$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/6290CEFA3E3611F0BC85B94CC4F9AE02.roa File: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (raw, json) Hash identifier: OGm0uB3FR35hN/gFsyIV99ObU52GXmXg7+3oLUUM2jI= Subject key identifier: EF:53:62:CE:52:0A:4C:D9:ED:A0:25:07:07:C7:9C:14:5B:85:0E:D5 Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1B98 Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/6290CEFA3E3611F0BC85B94CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:29:15 +0000 ROA not before: Tue 16 Dec 2025 16:13:37 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133854 IP address blocks: 43.224.108.0/22 maxlen: 24 103.43.148.0/24 maxlen: 24 103.43.150.0/24 maxlen: 24 103.43.151.0/24 maxlen: 24 2401:c680::/32 maxlen: 32 2401:c680:1::/48 maxlen: 48 2401:c680:a::/48 maxlen: 48 2401:c680:f::/48 maxlen: 48 2401:c680:1000::/38 maxlen: 38 2401:c680:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7064 (0x1b98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Dec 16 16:13:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45b4b-9455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:53:c1:37:b4:b0:c1:1e:2e:60:57:ba:27: 33:5b:f1:c2:e0:31:14:d3:cf:81:1b:2f:7b:bd:d3: 1f:ff:de:53:32:19:fc:ba:52:56:60:3b:c5:d8:c8: 7b:8e:48:0d:c2:df:59:53:2c:95:c2:89:07:29:95: fb:b9:d1:bb:a3:e4:41:90:23:10:4d:ad:65:66:f7: 08:fa:0e:c8:80:20:d4:74:10:54:3d:3a:8e:64:5d: d8:cf:cf:67:f3:58:57:75:68:20:ef:69:53:3b:39: 00:01:72:1e:79:0c:f3:1d:8a:77:92:9a:2d:d1:bd: f8:2b:01:fb:6a:07:85:4c:4f:64:8d:3b:14:3c:47: ec:e6:9c:f8:48:1f:1b:dc:c9:47:6f:db:dd:2b:9b: 67:4e:22:ab:2f:e4:bb:51:fd:8e:df:0e:16:8b:35: 5c:f1:65:cc:7b:be:99:24:10:ef:cb:94:05:0e:21: 0f:7f:b9:ce:75:ac:51:1e:ca:7a:f3:26:58:66:70: a7:85:b1:ca:58:2c:c8:75:73:e7:cf:f9:9f:11:bd: 72:0a:2f:97:a2:44:e8:dc:f1:91:23:8b:59:1a:51: 97:d2:21:4e:37:60:96:1b:36:95:94:2a:8f:c6:db: 69:f0:f4:78:84:f1:6a:32:98:ce:85:d7:bb:e3:bf: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:53:62:CE:52:0A:4C:D9:ED:A0:25:07:07:C7:9C:14:5B:85:0E:D5 X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/6290CEFA3E3611F0BC85B94CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.224.108.0/22 103.43.148.0/24 103.43.150.0/23 IPv6: 2401:c680::/32 Signature Algorithm: sha256WithRSAEncryption 7c:d4:08:49:34:c1:54:12:23:45:55:34:52:b9:d0:35:33:20: 3e:bc:4f:c6:10:0d:09:11:d8:1a:54:db:55:92:bb:c1:74:ec: 53:1f:b1:76:88:06:cd:21:ae:0b:9d:52:9d:ab:22:16:6c:ac: fa:69:28:b3:68:7f:39:21:c0:4b:59:a2:6a:66:d2:07:86:b9: be:62:07:66:a9:da:23:f3:df:1d:d1:94:75:e2:d5:dc:a1:36: 41:17:26:ea:91:c9:40:d6:dd:dd:a9:be:cf:84:fd:35:8c:8c: ad:44:06:bd:0d:1b:64:7e:bd:9f:34:00:78:cd:c7:4b:20:14: 32:0f:d5:89:a2:9d:27:64:e7:6b:2b:0a:41:59:55:00:61:ef: fc:ad:28:a7:ee:31:a1:78:2e:6c:82:b2:85:4a:b3:05:00:14: d9:50:4c:ed:62:6d:7a:5a:0d:c3:3a:da:6d:f6:9e:ff:14:06: b4:37:09:62:84:ba:83:bb:a7:ae:c6:36:7a:31:70:8c:d9:bc: 33:87:36:d8:8b:67:23:2f:ab:d6:a5:2f:e9:c6:02:ec:a0:0d: bc:ac:f0:6c:b6:b4:a7:2b:13:b3:98:ea:d7:8f:a4:61:a2:7f: d3:53:18:87:04:b0:27:d0:28:59:a9:5c:01:a2:be:9e:ad:19: 14:d7:05:1e -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICG5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUxMjE2MTYxMzM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWI0Yi05NDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf1TwTe0sMEeLmBXuiczW/HC4DEU08+BGy97vdMf/95TMhn8ulJWYDvF2Mh7 jkgNwt9ZUyyVwokHKZX7udG7o+RBkCMQTa1lZvcI+g7IgCDUdBBUPTqOZF3Yz89n 81hXdWgg72lTOzkAAXIeeQzzHYp3kpot0b34KwH7ageFTE9kjTsUPEfs5pz4SB8b 3MlHb9vdK5tnTiKrL+S7Uf2O3w4WizVc8WXMe76ZJBDvy5QFDiEPf7nOdaxRHsp6 8yZYZnCnhbHKWCzIdXPnz/mfEb1yCi+XokTo3PGRI4tZGlGX0iFON2CWGzaVlCqP xttp8PR4hPFqMpjOhde7479OgwIDAQABo4ICezCCAncwHQYDVR0OBBYEFO9TYs5S CkzZ7aAlBwfHnBRbhQ7VMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2MzIvMDVDRTQ0RUEyRTVFMTFFN0JBQzg4QjY5QzRGOUFFMDIvNjI5MENFRkEz RTM2MTFGMEJDODVCOTRDQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCK+BsAwQAZyuUAwQBZyuWMA0EAgACMAcDBQAkAcaAMA0GCSqGSIb3 DQEBCwUAA4IBAQB81AhJNMFUEiNFVTRSudA1MyA+vE/GEA0JEdgaVNtVkrvBdOxT H7F2iAbNIa4LnVKdqyIWbKz6aSizaH85IcBLWaJqZtIHhrm+Ygdmqdoj898d0ZR1 4tXcoTZBFybqkclA1t3dqb7PhP01jIytRAa9DRtkfr2fNAB4zcdLIBQyD9WJop0n ZOdrKwpBWVUAYe/8rSin7jGheC5sgrKFSrMFABTZUEztYm16Wg3DOtpt9p7/FAa0 NwlihLqDu6euxjZ6MXCM2bwzhzbYi2cjL6vWpS/pxgLsoA28rPBstrSnKxOzmOrX j6Rhon/TUxiHBLAn0ChZqVwBor6erRkU1wUe -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:03 2026 by rpki-client