$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/484CDD48084B11EBA5FDD126C4F9AE02.roa File: 484CDD48084B11EBA5FDD126C4F9AE02.roa (raw, json) Hash identifier: ofQHrXKIXpON7nwkCVzz/fxJZ831mKwy1TbIVQC8ThE= Subject key identifier: 5F:78:83:B9:AF:A8:60:B3:70:46:4F:C3:0A:62:36:9D:4C:29:79:69 Certificate issuer: /CN=A91D09D4/serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Certificate serial: 0834 Authority key identifier: 49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/484CDD48084B11EBA5FDD126C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:38:44 +0000 ROA not before: Tue 06 May 2025 21:32:15 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55720 IP address blocks: 103.91.64.0/24 maxlen: 24 103.91.65.0/24 maxlen: 24 103.91.66.0/24 maxlen: 24 103.91.67.0/24 maxlen: 24 123.253.32.0/24 maxlen: 24 123.253.33.0/24 maxlen: 24 123.253.34.0/24 maxlen: 24 123.253.35.0/24 maxlen: 24 2401:340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2100 (0x834) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09D4, serialNumber=49ACD3ECD327F02356C5F8817018F3D9F209F41E Validity Not Before: May 6 21:32:15 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3fb14-024b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:21:88:0b:c8:b8:ef:9e:a4:8e:aa:8c:70: 54:e9:76:94:89:d7:f8:b8:72:38:cf:25:9f:fc:ee: 8b:4e:a0:da:cf:dd:1c:ce:19:fa:d2:91:7f:8b:29: eb:2a:b8:5f:0e:35:5c:c0:88:54:15:c3:0a:58:37: d4:1c:a3:4a:4d:47:af:16:55:4b:d9:31:82:ee:1e: ab:64:88:f7:e0:d0:ae:82:f1:25:25:d0:7c:68:c2: 31:2b:0d:8e:17:1c:47:6c:63:0c:46:86:e0:92:40: 45:42:e7:21:88:08:0c:51:e7:71:82:60:fb:1d:f3: 8d:c3:59:e8:4d:f3:c0:85:6a:d6:ef:8b:d3:0e:44: db:03:92:f2:c4:dc:87:ce:c9:3c:82:7c:c4:19:0e: 84:6e:5e:ef:8d:c5:ee:b2:d5:36:9c:7e:f9:38:6a: 7c:b4:c9:e0:8d:fb:b2:24:4a:63:0d:e5:fa:51:29: 7c:fe:62:10:86:0e:71:22:eb:8a:e0:69:59:a8:23: 91:16:5e:6f:9d:1a:bd:a7:7d:6b:8f:c1:48:f1:b0: 2f:2f:5f:7e:4d:c5:07:c0:de:4d:7f:52:64:2a:8d: f2:30:07:28:26:06:9f:45:93:dd:6a:4a:74:d1:d1: 6d:f3:eb:d4:b2:08:a7:9f:3b:84:d2:1d:f5:78:69: c3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:78:83:B9:AF:A8:60:B3:70:46:4F:C3:0A:62:36:9D:4C:29:79:69 X509v3 Authority Key Identifier: keyid:49:AC:D3:EC:D3:27:F0:23:56:C5:F8:81:70:18:F3:D9:F2:09:F4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/SazT7NMn8CNWxfiBcBjz2fIJ9B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SazT7NMn8CNWxfiBcBjz2fIJ9B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09D4/60289CEE084711EB94AF0C1CC4F9AE02/484CDD48084B11EBA5FDD126C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.64.0/22 123.253.32.0/22 IPv6: 2401:340::/32 Signature Algorithm: sha256WithRSAEncryption 3a:e8:8a:df:13:b9:ca:cd:ff:66:b1:1f:a5:16:2b:88:4d:4d: 93:06:27:20:cc:50:85:29:91:ed:d7:18:f6:5b:d3:42:39:64: 59:4f:2b:d4:4a:c7:b2:b8:ef:4c:79:fb:0d:6c:72:cb:a9:2a: 93:7e:57:c6:bf:f4:27:9d:60:c4:ca:22:95:de:01:89:69:0b: 24:72:df:a0:a4:15:e8:68:52:37:a1:08:3d:f7:d8:a6:de:7e: 85:93:68:97:15:6d:f9:d1:5f:03:e2:33:49:b6:2e:95:e4:91: b6:8d:9c:98:fc:96:bb:9e:e2:05:30:9c:08:65:9c:f7:a0:22: 33:5c:2f:5a:c8:0e:02:49:fa:13:7d:05:5b:3e:4b:34:a9:c3: c1:33:fd:88:f1:d3:ba:b4:c5:65:d8:4f:07:35:50:c6:af:3f: d9:e0:ac:fa:6a:1d:f3:c9:12:74:8a:38:5f:07:94:a9:3b:1e: 9f:4e:44:32:56:81:ae:d0:09:9b:ce:21:d4:1a:cb:67:40:81: 84:9c:3c:54:83:24:d8:57:49:42:8f:20:dd:ca:c8:cd:d6:f5: 4c:32:09:a7:3c:ff:b5:77:fb:ad:a5:4c:e7:12:08:8d:04:51: 1f:e6:d9:45:05:05:8b:c1:0a:fc:fb:74:78:25:24:3f:3b:70: df:be:6f:6e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5RDQxMTAvBgNVBAUTKDQ5QUNEM0VDRDMyN0YwMjM1NkM1Rjg4MTcwMThGM0Q5 RjIwOUY0MUUwHhcNMjUwNTA2MjEzMjE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmIxNC0wMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlochiAvIuO+epI6qjHBU6XaUidf4uHI4zyWf/O6LTqDaz90czhn60pF/iynr KrhfDjVcwIhUFcMKWDfUHKNKTUevFlVL2TGC7h6rZIj34NCugvElJdB8aMIxKw2O FxxHbGMMRobgkkBFQuchiAgMUedxgmD7HfONw1noTfPAhWrW74vTDkTbA5LyxNyH zsk8gnzEGQ6Ebl7vjcXustU2nH75OGp8tMngjfuyJEpjDeX6USl8/mIQhg5xIuuK 4GlZqCORFl5vnRq9p31rj8FI8bAvL19+TcUHwN5Nf1JkKo3yMAcoJgafRZPdakp0 0dFt8+vUsginnzuE0h31eGnDHwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFF94g7mv qGCzcEZPwwpiNp1MKXlpMB8GA1UdIwQYMBaAFEms0+zTJ/AjVsX4gXAY89nyCfQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlENC82MDI4OUNFRTA4 NDcxMUVCOTRBRjBDMUNDNEY5QUUwMi9TYXpUN05NbjhDTld4ZmlCY0JqejJmSUo5 QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NhelQ3Tk1uOENOV3hmaUJjQmp6MmZJSjlCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA5RDQvNjAyODlDRUUwODQ3MTFFQjk0QUYwQzFDQzRGOUFFMDIvNDg0Q0RENDgw ODRCMTFFQkE1RkREMTI2QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ1tAAwQCe/0gMA0EAgACMAcDBQAkAQNAMA0GCSqGSIb3DQEBCwUA A4IBAQA66IrfE7nKzf9msR+lFiuITU2TBicgzFCFKZHt1xj2W9NCOWRZTyvUSsey uO9MefsNbHLLqSqTflfGv/QnnWDEyiKV3gGJaQskct+gpBXoaFI3oQg999im3n6F k2iXFW350V8D4jNJti6V5JG2jZyY/Ja7nuIFMJwIZZz3oCIzXC9ayA4CSfoTfQVb Pks0qcPBM/2I8dO6tMVl2E8HNVDGrz/Z4Kz6ah3zyRJ0ijhfB5SpOx6fTkQyVoGu 0AmbziHUGstnQIGEnDxUgyTYV0lCjyDdysjN1vVMMgmnPP+1d/utpUznEgiNBFEf 5tlFBQWLwQr8+3R4JSQ/O3Dfvm9u -----END CERTIFICATE-----Generated at Mon Mar 2 07:25:15 2026 by rpki-client