$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/317CF2A634E811EFA8BEA738C4F9AE02.roa File: 317CF2A634E811EFA8BEA738C4F9AE02.roa (raw, json) Hash identifier: +mfxCLFmT0kAngWE0QR8njelgu56dCQ+gYLAva7jY7M= Subject key identifier: 94:61:50:6F:DA:FC:D3:EA:9E:A5:87:44:07:3F:54:D2:A4:AB:A8:3D Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1FB4 Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/317CF2A634E811EFA8BEA738C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:41:29 +0000 ROA not before: Sun 08 Feb 2026 10:27:10 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45424 IP address blocks: 103.213.124.0/22 maxlen: 24 182.54.156.0/22 maxlen: 24 2407:6200::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8116 (0x1fb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Feb 8 10:27:10 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a46c38-09f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:68:73:92:3b:8c:18:86:f0:bd:0b:4c:36:01: 83:db:73:b4:30:86:ab:70:71:97:85:f4:88:7f:86: 9b:a5:d6:32:7d:14:6b:e4:6d:2f:8c:78:fa:19:23: 2c:c4:c2:f7:e0:16:37:50:b9:c4:78:2b:33:77:2a: ed:86:6b:36:da:66:66:a6:1f:ec:bc:4c:be:f1:11: a3:d3:10:b8:c8:07:9c:86:6b:05:58:ff:20:05:0f: c2:8c:ae:68:11:6a:b8:67:93:c2:2c:ef:75:e5:61: ce:08:db:da:e3:4e:fe:8e:c2:61:31:e6:d0:e7:58: 33:fd:14:0c:eb:46:5f:6d:b9:23:29:a9:eb:41:3a: 07:e7:66:44:b7:40:b7:b1:f6:ca:0d:ab:eb:8f:e3: 1b:3c:b1:c1:57:77:31:95:9e:88:d2:aa:4a:52:79: 43:cb:84:76:88:c7:5a:17:b1:2a:e1:b7:43:af:f8: ae:75:cd:76:27:57:2e:71:3a:61:bb:b8:88:98:86: 62:81:3e:82:d7:a6:83:7f:2c:01:a8:18:b0:f6:b1: 3d:4f:d0:4d:d3:59:1c:00:b2:18:23:b1:58:4d:3f: b0:9e:e8:98:ac:51:2b:01:68:8b:14:35:cd:d5:33: e0:c7:6d:2e:78:47:d7:42:b6:51:2b:70:20:3c:7b: 0e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:61:50:6F:DA:FC:D3:EA:9E:A5:87:44:07:3F:54:D2:A4:AB:A8:3D X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/317CF2A634E811EFA8BEA738C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.213.124.0/22 182.54.156.0/22 IPv6: 2407:6200::/32 Signature Algorithm: sha256WithRSAEncryption cb:91:05:11:95:59:5a:ae:cc:ef:30:f2:16:48:2a:fc:88:b8: e6:54:81:4d:16:f3:06:cf:de:e7:97:18:f7:bc:8c:ef:65:ed: 24:00:ae:78:bc:2d:a5:80:ac:bb:dd:0d:2d:95:9b:d4:be:8d: 17:9f:ea:a9:b5:b7:4c:6a:8b:25:a6:3b:16:64:26:fc:50:db: f4:12:7e:48:84:75:f5:1f:04:c2:48:75:b3:c0:44:68:1c:df: 5f:16:e6:a4:fe:1e:31:25:79:0c:fe:e7:13:bd:c1:b0:9e:b8: 78:59:3c:c7:50:99:fe:06:ea:c6:52:b9:b2:48:39:65:bf:8e: ac:a4:79:17:86:a0:48:b0:f6:cc:e4:72:d1:99:2a:68:63:fc: e9:3a:e7:76:82:1f:ed:7e:af:14:ce:2c:60:74:ef:d4:39:cc: 12:02:f5:f8:e5:87:2f:83:bb:e8:f6:93:71:a9:7f:30:55:0f: 98:20:f6:de:b2:c0:51:07:4b:3d:7a:ef:6f:08:ae:ec:d0:ad: e3:c8:e3:4d:6f:85:0f:52:7b:5e:dc:95:e6:19:e1:19:a0:d9: e7:4d:11:a6:78:c6:57:9a:c9:bf:5f:0d:5c:f7:5c:f3:dd:0b: 36:8c:15:f3:01:75:be:c6:f3:5f:cb:2b:2d:0a:53:46:b2:4a: 61:f6:b7:cd -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICH7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjYwMjA4MTAyNzEwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmMzOC0wOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6WhzkjuMGIbwvQtMNgGD23O0MIarcHGXhfSIf4abpdYyfRRr5G0vjHj6GSMs xML34BY3ULnEeCszdyrthms22mZmph/svEy+8RGj0xC4yAechmsFWP8gBQ/CjK5o EWq4Z5PCLO915WHOCNva407+jsJhMebQ51gz/RQM60ZfbbkjKanrQToH52ZEt0C3 sfbKDavrj+MbPLHBV3cxlZ6I0qpKUnlDy4R2iMdaF7Eq4bdDr/iudc12J1cucTph u7iImIZigT6C16aDfywBqBiw9rE9T9BN01kcALIYI7FYTT+wnuiYrFErAWiLFDXN 1TPgx20ueEfXQrZRK3AgPHsO8QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFJRhUG/a /NPqnqWHRAc/VNKkq6g9MB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzMxRUEvOUFGM0VEMjg1RUVDMTFFNjg4NkVDNTFCQzRGOUFFMDIvMzE3Q0YyQTYz NEU4MTFFRkE4QkVBNzM4QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ9V8AwQCtjacMA0EAgACMAcDBQAkB2IAMA0GCSqGSIb3DQEBCwUA A4IBAQDLkQURlVlarszvMPIWSCr8iLjmVIFNFvMGz97nlxj3vIzvZe0kAK54vC2l gKy73Q0tlZvUvo0Xn+qptbdMaoslpjsWZCb8UNv0En5IhHX1HwTCSHWzwERoHN9f Fuak/h4xJXkM/ucTvcGwnrh4WTzHUJn+BurGUrmySDllv46spHkXhqBIsPbM5HLR mSpoY/zpOud2gh/tfq8UzixgdO/UOcwSAvX45Ycvg7vo9pNxqX8wVQ+YIPbessBR B0s9eu9vCK7s0K3jyONNb4UPUnte3JXmGeEZoNnnTRGmeMZXmsm/Xw1c91zz3Qs2 jBXzAXW+xvNfyystClNGskph9rfN -----END CERTIFICATE-----Generated at Mon Mar 2 07:48:42 2026 by rpki-client