$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/709F3B2E145C11EC9A902165C4F9AE02.roa File: 709F3B2E145C11EC9A902165C4F9AE02.roa (raw, json) Hash identifier: SmXQ1SFMrsEIIaY56t+M+nddsnk+Z8U9mmLAhEWuQV0= Subject key identifier: 58:AF:64:2B:12:23:D4:01:45:C4:4B:47:80:B3:4E:91:C2:71:13:C9 Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 058B Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/709F3B2E145C11EC9A902165C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:41:28 +0000 ROA not before: Wed 26 Nov 2025 22:14:53 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135615 IP address blocks: 103.172.188.0/23 maxlen: 23 103.172.188.0/24 maxlen: 24 103.172.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1419 (0x58b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Nov 26 22:14:53 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a433f8-6775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:51:b3:55:69:19:6b:d3:fb:19:d1:09:15:f3: 0e:c2:a6:23:3b:75:47:24:16:63:d9:31:07:d9:95: eb:9c:89:f6:b0:4e:97:9d:e8:1b:43:76:cb:54:3e: c9:b1:4a:98:ab:36:3a:86:cf:ca:c2:c5:08:f9:12: c9:10:ff:19:1e:48:c0:b0:ef:25:1d:06:7d:49:4c: 8d:56:41:90:1e:a2:3b:fb:4d:5c:be:3d:39:ed:3e: 2d:c1:cf:f7:f8:5e:cb:2f:c3:90:4d:d0:e1:69:ae: b2:1e:f6:0c:29:49:c1:0d:8e:df:13:cc:fe:26:c3: 4e:86:d7:d2:ce:ba:ba:89:07:89:29:6d:05:fb:40: 26:dc:17:2d:99:cc:f5:e1:bf:e3:c6:be:1a:76:3b: 98:af:7c:b2:91:fc:13:c9:ea:60:cc:da:bf:eb:a3: 7c:ea:4e:c7:2d:c8:11:05:86:f9:32:81:09:ef:af: 27:0a:cd:05:94:e7:e3:5d:67:29:2f:b7:c5:e6:07: a1:4e:69:71:a6:82:f7:a9:d8:69:f2:a0:5c:59:86: 48:00:3f:ae:ff:30:d9:73:60:9f:8e:3b:8f:f0:7f: e4:8d:d7:f7:ac:80:80:b6:8c:b3:ed:68:28:80:37: 58:64:38:d2:e2:7b:83:ad:cf:de:85:23:84:18:76: cc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AF:64:2B:12:23:D4:01:45:C4:4B:47:80:B3:4E:91:C2:71:13:C9 X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/709F3B2E145C11EC9A902165C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.188.0/23 Signature Algorithm: sha256WithRSAEncryption 47:9b:50:f9:3c:ca:7a:aa:c1:00:a2:d7:9a:86:aa:9d:98:7b: be:81:98:8f:e3:97:11:71:c9:d8:95:a7:3c:9d:4a:87:fc:17: 43:07:f6:13:9f:c7:84:e4:41:6d:bd:3d:0c:3c:c0:b1:e0:9d: 01:d8:d3:a0:21:02:ce:9d:4a:f7:6c:82:2a:2e:b2:7f:42:46: e2:94:47:df:99:d0:8a:4e:9a:e3:2d:ce:91:61:5b:8b:b0:ef: 20:4a:89:17:01:3b:f4:0a:21:ed:57:3f:c9:18:bd:37:14:c0: ab:f4:57:53:57:29:cc:62:d2:69:a6:db:f2:54:8c:3d:43:cb: ba:d6:3d:83:00:5b:a5:5b:4f:de:8a:df:80:97:24:2f:a8:78: f2:42:00:6b:1a:74:30:dc:ba:a1:c4:ff:1e:a7:ad:a3:f8:c4: fc:9e:68:74:67:88:26:91:8b:ad:97:07:f9:d2:a5:90:b7:6a: f3:6f:1d:42:a1:66:c5:33:48:52:8c:f3:ab:3a:6a:63:74:60: 51:79:06:f0:a8:39:d2:3b:30:e9:c9:45:d1:f4:5f:ef:c9:10: 2e:43:9b:c3:bb:14:97:90:8c:91:e8:c4:1c:5e:cf:55:b4:5b: 19:be:81:a0:0e:93:a3:fc:b9:4e:00:7d:29:e6:35:bb:6e:09: 43:c1:ee:29 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjUxMTI2MjIxNDUzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzNmOC02Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkFGzVWkZa9P7GdEJFfMOwqYjO3VHJBZj2TEH2ZXrnIn2sE6XnegbQ3bLVD7J sUqYqzY6hs/KwsUI+RLJEP8ZHkjAsO8lHQZ9SUyNVkGQHqI7+01cvj057T4twc/3 +F7LL8OQTdDhaa6yHvYMKUnBDY7fE8z+JsNOhtfSzrq6iQeJKW0F+0Am3Bctmcz1 4b/jxr4adjuYr3yykfwTyepgzNq/66N86k7HLcgRBYb5MoEJ768nCs0FlOfjXWcp L7fF5gehTmlxpoL3qdhp8qBcWYZIAD+u/zDZc2CfjjuP8H/kjdf3rICAtoyz7Wgo gDdYZDjS4nuDrc/ehSOEGHbMoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFivZCsS I9QBRcRLR4CzTpHCcRPJMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg3QUIvOTE2QjA2NjYxNDU4MTFFQzlFRDZDNzNCQzRGOUFFMDIvNzA5RjNCMkUx NDVDMTFFQzlBOTAyMTY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6y8MA0GCSqGSIb3DQEBCwUAA4IBAQBHm1D5PMp6qsEAoteahqqd mHu+gZiP45cRccnYlac8nUqH/BdDB/YTn8eE5EFtvT0MPMCx4J0B2NOgIQLOnUr3 bIIqLrJ/QkbilEffmdCKTprjLc6RYVuLsO8gSokXATv0CiHtVz/JGL03FMCr9FdT VynMYtJpptvyVIw9Q8u61j2DAFulW0/eit+AlyQvqHjyQgBrGnQw3LqhxP8ep62j +MT8nmh0Z4gmkYutlwf50qWQt2rzbx1CoWbFM0hSjPOrOmpjdGBReQbwqDnSOzDp yUXR9F/vyRAuQ5vDuxSXkIyR6MQcXs9VtFsZvoGgDpOj/LlOAH0p5jW7bglDwe4p -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:09 2026 by rpki-client