$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa File: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (raw, json) Hash identifier: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws= Subject key identifier: 14:EB:93:98:35:00:BA:7E:5D:7C:7A:F9:31:05:04:CA:1C:A5:8C:C2 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0D73 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:51:45 +0000 ROA not before: Tue 30 Sep 2025 18:17:54 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 4764 IP address blocks: 103.115.208.0/22 maxlen: 24 117.20.64.0/21 maxlen: 24 119.17.128.0/19 maxlen: 24 202.153.208.0/20 maxlen: 24 2403:640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Sep 30 18:17:54 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44471-84c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cc:d1:76:07:6a:e5:ca:3e:e0:8e:0e:6f:e8: 50:8d:cb:4f:a0:1f:13:c1:39:ae:47:16:fb:9c:69: ec:e8:d3:b8:b0:f1:76:d3:cc:05:00:f4:99:ec:33: b6:16:95:00:13:7a:1a:df:6d:70:81:a7:d1:4a:9f: 51:04:c6:ed:03:cd:bb:1c:a3:de:02:c2:81:2f:f6: 08:9d:3f:f5:88:03:7a:65:46:b7:4d:2c:5d:7c:41: 01:97:99:99:02:e0:35:03:f7:d1:42:15:15:6b:f9: 05:c1:0b:70:70:0b:18:80:7d:17:28:f2:99:5a:21: 9c:9a:15:fb:e0:f4:dd:92:fe:d0:08:92:4c:0e:6f: e3:af:2e:cc:51:35:9d:01:90:6e:a7:87:ff:94:1a: 3f:48:9d:41:f2:8c:63:9a:d0:d4:6f:6d:53:cd:40: 99:66:82:6b:85:73:b9:af:fe:2d:59:42:06:b0:c8: 13:5e:c4:ee:1f:a0:9e:ed:bf:70:49:c5:33:fd:2c: 58:28:8d:92:ac:c2:7d:7c:5c:20:dc:b1:a3:00:b1: bf:8f:44:e8:c9:b0:f5:0f:f7:c4:f1:5a:a6:f8:99: dc:5a:52:71:0d:72:73:71:40:e1:a9:f1:1f:8a:3c: be:7f:d0:6a:fa:46:96:01:b4:4f:13:40:20:75:34: bf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EB:93:98:35:00:BA:7E:5D:7C:7A:F9:31:05:04:CA:1C:A5:8C:C2 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/7B3163F0072A11EA9E314D4CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.208.0/22 117.20.64.0/21 119.17.128.0/19 202.153.208.0/20 IPv6: 2403:640::/32 Signature Algorithm: sha256WithRSAEncryption 10:be:90:af:3c:c7:33:2d:dd:57:6b:e8:11:fd:2e:ec:37:bb: 5c:2b:13:c7:01:d5:2a:07:26:b3:c6:91:67:b8:c8:cb:f7:9c: 38:36:fa:1b:09:b8:71:f1:35:63:f9:1d:ac:c3:3d:c2:23:1f: 25:b8:de:90:b4:e0:d7:01:0f:8e:ac:b9:17:51:3e:47:e4:24: 28:34:79:f6:b6:1a:db:9d:d7:58:d2:c2:3e:38:d0:58:3b:6b: ff:46:1d:bb:e8:e3:18:a8:9f:f6:7a:6d:7a:0a:76:b1:c0:36: 06:1c:46:d3:54:ae:a4:11:58:b6:ef:53:f2:a5:fd:da:3d:1b: a5:43:a5:86:0f:74:1d:65:d9:c1:a6:24:d0:ab:1f:46:49:53: f8:b5:97:0b:f3:4f:df:f1:6c:ef:fc:77:43:a0:74:9f:f3:8a: 06:9f:7e:77:a7:1e:80:31:fe:bd:3e:39:41:12:f9:95:f5:21: fa:ea:a5:1c:17:ef:11:48:c5:96:32:a9:9b:1d:d6:21:94:b8: b1:16:96:31:a9:89:08:c2:34:1e:34:3e:70:3a:78:0b:6a:50: 44:e3:7a:9d:cc:4b:70:12:6c:04:67:db:2d:84:16:44:0f:77: a8:3d:6e:4c:ab:8d:fa:62:2b:53:7f:43:bb:51:4e:ab:1b:39: 58:ef:14:da -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwOTMwMTgxNzU0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDQ3MS04NGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8zRdgdq5co+4I4Ob+hQjctPoB8TwTmuRxb7nGns6NO4sPF208wFAPSZ7DO2 FpUAE3oa321wgafRSp9RBMbtA827HKPeAsKBL/YInT/1iAN6ZUa3TSxdfEEBl5mZ AuA1A/fRQhUVa/kFwQtwcAsYgH0XKPKZWiGcmhX74PTdkv7QCJJMDm/jry7MUTWd AZBup4f/lBo/SJ1B8oxjmtDUb21TzUCZZoJrhXO5r/4tWUIGsMgTXsTuH6Ce7b9w ScUz/SxYKI2SrMJ9fFwg3LGjALG/j0ToybD1D/fE8Vqm+JncWlJxDXJzcUDhqfEf ijy+f9Bq+kaWAbRPE0AgdTS/xQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFBTrk5g1 ALp+XXx6+TEFBMocpYzCMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM0MzAvODZBQzg5RDBFODdCMTFFOUExRUQ1QjQ3QzRGOUFFMDIvN0IzMTYzRjAw NzJBMTFFQTlFMzE0RDRDQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCZ3PQAwQDdRRAAwQFdxGAAwQEypnQMA0EAgACMAcDBQAkAwZAMA0G CSqGSIb3DQEBCwUAA4IBAQAQvpCvPMczLd1Xa+gR/S7sN7tcKxPHAdUqByazxpFn uMjL95w4NvobCbhx8TVj+R2swz3CIx8luN6QtODXAQ+OrLkXUT5H5CQoNHn2thrb nddY0sI+ONBYO2v/Rh276OMYqJ/2em16CnaxwDYGHEbTVK6kEVi271Pypf3aPRul Q6WGD3QdZdnBpiTQqx9GSVP4tZcL80/f8Wzv/HdDoHSf84oGn353px6AMf69PjlB EvmV9SH66qUcF+8RSMWWMqmbHdYhlLixFpYxqYkIwjQeND5wOngLalBE43qdzEtw EmwEZ9sthBZED3eoPW5Mq436YitTf0O7UU6rGzlY7xTa -----END CERTIFICATE-----Generated at Mon Mar 2 08:37:58 2026 by rpki-client