$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/304DD002EFAB11EF97C9610FC4F9AE02.roa File: 304DD002EFAB11EF97C9610FC4F9AE02.roa (raw, json) Hash identifier: t1JjvZDB24X6k3Mu8SErmmJoER7kOsUM0Jx228MJLJ4= Subject key identifier: BC:54:F7:E4:BE:0B:76:41:84:39:FB:9F:B8:48:12:A7:51:93:30:98 Certificate issuer: /CN=A91B0F90/serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Certificate serial: D9 Authority key identifier: 5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/304DD002EFAB11EF97C9610FC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:59:01 +0000 ROA not before: Tue 03 Jun 2025 07:38:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139077 IP address blocks: 103.139.104.0/23 maxlen: 24 202.4.28.0/23 maxlen: 24 2001:df0:7380::/48 maxlen: 48 2401:c4a0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F90, serialNumber=5C0A3523FD3645A7635AF2519ADCD002E132FBCE Validity Not Before: Jun 3 07:38:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3e3b5-1e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:de:c9:a6:f6:53:8e:52:b0:8f:bf:b6:a8:96: 65:89:a9:99:0a:61:60:88:a0:a6:f3:dc:cb:b2:d5: 6f:bf:a6:c9:b5:ee:bf:a5:1c:4d:03:f8:fc:89:cf: 77:b7:d4:84:47:5a:f6:6c:a3:ba:92:40:9e:52:5b: 84:83:54:df:1a:3a:f3:b7:8d:b5:a4:d7:a3:3f:24: 65:e0:b3:5f:cc:31:56:d2:0e:32:88:e0:05:98:3c: 2f:99:00:2f:b2:6a:07:3e:56:f9:a4:e9:61:06:0c: 0a:6d:e1:99:7b:28:24:3a:3d:f9:f3:41:d5:bb:fa: 4a:1a:09:9a:eb:39:83:b5:92:ce:ba:1e:f6:a1:9f: f3:42:ef:83:2b:4b:61:64:7d:3d:e0:68:a1:df:ce: 23:e8:15:7d:d8:5b:a8:7c:1c:cd:f8:06:47:f0:df: 29:a3:80:97:b6:2e:7d:dd:a3:11:8f:03:69:64:4a: 59:56:c4:9d:54:05:2b:76:13:c1:be:e5:40:e7:7f: 75:40:18:3e:5b:52:17:d9:70:2e:83:bd:a3:69:4e: 47:be:b0:13:31:49:b7:f5:00:9a:c3:fc:d3:5a:0f: 6e:5c:a0:07:43:ad:d1:31:a0:3b:92:20:26:e5:a9: 7a:dd:31:f1:0a:76:70:76:08:71:0e:ad:8f:ff:b1: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:54:F7:E4:BE:0B:76:41:84:39:FB:9F:B8:48:12:A7:51:93:30:98 X509v3 Authority Key Identifier: keyid:5C:0A:35:23:FD:36:45:A7:63:5A:F2:51:9A:DC:D0:02:E1:32:FB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/XAo1I_02RadjWvJRmtzQAuEy-84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAo1I_02RadjWvJRmtzQAuEy-84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F90/04779B9CED8111EFA0036616C4F9AE02/304DD002EFAB11EF97C9610FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.104.0/23 202.4.28.0/23 IPv6: 2001:df0:7380::/48 2401:c4a0::/32 Signature Algorithm: sha256WithRSAEncryption 42:68:e9:e5:47:8a:90:e8:1d:c5:83:06:b7:ed:01:e7:a9:49: da:48:ff:40:a2:4c:1c:98:a9:c4:9d:2c:ab:ed:61:68:be:b1: 58:a1:2b:6e:71:1c:07:cb:52:7f:4f:c7:a9:d2:36:f7:11:b2: e6:cc:5e:8b:08:ef:05:e1:eb:22:52:f6:b8:cd:1f:23:64:16: fb:eb:e0:da:c3:90:13:20:4a:bb:f7:71:91:57:b8:04:4b:8a: 85:9e:2c:ba:26:8d:96:be:bb:d2:ca:31:e5:3c:5b:f6:19:7f: 6b:1d:e1:c0:29:a8:0c:c3:03:62:43:b2:4c:42:12:35:a6:6c: 19:bc:45:f0:45:c5:6e:41:d7:8a:a4:dd:39:27:7f:92:07:35: ab:df:d4:95:4d:af:30:08:25:ba:88:68:83:80:4a:48:b8:18: 75:9f:3e:14:70:42:49:0f:ae:0d:05:77:eb:27:48:21:0d:fe: 7a:db:15:f8:d1:37:1e:98:db:2b:ea:bb:c6:ea:bf:6b:d9:1c: 82:88:37:96:3c:a4:19:c6:fb:f2:10:df:b8:38:14:27:41:60: b3:ce:df:4b:df:00:3b:d8:88:3d:92:15:91:1a:16:44:82:4a: 3d:5e:f4:c0:3d:05:9d:1b:84:9f:04:b7:83:05:3e:a2:47:0e: 68:6a:e6:52 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGOTAxMTAvBgNVBAUTKDVDMEEzNTIzRkQzNjQ1QTc2MzVBRjI1MTlBRENEMDAy RTEzMkZCQ0UwHhcNMjUwNjAzMDczODQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTNiNS0xZTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn97JpvZTjlKwj7+2qJZliamZCmFgiKCm89zLstVvv6bJte6/pRxNA/j8ic93 t9SER1r2bKO6kkCeUluEg1TfGjrzt421pNejPyRl4LNfzDFW0g4yiOAFmDwvmQAv smoHPlb5pOlhBgwKbeGZeygkOj3580HVu/pKGgma6zmDtZLOuh72oZ/zQu+DK0th ZH094Gih384j6BV92FuofBzN+AZH8N8po4CXti593aMRjwNpZEpZVsSdVAUrdhPB vuVA5391QBg+W1IX2XAug72jaU5HvrATMUm39QCaw/zTWg9uXKAHQ63RMaA7kiAm 5al63THxCnZwdghxDq2P/7HFgQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLxU9+S+ C3ZBhDn7n7hIEqdRkzCYMB8GA1UdIwQYMBaAFFwKNSP9NkWnY1ryUZrc0ALhMvvO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEY5MC8wNDc3OUI5Q0VE ODExMUVGQTAwMzY2MTZDNEY5QUUwMi9YQW8xSV8wMlJhZGpXdkpSbXR6UUF1RXkt ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hBbzFJXzAyUmFkald2SlJtdHpRQXVFeS04NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBGOTAvMDQ3NzlCOUNFRDgxMTFFRkEwMDM2NjE2QzRGOUFFMDIvMzA0REQwMDJF RkFCMTFFRjk3Qzk2MTBGQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAS BAIAATAMAwQBZ4toAwQBygQcMBYEAgACMBADBwAgAQ3wc4ADBQAkAcSgMA0GCSqG SIb3DQEBCwUAA4IBAQBCaOnlR4qQ6B3Fgwa37QHnqUnaSP9AokwcmKnEnSyr7WFo vrFYoStucRwHy1J/T8ep0jb3EbLmzF6LCO8F4esiUva4zR8jZBb76+Daw5ATIEq7 93GRV7gES4qFniy6Jo2WvrvSyjHlPFv2GX9rHeHAKagMwwNiQ7JMQhI1pmwZvEXw RcVuQdeKpN05J3+SBzWr39SVTa8wCCW6iGiDgEpIuBh1nz4UcEJJD64NBXfrJ0gh Df562xX40TcemNsr6rvG6r9r2RyCiDeWPKQZxvvyEN+4OBQnQWCzzt9L3wA72Ig9 khWRGhZEgko9XvTAPQWdG4SfBLeDBT6iRw5oauZS -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:52 2026 by rpki-client