$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/7F6FE074B84811F091A01766C4F9AE02.roa File: 7F6FE074B84811F091A01766C4F9AE02.roa (raw, json) Hash identifier: uZ3REObOODN0mr8v9oxhquTJhyemMTdJfu8CSITYUF4= Subject key identifier: F9:1D:8F:81:D5:69:BF:CB:D7:D4:E2:3D:EC:94:9D:BA:BB:1F:AB:EC Certificate issuer: /CN=A91B7B23/serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Certificate serial: 01B4 Authority key identifier: 3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/7F6FE074B84811F091A01766C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:19:59 +0000 ROA not before: Fri 19 Dec 2025 03:23:10 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38611 IP address blocks: 103.12.200.0/22 maxlen: 24 103.253.64.0/22 maxlen: 23 113.11.184.0/22 maxlen: 23 180.92.208.0/22 maxlen: 22 203.17.148.0/22 maxlen: 23 203.33.236.0/24 maxlen: 24 203.55.188.0/24 maxlen: 24 203.57.15.0/24 maxlen: 24 203.80.168.0/24 maxlen: 24 203.193.192.0/19 maxlen: 19 203.193.196.0/22 maxlen: 22 203.193.200.0/23 maxlen: 23 203.193.206.0/23 maxlen: 23 203.193.208.0/21 maxlen: 21 203.193.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B23, serialNumber=3A1A407471D1BF1CA1525F21F7DECF5A6A2A64D8 Validity Not Before: Dec 19 03:23:10 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4591f-a9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:06:c5:91:0e:8d:c0:e8:7c:fd:35:66:23:c2: f0:36:99:91:d0:ce:fc:2d:8a:e5:d4:b7:c5:de:5e: 4b:5f:bf:0b:75:da:61:8a:86:2c:b1:68:ba:14:71: f0:f0:62:7d:fa:dd:f8:fa:8c:43:a9:5a:21:54:41: 9c:f9:9a:a1:d0:f3:7d:c5:ef:3a:d2:09:8b:5c:7d: a6:f9:ba:6e:b4:0d:c5:f4:58:22:31:f6:eb:bf:34: f3:e5:d0:2e:ed:59:c5:69:34:b9:fc:28:20:b0:3c: 5a:b8:15:52:d3:cf:17:58:92:5e:72:92:14:54:66: ab:45:b5:88:97:eb:79:21:c8:52:d9:09:51:3f:7c: 41:02:1d:e1:3b:29:8a:b3:4d:2d:f6:26:5a:86:3e: ae:ee:96:0b:2f:32:90:02:68:4a:20:96:81:28:3f: 97:81:b1:4f:7f:9f:42:6e:ec:d2:ab:1c:af:f1:97: 70:78:ad:8d:4c:0e:91:d1:11:00:cb:8b:e3:86:31: ef:dd:29:97:21:06:6d:98:a0:29:aa:99:ff:ea:3d: 8a:2d:54:7b:0d:2f:48:ad:26:36:f2:d0:f9:a0:e8: 31:50:14:61:f4:da:86:fd:3e:6f:0b:82:7a:44:60: 7b:c9:7b:e4:c1:d7:5a:2a:92:04:90:26:e2:fd:54: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1D:8F:81:D5:69:BF:CB:D7:D4:E2:3D:EC:94:9D:BA:BB:1F:AB:EC X509v3 Authority Key Identifier: keyid:3A:1A:40:74:71:D1:BF:1C:A1:52:5F:21:F7:DE:CF:5A:6A:2A:64:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/OhpAdHHRvxyhUl8h997PWmoqZNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OhpAdHHRvxyhUl8h997PWmoqZNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B23/7545F03A97D311EEA23C660BC4F9AE02/7F6FE074B84811F091A01766C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.12.200.0/22 103.253.64.0/22 113.11.184.0/22 180.92.208.0/22 203.17.148.0/22 203.33.236.0/24 203.55.188.0/24 203.57.15.0/24 203.80.168.0/24 203.193.192.0/19 Signature Algorithm: sha256WithRSAEncryption c1:41:57:93:5c:00:5e:da:99:f4:40:74:a2:b9:33:b3:6e:07: 58:5c:cf:d8:c1:6f:3a:14:bb:17:45:0f:7d:d0:7a:9f:89:cd: b2:1b:43:61:85:77:93:8d:a1:3e:cb:48:be:18:97:3a:46:8e: 42:ea:40:04:c6:b6:6b:d2:13:c8:c9:ad:9f:7d:81:23:0e:ca: 94:70:55:5f:8b:f2:7c:12:67:57:cd:99:e9:96:86:9a:7a:84: 03:ba:e3:60:fb:00:c6:65:1d:3b:9d:e9:6c:8f:78:cb:50:06: 7a:4e:8a:e0:eb:f4:a4:4c:07:b6:a3:49:87:ac:1f:bd:b8:1b: b4:7a:29:f0:49:d9:8f:08:09:f1:7a:51:19:82:43:f9:13:f3: f1:f1:24:a2:11:7b:55:29:10:98:77:e5:e5:16:30:66:c9:bb: c7:a5:1a:5d:12:4b:78:50:1b:98:aa:5f:e0:0f:44:46:c2:4e: 54:0c:3b:d3:65:df:1b:19:53:c4:27:78:fe:bc:f8:fd:c3:b1: 84:93:f9:65:b0:50:9e:71:83:b1:f3:20:02:94:d7:c1:5e:31: 19:fa:e9:79:e1:2f:6b:70:2b:d8:e3:9c:af:c6:03:41:48:ee: 60:5a:84:17:c6:04:14:29:6f:ce:29:e2:8d:13:5f:6e:c5:c3: e1:b5:17:d8 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMjMxMTAvBgNVBAUTKDNBMUE0MDc0NzFEMUJGMUNBMTUyNUYyMUY3REVDRjVB NkEyQTY0RDgwHhcNMjUxMjE5MDMyMzEwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTkxZi1hOWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAogbFkQ6NwOh8/TVmI8LwNpmR0M78LYrl1LfF3l5LX78LddphioYssWi6FHHw 8GJ9+t34+oxDqVohVEGc+Zqh0PN9xe860gmLXH2m+bputA3F9FgiMfbrvzTz5dAu 7VnFaTS5/CggsDxauBVS088XWJJecpIUVGarRbWIl+t5IchS2QlRP3xBAh3hOymK s00t9iZahj6u7pYLLzKQAmhKIJaBKD+XgbFPf59CbuzSqxyv8ZdweK2NTA6R0REA y4vjhjHv3SmXIQZtmKApqpn/6j2KLVR7DS9IrSY28tD5oOgxUBRh9NqG/T5vC4J6 RGB7yXvkwddaKpIEkCbi/VRNhwIDAQABo4ICljCCApIwHQYDVR0OBBYEFPkdj4HV ab/L19TiPeyUnbq7H6vsMB8GA1UdIwQYMBaAFDoaQHRx0b8coVJfIffez1pqKmTY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IyMy83NTQ1RjAzQTk3 RDMxMUVFQTIzQzY2MEJDNEY5QUUwMi9PaHBBZEhIUnZ4eWhVbDhoOTk3UFdtb3Fa TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ocEFkSEhSdnh5aFVsOGg5OTdQV21vcVpOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCMjMvNzU0NUYwM0E5N0QzMTFFRUEyM0M2NjBCQzRGOUFFMDIvN0Y2RkUwNzRC ODQ4MTFGMDkxQTAxNzY2QzRGOUFFMDIucm9hMFUGCCsGAQUFBwEHAQH/BEYwRDBC BAIAATA8AwQCZwzIAwQCZ/1AAwQCcQu4AwQCtFzQAwQCyxGUAwQAyyHsAwQAyze8 AwQAyzkPAwQAy1CoAwQFy8HAMA0GCSqGSIb3DQEBCwUAA4IBAQDBQVeTXABe2pn0 QHSiuTOzbgdYXM/YwW86FLsXRQ990Hqfic2yG0NhhXeTjaE+y0i+GJc6Ro5C6kAE xrZr0hPIya2ffYEjDsqUcFVfi/J8EmdXzZnploaaeoQDuuNg+wDGZR07nelsj3jL UAZ6Torg6/SkTAe2o0mHrB+9uBu0einwSdmPCAnxelEZgkP5E/Px8SSiEXtVKRCY d+XlFjBmybvHpRpdEkt4UBuYql/gD0RGwk5UDDvTZd8bGVPEJ3j+vPj9w7GEk/ll sFCecYOx8yAClNfBXjEZ+ul54S9rcCvY45yvxgNBSO5gWoQXxgQUKW/OKeKNE19u xcPhtRfY -----END CERTIFICATE-----Generated at Mon Mar 2 04:56:47 2026 by rpki-client