$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/8E15FBF25CFF11ECB5477E0BC4F9AE02.roa File: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (raw, json) Hash identifier: YhHbcwgSJe/eTrJM48b57657xlLdX21AQDaMzj6Ijsg= Subject key identifier: 16:42:9D:87:C4:F9:54:0D:80:43:D6:DB:F9:DB:94:6B:DD:BE:2E:A0 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 04E4 Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/8E15FBF25CFF11ECB5477E0BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:47:16 +0000 ROA not before: Mon 10 Nov 2025 09:52:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140287 IP address blocks: 103.149.146.0/23 maxlen: 23 103.149.146.0/24 maxlen: 24 103.149.147.0/24 maxlen: 24 2001:df3:2b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Nov 10 09:52:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a43554-1b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:74:c5:da:f0:73:e6:85:9b:ff:a0:5e:d5:e2: 1f:de:39:52:fb:c4:a0:46:7e:fa:34:67:1a:e9:00: d5:09:5e:5f:ff:45:3b:c2:ed:bf:49:94:b6:24:c4: c4:38:24:db:9d:81:f5:ac:48:c7:97:f7:d4:52:a7: c9:7c:ca:88:a6:69:f3:6d:41:af:d0:8e:bc:85:a4: 06:1e:8b:aa:bb:f4:34:2d:03:ed:b0:2d:ec:ae:5c: 5e:0f:e1:61:eb:50:d0:c4:5d:e6:ac:4e:b8:09:38: 06:38:3c:4c:be:bb:9a:e8:71:8b:4c:7a:f4:fb:42: ab:81:fe:d6:1c:e9:ff:5d:c3:f2:e1:19:ca:bc:c2: 16:95:d9:a2:0d:c2:20:bb:52:ec:50:6e:50:fb:f0: fc:19:a0:c4:9d:78:d6:77:3f:4d:ad:b4:be:28:c7: c1:3a:e6:08:b6:b9:da:7e:16:d6:8e:32:e6:5a:0f: eb:6a:3a:15:f2:7a:25:84:06:ec:08:0c:1c:59:ac: ea:3d:67:b0:2a:39:ab:fa:ac:e1:45:f3:35:ec:ed: 45:ae:2e:e8:89:32:8b:55:91:20:66:ce:70:5e:7f: 1d:99:2a:93:3c:f9:84:89:17:eb:9e:3d:30:69:44: f4:d0:f3:be:b7:93:33:1f:c0:8f:f2:05:18:c1:65: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:42:9D:87:C4:F9:54:0D:80:43:D6:DB:F9:DB:94:6B:DD:BE:2E:A0 X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/8E15FBF25CFF11ECB5477E0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.146.0/23 IPv6: 2001:df3:2b80::/48 Signature Algorithm: sha256WithRSAEncryption 44:0d:cf:97:9b:e3:3f:26:d1:2e:94:90:2f:8c:32:43:32:83: 89:18:1b:95:55:10:50:43:78:37:fa:d1:83:ee:91:1a:b6:24: c1:ea:04:4a:93:08:17:d1:3e:49:49:a1:e9:0c:d3:51:1e:67: d2:e4:00:c4:01:44:4a:93:3f:e2:94:78:c2:cd:b1:4a:cb:30: 0e:34:a9:aa:93:a2:47:02:82:26:28:25:74:0d:ac:c9:dc:22: 2b:75:f3:fb:70:ba:91:f9:21:94:08:2e:ff:f8:55:80:24:1a: f7:e6:68:99:68:d5:d2:0a:49:e1:29:35:76:f3:a3:a8:fb:72: 6d:2e:a5:a7:80:3a:50:f2:f9:14:4f:d4:30:68:3d:36:b5:a6: b4:b3:e8:31:df:b8:a1:cd:76:67:03:a6:95:95:16:46:0a:d4: fc:1e:14:df:c9:50:8d:6d:eb:92:8b:ad:c5:80:34:0a:42:1b: 5f:4f:7f:e9:b1:36:ed:a8:e5:14:0e:3c:66:c4:ce:55:9b:8b: a6:26:df:17:17:b0:6d:d0:f6:8d:08:70:3b:21:41:bf:9a:60: fd:36:8f:da:41:8c:69:60:89:7a:6d:93:e1:3e:66:83:98:7e: 66:21:0d:2d:75:41:95:57:11:36:7d:c4:a1:31:ae:6b:a4:ec: ce:98:ee:3f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjUxMTEwMDk1MjQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzU1NC0xYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHTF2vBz5oWb/6Be1eIf3jlS+8SgRn76NGca6QDVCV5f/0U7wu2/SZS2JMTE OCTbnYH1rEjHl/fUUqfJfMqIpmnzbUGv0I68haQGHouqu/Q0LQPtsC3srlxeD+Fh 61DQxF3mrE64CTgGODxMvrua6HGLTHr0+0Krgf7WHOn/XcPy4RnKvMIWldmiDcIg u1LsUG5Q+/D8GaDEnXjWdz9NrbS+KMfBOuYItrnafhbWjjLmWg/rajoV8nolhAbs CAwcWazqPWewKjmr+qzhRfM17O1Fri7oiTKLVZEgZs5wXn8dmSqTPPmEiRfrnj0w aUT00PO+t5MzH8CP8gUYwWUilwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBZCnYfE +VQNgEPW2/nblGvdvi6gMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1RUMvREY2NURFOTI1NzgxMTFFQ0I2NDg3QzU0QzRGOUFFMDIvOEUxNUZCRjI1 Q0ZGMTFFQ0I1NDc3RTBCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5WSMA8EAgACMAkDBwAgAQ3zK4AwDQYJKoZIhvcNAQELBQADggEB AEQNz5eb4z8m0S6UkC+MMkMyg4kYG5VVEFBDeDf60YPukRq2JMHqBEqTCBfRPklJ oekM01EeZ9LkAMQBREqTP+KUeMLNsUrLMA40qaqTokcCgiYoJXQNrMncIit18/tw upH5IZQILv/4VYAkGvfmaJlo1dIKSeEpNXbzo6j7cm0upaeAOlDy+RRP1DBoPTa1 prSz6DHfuKHNdmcDppWVFkYK1PweFN/JUI1t65KLrcWANApCG19Pf+mxNu2o5RQO PGbEzlWbi6Ym3xcXsG3Q9o0IcDshQb+aYP02j9pBjGlgiXptk+E+ZoOYfmYhDS11 QZVXETZ9xKExrmuk7M6Y7j8= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:57 2026 by rpki-client