$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa File: CC2A0136F58C11EEB142585CC4F9AE02.roa (raw, json) Hash identifier: 9thasJHdgQQ3RXCs+BHPjiNfWZD4NYRuTQ+ayukgtLg= Subject key identifier: 21:82:B1:B0:F6:47:A8:7F:C1:6D:4A:A5:C6:56:C5:02:25:71:CB:0F Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 152D Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa Signing time: Tue 14 Apr 2026 17:21:00 +0000 ROA not before: Tue 14 Apr 2026 17:20:59 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 37988 IP address blocks: 103.108.228.0/24 maxlen: 24 2402:7340:1::/48 maxlen: 48 2402:7340:2::/48 maxlen: 48 2402:7340:3::/48 maxlen: 48 2402:7340:5::/48 maxlen: 48 2402:7340:4000::/34 maxlen: 34 2402:7340:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5421 (0x152d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Apr 14 17:20:59 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69de777b-fc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:65:7d:8a:5a:74:50:a7:2c:19:72:8a:00: d9:a5:60:63:f6:2b:f1:28:32:00:9d:e9:39:fe:ea: 12:07:4c:c8:3e:53:97:00:4c:c9:11:c2:26:db:5a: e2:db:15:04:3f:48:53:d9:81:39:8d:df:7b:1f:4d: 06:d0:94:d6:87:e2:0b:82:63:c4:6c:4d:93:07:90: f1:78:45:ab:a7:12:3e:12:35:27:bf:86:dc:8e:b3: 81:b1:2a:ed:26:fc:e8:ae:bb:92:b4:50:1f:a7:b0: 86:d9:d7:70:4d:fc:16:42:15:b8:2d:56:67:35:45: 8e:3e:e8:13:68:94:f2:9b:97:23:18:81:13:cf:88: 10:ec:2c:4f:c4:ab:ee:b9:72:0d:5a:cc:de:f1:2e: 81:54:71:59:0a:45:7e:89:27:9f:cb:33:c0:c2:f6: fd:94:55:07:35:b9:75:f8:6e:37:14:95:c7:68:ed: af:76:05:65:61:fa:e9:dc:90:67:d0:2e:c6:1e:7e: aa:39:32:af:2b:69:44:48:ca:66:3c:22:85:2a:f1: 55:f2:47:f8:ab:03:80:1f:3d:4c:34:1b:3e:d5:83: 49:66:a8:87:82:d6:2a:95:33:c2:ea:d3:c4:bd:79: 82:a0:21:99:6c:3a:97:f6:d4:64:3e:99:2a:7c:e9: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:82:B1:B0:F6:47:A8:7F:C1:6D:4A:A5:C6:56:C5:02:25:71:CB:0F X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.228.0/24 IPv6: 2402:7340:1::-2402:7340:3:ffff:ffff:ffff:ffff:ffff 2402:7340:5::/48 2402:7340:4000::-2402:7340:87ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a8:d4:64:4f:f5:ce:91:ea:68:89:59:5d:cf:07:8f:ac:90:fe: 8a:40:08:72:f2:c1:cd:66:03:11:ab:dc:82:6d:81:ef:0b:c0: 51:7a:c6:b4:8d:a6:75:3c:05:7c:46:63:e0:21:28:fe:90:f0: 81:1d:ea:be:ff:32:90:46:3c:01:45:8c:c8:49:2c:bc:b6:13: d3:25:1e:60:9e:08:09:81:62:f0:74:12:a4:ae:dd:e0:b7:d1: 8b:78:20:de:00:57:d8:a2:a0:cc:23:95:e7:e9:a7:3d:13:68: ae:8b:fe:3f:42:5d:83:0a:af:5a:0d:79:fd:75:a4:75:df:b4: cf:eb:a7:f5:d6:fa:a7:11:8b:a2:ea:5d:7b:6f:65:c3:15:8c: 8f:9b:16:7b:56:8c:fe:4c:36:47:33:af:13:91:de:68:e9:1c: 79:cb:90:81:91:12:9f:0c:28:f1:fe:02:6e:02:0d:84:69:d5: 05:32:f0:c3:f7:d9:f8:f4:ff:73:c0:84:3c:26:04:4a:f3:5b: 3b:07:1b:10:00:b0:dc:f2:75:9a:f5:87:88:5e:e5:f1:75:e0: 15:3f:a1:8a:40:c3:49:a7:ae:ba:42:ff:40:71:6f:a6:81:ab: 41:ed:44:47:90:db:02:bc:38:2c:35:36:40:4f:39:27:41:22: d3:a4:81:de -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICFS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjYwNDE0MTcyMDU5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWRlNzc3Yi1mYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfxlfYpadFCnLBlyigDZpWBj9ivxKDIAnek5/uoSB0zIPlOXAEzJEcIm21ri 2xUEP0hT2YE5jd97H00G0JTWh+ILgmPEbE2TB5DxeEWrpxI+EjUnv4bcjrOBsSrt JvzorruStFAfp7CG2ddwTfwWQhW4LVZnNUWOPugTaJTym5cjGIETz4gQ7CxPxKvu uXINWsze8S6BVHFZCkV+iSefyzPAwvb9lFUHNbl1+G43FJXHaO2vdgVlYfrp3JBn 0C7GHn6qOTKvK2lESMpmPCKFKvFV8kf4qwOAHz1MNBs+1YNJZqiHgtYqlTPC6tPE vXmCoCGZbDqX9tRkPpkqfOnD7QIDAQABo4IClzCCApMwHQYDVR0OBBYEFCGCsbD2 R6h/wW1KpcZWxQIlccsPMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCMTUvRkFGNkZENzg3MUU2MTFFODk5NkUyRTY0QzRGOUFFMDIvQ0MyQTAxMzZG NThDMTFFRUIxNDI1ODVDQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAM BAIAATAGAwQAZ2zkMDUEAgACMC8wEgMHACQCc0AAAQMHAiQCc0AAAAMHACQCc0AA BTAQAwYGJAJzQEADBgMkAnNAgDANBgkqhkiG9w0BAQsFAAOCAQEAqNRkT/XOkepo iVldzwePrJD+ikAIcvLBzWYDEavcgm2B7wvAUXrGtI2mdTwFfEZj4CEo/pDwgR3q vv8ykEY8AUWMyEksvLYT0yUeYJ4ICYFi8HQSpK7d4LfRi3gg3gBX2KKgzCOV5+mn PRNorov+P0JdgwqvWg15/XWkdd+0z+un9db6pxGLoupde29lwxWMj5sWe1aM/kw2 RzOvE5HeaOkcecuQgZESnwwo8f4CbgINhGnVBTLww/fZ+PT/c8CEPCYESvNbOwcb EACw3PJ1mvWHiF7l8XXgFT+hikDDSaeuukL/QHFvpoGrQe1ER5DbArw4LDU2QE85 J0Ei06SB3g== -----END CERTIFICATE-----Generated at Fri Apr 17 17:34:38 2026 by rpki-client