$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D9BBFBDA4D3111F099A48033C4F9AE02.roa File: D9BBFBDA4D3111F099A48033C4F9AE02.roa (raw, json) Hash identifier: zcDK7W0PfXIMXqiY8vmJjJWJICMO82ktF8Fv0RCYF1s= Subject key identifier: 58:0B:77:B5:25:92:A9:E4:A0:40:31:54:A3:FC:F3:AF:24:82:8F:95 Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 11F1 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D9BBFBDA4D3111F099A48033C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:35:51 +0000 ROA not before: Thu 19 Jun 2025 17:27:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 149765 IP address blocks: 103.86.195.0/24 maxlen: 24 220.152.114.0/24 maxlen: 24 2400:c640:80::/48 maxlen: 48 2400:c640:81::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4593 (0x11f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: Jun 19 17:27:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48707-df82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:02:ab:00:a6:9c:75:c4:91:63:f1:5a:84: 54:56:fc:09:8d:7b:08:d4:07:5a:eb:83:d1:b3:31: 7e:93:32:e8:3f:55:88:54:e0:4e:c6:cd:9b:f4:9e: 22:c3:88:c2:ab:20:e0:7a:10:0f:ec:f3:08:b8:43: 23:c3:3f:2d:91:16:35:65:b9:14:8c:37:38:bc:aa: 55:84:94:c1:70:11:33:9d:00:55:57:98:bd:bf:0d: 17:5e:6d:f7:0a:a0:79:92:4d:6b:6a:81:b2:d4:21: 44:ae:bd:e9:0e:a9:8d:ad:0b:c2:59:07:fa:df:43: a4:d8:aa:56:b8:df:fd:55:1e:bc:4c:46:22:5a:45: cf:a2:68:59:12:0c:9b:e7:f7:1a:f9:23:f0:c4:d8: 33:35:c5:42:8d:d0:52:78:2b:f6:40:c1:45:14:c1: f8:27:fc:1b:2b:74:36:f8:fd:3f:c2:87:5b:99:ed: eb:7f:f3:8e:30:88:77:c2:7c:cf:76:f9:32:da:39: df:86:68:65:41:da:fc:7c:78:6d:f7:10:11:a2:a4: d6:78:8b:bb:0a:13:a1:f4:a9:c5:af:96:99:34:61: 25:49:b8:24:a0:c5:be:bd:a8:55:1d:3d:e4:9e:63: f9:ab:18:5d:8c:a2:da:5c:ee:2e:6f:d4:a8:9b:44: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0B:77:B5:25:92:A9:E4:A0:40:31:54:A3:FC:F3:AF:24:82:8F:95 X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/D9BBFBDA4D3111F099A48033C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.195.0/24 220.152.114.0/24 IPv6: 2400:c640:80::/47 Signature Algorithm: sha256WithRSAEncryption 90:4d:5a:0e:9c:26:a4:ca:7e:3f:56:df:7d:ac:bd:0f:b6:fb: eb:32:9b:30:b4:1e:1e:b7:7e:fa:8c:b1:0d:85:34:94:39:9c: e0:98:6f:8c:00:a2:9e:4f:9d:30:bf:8a:5f:07:f6:26:c0:9d: f7:c9:ab:26:36:ae:c7:42:8c:ea:d5:fd:69:22:59:6d:f2:d4: d6:5a:46:ee:30:38:f9:5e:e1:4b:ab:af:4a:35:b3:31:6d:1c: d7:93:e5:d5:3f:4f:ce:6a:5c:ff:a6:45:a0:c7:04:a0:e3:f7: d7:45:93:9a:32:8b:bc:3b:03:b8:88:a0:65:d0:4c:0a:cb:18: 32:77:66:70:53:e0:dd:b4:0a:b9:db:f9:60:11:e8:61:e1:d2: de:6d:19:8e:ea:6d:d3:ed:fe:10:f6:f9:1d:d8:5e:5f:37:ca: 37:f3:05:2a:5d:9e:b9:52:c9:6c:b2:0f:0e:12:67:9b:a5:03: 92:b5:63:b1:f0:4f:2e:17:09:1f:96:ec:ec:6c:ed:0f:32:d1: 91:81:d7:fb:e8:d7:6b:c9:f8:58:43:33:2f:9a:a6:19:87:64: 0d:48:37:43:57:42:56:df:e3:ba:6c:1c:49:dc:f6:08:10:4a: ec:e7:aa:16:52:c2:42:a6:6e:82:aa:ee:5f:27:25:84:8e:52: 0d:69:e5:b7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICEfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNjE5MTcyNzM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODcwNy1kZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOcCqwCmnHXEkWPxWoRUVvwJjXsI1Ada64PRszF+kzLoP1WIVOBOxs2b9J4i w4jCqyDgehAP7PMIuEMjwz8tkRY1ZbkUjDc4vKpVhJTBcBEznQBVV5i9vw0XXm33 CqB5kk1raoGy1CFErr3pDqmNrQvCWQf630Ok2KpWuN/9VR68TEYiWkXPomhZEgyb 5/ca+SPwxNgzNcVCjdBSeCv2QMFFFMH4J/wbK3Q2+P0/wodbme3rf/OOMIh3wnzP dvky2jnfhmhlQdr8fHht9xARoqTWeIu7ChOh9KnFr5aZNGElSbgkoMW+vahVHT3k nmP5qxhdjKLaXO4ub9Som0ScnwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFFgLd7Ul kqnkoEAxVKP8868kgo+VMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvRDlCQkZCREE0 RDMxMTFGMDk5QTQ4MDMzQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ1bDAwQA3JhyMA8EAgACMAkDBwEkAMZAAIAwDQYJKoZIhvcNAQEL BQADggEBAJBNWg6cJqTKfj9W332svQ+2++symzC0Hh63fvqMsQ2FNJQ5nOCYb4wA op5PnTC/il8H9ibAnffJqyY2rsdCjOrV/WkiWW3y1NZaRu4wOPle4Uurr0o1szFt HNeT5dU/T85qXP+mRaDHBKDj99dFk5oyi7w7A7iIoGXQTArLGDJ3ZnBT4N20Crnb +WAR6GHh0t5tGY7qbdPt/hD2+R3YXl83yjfzBSpdnrlSyWyyDw4SZ5ulA5K1Y7Hw Ty4XCR+W7Oxs7Q8y0ZGB1/vo12vJ+FhDMy+aphmHZA1IN0NXQlbf47psHEnc9ggQ SuznqhZSwkKmboKq7l8nJYSOUg1p5bc= -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:29 2026 by rpki-client