$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/CDD62642854E11EBA2CFDC87C4F9AE02.roa File: CDD62642854E11EBA2CFDC87C4F9AE02.roa (raw, json) Hash identifier: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc= Subject key identifier: B1:DE:15:F4:FF:E1:FC:1D:00:F2:F0:A9:F8:52:D9:76:F0:BF:09:4C Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0B9E Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/CDD62642854E11EBA2CFDC87C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:44:40 +0000 ROA not before: Mon 26 Jan 2026 19:16:06 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 140038 IP address blocks: 103.147.182.0/23 maxlen: 23 103.147.182.0/24 maxlen: 24 103.147.183.0/24 maxlen: 24 103.204.80.0/23 maxlen: 23 103.204.80.0/24 maxlen: 24 103.204.81.0/24 maxlen: 24 2001:df2:9f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2974 (0xb9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Jan 26 19:16:06 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46cf8-886f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:9c:31:c3:18:56:24:e8:fc:c2:af:ec:e1: b3:42:e2:55:3f:5b:a2:5d:68:ff:c5:94:10:18:ab: c4:e8:b3:94:9d:b0:ed:84:2a:43:fe:4e:96:3f:eb: bc:fc:17:f0:a2:d9:eb:9c:98:97:ce:94:c3:05:cb: 54:f7:09:6f:e6:0b:b0:13:46:4f:65:b6:2f:49:ee: a9:66:e9:a1:d7:75:0e:00:a8:9a:cd:e4:46:0c:47: a8:a4:70:dd:ce:15:d3:01:79:6b:85:18:31:0a:52: db:c5:29:39:c3:33:d6:ed:2e:42:78:b5:ae:af:dc: f8:c7:07:dd:ac:03:99:5b:35:07:37:fa:fe:94:60: d0:af:d0:4c:93:c3:2f:65:8c:2d:fa:82:24:10:f3: f2:4e:43:41:7c:35:df:61:54:01:b3:6a:4e:8b:dc: eb:b3:51:af:80:16:8c:cc:49:ef:df:99:ae:86:28: 6f:ec:05:2b:b5:ee:b0:bb:7a:37:d3:91:ec:83:38: e3:0f:08:d0:94:38:a1:29:8b:c1:99:ec:6e:d4:27: 1d:e0:0e:af:a7:92:a2:33:ba:13:bb:25:f5:e6:42: 47:08:c0:35:11:74:21:57:04:b2:88:14:c0:cb:a4: 8c:c9:79:95:4d:20:cc:85:cc:e6:d6:c8:a8:67:2f: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:15:F4:FF:E1:FC:1D:00:F2:F0:A9:F8:52:D9:76:F0:BF:09:4C X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/CDD62642854E11EBA2CFDC87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.182.0/23 103.204.80.0/23 IPv6: 2001:df2:9f80::/48 Signature Algorithm: sha256WithRSAEncryption 93:a8:b3:d5:2e:84:a9:08:28:3f:51:1f:31:b6:f0:dd:c9:d8: 63:de:ff:b5:16:38:22:6a:a5:25:2a:2e:b7:cb:13:b3:09:5f: fd:40:ca:6e:03:98:80:73:b8:ab:7d:85:ee:2d:b0:be:c4:b6: da:c7:25:73:df:d9:62:27:ba:b6:f3:6f:f4:01:0b:b6:6e:7c: af:ae:fb:4f:4b:8a:cd:26:f7:d7:2a:7c:0a:44:81:58:88:da: db:31:a8:c8:88:c4:97:e2:ec:7c:9c:59:db:b5:40:52:5d:21: 11:78:fa:d2:12:44:57:eb:81:09:0a:0d:22:ab:52:3b:2e:ef: 20:82:03:da:ad:f4:e3:1b:96:1c:de:fa:8a:94:95:94:7a:96: d1:65:e4:a2:1b:d6:5a:48:36:bb:a8:a6:f6:34:69:33:d0:c5: d8:25:98:25:b7:9f:c0:0c:3b:5e:99:e6:4c:f4:2f:74:1e:af: 2f:80:eb:2b:1c:88:7a:2b:f1:cf:fe:3f:3d:81:42:ff:7d:6f: 2e:18:f4:1f:9d:16:c8:38:91:ee:02:50:34:8a:9c:a4:29:a2: d4:3a:e9:c9:2c:ef:05:81:21:4f:22:62:85:9b:76:84:a4:87: bf:59:89:fe:01:a8:42:0a:30:cd:cd:a1:1b:b3:bc:77:6e:a0: 36:62:d0:a1 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjYwMTI2MTkxNjA2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNmOC04ODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxqcMcMYViTo/MKv7OGzQuJVP1uiXWj/xZQQGKvE6LOUnbDthCpD/k6WP+u8 /BfwotnrnJiXzpTDBctU9wlv5guwE0ZPZbYvSe6pZumh13UOAKiazeRGDEeopHDd zhXTAXlrhRgxClLbxSk5wzPW7S5CeLWur9z4xwfdrAOZWzUHN/r+lGDQr9BMk8Mv ZYwt+oIkEPPyTkNBfDXfYVQBs2pOi9zrs1GvgBaMzEnv35muhihv7AUrte6wu3o3 05HsgzjjDwjQlDihKYvBmexu1Ccd4A6vp5KiM7oTuyX15kJHCMA1EXQhVwSyiBTA y6SMyXmVTSDMhczm1sioZy/H4wIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLHeFfT/ 4fwdAPLwqfhS2XbwvwlMMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTMwNzgvODYzMEIxQzg0QzhDMTFFQUI5RTI3MDU3QzRGOUFFMDIvQ0RENjI2NDI4 NTRFMTFFQkEyQ0ZEQzg3QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ5O2AwQBZ8xQMA8EAgACMAkDBwAgAQ3yn4AwDQYJKoZIhvcNAQEL BQADggEBAJOos9UuhKkIKD9RHzG28N3J2GPe/7UWOCJqpSUqLrfLE7MJX/1Aym4D mIBzuKt9he4tsL7EttrHJXPf2WInurbzb/QBC7ZufK+u+09Lis0m99cqfApEgViI 2tsxqMiIxJfi7HycWdu1QFJdIRF4+tISRFfrgQkKDSKrUjsu7yCCA9qt9OMblhze +oqUlZR6ltFl5KIb1lpINruopvY0aTPQxdglmCW3n8AMO16Z5kz0L3Qery+A6ysc iHor8c/+Pz2BQv99by4Y9B+dFsg4ke4CUDSKnKQpotQ66cks7wWBIU8iYoWbdoSk h79Zif4BqEIKMM3NoRuzvHduoDZi0KE= -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:53 2026 by rpki-client