$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa File: F11BA4EA75B811EDA34F9687C4F9AE02.roa (raw, json) Hash identifier: EhbdEYMmyBbOg+c6cZePofT5T8fPpEuhHFd/+ssLJFs= Subject key identifier: 37:F3:29:43:50:18:6A:0A:71:6D:F0:90:BB:FA:44:59:0E:D4:64:2F Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 0270 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:55:14 +0000 ROA not before: Sun 21 Dec 2025 01:22:22 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133876 IP address blocks: 103.44.148.0/24 maxlen: 24 203.16.200.0/24 maxlen: 24 203.16.201.0/24 maxlen: 24 203.16.202.0/24 maxlen: 24 203.16.203.0/24 maxlen: 24 2400:bf20::/36 maxlen: 36 2400:bf20:1000::/36 maxlen: 36 2400:bf20:2000::/36 maxlen: 36 2400:bf20:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Dec 21 01:22:22 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43732-69db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:cf:50:a2:66:0e:a8:1a:a0:2f:ff:9a:19: 56:62:14:bf:ad:2f:56:2f:6f:6c:49:1a:0c:83:32: 59:90:eb:db:10:e2:e8:2a:1f:65:16:55:b8:7a:93: 2b:13:10:20:4a:a3:10:bb:93:b0:65:0f:a0:a4:25: 66:8c:d7:0a:9c:ac:22:5b:f7:e3:45:e9:48:81:c5: 13:18:20:8a:f3:16:b2:c4:34:d5:35:4b:92:37:96: 75:6f:bb:a2:72:e8:ef:61:4b:53:fe:df:3b:84:5a: 3b:9e:f3:40:13:7b:61:a0:fe:23:e4:70:60:39:1d: 56:40:2e:de:68:ec:cc:38:df:a1:01:d4:f5:f8:9c: 4e:28:ef:3c:b0:ff:44:f1:40:b6:93:01:e7:cc:75: a4:e7:bf:b3:11:81:99:5f:ee:5b:1a:72:cc:e0:e8: e4:f8:62:ee:d0:12:d8:d5:37:55:a4:fb:c7:aa:37: d4:ff:ad:5e:56:43:76:09:7e:b4:89:5f:de:54:2c: 6b:ca:94:f2:93:79:f5:17:0f:45:e5:d0:4b:c2:49: dc:4a:ce:fe:0c:88:be:8d:9d:dc:c1:3b:15:98:a4: ee:4b:9c:9c:dc:82:38:7a:6d:7e:66:0b:c1:69:c4: 18:12:81:89:0b:14:35:dc:52:ba:ca:16:ab:48:b6: fc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F3:29:43:50:18:6A:0A:71:6D:F0:90:BB:FA:44:59:0E:D4:64:2F X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/F11BA4EA75B811EDA34F9687C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.44.148.0/24 203.16.200.0/22 IPv6: 2400:bf20::/34 Signature Algorithm: sha256WithRSAEncryption 44:54:a4:ab:8a:01:09:d1:c6:dd:d5:53:3c:b9:3a:73:ec:05: dd:e1:f7:e5:c2:b1:33:ec:61:02:74:09:af:35:dd:6c:06:8b: 2b:92:bb:0a:7d:9a:11:86:5b:b3:3a:50:09:5e:5c:b4:fb:b6: d6:51:76:86:e3:43:c0:0d:54:03:00:e9:fa:36:ec:03:4b:77: b1:85:09:fb:a4:7c:68:95:e9:33:48:12:a8:43:cf:bc:42:1f: c7:2b:22:b9:cf:78:62:75:b8:25:72:8b:14:ef:96:e4:b2:b4: 05:d6:dc:c1:98:17:2c:6b:14:75:72:00:b1:58:78:04:98:ba: 21:f8:ea:07:6f:f6:fd:6f:72:57:71:b9:78:cc:1c:1f:69:23: 44:34:62:d6:a6:0d:4f:2a:e6:d9:ac:44:4b:4a:18:f6:d6:94: 8f:03:e8:6f:59:98:c9:66:f6:31:ca:26:bb:9b:6e:8b:95:e5: b4:0f:6a:5d:24:cd:af:55:98:56:ee:22:af:72:2d:8a:6f:6c: cb:46:4e:ad:0c:ef:44:1e:fa:ad:c2:a5:3c:b6:9f:9a:6f:d8: 61:f5:d4:89:cf:af:41:f2:08:00:2b:b4:49:78:44:b8:2f:55: 2f:26:50:fc:76:09:44:52:88:a0:23:e7:de:22:7b:92:df:17: a9:2d:48:e0 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUxMjIxMDEyMjIyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzczMi02OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHTPUKJmDqgaoC//mhlWYhS/rS9WL29sSRoMgzJZkOvbEOLoKh9lFlW4epMr ExAgSqMQu5OwZQ+gpCVmjNcKnKwiW/fjRelIgcUTGCCK8xayxDTVNUuSN5Z1b7ui cujvYUtT/t87hFo7nvNAE3thoP4j5HBgOR1WQC7eaOzMON+hAdT1+JxOKO88sP9E 8UC2kwHnzHWk57+zEYGZX+5bGnLM4Ojk+GLu0BLY1TdVpPvHqjfU/61eVkN2CX60 iV/eVCxrypTyk3n1Fw9F5dBLwkncSs7+DIi+jZ3cwTsVmKTuS5yc3II4em1+ZgvB acQYEoGJCxQ13FK6yharSLb8iwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFDfzKUNQ GGoKcW3wkLv6RFkO1GQvMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDQjAvMzc3MDEyNEU2QkM1MTFFRDg2NkE3RDVFQzRGOUFFMDIvRjExQkE0RUE3 NUI4MTFFREEzNEY5Njg3QzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAS BAIAATAMAwQAZyyUAwQCyxDIMA4EAgACMAgDBgYkAL8gADANBgkqhkiG9w0BAQsF AAOCAQEARFSkq4oBCdHG3dVTPLk6c+wF3eH35cKxM+xhAnQJrzXdbAaLK5K7Cn2a EYZbszpQCV5ctPu21lF2huNDwA1UAwDp+jbsA0t3sYUJ+6R8aJXpM0gSqEPPvEIf xysiuc94YnW4JXKLFO+W5LK0BdbcwZgXLGsUdXIAsVh4BJi6IfjqB2/2/W9yV3G5 eMwcH2kjRDRi1qYNTyrm2axES0oY9taUjwPob1mYyWb2Mcomu5tui5XltA9qXSTN r1WYVu4ir3Itim9sy0ZOrQzvRB76rcKlPLafmm/YYfXUic+vQfIIACu0SXhEuC9V LyZQ/HYJRFKIoCPn3iJ7kt8XqS1I4A== -----END CERTIFICATE-----Generated at Mon Mar 2 07:26:39 2026 by rpki-client