$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa File: F547BE4253EA11F08B05D02EC4F9AE02.roa (raw, json) Hash identifier: umj7JneQB0kl/ZQXdk4AXsjR8t2ySSAFoDKMYZURBhM= Subject key identifier: B3:CE:29:56:2D:E5:C3:08:BA:4A:73:04:9A:3F:45:6D:D8:D8:E2:58 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0968 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:41:54 +0000 ROA not before: Sat 28 Jun 2025 09:34:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138997 IP address blocks: 103.138.72.0/22 maxlen: 22 103.138.72.0/23 maxlen: 24 103.138.74.0/23 maxlen: 24 2404:c140::/32 maxlen: 32 2404:c140:156::/48 maxlen: 48 2404:c140:157::/48 maxlen: 48 2404:c140:220::/48 maxlen: 48 2404:c140:221::/48 maxlen: 48 2404:c140:224::/48 maxlen: 48 2404:c140:225::/48 maxlen: 48 2404:c140:230::/47 maxlen: 48 2404:c140:1f00::/40 maxlen: 48 2404:c140:2000::/40 maxlen: 48 2404:c140:2100::/40 maxlen: 48 2404:c140:2200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Jun 28 09:34:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a45e42-3f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:23:6c:51:81:b3:b2:ff:26:98:e7:95:24: b1:62:48:1f:1a:4b:05:d9:0b:5a:9b:1b:7f:1a:b8: da:3c:28:28:21:55:0e:fc:cb:ed:6d:1a:78:b3:2a: 0d:3e:25:26:b5:ae:b8:5a:8c:66:32:bf:ff:1d:ca: 75:a6:9c:65:4f:41:d0:97:a3:2d:b9:57:5d:0d:e9: 3a:a3:2d:b7:c6:c4:cb:a9:5a:82:70:0d:db:b5:a5: 83:db:1c:ab:e0:16:11:8f:4e:43:df:68:5f:00:03: 95:d8:1b:af:be:4e:92:02:b6:a5:c6:a1:f1:dc:45: c8:43:34:50:be:76:53:f7:06:ff:34:96:cd:82:3b: 3a:4b:60:7b:e6:45:fe:cf:a2:5f:41:00:f2:fb:ca: a4:5b:a7:7e:72:66:d6:dd:7a:fa:cb:89:ec:fd:da: a1:89:34:b3:5c:ba:f2:b6:4d:b6:59:8b:02:ff:ac: 05:96:b5:db:64:18:ef:01:1f:fc:ac:bb:8a:79:9c: 38:28:2d:9a:61:43:45:87:02:32:5b:2c:ad:b0:56: b7:95:c6:1e:2e:4d:c7:d6:96:ef:30:cc:c8:9b:a4: 88:49:82:d3:ef:21:2b:f0:5b:6a:70:e5:19:05:3b: a3:4b:28:41:0a:42:ac:3d:db:fb:56:e6:a1:c3:27: 65:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:CE:29:56:2D:E5:C3:08:BA:4A:73:04:9A:3F:45:6D:D8:D8:E2:58 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.72.0/22 IPv6: 2404:c140::/32 Signature Algorithm: sha256WithRSAEncryption 3f:76:f6:6e:6e:1c:40:20:cc:93:46:13:98:bc:58:40:36:e9: ab:f9:6e:f4:6d:f3:d3:95:31:01:83:40:da:1a:79:da:56:28: 38:db:f3:bb:57:67:95:52:81:49:a8:b3:be:ca:cf:43:c1:4c: 7f:b0:78:a8:a2:82:f9:20:93:34:b7:3c:aa:b0:ea:f1:4d:7e: 35:ee:75:c3:22:db:5c:e6:0a:28:65:ab:23:fb:fc:81:a4:b2: ca:b3:a6:02:40:14:f7:14:35:22:77:b7:ea:b6:14:01:43:1e: be:7a:c0:cb:f9:88:69:f6:86:bf:55:0b:26:ef:5e:fa:8c:52: c3:83:44:2c:64:48:83:c4:62:5e:9f:19:b8:cd:55:c9:44:9c: 82:8e:d4:47:cc:57:58:47:df:04:39:85:90:76:8f:af:f6:14: 4f:6b:5f:f5:cb:d8:a4:67:1e:73:5c:4c:46:e8:cb:7e:91:6e: be:98:39:ec:1f:cf:03:43:dd:9f:c3:07:55:78:a7:b2:a3:58: cb:6f:ea:5e:41:b4:d3:a6:91:66:dd:de:29:90:d7:3b:8e:ed: f4:c3:30:75:28:4f:3b:56:f9:ff:93:a7:a6:e1:49:1b:2f:6e: 49:b3:70:9d:bf:af:68:f7:ea:56:86:20:5a:c0:a4:35:78:15: e3:e1:53:d8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjUwNjI4MDkzNDIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU0Mi0zZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqNcjbFGBs7L/JpjnlSSxYkgfGksF2Qtamxt/GrjaPCgoIVUO/MvtbRp4syoN PiUmta64WoxmMr//Hcp1ppxlT0HQl6MtuVddDek6oy23xsTLqVqCcA3btaWD2xyr 4BYRj05D32hfAAOV2Buvvk6SAralxqHx3EXIQzRQvnZT9wb/NJbNgjs6S2B75kX+ z6JfQQDy+8qkW6d+cmbW3Xr6y4ns/dqhiTSzXLrytk22WYsC/6wFlrXbZBjvAR/8 rLuKeZw4KC2aYUNFhwIyWyytsFa3lcYeLk3H1pbvMMzIm6SISYLT7yEr8FtqcOUZ BTujSyhBCkKsPdv7VuahwydlgQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLPOKVYt 5cMIukpzBJo/RW3Y2OJYMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVERkQvNTQ1MzZCM0VCQzg4MTFFQTg4RUYzRDQ5QzRGOUFFMDIvRjU0N0JFNDI1 M0VBMTFGMDhCMDVEMDJFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4pIMA0EAgACMAcDBQAkBMFAMA0GCSqGSIb3DQEBCwUAA4IBAQA/ dvZubhxAIMyTRhOYvFhANumr+W70bfPTlTEBg0DaGnnaVig42/O7V2eVUoFJqLO+ ys9DwUx/sHioooL5IJM0tzyqsOrxTX417nXDIttc5gooZasj+/yBpLLKs6YCQBT3 FDUid7fqthQBQx6+esDL+Yhp9oa/VQsm7176jFLDg0QsZEiDxGJenxm4zVXJRJyC jtRHzFdYR98EOYWQdo+v9hRPa1/1y9ikZx5zXExG6Mt+kW6+mDnsH88DQ92fwwdV eKeyo1jLb+peQbTTppFm3d4pkNc7ju30wzB1KE87Vvn/k6em4UkbL25Js3Cdv69o 9+pWhiBawKQ1eBXj4VPY -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:53 2026 by rpki-client