$ rpki-client -vvf rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/6015E82861B411EEBAA6AD59C4F9AE02.roa File: 6015E82861B411EEBAA6AD59C4F9AE02.roa (raw, json) Hash identifier: UORe/0TZF8IoRoAarwALcIbpOxjo7QBKBArFHjwhFB4= Subject key identifier: 7A:71:E5:02:37:3B:D1:FA:F9:6D:C1:78:EF:DF:69:1D:58:37:1B:25 Certificate issuer: /CN=A91A394B/serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Certificate serial: 01CA Authority key identifier: 94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/6015E82861B411EEBAA6AD59C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:39:06 +0000 ROA not before: Fri 29 Aug 2025 04:52:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133131 IP address blocks: 103.167.252.0/23 maxlen: 23 103.167.252.0/24 maxlen: 24 103.167.253.0/24 maxlen: 24 2001:df2:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A394B, serialNumber=9408E9D7B6CEB834CA90901E45786010C069C32B Validity Not Before: Aug 29 04:52:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3ed1a-5687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:3d:c5:d5:31:a5:4d:9b:6c:57:9a:c4:e6: db:28:6b:3b:59:e6:c5:67:73:a2:f1:2b:46:0b:15: 0b:88:df:d0:58:60:81:37:33:90:eb:7d:f4:1f:b5: 92:90:3c:78:cd:8c:21:78:25:8d:c0:a9:88:54:e6: 2f:64:03:24:1b:2b:00:7d:4e:2c:89:09:13:d9:de: 0b:fc:98:cc:c2:39:5b:d5:95:f9:a0:33:8c:0a:78: ec:35:3e:54:47:78:fa:36:b9:a0:d8:05:c4:02:32: ef:8b:94:52:f6:87:07:ab:f9:42:96:a1:13:6c:3f: f8:d4:96:24:09:ac:92:ba:2a:84:66:fc:b6:88:fb: 72:06:bb:e0:86:a3:54:e1:c1:ec:46:83:60:1c:03: a7:bc:35:d9:e2:c6:8b:28:d4:4e:fb:dd:94:73:1d: ce:ec:6d:a2:4c:28:69:9b:45:f3:32:00:1f:4e:ce: 53:c6:d9:a7:cf:af:c0:f2:e7:9f:7e:10:c2:0e:8d: 34:eb:32:16:b4:73:7e:76:60:96:e5:07:f6:72:58: 86:54:00:ae:62:ff:a6:d5:93:64:94:6d:8b:5a:ae: f9:7e:51:d6:6d:6d:88:82:c1:ab:a0:92:52:66:fb: e6:01:ad:8e:22:8f:12:24:f4:73:dc:c7:c7:6c:da: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:71:E5:02:37:3B:D1:FA:F9:6D:C1:78:EF:DF:69:1D:58:37:1B:25 X509v3 Authority Key Identifier: keyid:94:08:E9:D7:B6:CE:B8:34:CA:90:90:1E:45:78:60:10:C0:69:C3:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/lAjp17bOuDTKkJAeRXhgEMBpwys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lAjp17bOuDTKkJAeRXhgEMBpwys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A394B/10ACAB0A61B411EE80CE1846C4F9AE02/6015E82861B411EEBAA6AD59C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.167.252.0/23 IPv6: 2001:df2:c340::/48 Signature Algorithm: sha256WithRSAEncryption b8:f4:9c:93:65:e7:f7:0b:50:c1:43:3a:2b:99:0f:66:1d:fa: 54:ae:d7:f9:3c:9c:af:d0:f1:de:c8:f8:a2:19:37:c7:9a:db: 12:2c:68:4f:ce:e1:6f:13:29:56:16:9f:44:ab:df:c4:53:94: 7c:12:7f:60:94:a4:cb:91:b0:04:57:09:8f:d4:df:1d:06:77: 3a:32:43:d6:b2:42:1d:70:a3:4d:59:ad:5d:4e:bb:d1:73:48: 84:b0:5b:24:33:d4:d0:f5:60:43:ec:bc:8d:7a:43:82:ab:f9: 62:90:7f:39:36:ed:36:01:11:ec:da:55:d3:a4:5e:55:8e:56: 7a:e8:90:f5:31:ce:2d:ae:26:77:65:a2:bc:5a:64:28:b2:f8: b8:99:10:7b:18:0a:1b:da:1f:01:65:63:dd:2e:e3:9c:84:d9: 62:6b:2e:d8:7a:4f:fb:fe:75:9e:08:3a:88:ce:99:62:17:5c: 80:7f:56:7c:db:54:fe:66:a6:ed:f6:97:89:db:f5:ac:bf:bf: 6e:80:20:24:49:48:56:c6:42:27:e7:3e:16:f2:18:65:34:d0: b5:76:aa:65:e8:a3:c7:1f:c4:02:9b:0a:b4:d2:7f:2e:27:51: a3:ea:6f:25:29:38:b2:ae:59:a4:2a:b6:11:db:c1:ba:1d:ba: df:5f:7c:44 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NEIxMTAvBgNVBAUTKDk0MDhFOUQ3QjZDRUI4MzRDQTkwOTAxRTQ1Nzg2MDEw QzA2OUMzMkIwHhcNMjUwODI5MDQ1MjQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWQxYS01Njg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoo09xdUxpU2bbFeaxObbKGs7WebFZ3Oi8StGCxULiN/QWGCBNzOQ6330H7WS kDx4zYwheCWNwKmIVOYvZAMkGysAfU4siQkT2d4L/JjMwjlb1ZX5oDOMCnjsNT5U R3j6Nrmg2AXEAjLvi5RS9ocHq/lClqETbD/41JYkCaySuiqEZvy2iPtyBrvghqNU 4cHsRoNgHAOnvDXZ4saLKNRO+92Ucx3O7G2iTChpm0XzMgAfTs5Txtmnz6/A8uef fhDCDo006zIWtHN+dmCW5Qf2cliGVACuYv+m1ZNklG2LWq75flHWbW2IgsGroJJS ZvvmAa2OIo8SJPRz3MfHbNrkrwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHpx5QI3 O9H6+W3BeO/faR1YNxslMB8GA1UdIwQYMBaAFJQI6de2zrg0ypCQHkV4YBDAacMr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk0Qi8xMEFDQUIwQTYx QjQxMUVFODBDRTE4NDZDNEY5QUUwMi9sQWpwMTdiT3VEVEtrSkFlUlhoZ0VNQnB3 eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xBanAxN2JPdURUS2tKQWVSWGhnRU1CcHd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTM5NEIvMTBBQ0FCMEE2MUI0MTFFRTgwQ0UxODQ2QzRGOUFFMDIvNjAxNUU4Mjg2 MUI0MTFFRUJBQTZBRDU5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6f8MA8EAgACMAkDBwAgAQ3yw0AwDQYJKoZIhvcNAQELBQADggEB ALj0nJNl5/cLUMFDOiuZD2Yd+lSu1/k8nK/Q8d7I+KIZN8ea2xIsaE/O4W8TKVYW n0Sr38RTlHwSf2CUpMuRsARXCY/U3x0GdzoyQ9ayQh1wo01ZrV1Ou9FzSISwWyQz 1ND1YEPsvI16Q4Kr+WKQfzk27TYBEezaVdOkXlWOVnrokPUxzi2uJndlorxaZCiy +LiZEHsYChvaHwFlY90u45yE2WJrLth6T/v+dZ4IOojOmWIXXIB/VnzbVP5mpu32 l4nb9ay/v26AICRJSFbGQifnPhbyGGU00LV2qmXoo8cfxAKbCrTSfy4nUaPqbyUp OLKuWaQqthHbwbodut9ffEQ= -----END CERTIFICATE-----Generated at Tue Mar 3 00:41:59 2026 by rpki-client