$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5C3F2BB6932811E8BC93865BC4F9AE02.roa File: 5C3F2BB6932811E8BC93865BC4F9AE02.roa (raw, json) Hash identifier: kiic5/OTQTtn1z2lkfPAndpHchp8QnMx93thaVLeWyM= Subject key identifier: 9B:13:A7:45:F3:23:4F:95:26:A3:76:97:D5:36:28:6F:07:21:45:AA Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 36C2 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5C3F2BB6932811E8BC93865BC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:45:40 +0000 ROA not before: Tue 02 Sep 2025 15:01:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 29713 IP address blocks: 103.230.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14018 (0x36c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48953-4869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:7f:5b:81:db:e9:f6:06:cc:11:41:ba:3a: 99:16:c7:a0:06:36:b8:83:a0:67:fa:a8:d0:be:e0: 4a:e4:62:87:57:47:72:77:24:b7:2d:de:4e:c8:d2: e0:f3:e5:e7:e7:23:0d:5d:cc:a7:55:2d:34:5d:9f: 20:b8:59:7e:be:12:4a:63:d6:8a:11:e9:f6:0a:44: 56:a6:0b:3f:97:4c:58:63:e6:e5:96:27:96:1c:5c: 40:04:6f:36:19:30:50:33:90:07:67:d8:c1:cc:12: 28:8f:8c:93:39:1d:d9:d2:14:85:ab:76:be:ea:3d: 13:c4:a8:e2:63:37:55:4b:2c:cd:97:ab:bd:aa:f6: 61:8c:35:ff:5f:f3:24:be:ee:bf:7c:d2:7d:e1:e1: 60:15:87:68:be:bb:48:23:c3:3b:7b:bb:91:fd:fc: 0d:52:b6:e2:9b:79:29:53:a0:33:9e:7b:d6:fe:40: 67:f0:c5:6d:b2:2d:de:4b:c4:a7:f4:70:2a:42:d3: 24:b2:33:a4:5a:94:03:43:d1:cd:7c:13:5f:16:3a: c6:bc:02:e5:37:22:22:98:91:49:e1:dd:83:94:14: b6:7f:f3:ce:3b:bf:ba:9e:fe:41:34:21:ca:83:d5: da:b8:c8:2e:87:b1:f1:e5:43:dd:89:7b:30:08:f4: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:A7:45:F3:23:4F:95:26:A3:76:97:D5:36:28:6F:07:21:45:AA X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/5C3F2BB6932811E8BC93865BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.230.71.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:04:e3:ef:fb:6b:e7:20:db:24:ae:50:6c:37:2e:c9:2b:6e: 97:5a:ae:8b:9c:5a:b4:b6:ac:f7:d8:18:da:6b:b7:76:48:33: 83:6a:96:9f:1e:2a:62:b1:6a:1d:fd:4a:60:5c:01:b3:15:1d: eb:47:66:7b:90:94:3a:90:d4:5c:b3:25:69:71:71:48:b7:ca: 91:b1:8b:0d:db:c6:32:7d:d2:26:12:35:3f:ee:5a:06:3a:c2: 66:c2:34:e3:25:ee:20:30:84:02:bd:a6:e0:82:10:62:6b:f1: 51:9c:e6:da:1f:ef:68:0f:c4:9c:e7:4d:68:04:10:e9:2c:d6: bc:f1:2d:e2:bb:82:63:91:2f:ab:35:c4:d7:d6:b4:45:45:77: 77:ee:46:56:37:d6:92:10:84:e8:30:1e:9d:dc:b9:e1:1a:93: 57:05:92:63:95:79:65:28:e5:ed:93:17:81:d5:d6:af:0e:96: 77:bd:d3:9b:8b:bb:3f:6c:49:b0:23:b5:2b:f5:c7:58:49:4d: 1c:eb:7a:30:fa:fa:ca:dd:3f:37:b6:a3:14:b7:c5:77:a6:ba: 61:8f:ab:3d:f0:b5:45:01:0b:67:f4:6f:c6:9a:8c:b3:8b:7e: fa:62:1d:1e:05:10:12:98:8e:88:09:29:87:69:5a:e3:cf:a3: 34:62:2e:fb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODk1My00ODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXx/W4Hb6fYGzBFBujqZFsegBja4g6Bn+qjQvuBK5GKHV0dydyS3Ld5OyNLg 8+Xn5yMNXcynVS00XZ8guFl+vhJKY9aKEen2CkRWpgs/l0xYY+bllieWHFxABG82 GTBQM5AHZ9jBzBIoj4yTOR3Z0hSFq3a+6j0TxKjiYzdVSyzNl6u9qvZhjDX/X/Mk vu6/fNJ94eFgFYdovrtII8M7e7uR/fwNUrbim3kpU6AznnvW/kBn8MVtsi3eS8Sn 9HAqQtMksjOkWpQDQ9HNfBNfFjrGvALlNyIimJFJ4d2DlBS2f/POO7+6nv5BNCHK g9XauMguh7Hx5UPdiXswCPRrZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJsTp0Xz I0+VJqN2l9U2KG8HIUWqMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvNUMzRjJCQjY5 MzI4MTFFOEJDOTM4NjVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ+ZHMA0GCSqGSIb3DQEBCwUAA4IBAQAsBOPv+2vnINskrlBsNy7J K26XWq6LnFq0tqz32Bjaa7d2SDODapafHipisWod/UpgXAGzFR3rR2Z7kJQ6kNRc syVpcXFIt8qRsYsN28YyfdImEjU/7loGOsJmwjTjJe4gMIQCvabgghBia/FRnOba H+9oD8Sc501oBBDpLNa88S3iu4JjkS+rNcTX1rRFRXd37kZWN9aSEIToMB6d3Lnh GpNXBZJjlXllKOXtkxeB1davDpZ3vdObi7s/bEmwI7Ur9cdYSU0c63ow+vrK3T83 tqMUt8V3prphj6s98LVFAQtn9G/Gmoyzi376Yh0eBRASmI6ICSmHaVrjz6M0Yi77 -----END CERTIFICATE-----Generated at Mon Mar 2 04:15:36 2026 by rpki-client