$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/ABCDCC4EE16711EEA88FAE64C4F9AE02.roa File: ABCDCC4EE16711EEA88FAE64C4F9AE02.roa (raw, json) Hash identifier: esfW9wCIFip8anOs41Rq+ZFPyJj6Borr2LXsT9A2eN4= Subject key identifier: C5:DF:31:79:F1:15:4C:C6:32:81:02:5D:34:12:76:4D:07:61:39:CE Certificate issuer: /CN=A91ADDD5/serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Certificate serial: 0611 Authority key identifier: FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/ABCDCC4EE16711EEA88FAE64C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:38:34 +0000 ROA not before: Wed 09 Jul 2025 00:05:04 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58955 IP address blocks: 103.78.31.0/24 maxlen: 24 103.169.66.0/23 maxlen: 23 103.169.67.0/24 maxlen: 24 2407:9c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADDD5, serialNumber=FB112CAD56319BFAACA1AB28CE7BD7F4CB268CE9 Validity Not Before: Jul 9 00:05:04 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4334a-46da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:a7:ff:9e:ea:ca:a6:e0:f2:9f:3e:91:f4: ab:94:ac:54:2e:ae:01:b2:4c:df:55:60:6e:13:30: 03:b7:e2:26:c6:d9:6c:3f:ac:fc:08:08:68:7e:1e: 29:5d:9a:8c:47:d8:cb:94:af:21:89:97:67:6d:27: 41:8e:38:aa:3f:56:33:92:9e:50:6b:59:82:d2:62: 8d:6d:7f:94:8f:0b:9c:6c:11:b7:56:78:53:5c:a7: 50:df:90:28:d9:5b:f6:b3:bd:fd:ac:e6:af:ce:24: 02:93:4c:e6:0d:79:49:76:89:53:7d:08:9e:a8:cc: f7:2f:8c:51:91:96:27:8e:6e:d7:27:76:17:44:c8: ac:13:62:61:14:e0:7d:16:69:06:55:8e:ce:68:bc: b5:75:d3:c2:c6:1b:66:16:bb:1e:d0:3a:22:66:63: 02:20:9d:d4:24:53:3d:98:d4:31:2b:f5:85:cc:47: bb:49:c9:31:6e:39:d6:dc:50:53:d6:8c:b6:28:67: 78:ea:61:99:92:3e:67:0c:8f:1e:ed:34:f6:54:00: d6:0e:4e:cb:b2:f3:8f:1d:be:48:69:91:18:24:8b: 37:d6:22:75:d9:e0:86:c3:33:c5:c3:61:fa:82:6b: 94:5b:44:95:82:d3:5d:61:a5:d6:ec:1e:8a:ad:bf: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DF:31:79:F1:15:4C:C6:32:81:02:5D:34:12:76:4D:07:61:39:CE X509v3 Authority Key Identifier: keyid:FB:11:2C:AD:56:31:9B:FA:AC:A1:AB:28:CE:7B:D7:F4:CB:26:8C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/-xEsrVYxm_qsoasoznvX9MsmjOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xEsrVYxm_qsoasoznvX9MsmjOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADDD5/8B0D0FF2E3F811EB9E08DB14C4F9AE02/ABCDCC4EE16711EEA88FAE64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.78.31.0/24 103.169.66.0/23 IPv6: 2407:9c40::/32 Signature Algorithm: sha256WithRSAEncryption 54:32:3a:2b:aa:4f:4e:cb:56:bf:4b:58:33:2a:22:c6:cf:f3: 5b:d2:49:0e:8e:56:0b:a2:03:3f:cb:c3:6a:80:ef:48:51:e2: b8:e6:99:1d:f0:08:34:d8:3d:e1:3c:b7:ee:fd:e4:69:ae:ac: de:df:a8:49:8d:8c:db:b4:70:86:8b:da:6b:ef:d6:53:b5:cd: de:5d:bc:0e:5d:05:b0:5e:29:3e:65:a4:37:6e:64:06:41:9e: 66:da:f0:9a:f8:e7:2d:67:0c:07:57:77:91:24:93:6c:6b:3b: a7:a7:0b:4b:20:87:7b:d1:96:44:f6:b6:fe:c7:e6:04:0a:3c: 97:47:c3:b7:44:8a:f9:dc:4c:d5:1e:5c:d3:5d:a2:0e:d1:3d: 79:b2:f7:87:97:09:e6:fd:b1:0c:4c:d8:90:ea:ae:99:1f:02: f6:62:36:12:63:39:36:37:44:99:43:a0:d1:49:75:70:9c:83: 8b:2d:71:75:9f:1a:d1:70:19:1d:44:26:2e:73:2e:ab:f0:5a: fb:bd:3e:cc:80:cc:2f:dd:6f:0f:94:ac:0d:4d:5e:20:ec:41: 4c:1d:c1:26:a6:ba:83:cd:94:1e:06:ab:43:50:27:58:49:dd: 22:2c:e5:f5:97:9a:58:4d:df:d2:c0:ad:85:8c:c3:4e:ed:2e: e4:44:e8:06 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURERDUxMTAvBgNVBAUTKEZCMTEyQ0FENTYzMTlCRkFBQ0ExQUIyOENFN0JEN0Y0 Q0IyNjhDRTkwHhcNMjUwNzA5MDAwNTA0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzM0YS00NmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtO+n/57qyqbg8p8+kfSrlKxULq4BskzfVWBuEzADt+ImxtlsP6z8CAhofh4p XZqMR9jLlK8hiZdnbSdBjjiqP1Yzkp5Qa1mC0mKNbX+UjwucbBG3VnhTXKdQ35Ao 2Vv2s739rOavziQCk0zmDXlJdolTfQieqMz3L4xRkZYnjm7XJ3YXRMisE2JhFOB9 FmkGVY7OaLy1ddPCxhtmFrse0DoiZmMCIJ3UJFM9mNQxK/WFzEe7SckxbjnW3FBT 1oy2KGd46mGZkj5nDI8e7TT2VADWDk7LsvOPHb5IaZEYJIs31iJ12eCGwzPFw2H6 gmuUW0SVgtNdYaXW7B6Krb/i6wIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMXfMXnx FUzGMoECXTQSdk0HYTnOMB8GA1UdIwQYMBaAFPsRLK1WMZv6rKGrKM571/TLJozp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRERENS84QjBEMEZGMkUz RjgxMUVCOUUwOERCMTRDNEY5QUUwMi8teEVzclZZeG1fcXNvYXNvem52WDlNc21q T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy14RXNyVll4bV9xc29hc296bnZYOU1zbWpPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURERDUvOEIwRDBGRjJFM0Y4MTFFQjlFMDhEQjE0QzRGOUFFMDIvQUJDRENDNEVF MTY3MTFFRUE4OEZBRTY0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAZ04fAwQBZ6lCMA0EAgACMAcDBQAkB5xAMA0GCSqGSIb3DQEBCwUA A4IBAQBUMjorqk9Oy1a/S1gzKiLGz/Nb0kkOjlYLogM/y8NqgO9IUeK45pkd8Ag0 2D3hPLfu/eRprqze36hJjYzbtHCGi9pr79ZTtc3eXbwOXQWwXik+ZaQ3bmQGQZ5m 2vCa+OctZwwHV3eRJJNsazunpwtLIId70ZZE9rb+x+YECjyXR8O3RIr53EzVHlzT XaIO0T15sveHlwnm/bEMTNiQ6q6ZHwL2YjYSYzk2N0SZQ6DRSXVwnIOLLXF1nxrR cBkdRCYucy6r8Fr7vT7MgMwv3W8PlKwNTV4g7EFMHcEmprqDzZQeBqtDUCdYSd0i LOX1l5pYTd/SwK2FjMNO7S7kROgG -----END CERTIFICATE-----Generated at Mon Mar 2 11:35:06 2026 by rpki-client