$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa File: D68289BE984B11ECB04DAB38C4F9AE02.roa (raw, json) Hash identifier: 2fSA/Xuks+HjnmqBwbLjNPpAQRgRqBJVlHexUjGLyjE= Subject key identifier: 0B:06:23:5F:91:87:C8:13:00:CC:E9:2B:F6:12:D4:17:44:62:ED:E0 Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0CE6 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:39:56 +0000 ROA not before: Sat 30 Aug 2025 18:38:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 10148 IP address blocks: 45.113.232.0/22 maxlen: 22 103.6.252.0/22 maxlen: 22 103.12.108.0/22 maxlen: 24 115.146.80.0/20 maxlen: 20 203.0.40.0/24 maxlen: 24 203.5.64.0/21 maxlen: 21 203.21.130.0/23 maxlen: 24 203.62.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3302 (0xce6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Aug 30 18:38:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4258c-792f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:48:0f:00:b8:5f:9a:c4:7a:a4:93:d7:bd: a0:d4:b4:85:83:3b:c7:47:f4:36:12:9f:13:8c:4c: 05:ac:c5:9a:4f:e3:45:7d:07:78:b6:e6:a0:ee:0d: d2:a0:61:6c:f5:25:80:bd:eb:93:a5:c6:89:8a:26: 03:7b:80:e6:03:75:48:25:ad:27:0f:1d:56:61:7d: 71:0b:23:eb:f3:0f:70:dd:9c:a5:b7:5c:86:6a:59: 0c:ef:24:64:a9:0f:59:96:cb:3b:e8:1a:a3:c9:ab: b0:df:8b:61:c8:65:66:f7:99:a5:28:2d:a1:4e:97: 1d:86:2e:04:4d:7c:31:87:e5:4b:3f:fa:47:e4:97: 46:ea:c7:a1:63:83:cf:3a:df:ae:83:31:23:19:cb: 2c:f7:0b:8c:9d:3b:df:43:c5:2a:00:f1:35:24:0d: 86:ae:ad:5a:42:0e:99:b8:5e:e2:16:8e:fb:11:93: 05:bf:e7:70:c2:29:2d:55:ec:8d:51:4e:02:d4:0c: f2:6c:b4:e2:be:77:40:72:da:af:db:8d:9c:eb:ab: 1b:70:62:c6:1b:75:e8:91:53:98:30:78:0d:1c:8e: 18:88:18:4c:eb:87:cc:cc:a5:71:46:bb:31:1f:7f: b2:c4:be:0e:a9:5d:61:dc:35:be:a8:1a:1f:54:be: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:06:23:5F:91:87:C8:13:00:CC:E9:2B:F6:12:D4:17:44:62:ED:E0 X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.113.232.0/22 103.6.252.0/22 103.12.108.0/22 115.146.80.0/20 203.0.40.0/24 203.5.64.0/21 203.21.130.0/23 203.62.232.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:23:27:bc:2b:9e:f9:42:a4:07:2e:d9:d3:59:21:5b:07:b9: 94:6a:51:a6:d6:d0:3e:96:b4:2e:7a:d3:4f:77:63:7b:6b:67: 20:cf:d6:97:ee:55:90:4b:97:3e:fc:ce:2b:eb:59:aa:c3:7c: 0f:db:a3:6f:ed:9a:36:39:ac:54:70:68:65:12:1b:76:67:05: 77:2c:9f:6e:93:a8:b6:53:44:92:1f:b3:c9:d3:66:51:e6:62: 40:e1:ce:86:b1:95:cb:b2:6d:d9:69:7e:fc:aa:c8:34:b7:7e: 6f:6b:84:c9:7d:27:b3:8d:62:86:6d:7c:e1:78:4d:b4:42:c1: 49:e6:93:24:71:e9:e3:ae:d5:b6:e8:b9:24:76:89:96:55:cf: 52:a0:84:7e:2d:9c:04:80:ad:4d:c7:3a:79:c7:db:69:21:7e: 0c:e6:2a:eb:63:20:73:bd:0f:6b:fa:03:ae:ea:38:7d:02:c0: fa:77:3b:c4:74:7f:81:c3:ee:a9:d2:af:63:a3:4a:bc:b9:de: e6:68:63:29:54:32:90:d8:68:86:d2:5c:8d:5e:92:86:f9:aa: f1:09:6d:1c:52:9c:8e:0a:b5:86:2e:45:0a:13:43:15:9b:f2: 66:b4:c8:f9:91:d3:ff:94:26:17:b2:21:27:50:dc:7b:c0:9b: 08:ee:ae:e1 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjUwODMwMTgzODQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU4Yy03OTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7BIDwC4X5rEeqST172g1LSFgzvHR/Q2Ep8TjEwFrMWaT+NFfQd4tuag7g3S oGFs9SWAveuTpcaJiiYDe4DmA3VIJa0nDx1WYX1xCyPr8w9w3Zylt1yGalkM7yRk qQ9Zlss76Bqjyauw34thyGVm95mlKC2hTpcdhi4ETXwxh+VLP/pH5JdG6sehY4PP Ot+ugzEjGcss9wuMnTvfQ8UqAPE1JA2Grq1aQg6ZuF7iFo77EZMFv+dwwiktVeyN UU4C1AzybLTivndActqv242c66sbcGLGG3XokVOYMHgNHI4YiBhM64fMzKVxRrsx H3+yxL4OqV1h3DW+qBofVL5f+QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAsGI1+R h8gTAMzpK/YS1BdEYu3gMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU3QkEvNkU3NDk1MTAwNEVCMTFFQUE3MkZBMzYzQzRGOUFFMDIvRDY4Mjg5QkU5 ODRCMTFFQ0IwNERBQjM4QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQCLXHoAwQCZwb8AwQCZwxsAwQEc5JQAwQAywAoAwQDywVAAwQByxWC AwQByz7oMA0GCSqGSIb3DQEBCwUAA4IBAQBbIye8K575QqQHLtnTWSFbB7mUalGm 1tA+lrQuetNPd2N7a2cgz9aX7lWQS5c+/M4r61mqw3wP26Nv7Zo2OaxUcGhlEht2 ZwV3LJ9uk6i2U0SSH7PJ02ZR5mJA4c6GsZXLsm3ZaX78qsg0t35va4TJfSezjWKG bXzheE20QsFJ5pMkcenjrtW26LkkdomWVc9SoIR+LZwEgK1Nxzp5x9tpIX4M5irr YyBzvQ9r+gOu6jh9AsD6dzvEdH+Bw+6p0q9jo0q8ud7maGMpVDKQ2GiG0lyNXpKG +arxCW0cUpyOCrWGLkUKE0MVm/JmtMj5kdP/lCYXsiEnUNx7wJsI7q7h -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:43 2026 by rpki-client