$ rpki-client -vvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/A87AAC50C47711EDA3EF8884C4F9AE02.roa File: A87AAC50C47711EDA3EF8884C4F9AE02.roa (raw, json) Hash identifier: xIgcUdA8zTBEY6O3SXY1BGhdAYMUrlAy/cJz6PFY9tg= Subject key identifier: 08:11:67:9D:06:93:E0:6C:CC:2B:C0:ED:2F:47:F6:3D:8B:F2:48:D5 Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Certificate serial: 0230 Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/A87AAC50C47711EDA3EF8884C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:11:26 +0000 ROA not before: Thu 27 Nov 2025 00:48:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133730 IP address blocks: 103.39.55.0/24 maxlen: 24 103.39.84.0/23 maxlen: 24 103.208.155.0/24 maxlen: 24 137.59.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0 Validity Not Before: Nov 27 00:48:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a410ce-fac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:5b:3c:d5:4d:14:03:c5:0e:1b:54:34:2f: 2f:b5:19:d8:0e:3a:8f:45:f9:f8:b9:22:90:33:e3: 6c:b5:1b:bb:85:dd:3e:30:96:f2:a3:50:cb:01:82: 71:c6:92:10:f6:ef:c6:30:a6:e3:53:03:fa:ca:42: c2:62:97:54:e9:11:9e:ac:a4:43:12:b3:0b:ce:5a: 6d:af:b8:17:41:b7:58:d5:bf:4c:87:86:fa:60:43: 8c:1c:5f:c8:5e:3f:31:d4:f6:99:92:7c:9b:c1:47: 18:45:2d:61:80:66:22:f1:9b:c4:fc:5f:d1:b7:05: a5:8f:d9:b0:d1:5e:bf:3a:bc:d7:94:00:60:d7:f7: f2:52:21:a1:16:e3:17:73:69:91:74:91:f3:fd:af: da:f4:58:2a:cf:94:e5:f5:44:db:9f:ae:2d:5f:28: 59:8d:10:3d:7b:68:49:36:8a:1a:49:ba:4d:42:37: f5:2b:b2:72:68:29:48:d7:51:bf:93:a0:0a:94:e5: e2:76:18:3e:1d:11:08:c5:de:9e:2e:47:df:3a:31: 53:9b:e4:b0:0c:ff:a5:25:5f:a2:e4:1e:80:9c:32: f0:a1:e0:85:cc:40:92:e7:01:3d:91:4c:44:ed:4d: 73:ef:80:b6:e5:fd:74:15:55:fb:14:21:97:6e:33: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:11:67:9D:06:93:E0:6C:CC:2B:C0:ED:2F:47:F6:3D:8B:F2:48:D5 X509v3 Authority Key Identifier: keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/A87AAC50C47711EDA3EF8884C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.39.55.0/24 103.39.84.0/23 103.208.155.0/24 137.59.196.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:33:c6:92:68:a2:51:5f:41:6a:bf:05:ef:cd:1c:c3:ac:66: bf:56:1b:c0:52:fe:13:c1:71:31:da:94:7f:c2:b0:fb:16:0a: fc:33:da:18:7e:04:78:44:06:f3:c7:78:3a:61:61:6d:40:90: b8:ad:d8:ea:e9:f1:d2:de:a7:79:48:59:5a:b0:9f:d4:6f:ee: 0b:ec:76:1d:08:ab:9c:1d:d3:63:62:22:06:96:45:c6:11:3c: 20:0d:ae:03:6b:7c:92:12:87:d0:08:ec:41:24:ca:9e:da:51: 86:a7:92:67:40:26:84:b5:2a:ed:1a:96:c5:dc:7c:dd:5c:13: 41:4c:78:7f:b0:ed:fe:5e:6a:73:02:24:a0:64:e4:dd:99:a0: b0:8a:c9:04:37:c8:01:79:e2:eb:7d:8c:48:c6:7f:00:ce:bc: ec:0b:5e:13:20:91:ce:71:1b:fd:72:3d:da:90:c3:ea:c6:12: cb:b3:ce:61:58:99:26:26:c5:6e:a1:e6:da:90:a8:5c:5c:77: 75:b6:68:04:6b:3e:ee:9d:5a:75:82:ab:a9:1a:ad:a0:a2:df: c0:e0:46:02:97:0c:fd:39:c6:16:7d:df:13:63:13:ff:a8:f5: 07:1d:d9:09:17:cf:36:f0:e1:7c:f6:15:c2:f1:65:d6:71:58: 8a:33:b6:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE NzQ0NkI2QzAwHhcNMjUxMTI3MDA0ODEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTBjZS1mYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3tbPNVNFAPFDhtUNC8vtRnYDjqPRfn4uSKQM+NstRu7hd0+MJbyo1DLAYJx xpIQ9u/GMKbjUwP6ykLCYpdU6RGerKRDErMLzlptr7gXQbdY1b9Mh4b6YEOMHF/I Xj8x1PaZknybwUcYRS1hgGYi8ZvE/F/RtwWlj9mw0V6/OrzXlABg1/fyUiGhFuMX c2mRdJHz/a/a9Fgqz5Tl9UTbn64tXyhZjRA9e2hJNooaSbpNQjf1K7JyaClI11G/ k6AKlOXidhg+HREIxd6eLkffOjFTm+SwDP+lJV+i5B6AnDLwoeCFzECS5wE9kUxE 7U1z74C25f10FVX7FCGXbjP0MQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFAgRZ50G k+BszCvA7S9H9j2L8kjVMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0 NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE1QkMvMTY0RDkyQjJDNDcxMTFFREE5QzVDQjYwQzRGOUFFMDIvQTg3QUFDNTBD NDc3MTFFREEzRUY4ODg0QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZyc3AwQBZydUAwQAZ9CbAwQCiTvEMA0GCSqGSIb3DQEBCwUAA4IB AQAcM8aSaKJRX0FqvwXvzRzDrGa/VhvAUv4TwXEx2pR/wrD7Fgr8M9oYfgR4RAbz x3g6YWFtQJC4rdjq6fHS3qd5SFlasJ/Ub+4L7HYdCKucHdNjYiIGlkXGETwgDa4D a3ySEofQCOxBJMqe2lGGp5JnQCaEtSrtGpbF3HzdXBNBTHh/sO3+XmpzAiSgZOTd maCwiskEN8gBeeLrfYxIxn8AzrzsC14TIJHOcRv9cj3akMPqxhLLs85hWJkmJsVu oebakKhcXHd1tmgEaz7unVp1gqupGq2got/A4EYClwz9OcYWfd8TYxP/qPUHHdkJ F8828OF89hXC8WXWcViKM7bA -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:49 2026 by rpki-client