$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/0FD437CAC11811EE8328EF7AC4F9AE02.roa File: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (raw, json) Hash identifier: 1oGgEhKuTYfIMH1bWvTdBPiLxB8rj3+diEjF16TDep8= Subject key identifier: D8:33:37:64:D4:F5:6F:BC:78:42:7F:86:1A:95:AB:E2:21:8A:35:BB Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0AB4 Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/0FD437CAC11811EE8328EF7AC4F9AE02.roa Signing time: Mon 30 Mar 2026 20:25:23 +0000 ROA not before: Mon 30 Mar 2026 20:25:23 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 979 IP address blocks: 103.207.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2740 (0xab4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Mar 30 20:25:23 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69cadc33-08e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:d9:77:55:e3:34:2f:c4:f1:25:e3:1d:36: 3e:b3:66:80:e7:04:ef:fc:a7:50:f6:f4:dc:f3:02: 10:ca:53:42:8b:34:0a:d4:ae:db:f6:3c:27:03:6c: 88:4d:c5:0c:77:7c:34:f4:3b:8c:04:7a:6a:84:9f: cd:60:41:ae:4d:c3:90:22:64:66:c9:43:85:53:2e: 58:44:b8:07:be:d5:c1:2a:93:d1:93:f9:0b:68:36: 8b:ec:cd:da:d5:53:2d:a3:31:a0:8c:60:eb:f5:aa: d6:92:0e:8b:c7:09:a6:5c:67:1a:b3:3c:6a:a4:4c: 84:49:83:f3:61:69:89:1e:36:73:da:d4:e1:9a:b5: fc:53:d8:33:3f:16:21:ed:8d:7f:54:b9:cb:9b:ac: 43:a1:a8:29:9d:6b:5b:64:54:be:40:13:7a:14:1c: 00:89:d2:de:ff:06:32:e1:09:a5:b3:bf:57:fd:c3: d1:6b:10:e6:34:d8:f9:3b:25:17:25:5b:db:38:3a: 5d:d5:5f:fa:41:e6:47:4f:98:28:38:ba:3d:73:bf: 45:4f:81:b6:03:57:20:60:5f:74:39:5c:3a:56:1f: e4:ee:7e:ef:ca:fe:c7:bf:36:c7:ff:bd:41:1f:91: e9:3d:26:88:e6:82:39:5a:2b:fb:23:a1:7e:ce:93: 45:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:33:37:64:D4:F5:6F:BC:78:42:7F:86:1A:95:AB:E2:21:8A:35:BB X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/0FD437CAC11811EE8328EF7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.207.68.0/23 Signature Algorithm: sha256WithRSAEncryption 66:9b:1e:06:50:12:5f:f5:b0:77:16:bc:69:a2:e8:bd:91:c4: 55:cb:d6:73:e2:f8:5f:4b:39:be:f3:6c:ba:70:4c:5b:1d:35: ff:df:87:1b:d9:2e:96:70:c7:f3:fc:93:44:c3:cf:52:0c:46: 4a:b2:9b:81:39:6a:76:be:93:a4:31:67:90:a0:11:c2:53:f5: 97:2d:00:34:6e:0c:99:2a:f5:aa:42:9a:79:a2:93:23:45:9b: 43:a3:05:53:57:26:7b:63:9c:c8:05:cf:51:2e:7b:75:56:f8: bf:23:ea:14:67:ca:51:d4:a5:0c:85:6c:75:8f:1e:c6:9d:6f: d1:ff:0a:1e:39:18:5f:73:d9:97:fc:7a:60:07:23:82:0e:b6: 3b:e0:f0:d1:d6:79:02:88:2f:05:30:a4:c7:bd:b5:0d:1f:34: ad:f0:b6:d5:d9:4e:b9:7c:58:50:83:e9:c1:6e:eb:57:f5:ee: d9:81:f8:d9:8a:f7:d3:02:2f:44:ea:29:c1:3f:8d:4a:a2:f8: 4c:ad:06:65:de:6a:d1:32:e1:0f:0d:a8:a0:fa:e2:5a:ce:c7: f3:c7:8f:f1:eb:12:df:09:de:32:49:55:1c:f6:21:9f:20:75: d2:ae:ed:2f:07:39:cc:d1:5a:49:96:3f:de:ef:a0:d3:06:89: 8e:7d:66:f1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjYwMzMwMjAyNTIzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhZGMzMy0wOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJvZd1XjNC/E8SXjHTY+s2aA5wTv/KdQ9vTc8wIQylNCizQK1K7b9jwnA2yI TcUMd3w09DuMBHpqhJ/NYEGuTcOQImRmyUOFUy5YRLgHvtXBKpPRk/kLaDaL7M3a 1VMtozGgjGDr9arWkg6LxwmmXGcaszxqpEyESYPzYWmJHjZz2tThmrX8U9gzPxYh 7Y1/VLnLm6xDoagpnWtbZFS+QBN6FBwAidLe/wYy4Qmls79X/cPRaxDmNNj5OyUX JVvbODpd1V/6QeZHT5goOLo9c79FT4G2A1cgYF90OVw6Vh/k7n7vyv7HvzbH/71B H5HpPSaI5oI5Wiv7I6F+zpNF6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNgzN2TU 9W+8eEJ/hhqVq+IhijW7MB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdFNDUvMDZDODU2M0M4M0Q5MTFFQUEzMTI0RjVDQzRGOUFFMDIvMEZENDM3Q0FD MTE4MTFFRTgzMjhFRjdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ89EMA0GCSqGSIb3DQEBCwUAA4IBAQBmmx4GUBJf9bB3Frxpoui9 kcRVy9Zz4vhfSzm+82y6cExbHTX/34cb2S6WcMfz/JNEw89SDEZKspuBOWp2vpOk MWeQoBHCU/WXLQA0bgyZKvWqQpp5opMjRZtDowVTVyZ7Y5zIBc9RLnt1Vvi/I+oU Z8pR1KUMhWx1jx7GnW/R/woeORhfc9mX/HpgByOCDrY74PDR1nkCiC8FMKTHvbUN HzSt8LbV2U65fFhQg+nBbutX9e7ZgfjZivfTAi9E6inBP41KovhMrQZl3mrRMuEP Daig+uJazsfzx4/x6xLfCd4ySVUc9iGfIHXSru0vBznM0VpJlj/e76DTBomOfWbx -----END CERTIFICATE-----Generated at Fri Apr 17 13:36:26 2026 by rpki-client