$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa File: 651384A6766811EF96E4115EC4F9AE02.roa (raw, json) Hash identifier: wGjp/F/iorPSiwgq5luPeUz2pOOaPNUFfMvA8UyB/mQ= Subject key identifier: 64:3C:32:D1:E3:96:D8:F2:7D:B3:E6:40:37:D7:BD:A6:1F:B9:09:A9 Certificate issuer: /CN=A91DFADF/serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Certificate serial: 0A42 Authority key identifier: 2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:31:32 +0000 ROA not before: Sat 26 Apr 2025 19:59:38 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140612 IP address blocks: 103.151.0.0/23 maxlen: 24 2400:8860::/32 maxlen: 32 2400:8860::/33 maxlen: 33 2400:8860:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFADF, serialNumber=2E7283A8FDD5CF0B3D9FAA2BE9742881989193A5 Validity Not Before: Apr 26 19:59:38 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a40774-6436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:e2:be:9f:47:a2:05:ed:da:61:02:8c:f8: db:3b:2c:56:1c:b3:15:f1:40:39:b6:4e:44:5f:00: 90:f5:e5:a4:d5:33:68:94:6a:24:a5:e7:50:cb:98: 3e:71:65:84:91:a4:a2:8d:ca:a0:21:a9:d5:7c:bf: 61:7d:a6:31:dc:35:1f:90:b2:0d:cc:fa:1f:08:5c: 7d:31:9c:26:a3:83:d7:39:83:e9:68:cb:c2:c0:92: e2:8d:d0:12:fe:8d:fc:c9:b7:7f:70:9d:8a:be:9f: 29:b7:69:c5:27:b0:1f:48:d8:fe:61:b5:1f:fa:53: 47:0a:bf:22:59:2b:0b:87:1d:51:cd:2e:3e:6c:8d: 6b:d7:b1:c0:e2:9b:bc:68:d3:67:64:e0:36:70:e1: 41:63:fd:b9:5b:e9:02:4a:0c:6b:84:38:0d:86:19: 37:62:af:66:b5:1d:61:18:6a:71:07:67:f1:3c:2f: e3:c7:e6:b0:4b:59:c2:30:3a:96:69:14:35:2b:c8: f0:df:d3:17:53:c1:a3:57:9c:0e:6f:5d:2c:98:a2: 31:5d:ed:e3:02:ab:dd:f1:ae:c3:e0:73:9f:9e:5d: 7b:6e:75:8c:17:d5:91:df:f4:bc:1e:60:e6:19:51: 1a:5a:72:a9:a0:0a:06:1f:ee:a7:e1:bf:79:41:ec: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3C:32:D1:E3:96:D8:F2:7D:B3:E6:40:37:D7:BD:A6:1F:B9:09:A9 X509v3 Authority Key Identifier: keyid:2E:72:83:A8:FD:D5:CF:0B:3D:9F:AA:2B:E9:74:28:81:98:91:93:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/LnKDqP3Vzws9n6or6XQogZiRk6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnKDqP3Vzws9n6or6XQogZiRk6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFADF/585320DE8BD811EA95AAEB83C4F9AE02/651384A6766811EF96E4115EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.0.0/23 IPv6: 2400:8860::/32 Signature Algorithm: sha256WithRSAEncryption 36:2c:de:d9:09:db:38:c4:39:e7:a2:df:7f:bd:ca:df:85:21: e4:8d:b7:73:03:85:e6:a9:3d:15:ba:8e:fe:dd:6d:ea:4a:00: f8:41:57:f3:a5:75:b7:88:4c:dc:af:1e:78:70:7a:83:3b:03: 00:0e:b0:a4:9b:ea:aa:70:14:e5:85:fe:5d:9a:60:c5:56:c0: d1:aa:43:73:b3:13:fb:12:a1:0a:b4:ca:4c:26:75:1e:73:e9: 6f:6d:d9:e4:95:f5:92:20:ad:c9:92:cb:02:fd:b1:f4:f2:b8: 4a:c2:f4:64:eb:68:cf:d8:ab:eb:c6:b6:31:f6:9e:f1:82:c9: f5:6c:17:6d:bf:1e:36:c2:cc:e3:c0:39:7c:87:7f:86:e6:ec: 89:f1:33:a5:af:ea:db:5d:0d:db:e0:d0:c3:88:29:c6:70:13: db:a1:db:81:50:7b:16:d8:70:86:1f:6c:1d:1d:11:0c:dc:c8: 4d:a1:5d:3d:c0:19:f6:66:7b:07:d1:2a:93:c1:21:c6:eb:bc: 97:e2:57:66:e9:92:b2:f0:43:df:46:71:8f:77:28:66:7e:38: a2:88:95:04:83:3c:2e:81:3c:ff:d0:94:54:00:0e:5e:e6:a2: 71:09:c2:fe:75:97:5a:ed:90:c0:eb:24:b3:eb:4f:24:0c:99: 7e:95:0c:cd -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZBREYxMTAvBgNVBAUTKDJFNzI4M0E4RkRENUNGMEIzRDlGQUEyQkU5NzQyODgx OTg5MTkzQTUwHhcNMjUwNDI2MTk1OTM4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDc3NC02NDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2Tivp9HogXt2mECjPjbOyxWHLMV8UA5tk5EXwCQ9eWk1TNolGokpedQy5g+ cWWEkaSijcqgIanVfL9hfaYx3DUfkLINzPofCFx9MZwmo4PXOYPpaMvCwJLijdAS /o38ybd/cJ2Kvp8pt2nFJ7AfSNj+YbUf+lNHCr8iWSsLhx1RzS4+bI1r17HA4pu8 aNNnZOA2cOFBY/25W+kCSgxrhDgNhhk3Yq9mtR1hGGpxB2fxPC/jx+awS1nCMDqW aRQ1K8jw39MXU8GjV5wOb10smKIxXe3jAqvd8a7D4HOfnl17bnWMF9WR3/S8HmDm GVEaWnKpoAoGH+6n4b95QeznowIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGQ8MtHj ltjyfbPmQDfXvaYfuQmpMB8GA1UdIwQYMBaAFC5yg6j91c8LPZ+qK+l0KIGYkZOl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkFERi81ODUzMjBERThC RDgxMUVBOTVBQUVCODNDNEY5QUUwMi9MbktEcVAzVnp3czluNm9yNlhRb2daaVJr NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xuS0RxUDNWendzOW42b3I2WFFvZ1ppUms2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZBREYvNTg1MzIwREU4QkQ4MTFFQTk1QUFFQjgzQzRGOUFFMDIvNjUxMzg0QTY3 NjY4MTFFRjk2RTQxMTVFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5cAMA0EAgACMAcDBQAkAIhgMA0GCSqGSIb3DQEBCwUAA4IBAQA2 LN7ZCds4xDnnot9/vcrfhSHkjbdzA4XmqT0Vuo7+3W3qSgD4QVfzpXW3iEzcrx54 cHqDOwMADrCkm+qqcBTlhf5dmmDFVsDRqkNzsxP7EqEKtMpMJnUec+lvbdnklfWS IK3JkssC/bH08rhKwvRk62jP2KvrxrYx9p7xgsn1bBdtvx42wszjwDl8h3+G5uyJ 8TOlr+rbXQ3b4NDDiCnGcBPboduBUHsW2HCGH2wdHREM3MhNoV09wBn2ZnsH0SqT wSHG67yX4ldm6ZKy8EPfRnGPdyhmfjiiiJUEgzwugTz/0JRUAA5e5qJxCcL+dZda 7ZDA6ySz608kDJl+lQzN -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:36 2026 by rpki-client