$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/207C8A52AC7611EEB465AF75C4F9AE02.roa File: 207C8A52AC7611EEB465AF75C4F9AE02.roa (raw, json) Hash identifier: zYQ2BctNXY7magajQqIBQAnaVIQn28KFCi8jua34WGo= Subject key identifier: 69:57:33:12:F3:9E:51:DC:0A:EE:AF:A1:F8:4C:E0:7E:DB:E1:DD:C2 Certificate issuer: /CN=A91BD3D2/serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Certificate serial: 01FB Authority key identifier: B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/207C8A52AC7611EEB465AF75C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:17:10 +0000 ROA not before: Tue 03 Jun 2025 04:02:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151340 IP address blocks: 103.204.32.0/24 maxlen: 24 103.204.33.0/24 maxlen: 24 2001:df2:7840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD3D2, serialNumber=B6727EDFD37D1E2C175C10811A1D38AA2AC6C89C Validity Not Before: Jun 3 04:02:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a41226-9565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:07:93:8c:af:82:fd:4f:4b:b1:b7:c4:a5: c8:1b:9b:fc:62:75:fb:41:db:2b:e7:d8:e6:ef:1f: ce:f9:97:69:08:15:d1:fa:e6:bb:5c:1d:f1:46:84: e7:d3:8f:86:10:bc:2c:03:d3:13:77:ca:8a:fe:31: a2:16:fe:3d:89:8a:43:47:10:fc:0a:be:30:c0:a2: 69:a3:a4:99:00:d1:c8:b6:4b:54:56:9a:0e:89:2e: 6e:db:15:89:f5:17:f9:42:2f:36:dc:a8:25:dd:1c: d0:cf:0e:9f:8f:b1:d0:4c:64:1f:ff:59:b5:cb:9a: 76:0e:a9:54:43:b1:60:4f:c2:21:a0:08:7f:2b:e9: e5:4c:36:56:3f:d0:a1:4e:a7:0e:c9:cf:5f:e5:eb: 36:60:f8:8a:ec:5d:c4:ce:fb:f7:1c:79:68:49:99: b3:90:4e:83:9c:36:a4:19:90:ac:d6:cd:93:48:21: a3:fb:58:f8:db:aa:51:bc:97:a7:cd:ea:ba:ba:01: 58:bf:5a:c1:fa:d2:05:53:69:4b:5f:f5:f3:a6:cf: 41:5e:f6:7a:db:ef:57:0d:96:a1:9f:10:68:1d:be: a6:29:39:07:a6:cc:ed:df:e1:ca:bf:01:68:bc:86: 86:1e:e5:82:bc:63:5c:0b:cf:a6:9d:54:b8:26:a1: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:33:12:F3:9E:51:DC:0A:EE:AF:A1:F8:4C:E0:7E:DB:E1:DD:C2 X509v3 Authority Key Identifier: keyid:B6:72:7E:DF:D3:7D:1E:2C:17:5C:10:81:1A:1D:38:AA:2A:C6:C8:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/tnJ-39N9HiwXXBCBGh04qirGyJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnJ-39N9HiwXXBCBGh04qirGyJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD3D2/42C1D8F82C8611EEA9B74F43C4F9AE02/207C8A52AC7611EEB465AF75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.32.0/23 IPv6: 2001:df2:7840::/48 Signature Algorithm: sha256WithRSAEncryption 99:ca:80:ea:6a:d4:3c:b7:e7:6c:42:a0:1f:ae:42:ed:05:7a: 34:39:9f:37:67:03:92:65:ec:3b:9b:d6:4c:f4:ce:80:96:11: eb:b8:5d:35:ff:1b:a7:29:2b:58:14:b9:e6:12:af:48:8c:fd: 94:f0:30:40:d5:88:59:dd:5c:4b:b2:81:f1:b8:14:35:f0:98: 5d:15:f0:f1:df:00:10:ad:72:f4:31:eb:a0:c0:1f:92:c7:a8: 93:61:e1:80:f2:61:9e:3c:24:70:a7:70:1c:ed:2d:f1:b6:f1: 55:4f:0a:3b:21:c5:d9:cc:a8:b4:e9:c0:0f:e6:f9:e9:8e:7d: fe:77:f1:70:8b:c5:6f:cd:c5:2d:25:90:6b:2b:bd:29:83:3e: 16:a3:74:66:46:ed:df:e1:38:8a:1e:de:34:65:4a:ae:71:28: 22:da:e6:b8:6a:0d:8d:b4:7f:f4:93:89:59:2a:ae:c0:0c:c1: bf:94:00:88:60:04:53:49:b7:98:d2:fb:5d:2f:17:da:91:01: 4f:b1:e4:e2:b8:73:35:f0:d8:6d:00:d5:b3:92:55:74:06:e5: 86:75:50:bc:83:43:7d:0c:d0:5f:a5:e7:b0:28:18:a5:0e:3e: 81:69:f1:d8:99:f2:50:ec:f3:35:27:a0:71:f9:4e:7f:ec:d0: 5a:8b:cd:1e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQzRDIxMTAvBgNVBAUTKEI2NzI3RURGRDM3RDFFMkMxNzVDMTA4MTFBMUQzOEFB MkFDNkM4OUMwHhcNMjUwNjAzMDQwMjM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTIyNi05NTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4YHk4yvgv1PS7G3xKXIG5v8YnX7Qdsr59jm7x/O+ZdpCBXR+ua7XB3xRoTn 04+GELwsA9MTd8qK/jGiFv49iYpDRxD8Cr4wwKJpo6SZANHItktUVpoOiS5u2xWJ 9Rf5Qi823Kgl3RzQzw6fj7HQTGQf/1m1y5p2DqlUQ7FgT8IhoAh/K+nlTDZWP9Ch TqcOyc9f5es2YPiK7F3Ezvv3HHloSZmzkE6DnDakGZCs1s2TSCGj+1j426pRvJen zeq6ugFYv1rB+tIFU2lLX/Xzps9BXvZ62+9XDZahnxBoHb6mKTkHpszt3+HKvwFo vIaGHuWCvGNcC8+mnVS4JqEFawIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGlXMxLz nlHcCu6vofhM4H7b4d3CMB8GA1UdIwQYMBaAFLZyft/TfR4sF1wQgRodOKoqxsic MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDNEMi80MkMxRDhGODJD ODYxMUVFQTlCNzRGNDNDNEY5QUUwMi90bkotMzlOOUhpd1hYQkNCR2gwNHFpckd5 SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RuSi0zOU45SGl3WFhCQ0JHaDA0cWlyR3lKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQzRDIvNDJDMUQ4RjgyQzg2MTFFRUE5Qjc0RjQzQzRGOUFFMDIvMjA3QzhBNTJB Qzc2MTFFRUI0NjVBRjc1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ8wgMA8EAgACMAkDBwAgAQ3yeEAwDQYJKoZIhvcNAQELBQADggEB AJnKgOpq1Dy352xCoB+uQu0FejQ5nzdnA5Jl7Dub1kz0zoCWEeu4XTX/G6cpK1gU ueYSr0iM/ZTwMEDViFndXEuygfG4FDXwmF0V8PHfABCtcvQx66DAH5LHqJNh4YDy YZ48JHCncBztLfG28VVPCjshxdnMqLTpwA/m+emOff538XCLxW/NxS0lkGsrvSmD PhajdGZG7d/hOIoe3jRlSq5xKCLa5rhqDY20f/STiVkqrsAMwb+UAIhgBFNJt5jS +10vF9qRAU+x5OK4czXw2G0A1bOSVXQG5YZ1ULyDQ30M0F+l57AoGKUOPoFp8diZ 8lDs8zUnoHH5Tn/s0FqLzR4= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:51 2026 by rpki-client