$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa File: E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa (raw, json) Hash identifier: t7muwLVVJ/1UT9mWtEBwl7n0rZZHTrn0w2q9yPkjVWw= Subject key identifier: AD:FA:45:2F:F9:79:BE:14:2F:01:5F:8C:35:E2:1B:9D:56:C0:F9:90 Certificate issuer: /CN=A91C4F1B/serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Certificate serial: 093A Authority key identifier: 7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:45:40 +0000 ROA not before: Wed 22 Oct 2025 10:00:13 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140879 IP address blocks: 103.152.218.0/24 maxlen: 24 2400:8ca0::/32 maxlen: 32 2400:8ca0::/48 maxlen: 48 2400:8ca0:1::/48 maxlen: 48 2400:8ca0:2::/48 maxlen: 48 2400:8ca0:3::/48 maxlen: 48 2400:8ca0:4::/48 maxlen: 48 2400:8ca0:5::/48 maxlen: 48 2400:8ca0:6::/48 maxlen: 48 2400:8ca0:7::/48 maxlen: 48 2400:8ca0:8::/48 maxlen: 48 2400:8ca0:9::/48 maxlen: 48 2400:8ca0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2362 (0x93a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F1B, serialNumber=7B99F8D6B9413CE2A296EB1C7D7EFE6D47D0CBA4 Validity Not Before: Oct 22 10:00:13 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a46d34-ed24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:cb:9c:41:b9:c1:8c:ec:68:0e:f5:a8:74: d1:5d:1c:ae:00:b5:91:9d:ed:44:ac:b9:70:54:60: c1:07:16:58:b0:94:8e:19:23:a1:98:85:3e:f6:81: 0e:70:ac:65:35:aa:73:5c:67:28:4a:2b:e4:1c:f1: d9:44:af:92:d8:a7:55:ca:02:12:45:09:9f:28:37: 40:54:78:63:ce:58:64:2c:15:2f:e9:c2:9c:be:73: 32:45:c1:d1:0a:7f:0e:97:1c:d1:c0:70:2a:2e:97: ec:53:69:94:25:d6:6f:49:9e:df:6e:0a:97:b3:4c: 88:26:33:d6:65:68:9d:dd:10:af:49:bd:25:dc:7e: e1:ea:8d:08:42:86:21:f5:e9:cd:4c:f3:9b:20:7e: 75:a3:7b:7b:23:9c:65:09:cb:c9:a5:f0:0e:24:c6: a9:98:e0:0c:ca:3d:fc:4b:a2:30:32:ba:e8:68:f4: d0:51:2a:14:74:92:32:e5:b6:7c:04:31:0c:44:c3: 01:d6:16:e5:cc:6f:59:68:7f:d0:03:fd:20:35:e3: ca:15:62:fd:2e:68:1c:c2:5f:f8:64:2d:4a:f4:64: a3:d1:e8:b1:6b:21:1b:e9:2d:fd:9b:4a:45:27:97: 6e:3c:04:8a:75:a0:bf:ad:15:31:27:f9:be:7d:7f: 06:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FA:45:2F:F9:79:BE:14:2F:01:5F:8C:35:E2:1B:9D:56:C0:F9:90 X509v3 Authority Key Identifier: keyid:7B:99:F8:D6:B9:41:3C:E2:A2:96:EB:1C:7D:7E:FE:6D:47:D0:CB:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/e5n41rlBPOKiluscfX7-bUfQy6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e5n41rlBPOKiluscfX7-bUfQy6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F1B/23F30550BC4F11EABA8C962FC4F9AE02/E6C7D3EAAF2D11F0811BB83BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.218.0/24 IPv6: 2400:8ca0::/32 Signature Algorithm: sha256WithRSAEncryption 35:5d:07:25:1e:aa:ac:e5:dc:16:e9:38:27:c6:52:fd:dc:3a: a3:ef:13:ff:ce:f2:59:8e:dc:ca:9c:c7:95:5c:b6:f0:d9:f4: 6a:ca:0b:9a:19:24:ab:86:6c:db:71:1b:c3:d3:d7:a7:88:57: c0:ba:66:9f:74:29:04:32:e6:3e:d7:cc:e6:83:7e:d2:ba:4a: 5f:a0:31:d5:ff:bf:dc:01:62:5e:52:68:02:62:6a:0f:dc:a8: 21:d4:d2:fe:ea:b1:2c:7b:32:dd:ec:07:0f:89:c8:21:0f:5f: ab:d4:a8:ff:d1:8f:48:eb:0d:3f:f8:2c:7d:9d:d2:5a:b5:db: 39:12:2c:e4:56:54:c5:69:73:d3:80:81:1b:fe:31:1b:d7:85: 19:ee:8c:e7:11:dc:de:22:bf:ad:ac:40:31:19:5f:a6:8d:57: 3e:e6:07:16:80:37:b3:6f:d9:6c:e9:01:30:3a:d7:1a:60:9f: 20:9b:27:c0:e0:10:ab:57:d2:5d:ad:ca:88:7f:53:ea:bd:90: 54:7a:59:5e:f3:26:91:13:2e:45:49:a0:58:a0:76:1f:2b:ba: c1:2f:15:ff:f5:66:75:6e:03:32:35:6e:30:7a:33:b7:0e:7a: e4:f6:f9:26:00:3c:0f:2d:28:cb:68:d4:d4:67:c9:d2:a0:92: 2f:05:64:c5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMUIxMTAvBgNVBAUTKDdCOTlGOEQ2Qjk0MTNDRTJBMjk2RUIxQzdEN0VGRTZE NDdEMENCQTQwHhcNMjUxMDIyMTAwMDEzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmQzNC1lZDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt3LnEG5wYzsaA71qHTRXRyuALWRne1ErLlwVGDBBxZYsJSOGSOhmIU+9oEO cKxlNapzXGcoSivkHPHZRK+S2KdVygISRQmfKDdAVHhjzlhkLBUv6cKcvnMyRcHR Cn8OlxzRwHAqLpfsU2mUJdZvSZ7fbgqXs0yIJjPWZWid3RCvSb0l3H7h6o0IQoYh 9enNTPObIH51o3t7I5xlCcvJpfAOJMapmOAMyj38S6IwMrroaPTQUSoUdJIy5bZ8 BDEMRMMB1hblzG9ZaH/QA/0gNePKFWL9Lmgcwl/4ZC1K9GSj0eixayEb6S39m0pF J5duPASKdaC/rRUxJ/m+fX8G/wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFK36RS/5 eb4ULwFfjDXiG51WwPmQMB8GA1UdIwQYMBaAFHuZ+Na5QTziopbrHH1+/m1H0Muk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYxQi8yM0YzMDU1MEJD NEYxMUVBQkE4Qzk2MkZDNEY5QUUwMi9lNW40MXJsQlBPS2lsdXNjZlg3LWJVZlF5 NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2U1bjQxcmxCUE9LaWx1c2NmWDctYlVmUXk2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRGMUIvMjNGMzA1NTBCQzRGMTFFQUJBOEM5NjJGQzRGOUFFMDIvRTZDN0QzRUFB RjJEMTFGMDgxMUJCODNCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQAZ5jaMA0EAgACMAcDBQAkAIygMA0GCSqGSIb3DQEBCwUAA4IBAQA1 XQclHqqs5dwW6TgnxlL93Dqj7xP/zvJZjtzKnMeVXLbw2fRqyguaGSSrhmzbcRvD 09eniFfAumafdCkEMuY+18zmg37SukpfoDHV/7/cAWJeUmgCYmoP3Kgh1NL+6rEs ezLd7AcPicghD1+r1Kj/0Y9I6w0/+Cx9ndJatds5EizkVlTFaXPTgIEb/jEb14UZ 7oznEdzeIr+trEAxGV+mjVc+5gcWgDezb9ls6QEwOtcaYJ8gmyfA4BCrV9JdrcqI f1PqvZBUelle8yaREy5FSaBYoHYfK7rBLxX/9WZ1bgMyNW4wejO3Dnrk9vkmADwP LSjLaNTUZ8nSoJIvBWTF -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:02 2026 by rpki-client