$ rpki-client -vvf rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/1BFCE1E0554F11E8A5C82D57C4F9AE02.roa File: 1BFCE1E0554F11E8A5C82D57C4F9AE02.roa (raw, json) Hash identifier: Uw1PTuG+Y4DM/ehlZNwhTINh8c0K6j13Gv43hlbWGr4= Subject key identifier: 08:15:C2:B7:44:32:A3:14:E5:F8:3A:78:50:30:C2:76:5A:D6:8A:61 Certificate issuer: /CN=A91D599B/serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Certificate serial: 1575 Authority key identifier: FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/1BFCE1E0554F11E8A5C82D57C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:17:14 +0000 ROA not before: Wed 04 Jun 2025 17:17:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 2635 IP address blocks: 103.115.8.0/22 maxlen: 24 2402:dac0::/32 maxlen: 32 2402:dac0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5493 (0x1575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D599B, serialNumber=FCB23C7BF5F19356275BACF57CDB55BFD60E04AC Validity Not Before: Jun 4 17:17:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4041a-8779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:30:51:75:84:b8:5d:ed:5a:c8:78:f8:e9: 3b:33:78:da:7d:a0:fc:3f:d2:1d:49:85:d4:5b:94: 3a:33:4e:fd:c0:21:d3:6a:74:59:ba:51:1d:0d:30: 73:86:67:c2:06:29:45:73:84:60:40:33:e7:88:1d: a8:1a:ec:9c:4c:2b:ee:5f:a0:2c:ac:4f:62:65:34: 32:87:44:a3:f2:d4:73:a3:5e:7f:4b:a6:5a:86:6b: b5:a3:24:00:da:a3:ae:25:68:fa:69:cf:99:5b:83: f3:ad:91:b5:3d:08:f1:a6:7a:6a:a9:a8:df:08:00: e6:7b:a6:9a:4d:74:00:ce:15:61:8a:58:7a:46:78: aa:68:f7:4a:54:01:57:63:8c:81:30:0d:9c:41:fe: b9:34:a8:2c:6c:3a:14:76:2e:33:4d:f7:b3:02:f3: 88:61:ac:d9:ad:87:57:3f:ca:db:88:e6:12:10:84: 19:33:1b:aa:c0:45:f2:a6:85:17:f7:63:59:9c:92: 4a:59:45:c8:27:5d:1c:41:dc:ae:60:76:16:16:40: 78:1b:cc:68:2f:c5:d7:06:03:d2:88:aa:95:56:93: 6e:ad:73:27:a0:00:44:db:17:9a:35:ce:98:0a:57: 90:74:b8:34:05:cb:8e:56:fa:a0:73:fb:f3:d0:b9: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:C2:B7:44:32:A3:14:E5:F8:3A:78:50:30:C2:76:5A:D6:8A:61 X509v3 Authority Key Identifier: keyid:FC:B2:3C:7B:F5:F1:93:56:27:5B:AC:F5:7C:DB:55:BF:D6:0E:04:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_LI8e_Xxk1YnW6z1fNtVv9YOBKw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D599B/D7224FF254B211E88E69E909C4F9AE02/1BFCE1E0554F11E8A5C82D57C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.8.0/22 IPv6: 2402:dac0::/32 Signature Algorithm: sha256WithRSAEncryption 89:66:7b:99:70:0f:75:5d:d3:83:03:fa:60:d4:60:e5:5d:c3: 27:cd:9a:ea:49:a8:dd:7a:f3:43:d2:2e:59:23:bb:9e:c6:9e: 7b:9b:cd:dd:4b:55:47:7b:b5:c1:0e:32:a8:d5:a2:36:74:be: 40:49:73:67:58:17:d1:57:1a:11:d6:b5:89:f9:d9:61:49:60: 3c:9f:7b:44:63:c1:eb:98:23:79:92:9c:c9:7a:b7:85:39:bb: 0b:04:36:23:f8:33:88:8f:4b:e0:91:23:8e:ee:61:82:7a:a9: 2a:48:9e:3e:b9:43:49:0f:9a:48:9a:70:84:15:0c:3b:af:51: 72:98:1b:da:7d:96:70:8e:fe:07:72:99:9d:87:0d:df:46:c5: 35:06:b7:e3:fa:c9:a7:1f:3c:82:56:3d:a6:c8:07:4a:fa:81: 9a:0a:85:45:fd:5e:54:f1:09:e0:1b:74:82:9a:74:20:d1:ba: 1a:d7:a1:89:4f:11:dc:b9:1e:55:81:02:cb:10:d8:d0:03:31: ef:2a:ed:60:3b:38:c1:ab:c9:8c:5f:5c:36:92:2a:5b:3e:d6: d9:23:0b:dd:fd:26:53:e9:cd:3c:a4:ce:75:9d:7d:76:07:39: 8a:c3:8f:16:08:e6:f9:af:25:f5:53:e0:44:ac:b2:f3:18:01: b2:7d:be:14 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICFXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU5OUIxMTAvBgNVBAUTKEZDQjIzQzdCRjVGMTkzNTYyNzVCQUNGNTdDREI1NUJG RDYwRTA0QUMwHhcNMjUwNjA0MTcxNzQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDQxYS04Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDkwUXWEuF3tWsh4+Ok7M3jafaD8P9IdSYXUW5Q6M079wCHTanRZulEdDTBz hmfCBilFc4RgQDPniB2oGuycTCvuX6AsrE9iZTQyh0Sj8tRzo15/S6Zahmu1oyQA 2qOuJWj6ac+ZW4PzrZG1PQjxpnpqqajfCADme6aaTXQAzhVhilh6RniqaPdKVAFX Y4yBMA2cQf65NKgsbDoUdi4zTfezAvOIYazZrYdXP8rbiOYSEIQZMxuqwEXypoUX 92NZnJJKWUXIJ10cQdyuYHYWFkB4G8xoL8XXBgPSiKqVVpNurXMnoABE2xeaNc6Y CleQdLg0BcuOVvqgc/vz0Lki9wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAgVwrdE MqMU5fg6eFAwwnZa1ophMB8GA1UdIwQYMBaAFPyyPHv18ZNWJ1us9XzbVb/WDgSs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTk5Qi9ENzIyNEZGMjU0 QjIxMUU4OEU2OUU5MDlDNEY5QUUwMi9fTEk4ZV9YeGsxWW5XNnoxZk50VnY5WU9C S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19MSThlX1h4azFZblc2ejFmTnRWdjlZT0JLdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU5OUIvRDcyMjRGRjI1NEIyMTFFODhFNjlFOTA5QzRGOUFFMDIvMUJGQ0UxRTA1 NTRGMTFFOEE1QzgyRDU3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3MIMA0EAgACMAcDBQAkAtrAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ ZnuZcA91XdODA/pg1GDlXcMnzZrqSajdevND0i5ZI7uexp57m83dS1VHe7XBDjKo 1aI2dL5ASXNnWBfRVxoR1rWJ+dlhSWA8n3tEY8HrmCN5kpzJereFObsLBDYj+DOI j0vgkSOO7mGCeqkqSJ4+uUNJD5pImnCEFQw7r1FymBvafZZwjv4Hcpmdhw3fRsU1 Brfj+smnHzyCVj2myAdK+oGaCoVF/V5U8QngG3SCmnQg0boa16GJTxHcuR5VgQLL ENjQAzHvKu1gOzjBq8mMX1w2kipbPtbZIwvd/SZT6c08pM51nX12BzmKw48WCOb5 ryX1U+BErLLzGAGyfb4U -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:47 2026 by rpki-client