$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C12380C49B0511EDB2F0BD4EC4F9AE02.roa File: C12380C49B0511EDB2F0BD4EC4F9AE02.roa (raw, json) Hash identifier: Q+GkOA+a+PnKQiFeptGmtK8G7ogtHZVeUgG8kpGnI9w= Subject key identifier: 71:8D:89:7F:0B:3D:C0:EA:64:67:DF:FA:86:60:30:A4:14:31:6A:ED Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C0B Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C12380C49B0511EDB2F0BD4EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:46:52 +0000 ROA not before: Thu 26 Feb 2026 19:16:03 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 56111 IP address blocks: 27.121.108.0/22 maxlen: 22 27.121.108.0/23 maxlen: 23 27.121.108.0/24 maxlen: 24 27.121.109.0/24 maxlen: 24 27.121.110.0/23 maxlen: 23 27.121.110.0/24 maxlen: 24 27.121.111.0/24 maxlen: 24 103.229.196.0/23 maxlen: 23 103.229.196.0/24 maxlen: 24 103.229.197.0/24 maxlen: 24 2402:5700::/32 maxlen: 32 2402:5700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3083 (0xc0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Feb 26 19:16:03 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a47b8c-0e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f2:4d:bc:90:fb:fb:4e:85:cb:c2:9e:4d:92: ab:09:05:e0:04:57:04:88:ee:cc:ae:b2:85:58:16: 7d:7e:5f:22:52:01:13:26:40:0f:92:4c:72:40:ee: 5a:f8:de:1d:32:09:82:14:71:4b:69:7f:1a:6a:12: f8:06:88:29:4c:70:4f:65:1a:41:47:05:27:02:c3: ec:de:54:c4:fc:48:a6:17:73:17:12:b7:f5:2f:1d: cb:ef:2f:d8:8d:64:ae:a2:5a:23:03:de:0c:6f:3c: ce:b0:ef:77:d3:ee:dd:d2:99:31:e9:cc:fc:24:1e: 37:f2:13:01:45:87:93:c9:2a:ac:46:60:91:cb:64: 92:f8:aa:97:04:af:fa:90:4c:e1:76:f1:87:c7:29: 6f:1b:51:d0:a2:e1:9d:8a:a7:32:c1:9d:93:35:94: 5f:0d:cd:f0:02:c2:79:7e:35:6c:4d:37:6d:e7:18: 93:a9:12:e8:91:2e:ad:5e:2f:9b:b1:86:04:aa:c0: 9f:8f:a8:80:79:49:f1:28:ef:9d:a2:8b:a1:ea:19: bb:4b:bc:18:bc:c0:e2:b3:65:51:48:c0:e0:9e:79: 82:46:17:65:b7:d3:35:89:80:8d:74:b6:1e:b8:09: 28:0c:f8:98:78:b3:d9:f8:f2:9a:b0:b6:0a:8d:d1: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8D:89:7F:0B:3D:C0:EA:64:67:DF:FA:86:60:30:A4:14:31:6A:ED X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/C12380C49B0511EDB2F0BD4EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.121.108.0/22 103.229.196.0/23 IPv6: 2402:5700::/32 Signature Algorithm: sha256WithRSAEncryption 55:fb:da:af:3c:82:fc:e6:86:61:94:36:03:5b:92:e3:5e:8f: ab:51:6e:9c:f1:3c:3c:f3:50:0d:66:06:ca:26:b7:73:e2:4b: e0:8e:51:0f:82:86:85:2f:f6:96:5f:dd:b7:42:34:70:7b:4e: 30:28:3b:fb:ed:5c:21:f8:69:d2:4a:7e:21:a6:41:7b:3e:13: d4:c7:df:e9:3c:87:f9:b6:00:08:b5:6e:2f:3b:7c:6d:46:4f: d7:d6:a2:cd:b9:d8:8c:16:27:bc:69:60:66:62:53:14:e2:dc: 43:e0:8d:ad:ed:05:d8:51:ce:9e:63:64:5c:df:b5:09:3a:59: 92:95:58:33:f1:de:6c:ad:94:56:19:8f:26:9b:86:6d:69:26: 30:71:7d:de:d7:f1:66:6a:fe:8d:1b:12:22:fd:0c:cc:d2:64: 64:26:03:6c:98:57:4d:77:f5:1a:8d:0f:8c:8c:f9:27:7e:e1: 4e:82:f6:ec:79:e6:6a:22:2e:b6:ef:23:4e:c4:40:01:4a:c9: 15:d8:78:84:c2:3a:bb:dd:e6:7f:98:24:c5:a5:1a:22:9e:e0: cb:60:f5:f7:7b:e9:fb:6f:ba:74:5c:4f:4f:22:c7:52:c0:23: da:36:6d:f6:25:5e:26:ae:ae:d2:01:67:11:7a:03:bf:6f:9c: ce:f5:8e:b1 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwMjI2MTkxNjAzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2I4Yy0wZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAivJNvJD7+06Fy8KeTZKrCQXgBFcEiO7MrrKFWBZ9fl8iUgETJkAPkkxyQO5a +N4dMgmCFHFLaX8aahL4BogpTHBPZRpBRwUnAsPs3lTE/EimF3MXErf1Lx3L7y/Y jWSuolojA94MbzzOsO930+7d0pkx6cz8JB438hMBRYeTySqsRmCRy2SS+KqXBK/6 kEzhdvGHxylvG1HQouGdiqcywZ2TNZRfDc3wAsJ5fjVsTTdt5xiTqRLokS6tXi+b sYYEqsCfj6iAeUnxKO+doouh6hm7S7wYvMDis2VRSMDgnnmCRhdlt9M1iYCNdLYe uAkoDPiYeLPZ+PKasLYKjdE7vQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHGNiX8L PcDqZGff+oZgMKQUMWrtMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNCOEEvMDhDNDM5MjQzODREMTFFQUE0RjU1QjczQzRGOUFFMDIvQzEyMzgwQzQ5 QjA1MTFFREIyRjBCRDRFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCG3lsAwQBZ+XEMA0EAgACMAcDBQAkAlcAMA0GCSqGSIb3DQEBCwUA A4IBAQBV+9qvPIL85oZhlDYDW5LjXo+rUW6c8Tw881ANZgbKJrdz4kvgjlEPgoaF L/aWX923QjRwe04wKDv77Vwh+GnSSn4hpkF7PhPUx9/pPIf5tgAItW4vO3xtRk/X 1qLNudiMFie8aWBmYlMU4txD4I2t7QXYUc6eY2Rc37UJOlmSlVgz8d5srZRWGY8m m4ZtaSYwcX3e1/Fmav6NGxIi/QzM0mRkJgNsmFdNd/UajQ+MjPknfuFOgvbseeZq Ii627yNOxEABSskV2HiEwjq73eZ/mCTFpRoinuDLYPX3e+n7b7p0XE9PIsdSwCPa Nm32JV4mrq7SAWcRegO/b5zO9Y6x -----END CERTIFICATE-----Generated at Mon Mar 2 08:12:52 2026 by rpki-client