$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa File: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (raw, json) Hash identifier: Q+2DHykSFmBY3CD0496mIjmhaZXue856I6zGxnb489c= Subject key identifier: B8:D1:B6:94:26:63:26:29:14:7A:4B:B9:C4:9E:DE:47:1A:FB:11:65 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 0647 Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:46:21 +0000 ROA not before: Mon 31 Mar 2025 23:54:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55293 IP address blocks: 45.120.148.0/22 maxlen: 24 103.227.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1607 (0x647) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Mar 31 23:54:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a45f4c-cdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:8a:81:32:b1:17:2a:fa:64:3c:0b:22:95: 21:a9:e5:88:48:09:88:0a:fb:5a:6f:9f:3e:72:b2: 32:d2:c2:85:da:18:88:a5:c9:ad:e0:6b:a1:8f:96: b7:6e:24:c6:3c:a5:91:02:24:3e:d7:95:0a:14:6d: d1:0a:51:3e:c3:53:f4:af:49:3c:4d:ba:c0:b1:b0: 21:8e:73:4a:97:3a:15:f7:12:5c:5d:d4:f1:95:5d: 17:8f:f5:89:b6:ce:5c:6e:ce:fa:f0:ca:a4:67:df: a7:43:92:2b:77:fa:87:df:2b:28:6c:77:7b:6f:22: fb:95:ee:d4:58:e3:5c:29:fa:75:5f:12:b0:62:94: d2:8a:22:b4:f5:f3:8a:8a:f1:59:26:ba:6d:73:06: 29:87:56:d9:89:4f:c9:7f:a3:69:a0:43:dd:28:91: 90:f7:73:2c:27:92:4b:77:c9:f9:18:af:ea:f6:b1: c5:5f:2c:80:a0:4c:45:6e:80:62:5a:6b:ee:88:da: 9c:84:58:48:76:47:9f:3f:38:f3:e5:79:df:86:e9: f9:e6:bb:88:7b:9c:a5:c9:33:5c:90:54:f2:60:58: aa:11:fd:8f:fc:14:50:2b:f8:e5:66:0a:60:34:fd: 8a:60:65:fe:84:bd:cc:fe:a9:c7:0f:53:fe:c7:4c: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:B6:94:26:63:26:29:14:7A:4B:B9:C4:9E:DE:47:1A:FB:11:65 X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/8183B0FACAF111EBA40AF15BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.120.148.0/22 103.227.176.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:bf:39:49:cd:9c:bb:a2:d8:df:98:4c:ea:da:c5:14:3f:44: c2:fd:26:6b:23:03:51:78:25:05:18:f9:ad:13:64:23:f6:ae: 61:34:2e:69:bc:c7:f6:1c:3a:5e:26:d7:8a:ef:0f:8d:4e:1d: 71:50:6a:12:ec:69:df:c4:34:7d:30:36:26:94:ed:86:db:fa: 74:6e:a2:d1:b3:4b:05:9b:e4:5c:2d:b4:7b:e6:be:15:c6:da: cd:ee:0b:b3:b3:a8:ee:47:c0:80:81:fe:57:58:0b:d9:a3:a3: e1:03:6e:00:f5:e8:15:3e:ea:ce:7d:dc:3c:3f:b4:3e:22:71: 27:42:7d:f6:1c:97:74:11:5c:7d:ec:35:83:eb:eb:e4:62:7d: 8b:83:4a:67:47:41:a2:78:6a:38:2e:ba:2e:dd:e1:6a:da:ec: 47:cd:14:20:c7:05:38:b5:91:63:2b:66:c6:95:ac:b0:c1:18: 2b:83:c4:d5:c4:b9:99:22:60:e2:1e:d7:c6:4d:4a:8b:40:23: f3:af:14:8e:08:32:b9:8a:73:44:07:d6:f2:37:ec:4d:e0:a2: 67:82:b9:c4:dc:47:9a:7a:5d:d4:4a:ad:3b:ef:de:c4:2d:66: 02:22:a3:f6:49:57:70:9a:ae:e6:e3:99:44:9a:e7:e0:41:f1: 19:3b:d6:ff -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjUwMzMxMjM1NDQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWY0Yy1jZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunmKgTKxFyr6ZDwLIpUhqeWISAmICvtab58+crIy0sKF2hiIpcmt4Guhj5a3 biTGPKWRAiQ+15UKFG3RClE+w1P0r0k8TbrAsbAhjnNKlzoV9xJcXdTxlV0Xj/WJ ts5cbs768MqkZ9+nQ5Ird/qH3ysobHd7byL7le7UWONcKfp1XxKwYpTSiiK09fOK ivFZJrptcwYph1bZiU/Jf6NpoEPdKJGQ93MsJ5JLd8n5GK/q9rHFXyyAoExFboBi WmvuiNqchFhIdkefPzjz5Xnfhun55ruIe5ylyTNckFTyYFiqEf2P/BRQK/jlZgpg NP2KYGX+hL3M/qnHD1P+x0wRfQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLjRtpQm YyYpFHpLucSe3kca+xFlMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVEOEEvQkEyRjFCOUFDQUVFMTFFQkEyRkJEMDU2QzRGOUFFMDIvODE4M0IwRkFD QUYxMTFFQkE0MEFGMTVCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCLXiUAwQCZ+OwMA0GCSqGSIb3DQEBCwUAA4IBAQA6vzlJzZy7otjf mEzq2sUUP0TC/SZrIwNReCUFGPmtE2Qj9q5hNC5pvMf2HDpeJteK7w+NTh1xUGoS 7GnfxDR9MDYmlO2G2/p0bqLRs0sFm+RcLbR75r4VxtrN7guzs6juR8CAgf5XWAvZ o6PhA24A9egVPurOfdw8P7Q+InEnQn32HJd0EVx97DWD6+vkYn2Lg0pnR0GieGo4 Lrou3eFq2uxHzRQgxwU4tZFjK2bGlaywwRgrg8TVxLmZImDiHtfGTUqLQCPzrxSO CDK5inNEB9byN+xN4KJngrnE3Eeael3USq07797ELWYCIqP2SVdwmq7m45lEmufg QfEZO9b/ -----END CERTIFICATE-----Generated at Mon Mar 2 12:35:24 2026 by rpki-client