:5d:c7: 12:4f:5d:b8:1f:55:e9:70:5f:09:40:89:50:45:23: 7f:36:86:0b:a0:07:45:3b:4c:4b:f3:dd:b6:4b:e6: d0:cf:58:59:08:c7:b3:4a:f9:b6:34:fe:79:f2:7c: fb:a3:9f:f2:a0:45:07:3a:1a:d2:09:fa:8d:6e:7e: 97:9c:10:8f:95:b2:44:96:40:63:95:ea:0f:56:29: 37:cc:ef:d8:dd:8f:a3:57:31:76:c2:bb:0f:0a:81: 5b:83:e5:61:d6:fe:73:d0:83:7d:d2:0b:48:6d:f8: 5d:b7:49:78:8e:03:ac:fb:a0:31:7b:a2:35:6e:5c: bc:29:09:0d:35:7b:88:18:cd:3e:7e:9a:04:d9:f5: ae:28:27:1a:65:e5:8a:8c:32:f3:47:cc:67:20:b9: 00:bc:ac:c4:71:f0:27:bb:a3:71:24:d0:1b:9f:0f: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E3:7D:9B:29:19:82:A3:CE:E7:FC:0B:65:C2:55:89:82:03:9F:C8 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/5DCB0A0C410C11EA8A6C412DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.41.244.0/23 103.77.252.0/23 116.206.252.0/22 IPv6: 2405:9140::/32 Signature Algorithm: sha256WithRSAEncryption 22:3d:9a:27:99:97:ca:f8:bd:09:16:97:ed:54:3d:41:ad:21: f7:b1:80:45:89:3d:14:23:82:66:bb:18:91:e5:ed:f3:2f:e7: 0c:4c:35:fa:11:46:8a:a8:0b:b1:54:26:f7:cc:22:d5:66:bf: 8c:ce:5a:57:4c:0a:a4:2d:14:fe:70:6f:61:c0:53:47:a0:8d: d2:50:3d:cf:93:c3:b6:43:9f:9e:db:16:b6:dd:dd:44:22:90: c8:c2:81:bd:63:c6:3e:44:a1:0d:c9:5c:cd:ef:93:80:ee:5a: bd:53:d2:20:2c:ea:df:27:fc:cc:44:f0:a3:49:09:f7:3d:c2: b4:1c:74:6a:a5:63:08:91:23:75:a9:43:f4:4f:24:20:30:d7: af:65:0b:40:98:8a:82:26:7d:de:43:8a:9c:ad:89:92:38:ba: ce:13:9c:e6:6d:bf:63:b5:c4:4a:69:5b:99:28:41:91:4a:9e: 8d:50:7b:e2:bb:4a:89:8c:7d:68:33:df:70:ed:1e:6e:79:d8: d6:06:12:ed:b6:92:38:1a:06:21:dc:37:12:b4:a1:14:67:13: c9:7d:8e:f2:5d:12:84:74:cc:59:5f:b9:1c:a9:e5:40:83:a4: d1:3c:b4:5f:a5:5c:5f:2f:79:ac:40:cf:95:db:38:14:c9:5d: fd:c0:ce:44 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICC6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUxMTA0MTkzODA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDVmMy1jZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxpojsJ+Foy3P/OBeSxNZabvD9jm/76cJcfejpkb4tUg2/T0227VmZuQW8Ou WwjgDa7TlIIY18OyplWHfD2iF6CVjpXWG4sMOnQzTDK5wH6dKeSdi2ORXccST124 H1XpcF8JQIlQRSN/NoYLoAdFO0xL8922S+bQz1hZCMezSvm2NP558nz7o5/yoEUH OhrSCfqNbn6XnBCPlbJElkBjleoPVik3zO/Y3Y+jVzF2wrsPCoFbg+Vh1v5z0IN9 0gtIbfhdt0l4jgOs+6Axe6I1bly8KQkNNXuIGM0+fpoE2fWuKCcaZeWKjDLzR8xn ILkAvKzEcfAnu6NxJNAbnw+p6QIDAQABo4ICezCCAncwHQYDVR0OBBYEFMnjfZsp GYKjzuf8C2XCVYmCA5/IMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA4QkUvQTJDODI3RUU0MTBCMTFFQUI2OTU0QTJDQzRGOUFFMDIvNURDQjBBMEM0 MTBDMTFFQThBNkM0MTJEQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQBZyn0AwQBZ038AwQCdM78MA0EAgACMAcDBQAkBZFAMA0GCSqGSIb3 DQEBCwUAA4IBAQAiPZonmZfK+L0JFpftVD1BrSH3sYBFiT0UI4JmuxiR5e3zL+cM TDX6EUaKqAuxVCb3zCLVZr+MzlpXTAqkLRT+cG9hwFNHoI3SUD3Pk8O2Q5+e2xa2 3d1EIpDIwoG9Y8Y+RKENyVzN75OA7lq9U9IgLOrfJ/zMRPCjSQn3PcK0HHRqpWMI kSN1qUP0TyQgMNevZQtAmIqCJn3eQ4qcrYmSOLrOE5zmbb9jtcRKaVuZKEGRSp6N UHviu0qJjH1oM99w7R5uedjWBhLttpI4GgYh3DcStKEUZxPJfY7yXRKEdMxZX7kc qeVAg6TRPLRfpVxfL3msQM+V2zgUyV39wM5E -----END CERTIFICATE-----Generated at Mon Mar 2 09:40:30 2026 by rpki-client