$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/7CDCAF509CF211ED8BD2B02FC4F9AE02.roa File: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (raw, json) Hash identifier: mkWKfP/oqCo+8AqGguXkKTD4XqCHamTKTX7vMyOJDTA= Subject key identifier: 21:86:62:C1:9B:BE:8C:3A:DF:AA:61:88:0B:20:30:97:E2:93:C3:7F Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0283 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/7CDCAF509CF211ED8BD2B02FC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:52:14 +0000 ROA not before: Tue 25 Nov 2025 00:47:27 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150395 IP address blocks: 103.29.238.0/23 maxlen: 23 2001:df1:78c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Nov 25 00:47:27 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46ebd-fcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:a6:fb:26:45:cb:45:3c:81:31:d1:55:9a: 08:7e:63:c5:3d:7b:6c:30:f7:05:cd:d5:b4:4b:b4: d0:cb:44:5c:99:f8:4c:7b:15:29:14:c7:5b:b1:4b: 6f:2d:7e:60:49:20:eb:77:20:b8:09:b4:22:53:80: 2b:f2:7d:64:3e:47:e0:f3:b9:c5:73:f1:6c:dc:87: a7:78:35:d6:34:b6:56:00:6e:fa:17:82:10:38:2e: 88:16:3f:c2:8f:d4:ab:83:cb:8c:20:ee:e0:da:be: 68:a0:da:60:5f:ca:4e:22:f7:d7:b3:9e:3b:e0:a1: 5b:da:34:0a:97:86:6f:c2:7e:37:13:60:53:76:fb: 81:48:5f:1b:8d:b2:ea:1b:0f:11:fb:3f:32:ef:ea: 99:d8:19:14:0e:9e:00:41:71:e6:05:ef:6c:33:e9: b9:3b:4c:99:67:76:ab:36:fd:c8:b6:7a:71:8f:e3: 0e:30:c5:2b:0c:a2:96:c5:98:66:63:35:e9:79:a6: 50:8d:00:7d:98:aa:00:61:ae:22:bc:d8:e5:f8:69: 71:02:93:c9:9e:9b:e1:fb:65:28:2f:14:20:03:ed: 97:50:f6:c4:39:d1:86:64:12:d6:27:af:50:60:bb: 72:7c:45:2d:e7:69:57:20:b6:b4:61:a7:ff:94:a1: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:86:62:C1:9B:BE:8C:3A:DF:AA:61:88:0B:20:30:97:E2:93:C3:7F X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/7CDCAF509CF211ED8BD2B02FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.29.238.0/23 IPv6: 2001:df1:78c0::/48 Signature Algorithm: sha256WithRSAEncryption 55:e0:13:d4:fc:6d:ad:15:10:63:6e:2f:fb:2c:8e:27:56:af: 36:c5:a7:d6:26:d4:8c:f7:2c:77:1d:02:81:72:1d:e2:6a:b8: ce:09:d5:2f:37:84:3f:a3:f5:72:a4:6d:74:b2:47:3d:d1:b4: 62:21:97:1c:5b:1d:26:0b:59:1b:60:8a:67:99:39:f4:35:a4: 34:cc:9a:f2:fe:26:3a:69:0e:a8:80:c2:51:c7:d5:b0:bc:79: 25:50:a5:df:8b:fb:b4:dc:8d:db:05:fc:40:32:5b:22:06:34: 1f:04:4b:fa:45:73:83:7f:bc:bc:7d:1c:07:2b:d1:8e:bf:23: 36:9a:eb:ce:42:53:89:3e:a7:3a:f0:77:60:be:43:10:66:dd: 65:98:b8:63:2a:00:c0:86:a3:a4:7e:a2:f3:b6:a8:3a:c8:fa: 51:47:cf:ce:6a:eb:bf:c9:f1:f2:e0:78:81:ce:3f:87:b9:27: 00:5b:9e:10:be:ae:5b:7f:6f:5d:27:67:bd:91:d4:67:10:d0: 9d:b0:ce:76:a8:b1:55:5d:78:70:12:38:5e:19:df:15:e0:cb: bd:50:94:1b:78:f8:30:ee:bc:d2:db:04:ff:8e:35:02:8a:0f: 8a:31:87:75:ef:03:ae:10:86:93:01:c4:37:70:26:28:cd:f5: 3e:cf:cf:33 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUxMTI1MDA0NzI3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmViZC1mY2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLem+yZFy0U8gTHRVZoIfmPFPXtsMPcFzdW0S7TQy0RcmfhMexUpFMdbsUtv LX5gSSDrdyC4CbQiU4Ar8n1kPkfg87nFc/Fs3IeneDXWNLZWAG76F4IQOC6IFj/C j9Srg8uMIO7g2r5ooNpgX8pOIvfXs5474KFb2jQKl4Zvwn43E2BTdvuBSF8bjbLq Gw8R+z8y7+qZ2BkUDp4AQXHmBe9sM+m5O0yZZ3arNv3Itnpxj+MOMMUrDKKWxZhm YzXpeaZQjQB9mKoAYa4ivNjl+GlxApPJnpvh+2UoLxQgA+2XUPbEOdGGZBLWJ69Q YLtyfEUt52lXILa0Yaf/lKGnywIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCGGYsGb vow636phiAsgMJfik8N/MB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ1NEMvODFGQzk2NTA2QzEyMTFFRDg5RkM5MjBBQzRGOUFFMDIvN0NEQ0FGNTA5 Q0YyMTFFRDhCRDJCMDJGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZx3uMA8EAgACMAkDBwAgAQ3xeMAwDQYJKoZIhvcNAQELBQADggEB AFXgE9T8ba0VEGNuL/ssjidWrzbFp9Ym1Iz3LHcdAoFyHeJquM4J1S83hD+j9XKk bXSyRz3RtGIhlxxbHSYLWRtgimeZOfQ1pDTMmvL+JjppDqiAwlHH1bC8eSVQpd+L +7TcjdsF/EAyWyIGNB8ES/pFc4N/vLx9HAcr0Y6/Izaa685CU4k+pzrwd2C+QxBm 3WWYuGMqAMCGo6R+ovO2qDrI+lFHz85q67/J8fLgeIHOP4e5JwBbnhC+rlt/b10n Z72R1GcQ0J2wznaosVVdeHASOF4Z3xXgy71QlBt4+DDuvNLbBP+ONQKKD4oxh3Xv A64QhpMBxDdwJijN9T7PzzM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:35 2026 by rpki-client