$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/09DA4C5E1B6911EB9D105D47C4F9AE02.roa File: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (raw, json) Hash identifier: 4yEG0HEHtWUK9EkEcxbS/QoPiIEKo383SklpCIHF2eo= Subject key identifier: C4:CB:28:8F:89:1D:B2:F2:EF:0B:C0:C2:D7:C8:24:6E:D4:B4:5D:A0 Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 07FB Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/09DA4C5E1B6911EB9D105D47C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:25:47 +0000 ROA not before: Sat 08 Nov 2025 20:41:24 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141375 IP address blocks: 103.157.202.0/23 maxlen: 23 103.157.202.0/24 maxlen: 24 103.157.203.0/24 maxlen: 24 2001:df5:2c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Nov 8 20:41:24 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4304b-011e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:2e:5b:d7:41:6f:69:d9:c6:09:32:c1:8e: fe:ad:31:b1:42:f1:f2:f1:1f:86:c9:ae:ad:fd:9c: 0a:d2:99:f2:ad:66:26:07:45:93:96:76:4f:b3:48: 48:6c:c6:f2:1d:71:7d:7a:c2:99:6c:1f:be:79:1f: aa:54:77:09:a3:dd:cf:93:8b:ce:0c:26:6b:77:ad: f0:e0:2d:6d:9e:80:5a:1f:b0:8f:d8:e6:72:82:74: 3e:cd:1d:d7:53:e3:af:19:2b:e0:c7:75:92:f8:66: 02:3d:08:73:38:f2:de:48:4c:34:bf:ca:bd:88:ae: 0e:20:6e:0d:ae:79:09:83:f8:a9:44:06:36:07:d9: ae:2a:60:3f:df:30:af:25:5e:84:f1:57:1b:12:c0: ab:16:7e:1f:e2:36:ec:35:a1:1e:2f:8b:b2:7c:c7: 4a:01:f4:e6:0f:9c:c8:01:7f:56:f0:35:cb:a3:07: f0:eb:23:e0:0c:09:d2:bd:f3:4a:eb:4c:45:c4:5a: 82:2d:80:f2:11:86:43:f9:71:4c:0e:b4:6b:f5:2e: 06:cc:04:92:a9:7e:94:4f:a1:9f:39:c8:ff:c0:ab: a5:9f:d4:fe:f9:8e:63:de:15:76:53:26:c3:f3:33: 93:ef:2d:69:3a:ee:22:33:4a:4a:0d:7b:21:2f:1f: ac:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CB:28:8F:89:1D:B2:F2:EF:0B:C0:C2:D7:C8:24:6E:D4:B4:5D:A0 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/09DA4C5E1B6911EB9D105D47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.157.202.0/23 IPv6: 2001:df5:2c80::/48 Signature Algorithm: sha256WithRSAEncryption 38:0e:ea:d1:7b:31:53:ac:35:d2:96:b1:0d:f4:24:fe:fb:e5: 37:8f:b7:5f:c1:d8:41:9e:82:d6:15:a4:97:96:6c:f4:e6:0c: 6a:4a:39:c6:14:87:93:b0:b3:69:12:29:52:09:6b:8a:0a:79: c6:d7:ad:7e:af:a5:3c:3d:6a:1b:1c:12:53:a8:f9:47:6a:fe: 2b:e3:41:c9:ea:8d:7d:88:51:6f:54:38:fa:b2:bb:b3:de:d2: 0e:90:81:39:8e:c6:95:83:bb:73:f2:dd:45:74:5d:dd:b3:d5: d8:05:fb:71:1e:65:83:a4:f5:7c:5e:81:0f:75:81:1b:a8:0a: 22:ee:28:e6:24:8f:e2:f9:c3:fe:aa:f3:54:8b:fa:89:82:a8: 6b:4d:78:c5:c1:20:9b:70:41:df:31:d3:85:6c:bf:f1:4b:25: 77:9f:16:97:3d:a2:96:b1:e2:44:68:d0:30:e3:fe:3f:d0:5d: 1d:07:46:40:50:98:a3:2d:8f:26:21:1f:90:d7:9f:65:45:77: c0:2f:ff:3b:c5:ff:6d:d8:b9:dc:1a:f3:40:85:52:19:f2:91: b8:a7:0a:49:09:37:e9:9f:15:56:78:85:c2:ed:ac:97:d0:c5: bf:94:ee:38:7a:28:33:66:44:82:1f:06:06:82:4c:a3:1f:9d: bf:bb:5c:34 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUxMTA4MjA0MTI0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzA0Yi0wMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA22guW9dBb2nZxgkywY7+rTGxQvHy8R+Gya6t/ZwK0pnyrWYmB0WTlnZPs0hI bMbyHXF9esKZbB++eR+qVHcJo93Pk4vODCZrd63w4C1tnoBaH7CP2OZygnQ+zR3X U+OvGSvgx3WS+GYCPQhzOPLeSEw0v8q9iK4OIG4NrnkJg/ipRAY2B9muKmA/3zCv JV6E8VcbEsCrFn4f4jbsNaEeL4uyfMdKAfTmD5zIAX9W8DXLowfw6yPgDAnSvfNK 60xFxFqCLYDyEYZD+XFMDrRr9S4GzASSqX6UT6GfOcj/wKuln9T++Y5j3hV2UybD 8zOT7y1pOu4iM0pKDXshLx+sEwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMTLKI+J HbLy7wvAwtfIJG7UtF2gMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI4NjgvNjdGMTdEOEMxQjY3MTFFQjgyMENDQjQyQzRGOUFFMDIvMDlEQTRDNUUx QjY5MTFFQjlEMTA1RDQ3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ53KMA8EAgACMAkDBwAgAQ31LIAwDQYJKoZIhvcNAQELBQADggEB ADgO6tF7MVOsNdKWsQ30JP775TePt1/B2EGegtYVpJeWbPTmDGpKOcYUh5Ows2kS KVIJa4oKecbXrX6vpTw9ahscElOo+Udq/ivjQcnqjX2IUW9UOPqyu7Pe0g6QgTmO xpWDu3Py3UV0Xd2z1dgF+3EeZYOk9XxegQ91gRuoCiLuKOYkj+L5w/6q81SL+omC qGtNeMXBIJtwQd8x04Vsv/FLJXefFpc9opax4kRo0DDj/j/QXR0HRkBQmKMtjyYh H5DXn2VFd8Av/zvF/23Yudwa80CFUhnykbinCkkJN+mfFVZ4hcLtrJfQxb+U7jh6 KDNmRIIfBgaCTKMfnb+7XDQ= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:45 2026 by rpki-client