$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa File: 048E963C92B611F0841D2F21C4F9AE02.roa (raw, json) Hash identifier: xUXahxLq7JJmlD7tCvawVmfwiw0mftIpQLzoYQMbQ+w= Subject key identifier: AF:AC:6B:63:3F:AB:38:BE:C2:8B:72:B9:A2:6B:FE:A7:E2:0A:06:4B Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Certificate serial: 61 Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:23:57 +0000 ROA not before: Tue 16 Sep 2025 04:31:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152177 IP address blocks: 103.214.156.0/22 maxlen: 22 103.214.156.0/23 maxlen: 23 103.214.156.0/24 maxlen: 24 103.214.157.0/24 maxlen: 24 103.214.158.0/24 maxlen: 24 144.48.112.0/22 maxlen: 22 144.48.112.0/23 maxlen: 23 144.48.112.0/24 maxlen: 24 144.48.113.0/24 maxlen: 24 144.48.114.0/24 maxlen: 24 2407:ea40::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Validity Not Before: Sep 16 04:31:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4924d-583f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:b5:e4:a1:6b:dd:90:6e:5d:2a:d1:2d:89: 3d:cf:af:0f:39:7b:d7:80:bb:a5:8e:e7:6f:21:b5: 5a:5c:66:27:7d:bc:9f:49:4f:86:7b:7c:73:19:6a: e9:dc:57:3b:5f:5a:53:93:c5:d5:71:cf:a5:6a:88: 08:8f:02:d4:88:82:69:c3:d1:fd:89:cb:5c:bf:88: d8:58:4a:0f:d4:8a:61:f6:a6:74:57:e7:ec:ab:da: c3:3a:46:5f:95:53:c7:de:ab:59:70:8c:46:d1:af: 26:ba:60:25:cc:fb:d9:90:9a:49:fe:ba:d8:3a:b7: d6:18:a0:c9:92:f9:b5:5d:55:cf:c0:2e:c8:70:3a: dc:7e:78:d2:ee:78:98:1c:47:bd:53:24:1c:b3:bd: 8b:b3:1f:bf:64:3c:d8:52:5a:35:8b:49:4d:da:fa: 1b:69:a8:8e:89:f9:d9:7d:59:be:02:0e:ca:ee:f2: 1b:bb:95:ab:0e:ce:09:66:73:d1:6c:3c:19:41:31: cf:6d:36:bf:93:56:be:9f:65:00:18:9f:9f:46:c2: ce:8c:b9:aa:1f:b5:56:28:3d:21:96:94:c9:6e:e4: 1e:6d:f2:1a:fb:07:db:cd:79:d2:0b:9a:a9:af:5a: aa:de:84:dd:9c:02:96:68:5f:6a:ff:bb:b2:6a:71: ce:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AC:6B:63:3F:AB:38:BE:C2:8B:72:B9:A2:6B:FE:A7:E2:0A:06:4B X509v3 Authority Key Identifier: keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.156.0/22 144.48.112.0/22 IPv6: 2407:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 39:dd:9b:c3:87:65:32:d9:41:1d:6c:b1:d0:86:16:e4:7f:02: 88:18:ba:09:60:26:23:df:2e:5f:e8:92:85:98:79:cb:aa:1c: 8b:4f:6f:8d:d9:7d:f6:49:32:84:db:f7:ff:18:3b:9a:d5:7d: 2e:1e:98:eb:d9:07:3e:24:a8:2e:10:e8:d3:e6:2f:7e:69:a3: c6:03:eb:8b:f4:3c:f3:60:cd:8a:dc:da:5f:1f:48:33:aa:d0: 11:d8:e8:81:e4:89:c2:b3:c3:30:e5:5e:f8:c5:e7:8f:10:31: be:5f:4f:7b:82:dd:bf:19:37:e6:31:19:aa:07:7b:23:28:9a: 14:15:80:ae:17:a0:e2:07:e5:cc:e1:9c:0b:9f:8c:48:25:8d: b3:e4:51:99:46:fe:48:27:25:69:af:0e:bf:7c:f9:79:54:64: 08:93:5f:e3:6b:7e:9f:85:ba:a9:a0:d0:b1:2b:85:9f:02:18: 52:49:7b:37:73:fc:0d:52:a0:78:11:ae:07:88:c5:6d:ab:6a: 24:78:8c:d7:bd:e6:f8:df:e4:3e:1a:c6:64:e4:b2:6e:2a:f6: de:53:36:46:21:1b:3c:66:8b:f4:db:3a:45:89:d4:94:d2:28: 28:28:90:d1:c0:1c:3c:be:a0:1b:50:77:27:a5:88:6f:1b:4e: bc:2e:5e:54 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0I2ODExMC8GA1UEBRMoOUI1QTUzNjVEQTJCMjVGQTY5OEI3MDMwOTNDRkJEQzJB MkMyM0ZDRjAeFw0yNTA5MTYwNDMxMzFaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQ5MjRkLTU4M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyzLXkoWvdkG5dKtEtiT3Prw85e9eAu6WO528htVpcZid9vJ9JT4Z7fHMZaunc VztfWlOTxdVxz6VqiAiPAtSIgmnD0f2Jy1y/iNhYSg/UimH2pnRX5+yr2sM6Rl+V U8feq1lwjEbRrya6YCXM+9mQmkn+utg6t9YYoMmS+bVdVc/ALshwOtx+eNLueJgc R71TJByzvYuzH79kPNhSWjWLSU3a+htpqI6J+dl9Wb4CDsru8hu7lasOzglmc9Fs PBlBMc9tNr+TVr6fZQAYn59Gws6MuaoftVYoPSGWlMlu5B5t8hr7B9vNedILmqmv WqrehN2cApZoX2r/u7Jqcc65AgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUr6xrYz+r OL7Ci3K5omv+p+IKBkswHwYDVR0jBBgwFoAUm1pTZdorJfppi3Awk8+9wqLCP88w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QjY4LzUzQTdCOTJDQjBB NTExRUE4RjkyRUQxN0M0RjlBRTAyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbTFwVFpkb3JKZnBwaTNBd2s4LTl3cUxDUDg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi8wNDhFOTYzQzky QjYxMUYwODQxRDJGMjFDNEY5QUUwMi5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAJn1pwDBAKQMHAwDQQCAAIwBwMFACQH6kAwDQYJKoZIhvcNAQELBQAD ggEBADndm8OHZTLZQR1ssdCGFuR/AogYuglgJiPfLl/okoWYecuqHItPb43ZffZJ MoTb9/8YO5rVfS4emOvZBz4kqC4Q6NPmL35po8YD64v0PPNgzYrc2l8fSDOq0BHY 6IHkicKzwzDlXvjF548QMb5fT3uC3b8ZN+YxGaoHeyMomhQVgK4XoOIH5czhnAuf jEgljbPkUZlG/kgnJWmvDr98+XlUZAiTX+Nrfp+Fuqmg0LErhZ8CGFJJezdz/A1S oHgRrgeIxW2raiR4jNe95vjf5D4axmTksm4q9t5TNkYhGzxmi/TbOkWJ1JTSKCgo kNHAHDy+oBtQdyeliG8bTrwuXlQ= -----END CERTIFICATE-----Generated at Mon Mar 2 09:03:31 2026 by rpki-client