$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/0C8BE222C89F11EF972B8B0FC4F9AE02.roa File: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (raw, json) Hash identifier: 3KwqzalGmckoBR8v7b+ZvbrLaQfwmVM27+wuu2F9KPw= Subject key identifier: 89:6E:C0:3E:03:FB:5F:C2:07:9B:3D:DC:FF:77:9C:1A:DB:DD:90:CD Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: F7 Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/0C8BE222C89F11EF972B8B0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:55:38 +0000 ROA not before: Thu 27 Feb 2025 09:01:27 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135326 IP address blocks: 103.209.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Feb 27 09:01:27 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3e2ea-a3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:61:42:f4:99:ff:50:44:b1:16:5d:93:a4:3b: a7:0f:44:bf:46:e7:ef:89:ba:99:74:3f:36:75:10: ee:67:c1:ed:36:b5:51:07:5b:09:6f:18:ec:fd:f9: 80:be:3c:d1:98:cf:da:b8:3a:91:a6:e9:d3:70:65: 4b:87:3c:32:56:11:59:9a:cf:40:97:bb:62:76:da: 4d:89:23:17:d3:12:a1:9b:bb:90:71:9f:96:c1:bc: ab:3b:82:8b:1e:39:87:63:4f:4b:75:6b:10:39:80: 4b:49:a2:b4:28:9d:ab:41:d1:69:8f:b4:0a:31:c7: 46:62:72:e7:f2:d2:b0:1a:fc:83:93:4e:00:6d:cc: 16:58:48:3f:7f:8e:ca:e5:ae:d2:7b:83:ff:13:98: 75:c3:c3:df:45:aa:4a:84:9d:14:8b:01:76:31:6e: 23:a7:2a:1e:13:10:77:c0:03:08:f0:35:57:7e:22: 25:5a:bb:3e:2b:78:27:6f:e5:06:f2:a0:1c:be:19: 1a:06:da:9d:41:db:0b:dc:0a:fb:05:1b:d5:0b:0d: d1:b3:e9:42:2b:c0:a9:3d:c1:8a:ec:5d:e1:7a:49: 5d:6f:0a:06:70:20:20:8a:88:19:20:41:8c:66:6c: e8:c4:87:44:d3:24:5a:86:eb:77:53:ee:39:68:9a: 7c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6E:C0:3E:03:FB:5F:C2:07:9B:3D:DC:FF:77:9C:1A:DB:DD:90:CD X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/0C8BE222C89F11EF972B8B0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.2.0/24 Signature Algorithm: sha256WithRSAEncryption 55:25:b8:9a:07:f2:5d:f9:8c:a6:64:25:12:13:fe:e1:64:fe: 5a:88:35:be:0a:f6:c2:16:f4:b7:8a:82:e9:2f:e4:9b:55:27: 70:1b:0f:83:90:e3:8c:2d:73:0e:30:21:d1:5a:b6:99:ea:41: 80:5c:f7:15:aa:6e:89:fb:23:db:1d:1b:a4:18:96:50:c7:6c: 3c:03:60:e0:2f:e3:ae:4c:61:04:cd:11:ea:f5:11:25:82:09: 96:cd:91:bc:15:4e:ef:30:37:e9:00:58:ab:83:6c:c0:35:5b: 8e:99:b8:1e:28:df:c7:3b:5e:67:67:a5:14:92:68:eb:73:0a: 12:57:b8:29:2a:b4:f8:80:e8:ff:b6:9a:28:e3:5c:5b:4b:cc: a0:d5:0a:02:05:d8:c7:4a:8d:ed:e3:e3:4b:c2:e8:ed:f7:0c: 14:09:ec:fa:95:57:bf:ff:41:c5:e4:41:95:7f:34:94:05:48: c6:84:e5:33:73:f7:78:61:df:79:a9:1b:21:b0:2c:9d:18:0e: ad:e2:c5:ea:4f:78:f1:36:21:23:61:39:05:59:4c:26:f8:c1: c5:07:b2:af:5a:f6:da:b3:f0:4a:ff:6f:64:f9:49:03:c7:83: c7:a7:9b:7c:39:65:f3:ba:39:03:2d:6d:4f:3b:e5:9d:88:06: 4f:1f:f9:97 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDUxMTAvBgNVBAUTKDUzNDRENkJCMzdFQTBDQzM5MUQxMjQyMDdBRDk5NUZD RDc3QjlFOTUwHhcNMjUwMjI3MDkwMTI3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTJlYS1hM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7WFC9Jn/UESxFl2TpDunD0S/RufvibqZdD82dRDuZ8HtNrVRB1sJbxjs/fmA vjzRmM/auDqRpunTcGVLhzwyVhFZms9Al7tidtpNiSMX0xKhm7uQcZ+WwbyrO4KL HjmHY09LdWsQOYBLSaK0KJ2rQdFpj7QKMcdGYnLn8tKwGvyDk04AbcwWWEg/f47K 5a7Se4P/E5h1w8PfRapKhJ0UiwF2MW4jpyoeExB3wAMI8DVXfiIlWrs+K3gnb+UG 8qAcvhkaBtqdQdsL3Ar7BRvVCw3Rs+lCK8CpPcGK7F3hekldbwoGcCAgiogZIEGM ZmzoxIdE0yRahut3U+45aJp8iQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIluwD4D +1/CB5s93P93nBrb3ZDNMB8GA1UdIwQYMBaAFFNE1rs36gzDkdEkIHrZlfzXe56V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFENS82NjVEQjdDNkE3 QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURNT1IwU1FnZXRtVl9OZDdu cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODgxRDUvNjY1REI3QzZBN0MwMTFFRjk4QkE1RTJBQzRGOUFFMDIvMEM4QkUyMjJD ODlGMTFFRjk3MkI4QjBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9ECMA0GCSqGSIb3DQEBCwUAA4IBAQBVJbiaB/Jd+YymZCUSE/7h ZP5aiDW+CvbCFvS3ioLpL+SbVSdwGw+DkOOMLXMOMCHRWraZ6kGAXPcVqm6J+yPb HRukGJZQx2w8A2DgL+OuTGEEzRHq9RElggmWzZG8FU7vMDfpAFirg2zANVuOmbge KN/HO15nZ6UUkmjrcwoSV7gpKrT4gOj/tpoo41xbS8yg1QoCBdjHSo3t4+NLwujt 9wwUCez6lVe//0HF5EGVfzSUBUjGhOUzc/d4Yd95qRshsCydGA6t4sXqT3jxNiEj YTkFWUwm+MHFB7KvWvbas/BK/29k+UkDx4PHp5t8OWXzujkDLW1PO+WdiAZPH/mX -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:09 2026 by rpki-client