$ rpki-client -vvf rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa File: 020D49E0283211ED9E29FA70C4F9AE02.roa (raw, json) Hash identifier: bnjR0+NKXKAmWxRc9D3E4vCO8glI5TIRHVBCY29e/KE= Subject key identifier: E6:E8:5B:D9:82:D7:12:F5:9C:3E:F0:04:10:E6:58:78:A0:E9:DC:EC Certificate issuer: /CN=A91C97F5/serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Certificate serial: 02D1 Authority key identifier: 36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:04:36 +0000 ROA not before: Tue 09 Dec 2025 00:08:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45481 IP address blocks: 103.242.32.0/22 maxlen: 22 113.52.0.0/20 maxlen: 20 113.52.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C97F5, serialNumber=368733FDC560C5EB89E45240DF7D4039CB2F6108 Validity Not Before: Dec 9 00:08:02 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45584-0dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:3f:0f:58:f9:58:01:46:f4:da:ba:35:94: 98:0a:c1:c9:0d:20:06:0c:42:fe:08:d7:39:05:aa: 84:0a:7a:20:61:3e:09:2a:4c:51:83:7e:40:83:41: c1:8f:67:f6:3f:fd:26:49:8c:58:27:0f:87:0d:d6: 61:75:21:3e:a6:f0:85:40:9c:c0:5d:1c:a5:c1:c0: ac:9b:8c:55:1b:cc:2a:2a:f2:60:2f:70:2f:f2:dc: 38:de:1b:fb:74:8d:55:ec:bc:77:55:a4:34:5f:48: 05:11:57:3c:ea:7a:7f:42:a0:4c:f8:87:b1:b5:97: a6:2d:08:76:bd:bc:15:f8:b9:32:fa:b5:a1:6f:b7: 54:68:55:22:fc:ea:25:bf:b1:42:dc:be:b7:28:5b: 4a:ed:e1:8d:fb:25:de:2b:de:8a:a8:9f:5d:e1:8b: 59:2c:6f:26:77:3e:c7:59:84:ec:d5:4c:32:74:70: 70:52:a1:39:0b:45:b3:e0:7d:8f:de:2e:00:f2:d2: 04:2c:27:50:c0:a3:f0:86:30:7c:c2:d6:e2:33:0e: 5a:19:f7:83:d3:ef:c4:e1:90:a2:9e:42:5d:c1:45: a0:6b:78:69:d8:8f:85:44:9a:48:7c:42:b0:15:91: d5:e2:dd:24:05:3f:9b:b4:f3:c3:17:14:1f:67:ed: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E8:5B:D9:82:D7:12:F5:9C:3E:F0:04:10:E6:58:78:A0:E9:DC:EC X509v3 Authority Key Identifier: keyid:36:87:33:FD:C5:60:C5:EB:89:E4:52:40:DF:7D:40:39:CB:2F:61:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/Nocz_cVgxeuJ5FJA331AOcsvYQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nocz_cVgxeuJ5FJA331AOcsvYQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C97F5/9170C42A274411ED8C139B51C4F9AE02/020D49E0283211ED9E29FA70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.242.32.0/22 113.52.0.0/20 Signature Algorithm: sha256WithRSAEncryption 35:59:15:ed:49:ff:c9:4e:d5:26:48:9f:a2:0d:de:5b:0f:36: 1c:dd:84:9d:94:28:01:ca:6f:50:27:db:83:35:30:d1:6d:9b: 72:83:cd:8d:72:99:82:7e:f0:61:12:b4:18:c9:c9:aa:7e:2b: 4c:61:18:a7:f1:8f:4a:76:f6:4e:b3:d6:cd:16:a6:20:97:c0: 9b:28:9b:fb:6e:07:9a:49:a0:69:8d:01:a7:13:9e:f8:3e:9f: d2:a7:9a:c6:bd:36:af:86:1c:b5:ea:26:33:5b:be:76:4e:f9: 24:1d:6a:d2:e0:28:27:03:d9:1a:a7:fe:d7:41:01:0c:30:53: 8e:fa:00:71:3d:a0:01:a1:47:b6:00:0a:75:af:e1:df:79:01: 59:50:e9:b1:ce:9f:1c:f2:52:59:c3:26:3b:c0:d6:df:b3:32: 36:46:c6:89:08:7e:4b:71:51:29:ce:3f:5e:cb:d8:eb:cb:85: 9d:b8:46:92:3a:f8:01:a0:4f:ab:c6:dc:07:14:c5:87:3e:f8: 7e:d6:75:9a:b0:49:21:cd:51:55:26:62:43:9b:42:9e:05:58: 7a:b4:e1:07:0b:76:0d:15:cf:fc:66:4a:73:35:8f:6f:db:c7: 00:8d:e2:4a:e9:6e:8c:37:6f:7d:e5:aa:a2:31:cc:5f:1b:ea: 13:01:7b:b5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk3RjUxMTAvBgNVBAUTKDM2ODczM0ZEQzU2MEM1RUI4OUU0NTI0MERGN0Q0MDM5 Q0IyRjYxMDgwHhcNMjUxMjA5MDAwODAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTU4NC0wZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLs/D1j5WAFG9Nq6NZSYCsHJDSAGDEL+CNc5BaqECnogYT4JKkxRg35Ag0HB j2f2P/0mSYxYJw+HDdZhdSE+pvCFQJzAXRylwcCsm4xVG8wqKvJgL3Av8tw43hv7 dI1V7Lx3VaQ0X0gFEVc86np/QqBM+IextZemLQh2vbwV+Lky+rWhb7dUaFUi/Ool v7FC3L63KFtK7eGN+yXeK96KqJ9d4YtZLG8mdz7HWYTs1UwydHBwUqE5C0Wz4H2P 3i4A8tIELCdQwKPwhjB8wtbiMw5aGfeD0+/E4ZCinkJdwUWga3hp2I+FRJpIfEKw FZHV4t0kBT+btPPDFxQfZ+2j2QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOboW9mC 1xL1nD7wBBDmWHig6dzsMB8GA1UdIwQYMBaAFDaHM/3FYMXrieRSQN99QDnLL2EI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTdGNS85MTcwQzQyQTI3 NDQxMUVEOEMxMzlCNTFDNEY5QUUwMi9Ob2N6X2NWZ3hldUo1RkpBMzMxQU9jc3ZZ UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05vY3pfY1ZneGV1SjVGSkEzMzFBT2NzdllRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk3RjUvOTE3MEM0MkEyNzQ0MTFFRDhDMTM5QjUxQzRGOUFFMDIvMDIwRDQ5RTAy ODMyMTFFRDlFMjlGQTcwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ/IgAwQEcTQAMA0GCSqGSIb3DQEBCwUAA4IBAQA1WRXtSf/JTtUm SJ+iDd5bDzYc3YSdlCgBym9QJ9uDNTDRbZtyg82NcpmCfvBhErQYycmqfitMYRin 8Y9KdvZOs9bNFqYgl8CbKJv7bgeaSaBpjQGnE574Pp/Sp5rGvTavhhy16iYzW752 TvkkHWrS4CgnA9kap/7XQQEMMFOO+gBxPaABoUe2AAp1r+HfeQFZUOmxzp8c8lJZ wyY7wNbfszI2RsaJCH5LcVEpzj9ey9jry4WduEaSOvgBoE+rxtwHFMWHPvh+1nWa sEkhzVFVJmJDm0KeBVh6tOEHC3YNFc/8ZkpzNY9v28cAjeJK6W6MN2995aqiMcxf G+oTAXu1 -----END CERTIFICATE-----Generated at Mon Mar 2 08:52:41 2026 by rpki-client