$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa File: CF072592709211EAB1D2FA0FC4F9AE02.roa (raw, json) Hash identifier: iy/632gSbhOsZ78+/P/pa7o6CGpz7A5AB2Wpi8xkrZo= Subject key identifier: 9C:02:24:91:28:9B:91:3C:C1:B3:79:89:FE:70:29:C8:B0:AF:C1:79 Certificate issuer: /CN=A91DCBAD/serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Certificate serial: 0AC7 Authority key identifier: 53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:46:59 +0000 ROA not before: Wed 04 Jun 2025 20:05:13 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135406 IP address blocks: 103.7.188.0/23 maxlen: 24 103.81.219.0/24 maxlen: 24 103.107.16.0/24 maxlen: 24 103.120.49.0/24 maxlen: 24 103.217.106.0/24 maxlen: 24 203.55.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCBAD, serialNumber=53268A2736A5FF554B940703F374FC3579228C30 Validity Not Before: Jun 4 20:05:13 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a45163-1af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:51:ca:1b:e5:a9:1d:48:31:75:66:0b:af:53: 14:5c:dc:1f:ff:4d:de:1e:47:08:bb:c8:b2:c6:6f: 73:f4:51:19:79:bd:de:1c:b0:26:df:25:ee:46:39: 6c:18:c0:59:16:6a:96:1a:52:94:9b:6d:27:34:c0: 62:11:db:40:df:c2:b3:36:81:08:91:f4:ef:dd:e0: f0:d4:de:76:fa:dd:87:83:e9:a1:88:f9:6c:32:fb: ae:01:db:6f:5e:42:93:65:2c:9e:ca:db:08:6f:ff: 74:e0:a6:75:5c:6a:bb:b7:26:e5:1e:a8:a3:44:7f: 19:8d:7b:b1:e1:f6:c2:17:34:ce:94:bd:01:a8:ce: 2d:36:f2:b7:d1:ae:75:37:43:47:68:d7:66:ea:f3: 02:ef:7f:e1:a3:d3:ea:f2:1a:f5:9b:7d:ac:d7:88: db:ae:79:89:45:6b:15:f0:b6:91:10:5d:f5:bc:c8: e5:8d:ed:0e:84:19:1c:0f:e4:eb:75:20:6c:ef:f7: 82:03:df:3f:a8:76:0d:59:82:6b:5c:33:28:7f:83: 51:e7:47:cc:15:59:71:bc:01:68:b1:05:5a:93:9a: 46:d9:69:f8:a8:b4:5d:e4:22:44:11:17:13:64:b1: 41:d8:1e:bf:63:e0:40:44:b9:e2:df:ef:f3:1c:7d: 5b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:02:24:91:28:9B:91:3C:C1:B3:79:89:FE:70:29:C8:B0:AF:C1:79 X509v3 Authority Key Identifier: keyid:53:26:8A:27:36:A5:FF:55:4B:94:07:03:F3:74:FC:35:79:22:8C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/UyaKJzal_1VLlAcD83T8NXkijDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyaKJzal_1VLlAcD83T8NXkijDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCBAD/3659E7AE709111EA8A9B4E0DC4F9AE02/CF072592709211EAB1D2FA0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.7.188.0/23 103.81.219.0/24 103.107.16.0/24 103.120.49.0/24 103.217.106.0/24 203.55.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:14:09:5f:6d:62:c4:c7:d2:c6:b8:65:bb:bd:54:bc:44:a1: 85:9a:18:44:39:55:d0:66:f6:8c:3c:63:ed:c9:5d:05:ab:02: 6e:5c:54:a0:9b:5f:9f:90:16:98:a6:1f:e2:8e:78:5b:b0:ed: 13:fb:2b:63:44:92:07:d9:d9:7d:b1:e8:cd:f0:ab:1b:41:f9: c8:1d:98:e0:2f:71:2a:3c:3e:c7:6f:a0:9a:46:43:b3:69:ba: cd:4a:6a:62:58:c4:54:ca:eb:7a:8e:0d:ed:8b:66:63:e9:c2: 14:9f:a3:63:a8:ff:41:e3:02:7b:c1:b6:2a:af:0d:02:90:66: 1c:75:4c:14:6e:14:f0:b4:3f:73:d3:a4:37:96:79:49:c9:2a: 26:f5:b4:ad:6b:08:8b:13:f9:6e:87:a0:df:4a:7e:2e:d1:53: 0d:0a:b0:63:08:e0:7f:92:e2:44:eb:05:34:6d:7a:b2:aa:6a: ea:1b:7e:ff:7d:5b:80:3b:50:fd:cd:48:15:af:80:2f:23:09: d6:80:49:9a:03:20:13:2b:ea:c5:e2:3d:09:a2:0f:37:e8:25: c8:5f:23:16:e0:c8:60:c8:ac:81:56:7e:b8:2a:76:b5:1a:08: f8:4b:2d:ee:23:04:f8:c9:2a:e5:32:59:9d:7b:b3:94:56:67: fa:32:ca:da -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENCQUQxMTAvBgNVBAUTKDUzMjY4QTI3MzZBNUZGNTU0Qjk0MDcwM0YzNzRGQzM1 NzkyMjhDMzAwHhcNMjUwNjA0MjAwNTEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTE2My0xYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVHKG+WpHUgxdWYLr1MUXNwf/03eHkcIu8iyxm9z9FEZeb3eHLAm3yXuRjls GMBZFmqWGlKUm20nNMBiEdtA38KzNoEIkfTv3eDw1N52+t2Hg+mhiPlsMvuuAdtv XkKTZSyeytsIb/904KZ1XGq7tyblHqijRH8ZjXux4fbCFzTOlL0BqM4tNvK30a51 N0NHaNdm6vMC73/ho9Pq8hr1m32s14jbrnmJRWsV8LaREF31vMjlje0OhBkcD+Tr dSBs7/eCA98/qHYNWYJrXDMof4NR50fMFVlxvAFosQVak5pG2Wn4qLRd5CJEERcT ZLFB2B6/Y+BARLni3+/zHH1buwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJwCJJEo m5E8wbN5if5wKciwr8F5MB8GA1UdIwQYMBaAFFMmiic2pf9VS5QHA/N0/DV5Ioww MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0JBRC8zNjU5RTdBRTcw OTExMUVBOEE5QjRFMERDNEY5QUUwMi9VeWFLSnphbF8xVkxsQWNEODNUOE5Ya2lq REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V5YUtKemFsXzFWTGxBY0Q4M1Q4TlhraWpEQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENCQUQvMzY1OUU3QUU3MDkxMTFFQThBOUI0RTBEQzRGOUFFMDIvQ0YwNzI1OTI3 MDkyMTFFQUIxRDJGQTBGQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQBZwe8AwQAZ1HbAwQAZ2sQAwQAZ3gxAwQAZ9lqAwQAyzfUMA0GCSqG SIb3DQEBCwUAA4IBAQBLFAlfbWLEx9LGuGW7vVS8RKGFmhhEOVXQZvaMPGPtyV0F qwJuXFSgm1+fkBaYph/ijnhbsO0T+ytjRJIH2dl9sejN8KsbQfnIHZjgL3EqPD7H b6CaRkOzabrNSmpiWMRUyut6jg3ti2Zj6cIUn6NjqP9B4wJ7wbYqrw0CkGYcdUwU bhTwtD9z06Q3lnlJySom9bStawiLE/luh6DfSn4u0VMNCrBjCOB/kuJE6wU0bXqy qmrqG37/fVuAO1D9zUgVr4AvIwnWgEmaAyATK+rF4j0Jog836CXIXyMW4MhgyKyB Vn64Kna1Ggj4Sy3uIwT4ySrlMlmde7OUVmf6Msra -----END CERTIFICATE-----Generated at Mon Mar 2 04:10:04 2026 by rpki-client