$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/611D8094B13D11E59299870AC4F9AE02.roa File: 611D8094B13D11E59299870AC4F9AE02.roa (raw, json) Hash identifier: 6f1TkFWNlMl/F/acGbghOLoUP+OqCJaMnvA5r+odhLo= Subject key identifier: C1:50:B5:E0:00:FD:9C:D5:10:45:AE:69:DA:95:86:DD:69:83:FC:6C Certificate issuer: /CN=A91D3102/serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Certificate serial: 2E6E Authority key identifier: F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/611D8094B13D11E59299870AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:38:08 +0000 ROA not before: Tue 04 Nov 2025 15:32:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 133075 IP address blocks: 103.72.208.0/23 maxlen: 23 103.242.68.0/22 maxlen: 22 220.158.212.0/22 maxlen: 22 220.158.212.0/24 maxlen: 24 220.158.213.0/24 maxlen: 24 220.158.214.0/24 maxlen: 24 220.158.215.0/24 maxlen: 24 2407:f100::/32 maxlen: 32 2407:f100:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11886 (0x2e6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3102, serialNumber=F91A3A98314384C403A8FF22A453BCA1A3BA6CD8 Validity Not Before: Nov 4 15:32:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44140-af1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:9f:45:46:8f:48:19:30:61:7e:22:7c:00: e1:b3:f6:70:90:ce:71:0e:27:4c:50:10:71:9d:18: 8b:ef:2d:e7:e9:3c:c7:88:f0:9f:15:03:ba:c6:8f: c5:e6:c5:43:b0:9b:dc:32:f2:0f:3c:cf:8a:b9:be: 77:f5:e1:53:6d:3c:b1:c8:38:3f:ab:ab:dc:b5:85: b3:7d:93:84:ef:c4:99:18:6b:d7:1b:cd:a6:76:80: 77:4e:f6:31:b5:9b:46:15:b9:6b:f2:33:41:61:ea: 1a:66:14:be:13:f8:73:36:8f:6a:cf:07:eb:5b:f8: da:7c:73:30:9e:96:37:e0:ec:4b:56:ae:09:15:2a: 36:44:6f:2f:ae:23:2f:55:37:49:ab:8b:3a:c1:3f: c8:0f:ac:55:44:62:74:9a:52:6d:84:da:e1:32:33: ce:41:df:7d:96:69:7d:fe:e8:20:97:0a:ef:ec:86: 3e:3c:96:ce:1c:47:c8:51:0b:1b:67:90:87:4a:71: a9:d7:c5:80:ba:f5:56:7b:f5:8f:1d:06:1e:09:e0: 5d:12:21:44:8b:39:69:0f:a1:32:36:71:a1:d2:de: 74:a4:7a:6b:ec:27:a9:9e:c7:c6:01:84:d9:ae:14: e2:95:2a:71:53:d7:26:b2:58:55:87:43:f4:1f:61: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:50:B5:E0:00:FD:9C:D5:10:45:AE:69:DA:95:86:DD:69:83:FC:6C X509v3 Authority Key Identifier: keyid:F9:1A:3A:98:31:43:84:C4:03:A8:FF:22:A4:53:BC:A1:A3:BA:6C:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Ro6mDFDhMQDqP8ipFO8oaO6bNg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3102/D4AEE2C8768E11E399A957455911EA32/611D8094B13D11E59299870AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.208.0/23 103.242.68.0/22 220.158.212.0/22 IPv6: 2407:f100::/32 Signature Algorithm: sha256WithRSAEncryption 25:3b:93:d1:c8:f3:bc:3b:a9:02:eb:62:0e:ac:dc:b2:05:e9: 15:31:7a:30:2f:96:7e:af:77:c3:b9:16:88:f8:f8:3f:13:2b: 5b:79:63:21:99:fd:3d:91:84:ef:3f:7f:09:6c:e8:fc:dd:68: 60:7d:cf:69:17:0b:11:01:c9:df:0b:16:a1:62:86:04:c8:ce: 1d:74:3d:8a:ba:f5:1b:19:1a:d6:72:77:ee:d3:36:7d:c5:37: 1e:ce:26:a8:e7:cf:3d:2f:c1:ee:ab:4e:af:b4:05:17:20:75: 58:98:d7:15:5a:84:a3:87:4d:da:84:50:2b:d7:83:7c:be:1a: 06:10:c4:e6:6c:28:dd:5b:cc:be:f3:76:25:7e:f4:38:70:ff: f5:22:66:f4:c6:2a:7c:88:ff:5c:e7:a7:0c:93:84:70:48:a4: 43:74:a4:e1:ad:4c:07:4b:e6:73:15:db:e9:41:9c:93:05:25: 3f:34:8b:d7:5b:05:22:25:70:69:70:c1:58:07:fc:ee:a0:13: 70:3d:4a:b8:ae:c2:93:ee:a6:53:4c:06:9f:7c:07:36:61:c7: dd:79:30:98:53:e1:07:5b:5c:d5:df:3d:33:fe:ab:78:17:f6: ce:98:76:f0:4c:5d:9b:5e:04:88:30:58:c8:09:f1:6b:d3:4b: 19:05:f4:d3 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICLm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMxMDIxMTAvBgNVBAUTKEY5MUEzQTk4MzE0Mzg0QzQwM0E4RkYyMkE0NTNCQ0Ex QTNCQTZDRDgwHhcNMjUxMTA0MTUzMjE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDE0MC1hZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEufRUaPSBkwYX4ifADhs/ZwkM5xDidMUBBxnRiL7y3n6TzHiPCfFQO6xo/F 5sVDsJvcMvIPPM+Kub539eFTbTyxyDg/q6vctYWzfZOE78SZGGvXG82mdoB3TvYx tZtGFblr8jNBYeoaZhS+E/hzNo9qzwfrW/jafHMwnpY34OxLVq4JFSo2RG8vriMv VTdJq4s6wT/ID6xVRGJ0mlJthNrhMjPOQd99lml9/ugglwrv7IY+PJbOHEfIUQsb Z5CHSnGp18WAuvVWe/WPHQYeCeBdEiFEizlpD6EyNnGh0t50pHpr7CepnsfGAYTZ rhTilSpxU9cmslhVh0P0H2HDPwIDAQABo4ICezCCAncwHQYDVR0OBBYEFMFQteAA /ZzVEEWuadqVht1pg/xsMB8GA1UdIwQYMBaAFPkaOpgxQ4TEA6j/IqRTvKGjumzY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEwMi9ENEFFRTJDODc2 OEUxMUUzOTlBOTU3NDU1OTExRUEzMi8tUm82bURGRGhNUURxUDhpcEZPOG9hTzZi TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1SbzZtREZEaE1RRHFQOGlwRk84b2FPNmJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMxMDIvRDRBRUUyQzg3NjhFMTFFMzk5QTk1NzQ1NTkxMUVBMzIvNjExRDgwOTRC MTNEMTFFNTkyOTk4NzBBQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQBZ0jQAwQCZ/JEAwQC3J7UMA0EAgACMAcDBQAkB/EAMA0GCSqGSIb3 DQEBCwUAA4IBAQAlO5PRyPO8O6kC62IOrNyyBekVMXowL5Z+r3fDuRaI+Pg/Eytb eWMhmf09kYTvP38JbOj83Whgfc9pFwsRAcnfCxahYoYEyM4ddD2KuvUbGRrWcnfu 0zZ9xTceziao5889L8Huq06vtAUXIHVYmNcVWoSjh03ahFAr14N8vhoGEMTmbCjd W8y+83YlfvQ4cP/1Imb0xip8iP9c56cMk4RwSKRDdKThrUwHS+ZzFdvpQZyTBSU/ NIvXWwUiJXBpcMFYB/zuoBNwPUq4rsKT7qZTTAaffAc2YcfdeTCYU+EHW1zV3z0z /qt4F/bOmHbwTF2bXgSIMFjICfFr00sZBfTT -----END CERTIFICATE-----Generated at Mon Mar 2 21:57:41 2026 by rpki-client