$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa File: 68C5CFBE076911EF8569F157C4F9AE02.roa (raw, json) Hash identifier: BCGlhRLPOFUBZ5h3/NBuifkyt/vUvXmkmcPgcapZGk0= Subject key identifier: 86:1D:44:C4:5A:27:B1:D2:C3:A6:F7:9A:A2:9C:46:79:FB:14:AD:71 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 08B1 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:34:12 +0000 ROA not before: Mon 26 May 2025 21:19:18 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 997 IP address blocks: 103.213.244.0/22 maxlen: 24 144.48.4.0/22 maxlen: 24 2401:1640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: May 26 21:19:18 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46a84-8c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:24:f6:81:73:8c:12:ad:96:29:b9:c0:ed: 30:c8:6e:95:f0:25:8c:f9:ec:23:42:2f:96:fb:a3: 4c:a6:6f:b3:1c:16:dc:9a:cc:5d:ef:f0:c2:1c:fa: bd:6a:5f:56:55:c6:02:f7:3f:e7:d5:16:94:1b:b6: 4a:c8:03:d8:e2:e2:ea:ee:f0:54:8d:74:f7:85:a7: a2:68:cf:6f:b0:d4:48:4d:24:77:c9:e4:2c:0e:94: 2c:d2:ac:8f:7a:c1:3f:4f:0c:24:36:67:ea:76:4b: 80:83:64:fb:8e:40:2b:fd:01:64:7c:6b:77:25:e1: 3d:6a:b4:db:82:82:a0:04:4d:36:e9:d8:8b:0c:dc: 5b:f2:1f:00:b6:4a:2c:c0:19:5f:1a:3b:ad:a3:14: a1:2f:9c:f6:a8:87:e1:45:49:03:30:e6:de:ca:46: 4a:1a:19:68:ff:60:e2:0d:ea:93:ea:c3:4a:15:d3: 4a:1b:74:f7:50:0d:aa:9d:c6:c5:fa:0e:49:94:a2: c3:45:eb:cb:59:80:0b:74:80:5b:fa:7a:0e:a6:cd: 7f:cb:d2:8c:ed:4b:bc:1d:34:26:8b:89:b9:dd:0f: 8c:46:cb:90:81:95:59:c7:88:29:ab:4d:39:d7:2e: 1e:df:cf:8b:38:e4:74:2b:b6:32:1e:79:6b:1f:01: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:44:C4:5A:27:B1:D2:C3:A6:F7:9A:A2:9C:46:79:FB:14:AD:71 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/68C5CFBE076911EF8569F157C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.213.244.0/22 144.48.4.0/22 IPv6: 2401:1640::/32 Signature Algorithm: sha256WithRSAEncryption 14:a6:21:10:7d:ec:3a:79:ac:7c:39:9e:c6:b2:3c:17:40:58: 08:af:2c:42:b9:ea:a3:9e:f4:0b:36:d9:9a:a1:81:7a:73:3c: 0b:44:07:49:d0:a1:ba:da:05:f6:1b:41:85:76:3e:93:64:56: d7:75:e1:fe:a6:2a:d9:09:bd:93:70:79:e5:e9:5b:47:74:f5: 1c:dc:d6:62:f0:09:45:57:0f:6d:62:e9:2a:50:ff:11:fc:6e: d2:dc:37:fa:6b:78:30:f2:90:c1:c9:55:69:84:cd:90:b8:5b: 04:68:2a:b9:f8:28:5e:33:6d:7d:66:13:b8:a5:63:40:20:d3: 00:0c:6f:d5:0d:61:9d:ba:39:c4:42:5a:35:43:de:61:30:8d: 7a:16:78:74:9b:bc:dd:cb:da:25:28:89:a6:58:4e:11:fc:29: 75:7c:26:5d:da:f1:ba:90:db:5a:3a:c9:db:b8:d3:31:c0:ad: b5:19:15:98:db:ad:68:40:a1:a9:92:5e:e8:39:2a:14:db:df: 61:1c:7f:e3:b2:71:b1:a1:42:40:b4:28:d5:0a:32:a0:93:e3: ec:aa:2c:2a:db:17:42:c4:14:35:68:54:f2:ef:6a:e5:ab:12: cd:4f:ff:26:d3:f3:79:a4:f7:47:2a:77:c9:83:be:81:33:2a: 23:95:58:89 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjUwNTI2MjExOTE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmE4NC04YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn4ck9oFzjBKtlim5wO0wyG6V8CWM+ewjQi+W+6NMpm+zHBbcmsxd7/DCHPq9 al9WVcYC9z/n1RaUG7ZKyAPY4uLq7vBUjXT3haeiaM9vsNRITSR3yeQsDpQs0qyP esE/TwwkNmfqdkuAg2T7jkAr/QFkfGt3JeE9arTbgoKgBE026diLDNxb8h8Atkos wBlfGjutoxShL5z2qIfhRUkDMObeykZKGhlo/2DiDeqT6sNKFdNKG3T3UA2qncbF +g5JlKLDRevLWYALdIBb+noOps1/y9KM7Uu8HTQmi4m53Q+MRsuQgZVZx4gpq005 1y4e38+LOOR0K7YyHnlrHwEMFQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFIYdRMRa J7HSw6b3mqKcRnn7FK1xMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REExMEEvRTM0MDIwNENGMTg3MTFFQUI5NzM0QjFDQzRGOUFFMDIvNjhDNUNGQkUw NzY5MTFFRjg1NjlGMTU3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ9X0AwQCkDAEMA0EAgACMAcDBQAkARZAMA0GCSqGSIb3DQEBCwUA A4IBAQAUpiEQfew6eax8OZ7GsjwXQFgIryxCueqjnvQLNtmaoYF6czwLRAdJ0KG6 2gX2G0GFdj6TZFbXdeH+pirZCb2TcHnl6VtHdPUc3NZi8AlFVw9tYukqUP8R/G7S 3Df6a3gw8pDByVVphM2QuFsEaCq5+CheM219ZhO4pWNAINMADG/VDWGdujnEQlo1 Q95hMI16Fnh0m7zdy9olKImmWE4R/Cl1fCZd2vG6kNtaOsnbuNMxwK21GRWY261o QKGpkl7oOSoU299hHH/jsnGxoUJAtCjVCjKgk+Psqiwq2xdCxBQ1aFTy72rlqxLN T/8m0/N5pPdHKnfJg76BMyojlViJ -----END CERTIFICATE-----Generated at Mon Mar 2 06:34:09 2026 by rpki-client