$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/AD27F510895E11F0AF42FE0EC4F9AE02.roa File: AD27F510895E11F0AF42FE0EC4F9AE02.roa (raw, json) Hash identifier: icemHlR5QoQrJcm4Ezb/BFn0OIUHyirEoBlBB/ixZYQ= Subject key identifier: C3:76:A4:50:B1:CB:D2:22:C7:F3:A9:ED:67:0D:BC:E8:DF:6B:1B:DE Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 0820 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/AD27F510895E11F0AF42FE0EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:56:31 +0000 ROA not before: Thu 04 Sep 2025 07:13:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 55720 IP address blocks: 103.85.108.0/24 maxlen: 24 103.85.109.0/24 maxlen: 24 103.85.110.0/24 maxlen: 24 119.160.232.0/24 maxlen: 24 119.160.233.0/24 maxlen: 24 119.160.234.0/24 maxlen: 24 119.160.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2080 (0x820) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Sep 4 07:13:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4296e-ba88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:34:7b:52:82:5b:37:9d:8d:dd:43:81:36: 70:df:2e:1f:34:5d:e9:39:61:44:fa:08:f7:8c:83: ab:29:f4:a4:7b:ab:46:d7:bb:ec:29:c3:a3:05:e3: 76:b7:2b:cb:01:40:77:06:37:a9:7f:0b:f8:00:ec: 00:f1:0b:85:12:e6:4d:70:5f:17:99:b4:e3:c8:43: 65:4b:d3:33:d6:b9:4a:27:f6:1a:11:34:3d:eb:8c: e9:f5:51:26:2d:ff:9a:50:97:13:77:fe:7c:60:9c: 98:d3:57:10:8e:a2:58:c3:4c:3e:4a:3e:a4:55:9d: 13:be:f0:cf:43:13:c5:eb:94:89:24:95:19:6a:60: 55:76:5a:bc:6c:a3:d8:89:70:a5:f5:49:b2:46:6b: 0a:62:81:24:9a:4a:44:30:b6:c8:a4:8a:1a:51:0d: 47:e1:c3:52:73:f1:38:65:6e:03:08:b6:e5:28:3d: 65:2e:f9:b0:a0:a4:18:c3:5b:98:fb:a1:8c:85:d6: 03:64:a1:2b:aa:88:42:92:49:17:e7:7f:02:ce:58: 93:d5:ff:ef:4d:92:58:46:49:b0:19:0c:85:a1:59: 25:e9:e2:6f:ef:66:b2:6b:d5:28:47:28:32:1a:17: be:d4:8b:85:8a:5f:f9:22:68:f5:f2:6d:93:70:26: e9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:76:A4:50:B1:CB:D2:22:C7:F3:A9:ED:67:0D:BC:E8:DF:6B:1B:DE X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/AD27F510895E11F0AF42FE0EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.108.0-103.85.110.255 119.160.232.0/22 Signature Algorithm: sha256WithRSAEncryption a0:c4:4c:1c:70:bf:31:15:9f:04:3c:04:11:87:5c:54:ea:e2: 4f:b5:29:72:29:b3:bc:ac:bc:78:53:13:eb:e3:a0:bf:dc:9d: 06:b2:7a:fb:a1:af:c5:58:3e:ae:c0:93:e9:e4:f7:06:b3:a9: 88:85:60:e7:33:68:7f:af:85:31:18:6b:3b:95:3c:b9:f1:05: a0:47:89:1c:ef:40:9a:36:d3:2b:fb:a7:a0:0d:23:2d:60:9e: 1a:42:23:e2:6c:d1:b7:36:34:d2:4c:98:11:70:81:69:20:5e: 7b:e5:67:34:bd:69:4b:9a:f8:75:78:36:1e:cf:ef:5a:c9:26: c4:8f:02:98:4a:c3:d5:d7:1b:83:94:30:cb:37:e0:fe:b9:ea: 20:2a:5f:7f:91:b0:7b:6e:9a:53:ce:37:86:80:3a:f7:5e:ba: 23:40:6b:0a:53:01:71:e7:89:a4:0e:45:a4:d4:ce:30:01:cc: 11:f5:78:fd:98:c1:55:95:8a:8b:06:ca:ec:79:e1:e4:46:c3: a7:52:5d:78:cd:2b:6c:3a:d6:57:51:7b:cb:96:99:68:1e:50: cd:cf:f0:78:87:6a:e5:7c:2c:90:d2:fe:f3:03:c2:eb:1b:f1: 3c:3f:54:a7:08:c9:b0:2c:9b:18:c1:6d:e5:9c:7d:70:f2:50: df:50:aa:c0 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwOTA0MDcxMzM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjk2ZS1iYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4s0e1KCWzedjd1DgTZw3y4fNF3pOWFE+gj3jIOrKfSke6tG17vsKcOjBeN2 tyvLAUB3Bjepfwv4AOwA8QuFEuZNcF8XmbTjyENlS9Mz1rlKJ/YaETQ964zp9VEm Lf+aUJcTd/58YJyY01cQjqJYw0w+Sj6kVZ0TvvDPQxPF65SJJJUZamBVdlq8bKPY iXCl9UmyRmsKYoEkmkpEMLbIpIoaUQ1H4cNSc/E4ZW4DCLblKD1lLvmwoKQYw1uY +6GMhdYDZKErqohCkkkX538CzliT1f/vTZJYRkmwGQyFoVkl6eJv72aya9UoRygy Ghe+1IuFil/5Imj18m2TcCbpQQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFMN2pFCx y9Iix/Op7WcNvOjfaxveMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzczMUEvQzlGODNBRUUwRUMzMTFFQkFDOTc5MTE4QzRGOUFFMDIvQUQyN0Y1MTA4 OTVFMTFGMEFGNDJGRTBFQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAJnVWwDBABnVW4DBAJ3oOgwDQYJKoZIhvcNAQELBQADggEBAKDE TBxwvzEVnwQ8BBGHXFTq4k+1KXIps7ysvHhTE+vjoL/cnQayevuhr8VYPq7Ak+nk 9wazqYiFYOczaH+vhTEYazuVPLnxBaBHiRzvQJo20yv7p6ANIy1gnhpCI+Js0bc2 NNJMmBFwgWkgXnvlZzS9aUua+HV4Nh7P71rJJsSPAphKw9XXG4OUMMs34P656iAq X3+RsHtumlPON4aAOvdeuiNAawpTAXHniaQORaTUzjABzBH1eP2YwVWViosGyux5 4eRGw6dSXXjNK2w61ldRe8uWmWgeUM3P8HiHauV8LJDS/vMDwusb8Tw/VKcIybAs mxjBbeWcfXDyUN9QqsA= -----END CERTIFICATE-----Generated at Mon Mar 2 03:41:35 2026 by rpki-client