$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa File: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (raw, json) Hash identifier: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0= Subject key identifier: F5:A8:25:D2:04:13:F7:A3:0C:1A:80:DF:2A:1F:77:51:FA:7F:8C:1B Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0BDC Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:37:24 +0000 ROA not before: Sat 18 Oct 2025 19:58:52 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138320 IP address blocks: 103.122.252.0/22 maxlen: 22 103.122.252.0/23 maxlen: 23 103.122.252.0/24 maxlen: 24 103.122.253.0/24 maxlen: 24 103.122.254.0/23 maxlen: 23 103.122.254.0/24 maxlen: 24 103.122.255.0/24 maxlen: 24 2403:98c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3036 (0xbdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Oct 18 19:58:52 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45d34-3b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:53:96:70:6d:49:0c:ef:09:5c:49:84:7a: 60:f9:3e:6b:b5:ab:ea:6a:6f:ac:74:0c:fc:ce:5b: 1a:42:8d:36:36:ad:e6:2a:ce:89:6d:3b:2d:75:55: 7b:b0:f2:8d:54:b3:ce:e2:19:7e:81:78:14:96:71: c6:af:e5:9c:20:d1:99:80:30:af:b5:88:61:67:51: 91:b5:6e:32:51:ab:2e:7d:60:8a:c4:e2:b7:31:e0: d8:bc:fd:f1:55:5a:52:fe:46:cb:d9:9f:c6:1f:27: 6f:71:ed:96:4e:ef:37:6e:56:6f:ee:35:dc:fa:d8: e1:0a:61:02:24:57:95:75:1d:32:4a:c2:5b:35:86: 70:4c:d9:ef:90:8e:e7:34:b6:3f:6f:e7:05:4c:31: c0:41:10:03:d8:79:b1:89:96:6b:94:dc:4e:de:d2: 77:6b:fc:77:31:01:26:24:bd:da:df:09:26:72:06: f8:75:ee:04:76:b9:49:85:86:aa:7a:0f:12:60:e7: 64:6c:9a:33:db:d7:00:12:6e:41:a1:8d:91:e4:af: 90:23:05:a1:d4:35:f4:17:b2:b3:5e:8a:3d:e6:0b: 24:91:d0:3a:4b:77:e6:3c:90:8e:57:3d:96:ee:6b: 1a:66:30:e0:ea:0c:a0:67:03:08:e1:4f:09:b7:a0: 84:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A8:25:D2:04:13:F7:A3:0C:1A:80:DF:2A:1F:77:51:FA:7F:8C:1B X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/46F57CF8137B11EBA3B47E37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.122.252.0/22 IPv6: 2403:98c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:4d:bd:7c:e0:f3:a9:77:d9:69:03:f6:cf:79:63:05:23:e4: fb:4b:7b:68:64:07:9c:b2:47:93:47:c4:61:d0:8e:2b:c4:56: fe:17:66:20:f6:03:c9:4f:72:ae:42:22:0b:5d:f4:f9:c8:ce: 0b:07:4f:31:4d:87:e6:20:30:05:f6:ee:46:4e:28:00:c5:7d: d7:b0:a2:79:3c:9d:28:5f:bb:0d:72:18:53:5c:c0:12:f3:08: 1d:69:d6:ab:17:81:09:6b:00:81:93:99:47:e0:b3:e5:32:32: c5:e0:91:ff:b6:da:12:f9:6d:c0:a3:76:9e:1b:3a:69:f0:fe: 29:23:fa:c9:27:f0:a4:1d:39:f8:29:a7:6b:3c:cb:16:39:d8: f2:06:40:74:a6:a4:26:5d:0b:d5:0b:25:a7:84:a8:9d:4b:f3: d1:bc:b6:43:d4:0d:b6:76:d3:26:39:22:34:2e:66:37:77:97: 67:82:7f:59:1f:da:4b:92:1c:f1:46:30:da:27:a9:e6:35:90: f2:98:67:61:21:3f:41:df:e8:ce:07:f6:9e:f6:4d:b4:66:6e: f9:89:6e:79:20:0c:5d:14:3f:8c:75:aa:43:02:dd:30:c5:00: 24:f3:5c:e0:4d:f7:df:4b:c3:f0:68:5a:6e:b6:96:c3:19:7a: 96:2e:62:26 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjUxMDE4MTk1ODUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWQzNC0zYjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEpTlnBtSQzvCVxJhHpg+T5rtavqam+sdAz8zlsaQo02Nq3mKs6JbTstdVV7 sPKNVLPO4hl+gXgUlnHGr+WcINGZgDCvtYhhZ1GRtW4yUasufWCKxOK3MeDYvP3x VVpS/kbL2Z/GHydvce2WTu83blZv7jXc+tjhCmECJFeVdR0ySsJbNYZwTNnvkI7n NLY/b+cFTDHAQRAD2HmxiZZrlNxO3tJ3a/x3MQEmJL3a3wkmcgb4de4EdrlJhYaq eg8SYOdkbJoz29cAEm5BoY2R5K+QIwWh1DX0F7KzXoo95gskkdA6S3fmPJCOVz2W 7msaZjDg6gygZwMI4U8Jt6CE/wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPWoJdIE E/ejDBqA3yofd1H6f4wbMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM5QjQvMUVFMTgyOUUzREExMTFFQThCNjdFOTRGQzRGOUFFMDIvNDZGNTdDRjgx MzdCMTFFQkEzQjQ3RTM3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3r8MA0EAgACMAcDBQAkA5jAMA0GCSqGSIb3DQEBCwUAA4IBAQAz Tb184POpd9lpA/bPeWMFI+T7S3toZAecskeTR8Rh0I4rxFb+F2Yg9gPJT3KuQiIL XfT5yM4LB08xTYfmIDAF9u5GTigAxX3XsKJ5PJ0oX7sNchhTXMAS8wgdadarF4EJ awCBk5lH4LPlMjLF4JH/ttoS+W3Ao3aeGzpp8P4pI/rJJ/CkHTn4KadrPMsWOdjy BkB0pqQmXQvVCyWnhKidS/PRvLZD1A22dtMmOSI0LmY3d5dngn9ZH9pLkhzxRjDa J6nmNZDymGdhIT9B3+jOB/ae9k20Zm75iW55IAxdFD+MdapDAt0wxQAk81zgTfff S8PwaFputpbDGXqWLmIm -----END CERTIFICATE-----Generated at Mon Mar 2 19:52:47 2026 by rpki-client