$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/397ED08A2F7911ED93B17C0FC4F9AE02.roa File: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (raw, json) Hash identifier: 0ylGlEK5g5VGTbkonEn2NkmUUOKnTNFRwRwB2OCSr2Y= Subject key identifier: 74:34:46:8B:92:EC:71:20:32:D1:76:39:88:99:A5:51:CC:A6:D6:E7 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 070D Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/397ED08A2F7911ED93B17C0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:31:20 +0000 ROA not before: Fri 30 May 2025 22:42:37 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135361 IP address blocks: 103.215.64.0/22 maxlen: 22 103.215.64.0/23 maxlen: 24 103.215.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: May 30 22:42:37 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a43198-91b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:5c:85:7a:38:9a:7d:6b:9d:d1:05:a7:fa: b9:48:03:39:8c:60:1b:0f:27:c7:dd:a3:d3:87:ab: f8:cf:c0:dc:d4:1e:92:5c:18:a2:d0:b1:50:48:bf: 5e:81:77:41:34:a1:34:cd:ad:fd:df:d6:89:3b:64: bc:27:df:36:59:db:8c:38:d3:ab:7e:dd:f5:e0:5c: 99:63:e4:57:39:d5:2a:f7:b3:0d:57:41:6b:46:55: 1c:d2:13:48:c5:8d:85:82:0b:52:f2:6d:07:12:eb: fa:fc:ea:ce:b9:7e:ce:49:e4:07:30:3d:ab:cb:52: e1:8d:bd:74:2b:a5:a6:ad:29:2e:2c:46:a8:20:ea: 4d:24:4c:48:bb:e5:bb:a1:c1:cd:b5:8d:8f:46:c5: 7b:d9:cd:81:eb:a7:a7:cc:c5:e3:00:00:92:69:76: 28:9c:7d:ab:75:4e:50:bb:a6:7e:16:9b:1a:c7:ac: 3d:d8:73:34:07:40:67:8d:8e:87:31:df:7a:77:f8: 8c:28:fb:8f:6d:e2:b0:53:0f:0d:63:42:64:0d:65: 3c:4c:b9:f8:a7:5a:5a:d9:d0:2e:95:b4:a9:cc:21: b6:ad:d3:27:e9:76:54:96:c3:e5:af:ee:84:e5:50: 1d:ef:98:f6:aa:cc:ff:ec:63:5b:bc:a5:39:a3:d7: 7b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:34:46:8B:92:EC:71:20:32:D1:76:39:88:99:A5:51:CC:A6:D6:E7 X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/397ED08A2F7911ED93B17C0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.215.64.0/22 Signature Algorithm: sha256WithRSAEncryption 67:43:b6:ae:ae:55:bb:db:10:d3:e8:5f:e8:2d:4d:ac:ef:82: 12:07:6b:9b:48:10:87:1f:d7:5c:c5:93:59:a9:dc:c6:bf:ca: c8:93:5d:30:73:eb:1f:91:1f:97:e5:17:b0:d2:5f:49:a9:88: 54:72:ae:02:db:8f:88:1a:ec:e3:13:1e:e5:25:17:10:ef:e4: e3:4b:73:eb:6d:32:df:09:00:4f:dd:39:84:3a:84:a0:c8:cb: 70:50:5e:63:17:a2:4d:1d:6f:4e:87:9b:38:da:e7:b0:6c:11: 64:d3:78:2b:22:b1:99:ba:9f:54:df:bf:3e:7c:05:b0:17:85: f8:d9:ee:26:f7:b1:ec:97:1e:4e:9c:05:d4:f4:c4:8c:56:98: a4:17:14:e5:e2:44:54:12:c4:63:20:20:b9:63:35:49:6e:70: 9b:26:ad:72:30:36:8d:28:dd:86:7c:46:73:4b:de:f5:81:6a: 82:8d:c7:5c:94:e0:90:94:14:c8:37:34:29:77:4e:b1:8d:f1: 5d:62:cc:e4:54:ce:38:31:20:a3:2b:2b:6b:1f:9c:e2:fa:8f: 12:f0:b5:a1:cc:38:af:ce:6e:db:0e:59:f3:58:e2:82:ac:8d: f4:a1:76:ac:ca:35:c3:42:15:4c:79:59:89:fe:b1:7f:dc:66: 37:14:b1:ce -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjUwNTMwMjI0MjM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzE5OC05MWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQxchXo4mn1rndEFp/q5SAM5jGAbDyfH3aPTh6v4z8Dc1B6SXBii0LFQSL9e gXdBNKE0za3939aJO2S8J982WduMONOrft314FyZY+RXOdUq97MNV0FrRlUc0hNI xY2FggtS8m0HEuv6/OrOuX7OSeQHMD2ry1Lhjb10K6WmrSkuLEaoIOpNJExIu+W7 ocHNtY2PRsV72c2B66enzMXjAACSaXYonH2rdU5Qu6Z+Fpsax6w92HM0B0BnjY6H Md96d/iMKPuPbeKwUw8NY0JkDWU8TLn4p1pa2dAulbSpzCG2rdMn6XZUlsPlr+6E 5VAd75j2qsz/7GNbvKU5o9d75QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHQ0RouS 7HEgMtF2OYiZpVHMptbnMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYyRTEvM0Y2OUNDNjY3RjAzMTFFQkEwODFBMDJCQzRGOUFFMDIvMzk3RUQwOEEy Rjc5MTFFRDkzQjE3QzBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ9dAMA0GCSqGSIb3DQEBCwUAA4IBAQBnQ7aurlW72xDT6F/oLU2s 74ISB2ubSBCHH9dcxZNZqdzGv8rIk10wc+sfkR+X5Rew0l9JqYhUcq4C24+IGuzj Ex7lJRcQ7+TjS3PrbTLfCQBP3TmEOoSgyMtwUF5jF6JNHW9Oh5s42uewbBFk03gr IrGZup9U378+fAWwF4X42e4m97Hslx5OnAXU9MSMVpikFxTl4kRUEsRjICC5YzVJ bnCbJq1yMDaNKN2GfEZzS971gWqCjcdclOCQlBTINzQpd06xjfFdYszkVM44MSCj KytrH5zi+o8S8LWhzDivzm7bDlnzWOKCrI30oXasyjXDQhVMeVmJ/rF/3GY3FLHO -----END CERTIFICATE-----Generated at Mon Mar 2 23:08:35 2026 by rpki-client