$ rpki-client -vvf rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/47BBB5E4465311EA85CB607EC4F9AE02.roa File: 47BBB5E4465311EA85CB607EC4F9AE02.roa (raw, json) Hash identifier: jGy6HhewZ+sqaP4jZOOyB8CNY5nLRPGvb+oLKqY0UVY= Subject key identifier: 65:CC:EA:82:9C:E1:9B:AD:EE:09:64:D4:F9:32:A9:98:3F:C0:6F:DA Certificate issuer: /CN=A91C62D3/serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Certificate serial: 0B92 Authority key identifier: 5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/47BBB5E4465311EA85CB607EC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:26:36 +0000 ROA not before: Tue 22 Apr 2025 19:49:15 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140076 IP address blocks: 103.148.40.0/23 maxlen: 24 2001:df2:bd80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2962 (0xb92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C62D3, serialNumber=5A7DC0A4616B07D1F85E2D590FDD5F4067D0BBC4 Validity Not Before: Apr 22 19:49:15 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4064c-a6f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:44:ec:dc:68:5b:50:c6:15:8e:c5:8a:70: 45:3b:91:e4:97:07:a7:79:1d:60:bd:b8:aa:4e:21: c5:f9:24:48:ea:41:2e:5c:67:74:25:79:81:11:5f: 10:5c:c2:2d:7d:f8:e7:72:44:df:09:79:0a:37:ee: 38:42:c0:e8:ea:ae:a1:94:46:35:d8:21:9e:00:f3: af:f2:31:26:38:5e:e5:ff:60:ca:9e:bb:68:5d:ce: c5:f1:4b:ff:e0:3c:d9:7c:9e:07:84:f1:ec:77:cb: 20:5b:46:bf:e2:77:e8:f7:53:fa:17:56:78:5d:5b: fd:ae:1d:e6:3a:df:17:01:e4:d6:2d:1f:13:c8:5e: 70:47:74:3e:c2:03:2a:4d:5f:90:bc:3e:b0:cd:80: 90:b2:ad:19:78:ff:aa:db:1c:f5:a7:1c:75:28:04: ca:22:a2:49:e6:80:f6:f1:be:d5:de:b5:72:ea:3c: f7:f9:ce:45:49:d5:47:ac:0a:64:1d:d6:07:1c:02: 40:97:35:40:20:99:25:0e:b6:3b:01:50:50:26:89: c2:49:35:45:58:30:2a:65:c5:b4:76:1f:80:24:a4: 3c:26:ba:66:13:c7:08:b8:c9:cb:da:09:7d:21:0c: 67:c3:67:42:95:bb:35:fd:82:59:b4:a8:39:68:26: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:EA:82:9C:E1:9B:AD:EE:09:64:D4:F9:32:A9:98:3F:C0:6F:DA X509v3 Authority Key Identifier: keyid:5A:7D:C0:A4:61:6B:07:D1:F8:5E:2D:59:0F:DD:5F:40:67:D0:BB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wn3ApGFrB9H4Xi1ZD91fQGfQu8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C62D3/BF9C6D94465111EA83FCA57BC4F9AE02/47BBB5E4465311EA85CB607EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.40.0/23 IPv6: 2001:df2:bd80::/48 Signature Algorithm: sha256WithRSAEncryption 28:64:cf:c5:45:e3:28:32:9d:41:6c:7f:13:e6:04:40:be:93: 72:95:df:e5:6e:bd:fe:6a:30:a9:1e:b6:eb:06:35:06:16:b7: c7:11:32:d7:6e:21:f6:33:0c:ca:2f:fb:ed:f2:96:3c:7a:3f: cb:f8:56:f8:fb:39:6b:2d:3e:ad:a9:85:8c:bf:15:dd:65:e4: cc:d0:ec:c0:91:06:09:c5:17:c3:2f:52:9a:51:d1:f0:eb:e7: 43:ff:48:a0:e9:1d:e6:b1:02:7f:0f:3c:6a:d8:8e:62:8e:03: 60:d8:e2:f0:58:fb:76:c6:8f:08:0c:d7:f6:8a:31:87:4c:d2: d0:88:a7:ab:94:37:13:c0:8d:1e:8b:0f:f2:f9:55:4a:6a:9e: 1c:29:1e:a3:ce:9b:f2:4d:c8:78:e8:50:93:e6:6d:43:eb:90: be:5a:03:91:eb:f8:be:17:91:39:3d:bb:a2:f4:0f:7d:df:60: 63:23:c8:76:a1:f7:be:57:de:94:2d:84:40:67:46:e1:9c:80: b2:a3:1b:62:83:95:6d:17:ad:78:e5:34:5b:ad:af:31:94:dd: 2a:43:e0:19:ea:a1:cb:ab:0c:bd:1f:cd:89:01:a8:82:32:03: 80:70:4d:4c:be:9a:75:7f:78:58:fa:25:d1:b7:12:69:ad:38: 71:b0:d4:b0 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICC5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYyRDMxMTAvBgNVBAUTKDVBN0RDMEE0NjE2QjA3RDFGODVFMkQ1OTBGREQ1RjQw NjdEMEJCQzQwHhcNMjUwNDIyMTk0OTE1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDY0Yy1hNmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFhE7NxoW1DGFY7FinBFO5HklweneR1gvbiqTiHF+SRI6kEuXGd0JXmBEV8Q XMItffjnckTfCXkKN+44QsDo6q6hlEY12CGeAPOv8jEmOF7l/2DKnrtoXc7F8Uv/ 4DzZfJ4HhPHsd8sgW0a/4nfo91P6F1Z4XVv9rh3mOt8XAeTWLR8TyF5wR3Q+wgMq TV+QvD6wzYCQsq0ZeP+q2xz1pxx1KATKIqJJ5oD28b7V3rVy6jz3+c5FSdVHrApk HdYHHAJAlzVAIJklDrY7AVBQJonCSTVFWDAqZcW0dh+AJKQ8JrpmE8cIuMnL2gl9 IQxnw2dClbs1/YJZtKg5aCZphQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGXM6oKc 4Zut7glk1PkyqZg/wG/aMB8GA1UdIwQYMBaAFFp9wKRhawfR+F4tWQ/dX0Bn0LvE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjJEMy9CRjlDNkQ5NDQ2 NTExMUVBODNGQ0E1N0JDNEY5QUUwMi9XbjNBcEdGckI5SDRYaTFaRDkxZlFHZlF1 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1duM0FwR0ZyQjlINFhpMVpEOTFmUUdmUXU4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYyRDMvQkY5QzZEOTQ0NjUxMTFFQTgzRkNBNTdCQzRGOUFFMDIvNDdCQkI1RTQ0 NjUzMTFFQTg1Q0I2MDdFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5QoMA8EAgACMAkDBwAgAQ3yvYAwDQYJKoZIhvcNAQELBQADggEB AChkz8VF4ygynUFsfxPmBEC+k3KV3+Vuvf5qMKketusGNQYWt8cRMtduIfYzDMov ++3yljx6P8v4Vvj7OWstPq2phYy/Fd1l5MzQ7MCRBgnFF8MvUppR0fDr50P/SKDp HeaxAn8PPGrYjmKOA2DY4vBY+3bGjwgM1/aKMYdM0tCIp6uUNxPAjR6LD/L5VUpq nhwpHqPOm/JNyHjoUJPmbUPrkL5aA5Hr+L4XkTk9u6L0D33fYGMjyHah975X3pQt hEBnRuGcgLKjG2KDlW0XrXjlNFutrzGU3SpD4BnqocurDL0fzYkBqIIyA4BwTUy+ mnV/eFj6JdG3EmmtOHGw1LA= -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:16 2026 by rpki-client