$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/DF3136A2CFF011EAB2F1D086C4F9AE02.roa File: DF3136A2CFF011EAB2F1D086C4F9AE02.roa (raw, json) Hash identifier: bCHE5nI4rqzx/kCg0rTMONZHHcxfxtmtXkLR2EjPLb0= Subject key identifier: 60:00:6B:13:12:75:19:74:BF:D7:30:E8:4E:4F:4E:75:B2:EE:18:BD Certificate issuer: /CN=A91DA022/serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Certificate serial: 08C9 Authority key identifier: 53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/DF3136A2CFF011EAB2F1D086C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:54:23 +0000 ROA not before: Mon 18 Aug 2025 21:01:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140954 IP address blocks: 103.153.185.0/24 maxlen: 24 103.157.253.0/24 maxlen: 24 2001:df4:5980::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA022, serialNumber=5334A942E33690B281261BBAE397135DBEA41397 Validity Not Before: Aug 18 21:01:36 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a428ee-b65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:74:2f:34:fe:3b:c4:fc:73:bc:01:4b:a7:f4: 25:de:12:e8:5c:0c:26:a3:84:cf:5f:4b:90:fc:f2: c1:ba:22:c1:04:e1:eb:11:33:cc:cc:af:b2:80:41: 6b:29:39:13:50:4c:b9:63:8f:24:84:79:c7:2a:90: 74:f0:e1:35:ee:28:c1:ac:ea:10:da:4f:99:3a:67: 7a:3d:88:88:da:bc:b1:42:2f:89:07:b3:37:c2:b4: 1c:4c:d7:73:1c:6b:d5:a5:0d:fe:52:86:5a:51:9e: bd:a1:04:f7:5c:9c:19:bb:2a:b6:20:71:ec:e9:8a: 41:36:b3:29:09:6c:77:81:ed:47:f8:37:f7:ab:31: f0:2e:db:13:f6:69:19:a4:a7:c5:09:63:e0:4f:0e: 90:0e:0c:01:66:78:64:33:c1:dd:93:76:d1:99:ac: 82:0a:9b:b3:b4:b2:20:34:75:a0:df:e2:9f:9d:c8: a7:d4:ce:88:71:bf:3d:0a:e4:94:0f:1f:0d:5d:b2: 53:cd:22:d1:e2:c6:b0:5c:80:7d:d9:30:08:4b:db: 2a:f1:00:2b:ea:2d:2b:d9:b9:6c:f5:c0:ed:d1:75: 98:f5:a3:ee:5d:89:2e:95:f0:87:3d:59:fe:37:88: 06:7e:55:85:53:71:4b:5b:ba:f5:0f:1c:2c:f6:8c: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:00:6B:13:12:75:19:74:BF:D7:30:E8:4E:4F:4E:75:B2:EE:18:BD X509v3 Authority Key Identifier: keyid:53:34:A9:42:E3:36:90:B2:81:26:1B:BA:E3:97:13:5D:BE:A4:13:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/UzSpQuM2kLKBJhu645cTXb6kE5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzSpQuM2kLKBJhu645cTXb6kE5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA022/9D8D9458CFEF11EAB2CB8885C4F9AE02/DF3136A2CFF011EAB2F1D086C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.185.0/24 103.157.253.0/24 IPv6: 2001:df4:5980::/48 Signature Algorithm: sha256WithRSAEncryption b7:af:c1:b2:3a:de:6f:e8:f8:86:3a:ff:d6:bc:5f:a0:4b:2f: 59:1b:cf:ea:c7:2d:a1:e2:49:cf:e0:ef:18:32:07:ac:5c:b5: 19:eb:a2:ee:04:27:cd:fc:47:63:77:f6:7d:0d:25:b5:8d:8c: 32:18:05:30:59:ce:c8:ab:1c:b1:32:89:c5:a6:b5:28:c2:49: 25:54:3d:6a:2f:05:46:28:9b:f0:c4:0b:35:f5:d8:b5:20:d5: f8:2a:11:70:fe:18:51:35:7b:5f:43:ca:0b:65:14:19:aa:61: dc:fe:a7:a6:e4:22:42:1c:ad:cb:cf:1f:a1:ef:06:53:39:90: 6e:7c:aa:e5:7f:62:1b:a4:b0:86:d2:84:7b:0b:04:4f:65:a4: 0a:8a:61:f7:32:96:0c:dc:37:d8:5d:e1:1b:28:00:d5:08:8a: 7d:6f:e5:19:07:6b:ac:9d:72:81:46:d3:a9:95:a8:7a:d0:32: 62:ad:e5:bd:b2:e8:3a:c5:6f:67:93:55:cd:82:2a:db:fd:7b: b3:35:a3:f2:7f:a6:bd:e0:fe:7d:cd:10:6f:c5:f3:9b:10:9c: 12:ca:ca:1c:41:bc:97:51:6f:79:4b:d9:e9:f4:a5:a9:d7:28: 8d:87:48:29:82:72:51:96:98:e3:76:4f:c8:c5:dc:f2:8c:7c: 9a:0b:ca:c4 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwMjIxMTAvBgNVBAUTKDUzMzRBOTQyRTMzNjkwQjI4MTI2MUJCQUUzOTcxMzVE QkVBNDEzOTcwHhcNMjUwODE4MjEwMTM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjhlZS1iNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj3QvNP47xPxzvAFLp/Ql3hLoXAwmo4TPX0uQ/PLBuiLBBOHrETPMzK+ygEFr KTkTUEy5Y48khHnHKpB08OE17ijBrOoQ2k+ZOmd6PYiI2ryxQi+JB7M3wrQcTNdz HGvVpQ3+UoZaUZ69oQT3XJwZuyq2IHHs6YpBNrMpCWx3ge1H+Df3qzHwLtsT9mkZ pKfFCWPgTw6QDgwBZnhkM8Hdk3bRmayCCpuztLIgNHWg3+Kfncin1M6Icb89CuSU Dx8NXbJTzSLR4sawXIB92TAIS9sq8QAr6i0r2bls9cDt0XWY9aPuXYkulfCHPVn+ N4gGflWFU3FLW7r1Dxws9own1QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGAAaxMS dRl0v9cw6E5PTnWy7hi9MB8GA1UdIwQYMBaAFFM0qULjNpCygSYbuuOXE12+pBOX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTAyMi85RDhEOTQ1OENG RUYxMUVBQjJDQjg4ODVDNEY5QUUwMi9VelNwUXVNMmtMS0JKaHU2NDVjVFhiNmtF NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6U3BRdU0ya0xLQkpodTY0NWNUWGI2a0U1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEwMjIvOUQ4RDk0NThDRkVGMTFFQUIyQ0I4ODg1QzRGOUFFMDIvREYzMTM2QTJD RkYwMTFFQUIyRjFEMDg2QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ5m5AwQAZ539MA8EAgACMAkDBwAgAQ30WYAwDQYJKoZIhvcNAQEL BQADggEBALevwbI63m/o+IY6/9a8X6BLL1kbz+rHLaHiSc/g7xgyB6xctRnrou4E J838R2N39n0NJbWNjDIYBTBZzsirHLEyicWmtSjCSSVUPWovBUYom/DECzX12LUg 1fgqEXD+GFE1e19DygtlFBmqYdz+p6bkIkIcrcvPH6HvBlM5kG58quV/YhuksIbS hHsLBE9lpAqKYfcylgzcN9hd4RsoANUIin1v5RkHa6ydcoFG06mVqHrQMmKt5b2y 6DrFb2eTVc2CKtv9e7M1o/J/pr3g/n3NEG/F85sQnBLKyhxBvJdRb3lL2en0panX KI2HSCmCclGWmON2T8jF3PKMfJoLysQ= -----END CERTIFICATE-----Generated at Mon Mar 2 03:35:32 2026 by rpki-client