$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/D8CC971846AE11EBA761792FC4F9AE02.roa File: D8CC971846AE11EBA761792FC4F9AE02.roa (raw, json) Hash identifier: 48R4tnYimnpUcOOieeUSU8cFmQrGywxFSUscrM9EvSI= Subject key identifier: 42:96:69:82:31:99:11:F7:E8:20:40:94:9E:F7:C5:9D:1B:0E:ED:16 Certificate issuer: /CN=A91B0E3A/serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Certificate serial: 0CF7 Authority key identifier: 87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/D8CC971846AE11EBA761792FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:35:43 +0000 ROA not before: Tue 14 Oct 2025 19:48:04 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139678 IP address blocks: 103.143.138.0/23 maxlen: 23 103.143.138.0/24 maxlen: 24 2001:df1:8e80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0E3A, serialNumber=877F25A41FB6DB3CF4DB5AD92144EFB71E92677A Validity Not Before: Oct 14 19:48:04 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45cce-99e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:84:8a:7c:27:88:65:3e:81:56:30:06:d4:89: 28:98:38:6c:bd:2a:a7:d7:17:95:46:42:b3:f6:29: 10:40:7b:31:11:51:48:56:d3:7a:8d:86:85:6e:dc: 2f:11:dd:8c:9e:c6:ea:b0:5a:b1:38:6f:7b:2c:fa: 87:65:03:dc:3b:34:4b:ac:ee:51:04:b9:60:f1:0a: 98:6e:89:6a:d1:d8:5c:7e:95:a0:f0:71:97:ff:17: 44:85:1c:86:3a:66:66:ec:33:51:34:1a:90:9e:bb: 97:53:cd:60:d7:bf:ca:aa:3d:20:e2:a9:81:39:6a: 34:79:66:eb:da:f1:70:2a:19:c1:b7:14:29:1a:58: c3:81:a4:f0:b9:4f:2c:37:d8:79:7a:07:93:fe:4d: d7:52:13:aa:db:3b:0e:de:cd:e2:1c:65:bf:45:af: 0e:39:4a:c6:d1:93:90:b3:83:1d:fb:96:06:36:cf: 11:0c:ce:3a:7b:91:cc:55:f0:15:4e:2a:db:3a:fe: 71:46:b8:88:e5:6a:ab:be:b4:80:00:a5:00:b2:80: 8e:01:76:46:9a:df:8e:1b:a0:08:e4:5f:c2:2e:22: c4:a8:e8:34:ac:f0:1e:c5:63:d0:4d:43:88:39:4c: 63:e1:99:44:de:ff:d8:64:d3:a1:7a:f6:0b:7b:09: 44:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:96:69:82:31:99:11:F7:E8:20:40:94:9E:F7:C5:9D:1B:0E:ED:16 X509v3 Authority Key Identifier: keyid:87:7F:25:A4:1F:B6:DB:3C:F4:DB:5A:D9:21:44:EF:B7:1E:92:67:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/h38lpB-22zz021rZIUTvtx6SZ3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h38lpB-22zz021rZIUTvtx6SZ3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0E3A/8E43F5D606C411EA8BEB4118C4F9AE02/D8CC971846AE11EBA761792FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.138.0/23 IPv6: 2001:df1:8e80::/48 Signature Algorithm: sha256WithRSAEncryption 03:af:83:cc:3b:02:62:24:ad:3a:89:58:44:e5:b6:fd:97:4f: c3:3e:57:71:29:97:8d:92:84:93:b6:8e:46:8a:cd:8b:67:3e: 7d:68:2d:b1:ba:0a:c8:aa:79:cf:a4:f0:de:4e:90:4f:34:76: 30:1e:53:7b:6f:f2:45:31:2a:ee:bc:be:32:61:2d:b1:f3:d1: db:2a:1f:ca:15:81:7e:b6:c3:b5:24:0e:f8:ca:2e:6b:d8:14: 80:4a:f9:2a:d5:42:93:5f:30:85:d7:06:a4:7c:79:f6:ef:81: 97:34:f4:38:1c:af:ed:d5:c4:9a:77:0e:e7:ee:c9:b6:da:4e: 31:1e:0d:dc:7c:b0:ef:eb:a0:ec:f5:73:1c:6d:17:8f:b5:00: 7a:d3:ea:db:7f:a8:20:19:67:ca:b5:7b:26:72:0e:3a:03:b1: 66:b8:af:0b:b0:1e:37:3a:3f:67:a3:29:c4:e8:81:cf:2f:3f: f9:42:1d:04:9c:66:05:65:cd:83:e7:e6:de:72:2e:d9:2d:30: bf:ab:a3:7a:86:f3:86:4a:da:48:73:b8:11:1d:d3:24:91:3f: 89:d6:d9:54:4c:1a:96:ba:a3:1a:d6:16:1c:2e:85:d9:76:7d: 75:6e:93:0f:27:df:5c:88:3b:f7:a6:c5:02:db:be:a3:5e:e3: 19:d8:05:17 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBFM0ExMTAvBgNVBAUTKDg3N0YyNUE0MUZCNkRCM0NGNERCNUFEOTIxNDRFRkI3 MUU5MjY3N0EwHhcNMjUxMDE0MTk0ODA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWNjZS05OWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiISKfCeIZT6BVjAG1IkomDhsvSqn1xeVRkKz9ikQQHsxEVFIVtN6jYaFbtwv Ed2MnsbqsFqxOG97LPqHZQPcOzRLrO5RBLlg8QqYbolq0dhcfpWg8HGX/xdEhRyG OmZm7DNRNBqQnruXU81g17/Kqj0g4qmBOWo0eWbr2vFwKhnBtxQpGljDgaTwuU8s N9h5egeT/k3XUhOq2zsO3s3iHGW/Ra8OOUrG0ZOQs4Md+5YGNs8RDM46e5HMVfAV TirbOv5xRriI5WqrvrSAAKUAsoCOAXZGmt+OG6AI5F/CLiLEqOg0rPAexWPQTUOI OUxj4ZlE3v/YZNOhevYLewlELwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEKWaYIx mRH36CBAlJ73xZ0bDu0WMB8GA1UdIwQYMBaAFId/JaQftts89Nta2SFE77cekmd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEUzQS84RTQzRjVENjA2 QzQxMUVBOEJFQjQxMThDNEY5QUUwMi9oMzhscEItMjJ6ejAyMXJaSVVUdnR4NlNa M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gzOGxwQi0yMnp6MDIxclpJVVR2dHg2U1ozby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBFM0EvOEU0M0Y1RDYwNkM0MTFFQThCRUI0MTE4QzRGOUFFMDIvRDhDQzk3MTg0 NkFFMTFFQkE3NjE3OTJGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4+KMA8EAgACMAkDBwAgAQ3xjoAwDQYJKoZIhvcNAQELBQADggEB AAOvg8w7AmIkrTqJWETltv2XT8M+V3Epl42ShJO2jkaKzYtnPn1oLbG6Csiqec+k 8N5OkE80djAeU3tv8kUxKu68vjJhLbHz0dsqH8oVgX62w7UkDvjKLmvYFIBK+SrV QpNfMIXXBqR8efbvgZc09Dgcr+3VxJp3DufuybbaTjEeDdx8sO/roOz1cxxtF4+1 AHrT6tt/qCAZZ8q1eyZyDjoDsWa4rwuwHjc6P2ejKcTogc8vP/lCHQScZgVlzYPn 5t5yLtktML+ro3qG84ZK2khzuBEd0ySRP4nW2VRMGpa6oxrWFhwuhdl2fXVukw8n 31yIO/emxQLbvqNe4xnYBRc= -----END CERTIFICATE-----Generated at Mon Mar 2 21:14:02 2026 by rpki-client