$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa File: 47772F946C2011EAA5965B3CC4F9AE02.roa (raw, json) Hash identifier: gthIzMyilnDr9O/SMY6/sn4SwcV0DCBMCWSIc0OaLZc= Subject key identifier: 7F:02:3D:A2:55:E2:14:E0:E6:F9:A7:BC:8F:52:DC:A1:04:52:BB:41 Certificate issuer: /CN=A91D76BE/serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Certificate serial: 0AD4 Authority key identifier: DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:46:30 +0000 ROA not before: Wed 04 Feb 2026 19:16:27 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133932 IP address blocks: 103.44.223.0/24 maxlen: 24 103.76.3.0/24 maxlen: 24 103.76.28.0/23 maxlen: 24 116.206.84.0/22 maxlen: 22 116.206.84.0/24 maxlen: 24 116.206.85.0/24 maxlen: 24 116.206.86.0/24 maxlen: 24 116.206.87.0/24 maxlen: 24 2402:1040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D76BE, serialNumber=DD118BBB349F2C9B40DD9BB71A5B61C64BDB3E11 Validity Not Before: Feb 4 19:16:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a45146-414c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:eb:cf:7c:39:25:2e:eb:10:45:f9:e7:10: d4:e8:10:e3:e8:73:3a:9c:2b:0a:d2:06:13:4b:bf: 74:3c:bf:8a:a9:69:49:5f:24:76:fb:f2:dd:7c:b7: c5:e6:75:0b:a6:15:55:13:da:e5:08:a7:f1:60:d6: db:e2:45:b7:71:4e:62:cb:82:a5:35:bc:cf:8a:d8: 31:51:01:42:61:4d:a0:7c:ae:ab:e2:c8:e4:e6:bd: 48:42:d8:0b:7e:8c:dc:5d:b6:14:4b:fe:ed:5b:e6: 79:61:3a:7e:37:5a:95:55:0b:80:78:0a:69:25:5a: 57:be:0b:c6:bc:6c:61:82:31:b6:09:e5:2f:b7:6d: cc:0b:b8:5c:34:f4:18:d9:67:e5:c8:db:5c:5d:1a: a1:40:ab:e8:f6:32:9b:fb:aa:bc:d2:35:cf:de:eb: cb:09:b5:ce:3e:8f:9e:8e:55:c8:b3:0d:2f:24:62: cf:2c:a4:ea:5d:75:91:64:42:60:a0:74:6a:d6:37: 69:78:4b:cf:79:1c:04:05:f4:3c:cf:82:ef:5e:80: 3f:4e:45:73:bb:8a:2a:11:01:c7:c0:ad:1e:50:03: c6:38:53:89:c6:54:ea:8e:c8:06:bc:67:b8:99:56: 82:3b:41:07:05:7e:5e:f2:4f:53:b9:e1:16:8e:c3: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:02:3D:A2:55:E2:14:E0:E6:F9:A7:BC:8F:52:DC:A1:04:52:BB:41 X509v3 Authority Key Identifier: keyid:DD:11:8B:BB:34:9F:2C:9B:40:DD:9B:B7:1A:5B:61:C6:4B:DB:3E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/3RGLuzSfLJtA3Zu3GlthxkvbPhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3RGLuzSfLJtA3Zu3GlthxkvbPhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76BE/44C29E0E6B7711EA86594476C4F9AE02/47772F946C2011EAA5965B3CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.44.223.0/24 103.76.3.0/24 103.76.28.0/23 116.206.84.0/22 IPv6: 2402:1040::/32 Signature Algorithm: sha256WithRSAEncryption b8:da:20:45:ab:f3:60:c0:08:af:1d:4c:32:71:71:e0:2a:11: af:5d:74:94:f9:30:28:55:54:21:f6:6d:cf:3f:46:ef:f4:4e: 74:6e:09:e4:12:fe:ef:fc:ba:8d:28:2d:0e:ce:1f:39:79:cd: a1:97:85:b3:2d:54:0c:3e:61:f1:82:22:ba:0d:e4:59:24:28: 15:4e:63:f7:7c:19:7b:82:20:d0:57:55:48:2d:b9:4a:c3:6c: f0:0b:bc:83:46:63:bd:7a:5b:26:bc:1c:2c:37:d0:16:08:75: 45:e8:7b:f0:67:fd:ea:26:ad:60:7d:44:ec:0a:7e:24:db:59: dd:8f:29:5e:4e:2d:13:5f:fc:22:66:a0:37:75:5b:eb:a7:9a: b5:b9:38:70:54:5b:cc:5d:14:af:be:af:8a:cc:cf:c6:fe:60: f8:d1:f3:1b:8c:b6:23:e7:6a:af:f2:47:03:94:ec:5c:15:0a: e1:cb:36:98:89:ea:37:1b:fe:6f:35:a4:26:9a:cd:dc:07:23: 53:cc:1f:23:db:bf:11:c5:bf:b3:94:0b:b0:ef:e2:6b:b5:df: 86:3a:c0:db:36:fe:f0:c0:97:17:cb:be:cd:3c:1c:df:2d:0f: 01:4a:45:3d:7b:32:d5:41:d2:43:58:80:57:28:4e:86:7a:13: bc:d0:d8:7f -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc2QkUxMTAvBgNVBAUTKEREMTE4QkJCMzQ5RjJDOUI0MEREOUJCNzFBNUI2MUM2 NEJEQjNFMTEwHhcNMjYwMjA0MTkxNjI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTE0Ni00MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfDrz3w5JS7rEEX55xDU6BDj6HM6nCsK0gYTS790PL+KqWlJXyR2+/LdfLfF 5nULphVVE9rlCKfxYNbb4kW3cU5iy4KlNbzPitgxUQFCYU2gfK6r4sjk5r1IQtgL fozcXbYUS/7tW+Z5YTp+N1qVVQuAeAppJVpXvgvGvGxhgjG2CeUvt23MC7hcNPQY 2WflyNtcXRqhQKvo9jKb+6q80jXP3uvLCbXOPo+ejlXIsw0vJGLPLKTqXXWRZEJg oHRq1jdpeEvPeRwEBfQ8z4LvXoA/TkVzu4oqEQHHwK0eUAPGOFOJxlTqjsgGvGe4 mVaCO0EHBX5e8k9TueEWjsNHiQIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFH8CPaJV 4hTg5vmnvI9S3KEEUrtBMB8GA1UdIwQYMBaAFN0Ri7s0nyybQN2btxpbYcZL2z4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzZCRS80NEMyOUUwRTZC NzcxMUVBODY1OTQ0NzZDNEY5QUUwMi8zUkdMdXpTZkxKdEEzWnUzR2x0aHhrdmJQ aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNSR0x1elNmTEp0QTNadTNHbHRoeGt2YlBoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc2QkUvNDRDMjlFMEU2Qjc3MTFFQTg2NTk0NDc2QzRGOUFFMDIvNDc3NzJGOTQ2 QzIwMTFFQUE1OTY1QjNDQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQAZyzfAwQAZ0wDAwQBZ0wcAwQCdM5UMA0EAgACMAcDBQAkAhBAMA0G CSqGSIb3DQEBCwUAA4IBAQC42iBFq/NgwAivHUwycXHgKhGvXXSU+TAoVVQh9m3P P0bv9E50bgnkEv7v/LqNKC0Ozh85ec2hl4WzLVQMPmHxgiK6DeRZJCgVTmP3fBl7 giDQV1VILblKw2zwC7yDRmO9elsmvBwsN9AWCHVF6HvwZ/3qJq1gfUTsCn4k21nd jyleTi0TX/wiZqA3dVvrp5q1uThwVFvMXRSvvq+KzM/G/mD40fMbjLYj52qv8kcD lOxcFQrhyzaYieo3G/5vNaQmms3cByNTzB8j278Rxb+zlAuw7+Jrtd+GOsDbNv7w wJcXy77NPBzfLQ8BSkU9ezLVQdJDWIBXKE6GehO80Nh/ -----END CERTIFICATE-----Generated at Mon Mar 2 21:57:30 2026 by rpki-client