$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa File: F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa (raw, json) Hash identifier: q1pTqOK64HYWoKgZSZ7XLFGjIcVEPgtKRHPpyD0S1+k= Subject key identifier: 4A:72:EB:0C:D8:6F:EC:C6:DA:FE:CF:91:97:F2:B4:B0:B3:F9:8F:EC Certificate issuer: /CN=A91A36A7/serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Certificate serial: 0670 Authority key identifier: A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:48:16 +0000 ROA not before: Wed 02 Apr 2025 23:24:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141767 IP address blocks: 103.163.182.0/23 maxlen: 23 103.163.182.0/24 maxlen: 24 103.163.183.0/24 maxlen: 24 2001:df6:2380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A36A7, serialNumber=A3652D9E54E96468B23047937317FA4ECD7B3648 Validity Not Before: Apr 2 23:24:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3fd4f-48c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:95:2d:96:6f:55:6d:c8:80:79:63:4d:1e: 86:e8:51:c5:20:93:b8:17:7d:70:ff:69:36:30:47: 11:ed:e1:cb:b6:7c:4f:89:e1:7d:c5:45:fe:30:c0: c7:d9:8b:24:79:4f:55:24:46:98:69:af:7e:b9:55: 15:75:04:b3:d5:e6:d2:44:ee:50:48:65:95:7a:28: 02:1d:0f:c5:87:4a:a2:5f:23:b5:3d:07:ec:82:46: 6f:d1:58:e3:14:16:75:3d:f8:6e:4b:96:34:ce:0f: bf:bc:f9:d9:a6:0b:25:b6:c6:60:e4:d8:9e:2c:cb: 71:42:cb:17:73:d1:ef:3f:72:af:86:20:7f:52:aa: 1f:e5:62:7a:e2:4b:9d:a9:df:10:53:52:74:3d:02: 0a:11:d4:2e:36:3e:88:bc:2d:45:d4:1a:c0:4d:b3: ba:a8:b6:f9:d4:a4:31:10:19:85:42:e9:46:18:81: f0:df:d5:eb:c1:7a:82:1e:b5:20:92:69:33:96:66: 06:9a:7c:97:20:aa:7b:5c:6a:0c:e7:35:16:90:54: 01:42:5c:3f:54:f5:28:17:8f:96:ed:e7:5f:ae:f5: 01:00:8b:80:f0:89:4b:38:db:b6:a7:21:c2:5b:41: 5c:5f:cd:f4:2d:d6:0d:c9:60:da:18:10:06:a9:ff: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:72:EB:0C:D8:6F:EC:C6:DA:FE:CF:91:97:F2:B4:B0:B3:F9:8F:EC X509v3 Authority Key Identifier: keyid:A3:65:2D:9E:54:E9:64:68:B2:30:47:93:73:17:FA:4E:CD:7B:36:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o2UtnlTpZGiyMEeTcxf6Ts17Nkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36A7/8AA65AFCB94911EBBBB3255AC4F9AE02/F0CA090EB94A11EBAF5BDD5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.163.182.0/23 IPv6: 2001:df6:2380::/48 Signature Algorithm: sha256WithRSAEncryption 4a:82:bb:28:bf:94:20:a7:d5:1e:76:07:6b:ac:dc:b9:03:73: f1:d6:05:08:62:6d:1a:56:f6:fd:b9:9d:78:a5:5f:ec:b4:07: cd:fa:cd:76:37:44:93:c8:9c:77:e2:ac:75:56:9c:8e:8d:f8: e9:ae:68:48:62:b5:f0:97:a4:d4:77:d8:9e:08:b0:d9:ac:6a: 59:ab:87:86:96:65:27:c9:fa:1d:62:8b:69:3f:26:bc:b6:0e: e4:7d:37:99:19:f3:29:59:12:1d:b9:a3:ac:95:7e:94:18:35: 5e:f9:d8:01:10:18:f5:73:2e:4f:91:79:23:61:c3:d1:33:1d: 23:c5:05:65:a4:6f:cd:6c:37:54:2f:f2:17:14:9f:d1:af:0a: f5:35:6e:ba:ee:c6:57:bf:b8:8d:75:17:c2:e0:87:bf:c8:10: 86:f6:90:e6:32:e2:c2:d0:15:2b:b1:36:84:ac:04:f2:47:73: 6b:ef:79:bf:23:b0:e4:64:df:ab:6b:ce:10:20:9b:a1:69:42: e3:3d:4b:c3:0b:84:72:ab:3e:6c:63:ec:c6:a7:76:4c:13:71: cb:67:b1:3b:f2:07:5d:90:fb:74:8e:dd:4f:84:6f:b2:3e:09: 6d:45:57:77:55:45:c2:fa:4e:d5:d2:d6:85:dd:f7:9d:30:43: 0c:15:be:d2 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM2QTcxMTAvBgNVBAUTKEEzNjUyRDlFNTRFOTY0NjhCMjMwNDc5MzczMTdGQTRF Q0Q3QjM2NDgwHhcNMjUwNDAyMjMyNDM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmQ0Zi00OGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO+VLZZvVW3IgHljTR6G6FHFIJO4F31w/2k2MEcR7eHLtnxPieF9xUX+MMDH 2YskeU9VJEaYaa9+uVUVdQSz1ebSRO5QSGWVeigCHQ/Fh0qiXyO1PQfsgkZv0Vjj FBZ1PfhuS5Y0zg+/vPnZpgsltsZg5NieLMtxQssXc9HvP3KvhiB/Uqof5WJ64kud qd8QU1J0PQIKEdQuNj6IvC1F1BrATbO6qLb51KQxEBmFQulGGIHw39XrwXqCHrUg kmkzlmYGmnyXIKp7XGoM5zUWkFQBQlw/VPUoF4+W7edfrvUBAIuA8IlLONu2pyHC W0FcX830LdYNyWDaGBAGqf+SHwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEpy6wzY b+zG2v7PkZfytLCz+Y/sMB8GA1UdIwQYMBaAFKNlLZ5U6WRosjBHk3MX+k7NezZI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzZBNy84QUE2NUFGQ0I5 NDkxMUVCQkJCMzI1NUFDNEY5QUUwMi9vMlV0bmxUcFpHaXlNRWVUY3hmNlRzMTdO a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28yVXRubFRwWkdpeU1FZVRjeGY2VHMxN05rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM2QTcvOEFBNjVBRkNCOTQ5MTFFQkJCQjMyNTVBQzRGOUFFMDIvRjBDQTA5MEVC OTRBMTFFQkFGNUJERDVBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6O2MA8EAgACMAkDBwAgAQ32I4AwDQYJKoZIhvcNAQELBQADggEB AEqCuyi/lCCn1R52B2us3LkDc/HWBQhibRpW9v25nXilX+y0B836zXY3RJPInHfi rHVWnI6N+OmuaEhitfCXpNR32J4IsNmsalmrh4aWZSfJ+h1ii2k/Jry2DuR9N5kZ 8ylZEh25o6yVfpQYNV752AEQGPVzLk+ReSNhw9EzHSPFBWWkb81sN1Qv8hcUn9Gv CvU1brruxle/uI11F8Lgh7/IEIb2kOYy4sLQFSuxNoSsBPJHc2vveb8jsORk36tr zhAgm6FpQuM9S8MLhHKrPmxj7MandkwTcctnsTvyB12Q+3SO3U+Eb7I+CW1FV3dV RcL6TtXS1oXd950wQwwVvtI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:35 2026 by rpki-client