$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0BC9660CE3AC11EAAAC85761C4F9AE02.roa File: 0BC9660CE3AC11EAAAC85761C4F9AE02.roa (raw, json) Hash identifier: 6N8L0/wOzazXZSPR1fOLRJTlX3kPwlL/sXD3aJXqTts= Subject key identifier: 9A:8C:BF:BB:13:5F:37:E3:56:F7:FD:E7:8A:42:B8:73:CA:EA:E1:C0 Certificate issuer: /CN=A91C9702/serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Certificate serial: 088F Authority key identifier: 9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0BC9660CE3AC11EAAAC85761C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:34:43 +0000 ROA not before: Wed 30 Apr 2025 21:00:07 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 200077 IP address blocks: 103.214.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2191 (0x88f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9702, serialNumber=9E6376A5F2AA3E2C7FF552AFB8AF50DAC13D49B7 Validity Not Before: Apr 30 21:00:07 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40832-a1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:98:a3:45:68:dd:dd:de:aa:53:67:69:5b: d3:0b:cb:14:11:ee:41:9e:99:25:2d:04:3b:99:b7: 62:6a:3b:2e:ec:6f:44:00:7b:a1:b5:02:e2:2f:7e: 92:8b:df:76:8d:07:cb:94:54:d7:c0:98:fd:b4:1b: b9:29:33:a2:6c:66:a5:ab:b7:06:53:8e:c3:e4:14: e8:0c:eb:3d:1f:9b:2c:81:4c:b3:f8:4e:65:42:4e: cc:70:a9:96:01:69:56:59:fe:35:0c:92:4e:ba:8f: e6:1a:33:52:94:af:15:c0:08:a2:08:02:d2:d1:1e: 7f:9a:b0:9a:18:5e:9b:1a:32:9d:11:f7:86:71:0d: 06:16:af:9e:5e:bc:10:d0:10:8e:97:98:98:1a:b0: 86:5f:54:c4:70:ee:57:80:db:f5:0d:0a:21:82:03: 0b:2f:6f:63:6f:ba:e1:84:39:3b:f0:8d:e3:35:b6: 2c:27:32:3b:ec:db:31:aa:54:11:4b:73:78:ae:16: d1:e0:79:7d:84:4e:fb:86:fa:9f:c1:9e:05:59:7b: b9:6d:ea:76:38:60:cb:df:ea:b5:fa:eb:21:7f:83: 4c:58:72:e4:95:2d:fc:2e:77:db:7e:9d:b3:b3:af: 6d:b6:21:45:9a:9f:f6:b1:43:ad:4a:78:bd:bb:de: ce:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8C:BF:BB:13:5F:37:E3:56:F7:FD:E7:8A:42:B8:73:CA:EA:E1:C0 X509v3 Authority Key Identifier: keyid:9E:63:76:A5:F2:AA:3E:2C:7F:F5:52:AF:B8:AF:50:DA:C1:3D:49:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmN2pfKqPix_9VKvuK9Q2sE9Sbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9702/EF913D26E3AA11EA88F49560C4F9AE02/0BC9660CE3AC11EAAAC85761C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.228.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:ac:a5:59:29:b9:5b:f6:5a:c9:69:c4:de:c3:8a:36:71:33: d9:af:45:26:df:81:38:09:fa:92:93:52:b3:e6:48:2d:4d:df: dc:60:e9:6b:4e:1c:6d:de:bb:87:54:83:7d:32:8d:02:0d:a0: be:2c:b0:f8:10:dd:fa:37:54:bc:9b:10:42:85:08:c0:e6:b0: a8:58:63:26:0f:b1:65:a7:d7:25:b5:01:f6:8e:e3:ce:68:4e: 94:9b:40:fd:60:13:e1:c1:76:05:72:c3:79:b5:78:bd:5d:14: 07:05:3f:06:68:82:ac:ec:a2:0e:44:43:b7:69:8a:bb:d2:6b: af:ed:16:a2:cb:fb:bc:4c:07:96:24:64:04:95:73:2d:0f:3d: b9:aa:ab:cf:7f:34:21:5f:0e:47:73:e2:3a:4e:36:4f:51:f4: d1:59:81:b2:1a:8a:66:a1:65:e9:bf:9d:da:1d:1a:5c:bb:0d: ec:9d:2a:f2:d8:03:8e:6f:bb:5f:1a:14:b2:3b:92:07:85:b0: 3e:ef:a6:a9:de:77:a1:b5:b5:98:08:b1:f1:4f:c8:98:91:32: e1:02:97:51:cd:9b:62:7d:bb:05:ff:ab:37:e5:48:a8:23:ab: 08:97:6b:c6:8b:7a:8c:e7:82:f3:0f:f7:7f:63:12:c2:b3:1f: 6a:54:83:7c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3MDIxMTAvBgNVBAUTKDlFNjM3NkE1RjJBQTNFMkM3RkY1NTJBRkI4QUY1MERB QzEzRDQ5QjcwHhcNMjUwNDMwMjEwMDA3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDgzMi1hMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRyYo0Vo3d3eqlNnaVvTC8sUEe5BnpklLQQ7mbdiajsu7G9EAHuhtQLiL36S i992jQfLlFTXwJj9tBu5KTOibGalq7cGU47D5BToDOs9H5ssgUyz+E5lQk7McKmW AWlWWf41DJJOuo/mGjNSlK8VwAiiCALS0R5/mrCaGF6bGjKdEfeGcQ0GFq+eXrwQ 0BCOl5iYGrCGX1TEcO5XgNv1DQohggMLL29jb7rhhDk78I3jNbYsJzI77NsxqlQR S3N4rhbR4Hl9hE77hvqfwZ4FWXu5bep2OGDL3+q1+ushf4NMWHLklS38Lnfbfp2z s69ttiFFmp/2sUOtSni9u97OrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJqMv7sT XzfjVvf954pCuHPK6uHAMB8GA1UdIwQYMBaAFJ5jdqXyqj4sf/VSr7ivUNrBPUm3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTcwMi9FRjkxM0QyNkUz QUExMUVBODhGNDk1NjBDNEY5QUUwMi9ubU4ycGZLcVBpeF85Vkt2dUs5UTJzRTlT YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tTjJwZktxUGl4XzlWS3Z1SzlRMnNFOVNiYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk3MDIvRUY5MTNEMjZFM0FBMTFFQTg4RjQ5NTYwQzRGOUFFMDIvMEJDOTY2MENF M0FDMTFFQUFBQzg1NzYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9bkMA0GCSqGSIb3DQEBCwUAA4IBAQCNrKVZKblb9lrJacTew4o2 cTPZr0Um34E4CfqSk1Kz5kgtTd/cYOlrThxt3ruHVIN9Mo0CDaC+LLD4EN36N1S8 mxBChQjA5rCoWGMmD7Flp9cltQH2juPOaE6Um0D9YBPhwXYFcsN5tXi9XRQHBT8G aIKs7KIOREO3aYq70muv7Raiy/u8TAeWJGQElXMtDz25qqvPfzQhXw5Hc+I6TjZP UfTRWYGyGopmoWXpv53aHRpcuw3snSry2AOOb7tfGhSyO5IHhbA+76ap3nehtbWY CLHxT8iYkTLhApdRzZtifbsF/6s35UioI6sIl2vGi3qM54LzD/d/YxLCsx9qVIN8 -----END CERTIFICATE-----Generated at Mon Mar 2 04:42:28 2026 by rpki-client