$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa File: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (raw, json) Hash identifier: MehorDfAem2c8kGRpcFlQvj3z/46UcpS7ZeXEH42RWY= Subject key identifier: FF:B8:D5:31:0E:4F:4C:3A:E3:5F:68:89:A8:FC:ED:19:17:B5:B5:98 Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 1093 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:35:30 +0000 ROA not before: Thu 20 Mar 2025 17:26:46 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138584 IP address blocks: 103.133.200.0/22 maxlen: 22 103.133.200.0/24 maxlen: 24 103.133.201.0/24 maxlen: 24 103.133.202.0/24 maxlen: 24 103.133.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4243 (0x1093) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Mar 20 17:26:46 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a42482-b843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:62:c4:0f:90:7a:e7:96:2c:53:47:ac:50: ef:1a:6b:29:99:1f:99:fa:d5:3d:a3:2b:ff:06:e5: 70:fc:1d:4b:35:01:98:2e:8f:90:78:6a:a3:3f:04: 3b:d7:44:c2:ca:85:30:db:b6:24:24:72:69:1b:b8: 37:63:3b:88:7e:ec:e8:fd:6c:59:21:ee:16:73:c3: 55:28:ff:6b:cd:18:8b:84:1a:e1:b9:d2:ee:a0:2b: c0:55:16:cb:19:c7:7a:50:38:1f:bf:e8:62:49:f3: 49:a0:3b:09:f6:69:d4:60:39:58:73:f2:2a:8a:cf: 0b:97:73:72:38:a2:bd:5e:79:8f:f2:9d:7c:5a:5f: 5e:5d:a4:32:ba:0a:c8:91:cf:ae:92:61:5d:70:1e: a4:22:5a:5b:26:98:89:b5:63:30:08:2f:a0:d5:03: 7c:6e:51:f3:d9:dc:f4:4a:df:61:97:bd:e2:e1:0f: 9e:fa:a3:00:f5:a1:83:65:a5:50:b4:1a:f8:a7:d7: 52:3d:26:93:ea:bc:da:e7:7c:50:b9:d0:ec:4f:0d: ab:c1:35:ad:c8:00:aa:96:ad:8b:9c:b9:2f:f4:f9: b5:a8:e0:37:b8:cb:ae:bc:ab:cc:0a:32:e1:7a:13: 83:e3:04:cc:8b:9c:72:c8:ae:3e:bd:f5:b4:dc:6f: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B8:D5:31:0E:4F:4C:3A:E3:5F:68:89:A8:FC:ED:19:17:B5:B5:98 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.133.200.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:59:8d:8f:91:31:11:80:39:9f:01:83:5f:3c:2a:1d:0a:95: 9e:5e:3d:08:a3:64:0d:12:12:47:0d:68:71:a8:29:33:74:40: ce:95:dc:b8:8b:ef:e0:ca:1e:56:23:45:1c:c8:68:04:1b:c7: 29:64:13:75:c6:81:29:72:3b:10:8b:39:84:88:c6:7f:fc:b8: bf:0e:43:be:9c:9c:4d:54:59:f4:27:d2:b0:35:15:59:97:05: bb:fd:88:0c:1b:ce:5e:d9:38:bc:16:6b:86:79:47:fc:8b:b6: 4c:98:c3:df:21:1a:72:28:8d:19:df:36:29:d5:73:91:9f:de: b5:4f:58:1a:4b:45:2c:38:55:ac:98:13:fc:60:92:fd:72:66: bb:78:ea:81:19:eb:08:44:b0:b2:e0:a9:cc:7b:34:36:91:3b: 6f:cf:97:48:97:69:f1:b1:da:34:56:3a:0f:44:f2:05:01:39: ec:36:44:d0:10:ca:28:42:e9:c7:46:56:a3:eb:c8:61:eb:05: 23:18:ef:44:b7:a0:31:90:69:10:5f:99:68:1a:58:b3:97:73: 24:0f:38:28:dc:d3:af:c1:93:0e:3e:fa:9c:ac:8b:45:cc:56: 77:fe:6a:56:38:9a:ca:41:c6:7c:bc:e4:2a:f3:ef:21:e5:32: 07:37:e3:b2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjUwMzIwMTcyNjQ2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjQ4Mi1iODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WdixA+QeueWLFNHrFDvGmspmR+Z+tU9oyv/BuVw/B1LNQGYLo+QeGqjPwQ7 10TCyoUw27YkJHJpG7g3YzuIfuzo/WxZIe4Wc8NVKP9rzRiLhBrhudLuoCvAVRbL Gcd6UDgfv+hiSfNJoDsJ9mnUYDlYc/Iqis8Ll3NyOKK9XnmP8p18Wl9eXaQyugrI kc+ukmFdcB6kIlpbJpiJtWMwCC+g1QN8blHz2dz0St9hl73i4Q+e+qMA9aGDZaVQ tBr4p9dSPSaT6rza53xQudDsTw2rwTWtyACqlq2LnLkv9Pm1qOA3uMuuvKvMCjLh ehOD4wTMi5xyyK4+vfW03G+FqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP+41TEO T0w6419oiaj87RkXtbWYMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNDMjIvNjkwNkM2RkE0Qzc0MTFFOUI3QzRCQjU1QzRGOUFFMDIvRUY2NkRERTRF NDZBMTFFQjk1NTJEMzFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4XIMA0GCSqGSIb3DQEBCwUAA4IBAQB6WY2PkTERgDmfAYNfPCod CpWeXj0Io2QNEhJHDWhxqCkzdEDOldy4i+/gyh5WI0UcyGgEG8cpZBN1xoEpcjsQ izmEiMZ//Li/DkO+nJxNVFn0J9KwNRVZlwW7/YgMG85e2Ti8FmuGeUf8i7ZMmMPf IRpyKI0Z3zYp1XORn961T1gaS0UsOFWsmBP8YJL9cma7eOqBGesIRLCy4KnMezQ2 kTtvz5dIl2nxsdo0VjoPRPIFATnsNkTQEMooQunHRlaj68hh6wUjGO9Et6AxkGkQ X5loGlizl3MkDzgo3NOvwZMOPvqcrItFzFZ3/mpWOJrKQcZ8vOQq8+8h5TIHN+Oy -----END CERTIFICATE-----Generated at Mon Mar 2 06:51:43 2026 by rpki-client