$ rpki-client -vvf rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa File: 4A7F092A776811EFB6FA747DC4F9AE02.roa (raw, json) Hash identifier: ZInSuFW4tgrnB5Y18U6CKYq95Y5K5ny1irJTF0HvAX4= Subject key identifier: 87:37:A2:60:E9:92:3B:3F:15:D7:62:11:B6:60:22:9F:F6:C3:49:AF Certificate issuer: /CN=A91B08F7/serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Certificate serial: 04A2 Authority key identifier: C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:04:00 +0000 ROA not before: Sun 14 Sep 2025 16:55:48 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 132376 IP address blocks: 103.15.136.0/24 maxlen: 24 103.15.137.0/24 maxlen: 24 103.15.138.0/24 maxlen: 24 103.15.139.0/24 maxlen: 24 2001:df1:5900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1186 (0x4a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B08F7, serialNumber=C20DD1E0561865C0522C7E274BCED24930BBF045 Validity Not Before: Sep 14 16:55:48 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a48da0-4608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:e0:63:34:a0:37:11:6c:49:01:c1:63:98: 75:85:4b:e3:96:b2:a8:c9:87:32:51:50:e1:cd:76: a1:2b:bb:d3:65:8c:02:7b:bf:a4:59:6b:8a:65:70: c7:fe:31:3c:55:f3:f9:f2:08:a8:a0:6c:ab:bb:7b: 51:e3:b4:fa:3c:80:ec:25:32:1e:39:b8:67:72:ec: 48:0d:88:db:37:67:91:0e:cc:89:73:d3:ad:dc:36: e2:70:c1:5f:d1:8b:9a:24:1b:48:85:be:d2:36:9c: 93:34:38:5f:6d:4b:03:28:db:f1:4a:f1:2a:17:e2: 4b:fc:ef:69:5b:ca:e2:28:f4:44:ef:76:f1:68:7e: 37:93:56:6b:99:51:82:0a:6a:8c:d3:b1:6a:39:a0: 68:9d:e6:b6:58:c1:5f:9d:14:66:a5:f0:95:88:4f: f3:14:65:78:18:0d:61:74:0d:52:3d:6d:b6:ce:9c: 56:8d:cc:65:71:72:cf:1d:4a:5a:20:1f:20:58:65: 18:c0:28:c0:57:e2:7a:65:d1:ca:30:3c:f9:24:ef: c6:a5:c3:a4:70:9f:bd:e3:16:0d:09:f1:c1:f0:7f: a4:71:da:bf:a5:2a:8b:17:83:52:35:37:c5:c6:68: 27:f1:d0:b7:bc:d6:de:fc:1d:85:a0:1b:71:28:88: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:37:A2:60:E9:92:3B:3F:15:D7:62:11:B6:60:22:9F:F6:C3:49:AF X509v3 Authority Key Identifier: keyid:C2:0D:D1:E0:56:18:65:C0:52:2C:7E:27:4B:CE:D2:49:30:BB:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/wg3R4FYYZcBSLH4nS87SSTC78EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wg3R4FYYZcBSLH4nS87SSTC78EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B08F7/4714380AD59411E78E7C9143C4F9AE02/4A7F092A776811EFB6FA747DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.15.136.0/22 IPv6: 2001:df1:5900::/48 Signature Algorithm: sha256WithRSAEncryption 5a:6e:ab:ad:b9:7a:67:10:e8:02:5e:c5:5d:81:b7:d6:3b:4b: 5d:b5:13:fd:db:61:da:c5:7f:85:f9:d4:2f:24:f3:4c:2e:b6: 2d:ea:e3:2e:9d:06:3f:55:12:bf:f1:b9:61:29:19:58:a0:11: c3:d6:2d:80:6e:3e:04:7e:c3:5a:b4:fc:12:78:e5:aa:cd:15: 4c:4a:30:dd:5c:0c:31:cd:15:86:56:4c:13:9a:1f:3b:a3:0e: eb:f1:a3:af:ca:e5:96:87:ba:c0:ba:92:8b:69:35:8b:ca:e9: cc:21:61:32:f8:d0:b8:5c:8a:4a:70:d4:da:aa:1e:41:3a:8e: 26:7c:3a:f8:18:f7:ce:3b:f4:40:87:2e:6e:d4:24:e6:5d:3b: 1e:e0:78:db:be:f3:05:ed:b9:61:db:55:93:95:3d:f6:5c:a7: c7:f7:3e:e1:b2:b8:46:07:91:dc:a3:88:0a:4f:ae:56:de:78: 86:70:b1:96:76:4a:d5:eb:4e:79:4c:6d:a3:49:4f:f9:d9:87: 37:e4:b0:3e:07:e6:ce:48:59:01:e3:3b:c6:41:24:49:3a:95: 80:87:02:64:22:2d:db:20:fb:e0:60:16:31:b2:7e:6e:de:df: 94:49:dc:b7:40:6d:13:8c:85:11:bf:fc:7f:86:e8:58:f2:a2: 6e:84:4a:00 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA4RjcxMTAvBgNVBAUTKEMyMEREMUUwNTYxODY1QzA1MjJDN0UyNzRCQ0VEMjQ5 MzBCQkYwNDUwHhcNMjUwOTE0MTY1NTQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGRhMC00NjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ7gYzSgNxFsSQHBY5h1hUvjlrKoyYcyUVDhzXahK7vTZYwCe7+kWWuKZXDH /jE8VfP58giooGyru3tR47T6PIDsJTIeObhncuxIDYjbN2eRDsyJc9Ot3DbicMFf 0YuaJBtIhb7SNpyTNDhfbUsDKNvxSvEqF+JL/O9pW8riKPRE73bxaH43k1ZrmVGC CmqM07FqOaBonea2WMFfnRRmpfCViE/zFGV4GA1hdA1SPW22zpxWjcxlcXLPHUpa IB8gWGUYwCjAV+J6ZdHKMDz5JO/GpcOkcJ+94xYNCfHB8H+kcdq/pSqLF4NSNTfF xmgn8dC3vNbe/B2FoBtxKIgpEQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIc3omDp kjs/FddiEbZgIp/2w0mvMB8GA1UdIwQYMBaAFMIN0eBWGGXAUix+J0vO0kkwu/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDhGNy80NzE0MzgwQUQ1 OTQxMUU3OEU3QzkxNDNDNEY5QUUwMi93ZzNSNEZZWVpjQlNMSDRuUzg3U1NUQzc4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dnM1I0RllZWmNCU0xING5TODdTU1RDNzhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA4RjcvNDcxNDM4MEFENTk0MTFFNzhFN0M5MTQzQzRGOUFFMDIvNEE3RjA5MkE3 NzY4MTFFRkI2RkE3NDdEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZw+IMA8EAgACMAkDBwAgAQ3xWQAwDQYJKoZIhvcNAQELBQADggEB AFpuq625emcQ6AJexV2Bt9Y7S121E/3bYdrFf4X51C8k80wuti3q4y6dBj9VEr/x uWEpGVigEcPWLYBuPgR+w1q0/BJ45arNFUxKMN1cDDHNFYZWTBOaHzujDuvxo6/K 5ZaHusC6kotpNYvK6cwhYTL40Lhcikpw1NqqHkE6jiZ8OvgY98479ECHLm7UJOZd Ox7geNu+8wXtuWHbVZOVPfZcp8f3PuGyuEYHkdyjiApPrlbeeIZwsZZ2StXrTnlM baNJT/nZhzfksD4H5s5IWQHjO8ZBJEk6lYCHAmQiLdsg++BgFjGyfm7e35RJ3LdA bROMhRG//H+G6Fjyom6ESgA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:41 2026 by rpki-client