$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa File: CC2A0136F58C11EEB142585CC4F9AE02.roa (raw, json) Hash identifier: wr4ofP5mMFinaz8DTSDZad5Pdzym30OKg1hTJ/3F5Bo= Subject key identifier: 29:A5:03:EA:43:F4:70:49:43:B8:AA:87:06:6C:15:45:6A:11:C7:E0 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1511 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:45:21 +0000 ROA not before: Fri 09 May 2025 21:02:45 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 37988 IP address blocks: 103.108.228.0/24 maxlen: 24 2402:7340:1::/48 maxlen: 48 2402:7340:2::/48 maxlen: 48 2402:7340:3::/48 maxlen: 48 2402:7340:5::/48 maxlen: 48 2402:7340:4000::/34 maxlen: 34 2402:7340:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5393 (0x1511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: May 9 21:02:45 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a442f1-f2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:99:71:ad:68:3e:5a:72:2a:9d:2c:9f:d9: 95:7d:b1:55:0b:93:a8:e6:fe:a8:0b:d0:43:3c:ff: 0a:46:7f:c2:20:ee:86:14:19:86:d8:5e:a3:78:08: b5:5a:1e:fc:f5:05:47:dd:56:be:1f:3a:80:b5:03: 1f:6f:d4:81:e6:8b:59:06:d6:55:32:2c:61:41:a5: 80:4b:22:ba:a4:a0:d7:b7:a4:9f:f2:e0:21:3c:03: b0:0f:40:d8:4c:cc:02:e5:5c:b3:38:3c:b8:5b:bf: d8:28:29:5f:7e:2a:f4:20:51:56:76:91:2e:22:bb: b1:0f:ed:87:e1:0b:3b:2f:ac:2f:33:d2:88:c1:2c: 44:7a:ba:1c:7f:6b:0e:28:4b:45:85:74:18:40:b4: 6c:e4:a2:0b:76:a3:3b:c3:2b:52:37:8a:58:9a:07: e2:6a:20:90:8f:fb:59:13:7b:25:80:dd:01:1f:37: bd:b2:2b:a1:a8:b4:65:f3:74:b9:eb:f2:a5:34:92: f5:90:cd:b9:0f:8f:9f:0c:8c:ca:a6:0f:e0:b3:0d: 08:3b:f5:7a:1a:b8:5a:25:ca:7a:b8:36:46:31:92: 73:0b:94:d0:ca:89:72:f1:00:8c:b5:f4:fc:e3:22: 3b:a1:6b:a0:b5:0c:a2:e0:44:e2:3b:a5:04:9c:39: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A5:03:EA:43:F4:70:49:43:B8:AA:87:06:6C:15:45:6A:11:C7:E0 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/CC2A0136F58C11EEB142585CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.228.0/24 IPv6: 2402:7340:1::-2402:7340:3:ffff:ffff:ffff:ffff:ffff 2402:7340:5::/48 2402:7340:4000::-2402:7340:87ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a0:8f:58:3c:95:24:bb:e7:31:79:98:83:69:b8:f0:ee:5b:58: 9d:47:69:38:a7:04:d4:04:b8:d8:7b:fb:ef:e4:71:44:d3:ae: 5c:38:54:b3:f1:7b:13:fe:17:ab:3a:d7:bb:16:27:c1:7f:83: ae:22:3b:72:f7:ba:75:94:b1:3e:7d:31:ff:26:64:b8:89:ab: db:aa:ef:d8:5f:ea:4f:31:a0:15:72:46:f9:a5:4b:a1:1c:14: c3:ed:e2:e7:f7:f1:94:10:a2:2a:33:3c:91:dc:46:4d:3f:20: 80:a4:bb:64:87:fc:46:11:45:fb:d7:dc:19:d8:80:1e:68:36: 2d:15:a9:55:1b:46:9e:6e:f1:2c:12:48:06:c0:c8:03:e8:19: 04:5d:ef:72:0b:36:ed:88:4d:34:58:ac:f6:a4:7f:35:cb:cd: 79:84:06:89:8c:f6:31:6a:2f:54:68:60:6c:50:e0:72:bb:40: c1:5e:2e:ab:18:c8:9a:bb:b3:1a:1a:4c:14:0f:71:4e:21:10: aa:12:b6:c3:0d:12:4f:ee:a8:d5:72:36:f4:e6:5c:d9:5c:59: e1:36:79:0b:bf:f0:d3:61:9a:ca:6f:78:a2:43:ea:7b:c3:fc: 32:a7:76:e0:fe:dd:14:dd:7a:08:8f:f5:ff:11:e8:bc:09:52: d8:0c:54:e7 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgICFREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNTA5MjEwMjQ1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDJmMS1mMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eOZca1oPlpyKp0sn9mVfbFVC5Oo5v6oC9BDPP8KRn/CIO6GFBmG2F6jeAi1 Wh789QVH3Va+HzqAtQMfb9SB5otZBtZVMixhQaWASyK6pKDXt6Sf8uAhPAOwD0DY TMwC5VyzODy4W7/YKClffir0IFFWdpEuIruxD+2H4Qs7L6wvM9KIwSxEerocf2sO KEtFhXQYQLRs5KILdqM7wytSN4pYmgfiaiCQj/tZE3slgN0BHze9siuhqLRl83S5 6/KlNJL1kM25D4+fDIzKpg/gsw0IO/V6GrhaJcp6uDZGMZJzC5TQyoly8QCMtfT8 4yI7oWugtQyi4ETiO6UEnDm9PwIDAQABo4IClzCCApMwHQYDVR0OBBYEFCmlA+pD 9HBJQ7iqhwZsFUVqEcfgMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCMTUvRkFGNkZENzg3MUU2MTFFODk5NkUyRTY0QzRGOUFFMDIvQ0MyQTAxMzZG NThDMTFFRUIxNDI1ODVDQzRGOUFFMDIucm9hMFYGCCsGAQUFBwEHAQH/BEcwRTAM BAIAATAGAwQAZ2zkMDUEAgACMC8wEgMHACQCc0AAAQMHAiQCc0AAAAMHACQCc0AA BTAQAwYGJAJzQEADBgMkAnNAgDANBgkqhkiG9w0BAQsFAAOCAQEAoI9YPJUku+cx eZiDabjw7ltYnUdpOKcE1AS42Hv77+RxRNOuXDhUs/F7E/4XqzrXuxYnwX+DriI7 cve6dZSxPn0x/yZkuImr26rv2F/qTzGgFXJG+aVLoRwUw+3i5/fxlBCiKjM8kdxG TT8ggKS7ZIf8RhFF+9fcGdiAHmg2LRWpVRtGnm7xLBJIBsDIA+gZBF3vcgs27YhN NFis9qR/NcvNeYQGiYz2MWovVGhgbFDgcrtAwV4uqxjImruzGhpMFA9xTiEQqhK2 ww0ST+6o1XI29OZc2VxZ4TZ5C7/w02Gaym94okPqe8P8Mqd24P7dFN16CI/1/xHo vAlS2AxU5w== -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:18 2026 by rpki-client