$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/EC7403A0B20711EFAADEFA2CC4F9AE02.roa File: EC7403A0B20711EFAADEFA2CC4F9AE02.roa (raw, json) Hash identifier: +VTJt9eTlkzaJr20Omowhr95tOmVndsvtXQL63uYoy0= Subject key identifier: 90:53:0F:BB:F6:92:D0:67:FF:A0:EB:CB:2F:5C:05:42:87:32:29:CE Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Certificate serial: 0CD3 Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/EC7403A0B20711EFAADEFA2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:24:05 +0000 ROA not before: Tue 22 Apr 2025 18:47:23 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137432 IP address blocks: 103.108.90.0/23 maxlen: 24 2402:68c0::/32 maxlen: 32 2402:68c0::/36 maxlen: 36 2402:68c0:1000::/36 maxlen: 36 2402:68c0:2000::/36 maxlen: 36 2402:68c0:3000::/36 maxlen: 36 2402:68c0:4000::/36 maxlen: 36 2402:68c0:5000::/36 maxlen: 36 2402:68c0:6000::/36 maxlen: 36 2402:68c0:7000::/36 maxlen: 36 2402:68c0:8000::/36 maxlen: 36 2402:68c0:9000::/36 maxlen: 36 2402:68c0:a000::/36 maxlen: 36 2402:68c0:a000::/48 maxlen: 48 2402:68c0:a001::/48 maxlen: 48 2402:68c0:b000::/36 maxlen: 36 2402:68c0:c000::/36 maxlen: 36 2402:68c0:d000::/36 maxlen: 36 2402:68c0:e000::/36 maxlen: 36 2402:68c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190FEA, serialNumber=627FA9960EA283AA239213CACD37504D2460A104 Validity Not Before: Apr 22 18:47:23 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a405b4-28e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:29:e2:2a:d8:3f:ba:66:98:9f:80:90:b0:fb: 0b:c8:9f:49:cd:53:a3:1e:d4:9e:7a:f3:a8:e5:df: 85:68:bc:43:00:51:c1:c5:81:62:63:1b:13:2e:3f: 80:79:a8:92:e0:26:b4:31:35:e3:c5:c4:cc:85:64: 6c:e2:03:a2:db:e6:9d:c0:c5:4e:09:22:2e:d2:dd: 03:4a:2f:66:06:21:7e:48:42:38:57:9c:5b:67:4b: 89:17:92:9e:03:2c:2f:d7:fc:c7:b1:61:8f:c8:7d: 8f:ba:2a:2b:ce:08:21:82:2d:3b:af:9b:cf:59:ae: ec:80:4c:6e:1a:6b:7d:07:15:1c:07:25:e8:cd:7e: 5d:0a:41:d1:bb:a2:40:ef:21:c1:0c:10:6a:09:06: d0:52:6f:0e:bd:be:e3:c3:31:0e:ee:89:96:ed:55: 09:52:c8:49:8e:0a:d5:62:7d:b2:86:0a:f1:02:49: 40:1a:a1:3f:3f:e4:f5:61:f0:ca:86:1b:1e:aa:11: 4e:92:e6:5e:07:8f:c7:72:12:1f:da:72:cc:94:ad: 3a:3e:28:34:91:0b:b1:2d:74:a9:dc:79:58:60:bf: d2:18:58:19:f9:1c:96:8a:0a:13:1e:cd:08:7d:c5: aa:cc:3a:7c:91:0d:a6:3d:74:5e:de:b7:55:74:b1: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:53:0F:BB:F6:92:D0:67:FF:A0:EB:CB:2F:5C:05:42:87:32:29:CE X509v3 Authority Key Identifier: keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/EC7403A0B20711EFAADEFA2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.90.0/23 IPv6: 2402:68c0::/32 Signature Algorithm: sha256WithRSAEncryption 02:f7:f6:26:61:fd:27:11:ee:3a:4d:25:e9:42:a1:ff:ce:c4: 1c:b6:1c:eb:36:4b:ae:6e:ff:64:bb:35:5f:65:8b:38:ac:7c: 53:f8:dc:aa:71:9c:7a:00:43:d6:2c:a6:68:47:0c:4f:a1:8e: c9:b7:46:6c:04:8d:e6:86:37:56:02:6e:e5:3e:55:1e:5a:0a: 31:8a:ab:0d:86:16:96:40:f7:9a:3f:bf:cb:a9:cc:b2:84:f3: 49:50:05:ae:7c:8a:4d:91:35:7a:33:11:e8:5a:2f:d7:61:3b: 50:6d:38:10:45:86:b9:29:dd:22:be:48:4b:42:1d:68:76:0d: fb:3d:fe:04:7e:f4:d8:b5:0b:bb:7d:f5:fb:0b:0f:d4:9b:e0: d8:f6:1a:35:fb:bd:eb:d0:93:a0:42:11:e5:da:ec:ba:db:04: b6:b7:de:4c:00:e4:4e:2e:7c:e5:6f:ae:a3:30:8c:2c:70:5f: 14:da:66:47:b3:6b:f1:ff:17:d5:8b:fd:35:23:70:35:7a:b3: bf:3a:6a:ac:5a:38:d6:41:83:cc:5b:70:44:74:3d:05:77:31: 18:fa:93:ee:ac:c1:d8:ac:5d:85:07:ef:fe:bf:67:c1:7b:1c: e2:e7:de:91:f8:93:ce:02:dc:a7:5e:e8:dd:1e:b9:83:d4:a6: d5:94:77:87 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE MjQ2MEExMDQwHhcNMjUwNDIyMTg0NzIzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDViNC0yOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SniKtg/umaYn4CQsPsLyJ9JzVOjHtSeevOo5d+FaLxDAFHBxYFiYxsTLj+A eaiS4Ca0MTXjxcTMhWRs4gOi2+adwMVOCSIu0t0DSi9mBiF+SEI4V5xbZ0uJF5Ke Aywv1/zHsWGPyH2Puiorzgghgi07r5vPWa7sgExuGmt9BxUcByXozX5dCkHRu6JA 7yHBDBBqCQbQUm8Ovb7jwzEO7omW7VUJUshJjgrVYn2yhgrxAklAGqE/P+T1YfDK hhseqhFOkuZeB4/HchIf2nLMlK06Pig0kQuxLXSp3HlYYL/SGFgZ+RyWigoTHs0I fcWqzDp8kQ2mPXRe3rdVdLHC7QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJBTD7v2 ktBn/6Dryy9cBUKHMinOMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTBGRUEvMjQwREFDRUEwQjcyMTFFQUFDRkI2OTE2QzRGOUFFMDIvRUM3NDAzQTBC MjA3MTFFRkFBREVGQTJDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ2xaMA0EAgACMAcDBQAkAmjAMA0GCSqGSIb3DQEBCwUAA4IBAQAC 9/YmYf0nEe46TSXpQqH/zsQcthzrNkuubv9kuzVfZYs4rHxT+NyqcZx6AEPWLKZo RwxPoY7Jt0ZsBI3mhjdWAm7lPlUeWgoxiqsNhhaWQPeaP7/LqcyyhPNJUAWufIpN kTV6MxHoWi/XYTtQbTgQRYa5Kd0ivkhLQh1odg37Pf4EfvTYtQu7ffX7Cw/Um+DY 9ho1+73r0JOgQhHl2uy62wS2t95MAOROLnzlb66jMIwscF8U2mZHs2vx/xfVi/01 I3A1erO/OmqsWjjWQYPMW3BEdD0FdzEY+pPurMHYrF2FB+/+v2fBexzi596R+JPO AtynXujdHrmD1KbVlHeH -----END CERTIFICATE-----Generated at Mon Mar 2 03:39:46 2026 by rpki-client