$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/004A745EDBB011F0904A453A4D641951.roa File: 004A745EDBB011F0904A453A4D641951.roa (raw, json) Hash identifier: 0TWkmfJVbCOLiU1v9M8I2M82G17YACYNARPjaSNnjI8= Subject key identifier: C4:08:4B:A9:AE:A7:06:A4:C7:76:0D:F8:35:65:41:C9:17:6A:9A:A7 Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Certificate serial: 0566 Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/004A745EDBB011F0904A453A4D641951.roa Signing time: Sun 01 Mar 2026 15:47:07 +0000 ROA not before: Thu 18 Dec 2025 01:22:21 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133120 IP address blocks: 103.40.109.0/24 maxlen: 24 103.80.20.0/23 maxlen: 24 103.243.110.0/24 maxlen: 24 182.161.64.0/23 maxlen: 24 203.31.65.0/24 maxlen: 24 203.55.90.0/24 maxlen: 24 203.55.91.0/24 maxlen: 24 2407:d080::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1382 (0x566) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2 Validity Not Before: Dec 18 01:22:21 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45f7b-d03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:27:d6:99:fe:22:35:90:66:7e:f0:72:03: e7:da:5a:46:a9:95:25:3b:af:00:0e:6b:c6:17:45: d7:56:da:ca:ed:20:96:df:9c:96:2a:59:8d:94:3e: 20:04:c7:56:f7:13:34:bf:c4:85:2c:51:75:32:84: 9c:23:1b:85:60:10:ad:91:e1:f8:a2:10:3a:d2:17: 9d:76:a9:ba:a8:55:6f:33:16:f6:47:0e:86:cc:2b: b1:3e:5c:9d:a4:ef:79:45:a6:88:d9:13:4d:39:85: 5d:bd:07:32:af:f6:77:19:b3:0c:ba:26:2a:89:a2: 48:c0:0a:1b:6a:01:7a:0b:34:3d:9b:29:63:ed:a5: a1:81:cb:71:c6:ed:b4:09:a2:2a:d5:5c:62:f4:21: ee:80:11:d4:c7:61:01:99:b8:86:87:86:5c:a9:e2: 00:e0:bd:f7:24:65:3a:89:27:f8:b7:aa:dd:ba:6f: 9f:e5:7f:57:85:c9:c7:01:86:44:01:a6:d9:42:98: 8d:fa:ab:05:c5:4f:ca:d5:e3:dd:47:72:c2:bf:e4: 86:81:f8:18:31:9d:68:ae:d0:9c:9c:ee:51:2d:ea: 73:f9:88:ee:c4:68:d7:ab:4c:66:a8:b4:47:52:b3: f9:44:11:87:13:6b:19:2a:cd:7c:10:59:d1:6a:64: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:08:4B:A9:AE:A7:06:A4:C7:76:0D:F8:35:65:41:C9:17:6A:9A:A7 X509v3 Authority Key Identifier: keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/004A745EDBB011F0904A453A4D641951.roa sbgp-ipAddrBlock: critical IPv4: 103.40.109.0/24 103.80.20.0/23 103.243.110.0/24 182.161.64.0/23 203.31.65.0/24 203.55.90.0/23 IPv6: 2407:d080::/32 Signature Algorithm: sha256WithRSAEncryption 45:c2:51:3f:f2:9a:2b:74:b1:ec:20:ac:71:ba:8d:4f:26:67: 84:77:73:db:2b:60:6d:4b:62:2a:dd:89:ed:11:29:ac:c0:c2: b8:da:16:f9:20:ff:ae:a6:2d:84:87:58:09:f9:8f:c5:82:94: 28:51:33:ab:12:7b:13:04:a4:e2:c5:a1:f7:13:8c:b9:83:8c: 26:c7:de:37:a9:33:76:33:be:bb:c7:d7:5c:f6:e0:b7:32:54: 0e:6b:c7:4b:5b:6c:c2:f4:3b:bb:d1:bf:f0:58:27:17:76:eb: 88:1e:a7:3f:81:61:98:53:b8:64:d1:5f:0c:bf:f4:00:53:eb: ba:4d:7a:d5:b8:c6:e1:ee:c0:bb:8a:18:ac:63:c5:a2:92:af: df:84:ac:6f:b9:a8:8d:55:90:d9:e7:b7:c0:4f:98:ed:90:d5: ee:6b:a7:9a:67:78:a1:0f:9e:d3:ff:7a:05:6b:a5:a8:30:b8: cb:17:fc:dd:9c:09:ac:e6:cf:5e:56:fa:52:26:cd:ce:a8:16: b0:b8:c8:e5:40:c3:b3:4f:c6:c9:da:85:c3:87:bb:43:e9:c3: af:48:07:4f:09:bc:e8:a8:e0:3c:27:ce:2e:eb:08:f8:92:f5: f5:95:60:f5:46:3e:47:60:00:1e:66:fd:b7:00:22:2a:4e:bb: 8f:8d:33:cf -----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgICBWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMwMzkxMTAvBgNVBAUTKENCNkM4NUU3NTJENTY5REZDRjFERTkwNEM5Q0JFNzFF NDgzRUY1RjIwHhcNMjUxMjE4MDEyMjIxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWY3Yi1kMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wUn1pn+IjWQZn7wcgPn2lpGqZUlO68ADmvGF0XXVtrK7SCW35yWKlmNlD4g BMdW9xM0v8SFLFF1MoScIxuFYBCtkeH4ohA60heddqm6qFVvMxb2Rw6GzCuxPlyd pO95RaaI2RNNOYVdvQcyr/Z3GbMMuiYqiaJIwAobagF6CzQ9mylj7aWhgctxxu20 CaIq1Vxi9CHugBHUx2EBmbiGh4ZcqeIA4L33JGU6iSf4t6rdum+f5X9XhcnHAYZE AabZQpiN+qsFxU/K1ePdR3LCv+SGgfgYMZ1ortCcnO5RLepz+YjuxGjXq0xmqLRH UrP5RBGHE2sZKs18EFnRamSU1wIDAQABo4ICjTCCAokwHQYDVR0OBBYEFMQIS6mu pwakx3YN+DVlQckXapqnMB8GA1UdIwQYMBaAFMtshedS1Wnfzx3pBMnL5x5IPvXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzAzOS9CQjUzMjNFODI1 QzIxMUVDQjQ5OUQxNThDNEY5QUUwMi95MnlGNTFMVmFkX1BIZWtFeWN2bkhrZy05 ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kyeUY1MUxWYWRfUEhla0V5Y3ZuSGtnLTlmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMwMzkvQkI1MzIzRTgyNUMyMTFFQ0I0OTlEMTU4QzRGOUFFMDIvMDA0QTc0NUVE QkIwMTFGMDkwNEE0NTNBNEQ2NDE5NTEucm9hMEwGCCsGAQUFBwEHAQH/BD0wOzAq BAIAATAkAwQAZyhtAwQBZ1AUAwQAZ/NuAwQBtqFAAwQAyx9BAwQByzdaMA0EAgAC MAcDBQAkB9CAMA0GCSqGSIb3DQEBCwUAA4IBAQBFwlE/8pordLHsIKxxuo1PJmeE d3PbK2BtS2Iq3YntESmswMK42hb5IP+upi2Eh1gJ+Y/FgpQoUTOrEnsTBKTixaH3 E4y5g4wmx943qTN2M767x9dc9uC3MlQOa8dLW2zC9Du70b/wWCcXduuIHqc/gWGY U7hk0V8Mv/QAU+u6TXrVuMbh7sC7ihisY8Wikq/fhKxvuaiNVZDZ57fAT5jtkNXu a6eaZ3ihD57T/3oFa6WoMLjLF/zdnAms5s9eVvpSJs3OqBawuMjlQMOzT8bJ2oXD h7tD6cOvSAdPCbzoqOA8J84u6wj4kvX1lWD1Rj5HYAAeZv23ACIqTruPjTPP -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:40 2026 by rpki-client