$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa File: 95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa (raw, json) Hash identifier: Ouit03LRtJZqOFfBSglxXn5xGezeH2cCBVrluC7GA64= Subject key identifier: 23:98:AF:61:7A:6A:4F:9C:6B:0C:8A:51:4E:22:A9:B2:FC:40:59:30 Certificate issuer: /CN=A91D9D8B/serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Certificate serial: 0260 Authority key identifier: A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:05:40 +0000 ROA not before: Wed 19 Nov 2025 00:48:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 63890 IP address blocks: 103.43.52.0/22 maxlen: 22 103.43.52.0/24 maxlen: 24 103.43.53.0/24 maxlen: 24 103.43.54.0/24 maxlen: 24 103.43.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9D8B, serialNumber=A1938C912AC2F4A958B93DAF8F4B272015B0D8D8 Validity Not Before: Nov 19 00:48:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a40f74-837f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:00:e3:6a:7a:8d:92:5f:17:0c:58:08:b6: f4:5a:bb:01:f4:b4:54:3d:1a:52:74:6d:de:24:18: af:64:73:6d:ce:4a:0d:5d:77:d3:10:36:d4:33:97: ac:b1:6d:49:76:5a:f3:98:0e:49:4b:30:41:58:21: be:ad:f0:47:d3:5d:54:98:ba:c0:5d:df:39:57:31: 35:47:27:a6:99:8d:c9:97:67:90:73:1e:fa:88:c3: bc:3f:05:d0:a4:48:e4:0a:ad:4d:8a:79:cd:67:cd: 44:a9:08:be:9f:f5:70:ff:3c:06:04:63:0f:2d:c4: 06:16:38:9c:1c:72:06:52:d6:ec:20:99:fe:7d:6b: ec:eb:70:b6:9e:4f:58:f9:e4:50:f8:6a:a8:ec:09: 8b:2d:9f:7d:54:15:5e:71:0a:1f:e6:06:4e:fa:51: 8b:ad:09:1f:b5:d3:8c:5b:b3:77:10:8e:08:d3:dd: de:13:ea:dd:e3:b5:04:ae:c6:5e:5e:55:ee:6a:a5: df:b3:11:ca:a4:68:41:a2:de:84:b5:a2:fe:9d:ef: fc:91:97:6e:fa:2f:68:00:23:5c:ad:1a:e6:a1:3c: 12:7e:40:12:36:a4:6f:39:59:01:38:a0:bc:6b:54: 29:72:84:c1:42:9a:a4:27:48:68:d9:c8:35:7a:09: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:98:AF:61:7A:6A:4F:9C:6B:0C:8A:51:4E:22:A9:B2:FC:40:59:30 X509v3 Authority Key Identifier: keyid:A1:93:8C:91:2A:C2:F4:A9:58:B9:3D:AF:8F:4B:27:20:15:B0:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/oZOMkSrC9KlYuT2vj0snIBWw2Ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oZOMkSrC9KlYuT2vj0snIBWw2Ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9D8B/5F11E02A7F7511ED8AFBE673C4F9AE02/95C4C7AA7F7911ED9C1EAE19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.43.52.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:06:65:0d:65:7a:db:19:c4:b8:b6:93:be:92:3a:1a:4d:5b: 93:b2:28:48:a6:d2:67:c6:f3:d9:f5:e8:50:2e:73:1e:1a:76: 44:82:32:a9:b5:74:9b:0e:9d:20:61:e3:0a:4b:a1:82:d5:59: 9e:e2:6d:9e:19:f1:df:e4:e9:0b:72:47:bd:94:db:06:ef:66: d5:ea:8a:88:5f:4e:94:b1:20:a8:b6:86:25:c0:f5:b1:06:67: f1:33:59:b3:d2:d3:8c:6b:3b:6d:de:4a:13:0e:69:b3:aa:06: 71:13:39:fd:65:9a:99:07:5d:9e:36:38:47:dd:c5:1e:06:95: 33:de:3f:6c:0c:b3:45:b2:3d:e3:8b:86:8d:c0:c4:27:6a:83: 41:ca:9a:0a:dd:51:de:18:6d:f7:8d:3e:6d:05:bb:9e:f5:f9: 7e:7e:a1:73:2b:e7:21:6c:9d:b7:c6:b8:8b:ec:59:f9:9a:aa: 78:c7:68:34:b8:14:2c:45:5b:4b:d4:4f:8a:a8:34:21:95:68: aa:ea:77:be:22:35:78:50:9b:5e:8f:2f:e8:25:87:6b:20:01: 59:47:aa:7f:c4:ed:80:8e:e9:2d:80:dc:36:86:2e:27:be:28: 7a:e9:fb:21:ad:ba:21:61:8b:fa:1d:fd:49:9a:c8:75:fc:2b: e4:f1:c2:93 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlEOEIxMTAvBgNVBAUTKEExOTM4QzkxMkFDMkY0QTk1OEI5M0RBRjhGNEIyNzIw MTVCMEQ4RDgwHhcNMjUxMTE5MDA0ODA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGY3NC04MzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBMA42p6jZJfFwxYCLb0WrsB9LRUPRpSdG3eJBivZHNtzkoNXXfTEDbUM5es sW1JdlrzmA5JSzBBWCG+rfBH011UmLrAXd85VzE1RyemmY3Jl2eQcx76iMO8PwXQ pEjkCq1NinnNZ81EqQi+n/Vw/zwGBGMPLcQGFjicHHIGUtbsIJn+fWvs63C2nk9Y +eRQ+Gqo7AmLLZ99VBVecQof5gZO+lGLrQkftdOMW7N3EI4I093eE+rd47UErsZe XlXuaqXfsxHKpGhBot6EtaL+ne/8kZdu+i9oACNcrRrmoTwSfkASNqRvOVkBOKC8 a1QpcoTBQpqkJ0ho2cg1egnzlQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCOYr2F6 ak+cawyKUU4iqbL8QFkwMB8GA1UdIwQYMBaAFKGTjJEqwvSpWLk9r49LJyAVsNjY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUQ4Qi81RjExRTAyQTdG NzUxMUVEOEFGQkU2NzNDNEY5QUUwMi9vWk9Na1NyQzlLbFl1VDJ2ajBzbklCV3cy TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29aT01rU3JDOUtsWXVUMnZqMHNuSUJXdzJOZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlEOEIvNUYxMUUwMkE3Rjc1MTFFRDhBRkJFNjczQzRGOUFFMDIvOTVDNEM3QUE3 Rjc5MTFFRDlDMUVBRTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZys0MA0GCSqGSIb3DQEBCwUAA4IBAQCKBmUNZXrbGcS4tpO+kjoa TVuTsihIptJnxvPZ9ehQLnMeGnZEgjKptXSbDp0gYeMKS6GC1Vme4m2eGfHf5OkL cke9lNsG72bV6oqIX06UsSCotoYlwPWxBmfxM1mz0tOMaztt3koTDmmzqgZxEzn9 ZZqZB12eNjhH3cUeBpUz3j9sDLNFsj3ji4aNwMQnaoNBypoK3VHeGG33jT5tBbue 9fl+fqFzK+chbJ23xriL7Fn5mqp4x2g0uBQsRVtL1E+KqDQhlWiq6ne+IjV4UJte jy/oJYdrIAFZR6p/xO2AjuktgNw2hi4nvih66fshrbohYYv6Hf1Jmsh1/Cvk8cKT -----END CERTIFICATE-----Generated at Mon Mar 2 07:26:15 2026 by rpki-client