$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa File: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (raw, json) Hash identifier: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw= Subject key identifier: 27:C9:BB:A8:32:2D:D6:B8:44:CC:EB:B8:D3:D8:60:40:96:7C:53:5D Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 01DF Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:21:53 +0000 ROA not before: Wed 17 Dec 2025 03:22:40 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 209854 IP address blocks: 103.176.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Dec 17 03:22:40 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43d71-9d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:84:23:5b:db:1a:45:59:3a:14:f6:1a:39: 21:c8:c4:60:52:e4:c2:c5:85:5f:66:8c:12:ac:83: 37:cb:ff:83:b1:95:62:f9:52:1c:b7:f7:6c:98:98: c1:aa:3e:bd:8a:65:60:87:63:28:d6:98:61:d0:da: c9:d2:7c:31:d0:df:e2:2e:17:4f:a1:cd:66:ce:65: d9:5d:ce:43:d9:e5:67:1d:4a:d0:c5:a0:37:c1:d0: 19:7b:71:95:4e:66:66:b9:bc:20:d6:cf:7f:76:1b: 84:47:96:8e:8a:96:c2:3b:fb:7c:b9:74:98:3a:4a: b5:51:68:46:4c:49:10:5a:82:35:84:fa:f9:7c:fe: b0:94:77:3f:00:e0:aa:a2:9f:c0:46:80:35:b8:92: 77:6a:fc:69:16:54:4b:7c:da:f7:59:b8:e0:7e:ba: 0c:ce:d6:07:c1:28:28:6c:80:79:50:4a:56:51:3f: cd:06:0b:63:82:c0:e4:97:fa:21:7a:98:85:79:c3: 71:f4:80:0f:85:53:e3:9c:00:b0:16:68:30:14:65: 50:25:32:0d:79:1d:e3:a7:12:f9:ae:24:6d:76:19: 03:8b:6c:d8:28:ed:95:c9:5c:af:00:56:ca:5b:99: d5:6c:d6:29:75:4d:44:12:2e:de:7b:6b:0a:c6:3a: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C9:BB:A8:32:2D:D6:B8:44:CC:EB:B8:D3:D8:60:40:96:7C:53:5D X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/229EA4AC57D811EEAB6EE280C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.176.152.0/24 Signature Algorithm: sha256WithRSAEncryption 94:eb:81:fb:9b:5f:ce:5e:3c:7c:5a:ed:5d:59:dd:e7:a2:f3: d6:8a:eb:59:08:ef:2b:bc:8e:f5:8b:be:9f:01:69:45:4e:3a: 4e:72:44:78:d1:f6:a3:fb:86:36:6b:e3:11:2b:19:48:33:de: 2b:42:2b:76:29:ca:bb:3a:47:fa:c2:f9:ea:26:c2:ff:e1:71: 4e:3a:9b:46:cd:33:7b:6f:37:d6:7b:20:c1:c0:ed:f0:43:4f: ed:f9:d3:4c:d4:cb:08:9a:bd:3c:28:a7:ae:e3:9a:4b:1e:0d: 16:d1:e5:af:f7:30:bf:46:9e:0c:d8:8c:16:4b:82:a6:c8:f5: f1:6f:91:0a:42:55:07:2f:7b:aa:94:bb:65:f1:1e:20:cc:5e: fc:18:c8:ed:d5:9a:20:9b:fd:ab:da:ef:61:c8:ff:18:82:78: b2:18:b9:10:b5:ba:e4:f1:ce:25:9d:5a:d1:d7:5c:cd:1f:d5: 6f:df:f1:e4:5b:50:f3:7d:0b:9b:e5:a7:09:d6:45:88:20:1b: 0f:05:37:6c:50:d8:49:1a:5e:d9:18:cd:ac:fb:2b:94:19:ff: 59:fe:78:b9:22:27:62:f5:43:b2:15:1b:65:79:87:07:b9:48: 8f:75:c0:01:34:e2:f1:e2:14:79:f4:d9:56:e4:64:6e:bf:6c: 03:84:d7:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjUxMjE3MDMyMjQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2Q3MS05ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIqEI1vbGkVZOhT2GjkhyMRgUuTCxYVfZowSrIM3y/+DsZVi+VIct/dsmJjB qj69imVgh2Mo1phh0NrJ0nwx0N/iLhdPoc1mzmXZXc5D2eVnHUrQxaA3wdAZe3GV TmZmubwg1s9/dhuER5aOipbCO/t8uXSYOkq1UWhGTEkQWoI1hPr5fP6wlHc/AOCq op/ARoA1uJJ3avxpFlRLfNr3WbjgfroMztYHwSgobIB5UEpWUT/NBgtjgsDkl/oh epiFecNx9IAPhVPjnACwFmgwFGVQJTINeR3jpxL5riRtdhkDi2zYKO2VyVyvAFbK W5nVbNYpdU1EEi7ee2sKxjqDwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCfJu6gy Lda4RMzruNPYYECWfFNdMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDM3QUMvMDI1NkVCOTY0RDYwMTFFRTgzODVGMDQwQzRGOUFFMDIvMjI5RUE0QUM1 N0Q4MTFFRUFCNkVFMjgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ7CYMA0GCSqGSIb3DQEBCwUAA4IBAQCU64H7m1/OXjx8Wu1dWd3n ovPWiutZCO8rvI71i76fAWlFTjpOckR40faj+4Y2a+MRKxlIM94rQit2Kcq7Okf6 wvnqJsL/4XFOOptGzTN7bzfWeyDBwO3wQ0/t+dNM1MsImr08KKeu45pLHg0W0eWv 9zC/Rp4M2IwWS4KmyPXxb5EKQlUHL3uqlLtl8R4gzF78GMjt1Zogm/2r2u9hyP8Y gniyGLkQtbrk8c4lnVrR11zNH9Vv3/HkW1DzfQub5acJ1kWIIBsPBTdsUNhJGl7Z GM2s+yuUGf9Z/ni5Iidi9UOyFRtleYcHuUiPdcABNOLx4hR59NlW5GRuv2wDhNc5 -----END CERTIFICATE-----Generated at Mon Mar 2 23:08:47 2026 by rpki-client