$ rpki-client -vvf rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/7214B0AA9E1711E9B3710950C4F9AE02.roa File: 7214B0AA9E1711E9B3710950C4F9AE02.roa (raw, json) Hash identifier: qe2fLeLV0ExAvZ9BmcsIJdXoDrwULJXHzD1nkX80UMA= Subject key identifier: 0B:F6:E5:25:5B:E7:46:27:FA:69:6C:44:5B:71:32:0F:3D:38:F8:9B Certificate issuer: /CN=A91F018E/serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Certificate serial: 0EE1 Authority key identifier: D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/7214B0AA9E1711E9B3710950C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:20:57 +0000 ROA not before: Mon 10 Mar 2025 18:07:21 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132688 IP address blocks: 103.18.0.0/22 maxlen: 22 103.18.0.0/24 maxlen: 24 103.18.1.0/24 maxlen: 24 103.18.2.0/24 maxlen: 24 103.18.3.0/24 maxlen: 24 2001:df3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3809 (0xee1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F018E, serialNumber=D3038BA4490EA815ADB09F1A38658BCD8B17F482 Validity Not Before: Mar 10 18:07:21 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a404f9-b421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:46:da:a7:2e:95:44:e4:1d:91:6c:59:cd: 8f:7e:d3:a1:a3:01:e3:57:2e:53:cd:8d:29:c8:3d: 40:6f:92:88:97:1b:e9:82:b3:b3:b6:31:31:28:c6: dc:62:c7:32:1d:3b:90:73:8b:c9:68:60:c5:76:5e: 07:70:33:c9:64:34:a7:5a:5c:a7:98:31:46:65:b2: ca:33:77:2e:c6:b8:5f:05:19:cf:30:03:ae:75:7a: dd:85:9a:49:91:88:54:15:5a:6b:e7:69:fe:f8:d4: ec:49:43:d0:f0:a8:92:8b:1a:b7:af:2c:9d:0d:e6: 00:37:94:e2:e6:af:b7:2c:1e:2e:fa:1e:f7:2b:c6: 70:71:5d:f0:00:0c:98:ef:c8:8f:69:d2:f3:9c:0f: 52:0b:9d:b1:45:ca:fd:40:40:6d:f1:e8:8b:7e:49: 01:a0:b1:41:d0:f3:a2:3a:a9:0d:d7:4b:2a:a6:53: fe:94:4a:01:39:41:7c:84:38:35:24:de:83:d5:3a: 0b:09:bd:31:16:42:9b:5d:82:2d:7f:48:83:73:2b: c8:cf:40:b9:87:af:d9:69:4a:23:d5:d7:f8:46:5f: 58:fd:b7:66:dc:b3:31:34:2d:f3:f4:8e:f7:35:ae: 7f:90:97:62:fd:45:af:01:5b:b6:aa:9d:c9:cf:cf: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F6:E5:25:5B:E7:46:27:FA:69:6C:44:5B:71:32:0F:3D:38:F8:9B X509v3 Authority Key Identifier: keyid:D3:03:8B:A4:49:0E:A8:15:AD:B0:9F:1A:38:65:8B:CD:8B:17:F4:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/0wOLpEkOqBWtsJ8aOGWLzYsX9II.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wOLpEkOqBWtsJ8aOGWLzYsX9II.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F018E/FA568E5E9E1511E99015364AC4F9AE02/7214B0AA9E1711E9B3710950C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.18.0.0/22 IPv6: 2001:df3::/48 Signature Algorithm: sha256WithRSAEncryption 02:37:d6:12:f0:ab:ab:00:06:93:10:dc:8d:b2:10:f5:a4:02: 0a:29:c9:c6:a5:15:4e:33:02:6a:34:47:2f:9c:04:eb:83:fb: 37:b2:7a:c8:ef:22:74:6d:28:e2:79:1a:83:e9:f2:f8:7b:7f: 8a:a7:c5:61:11:e0:42:fe:53:70:16:bf:7a:a6:f5:09:64:df: 0a:8b:64:da:b4:dd:df:30:a4:36:9c:dd:6f:fc:5c:04:f5:12: e2:d4:45:66:02:a0:6f:10:3c:e0:d4:e6:6e:01:de:3f:08:f8: 92:2e:38:78:e9:69:b9:05:c6:1e:e8:78:ba:18:2c:01:98:cf: b6:e4:61:aa:d5:d0:37:f8:b1:85:a9:c4:ef:17:9f:1c:66:a9: b7:58:d5:a8:81:5e:98:ea:33:2e:40:6f:57:5c:17:6a:0e:e6: 1b:83:9a:66:4a:f7:30:5b:86:03:8f:65:45:70:a0:fd:26:49: ff:f8:da:e7:31:49:15:aa:b4:c0:f8:91:f8:7f:d2:a9:68:2e: 27:03:4f:c8:34:dc:83:ec:01:39:da:03:00:2d:91:45:67:ed: 25:20:80:ec:77:13:f8:ff:99:f2:4c:be:d2:de:47:ca:d9:8e: 62:16:80:a1:8b:d1:a2:9e:b6:03:e5:25:2c:71:00:b4:61:97: bc:93:2a:89 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjAxOEUxMTAvBgNVBAUTKEQzMDM4QkE0NDkwRUE4MTVBREIwOUYxQTM4NjU4QkNE OEIxN0Y0ODIwHhcNMjUwMzEwMTgwNzIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDRmOS1iNDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGFG2qculUTkHZFsWc2PftOhowHjVy5TzY0pyD1Ab5KIlxvpgrOztjExKMbc YscyHTuQc4vJaGDFdl4HcDPJZDSnWlynmDFGZbLKM3cuxrhfBRnPMAOudXrdhZpJ kYhUFVpr52n++NTsSUPQ8KiSixq3ryydDeYAN5Ti5q+3LB4u+h73K8ZwcV3wAAyY 78iPadLznA9SC52xRcr9QEBt8eiLfkkBoLFB0POiOqkN10sqplP+lEoBOUF8hDg1 JN6D1ToLCb0xFkKbXYItf0iDcyvIz0C5h6/ZaUoj1df4Rl9Y/bdm3LMxNC3z9I73 Na5/kJdi/UWvAVu2qp3Jz8/VoQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAv25SVb 50Yn+mlsRFtxMg89OPibMB8GA1UdIwQYMBaAFNMDi6RJDqgVrbCfGjhli82LF/SC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDE4RS9GQTU2OEU1RTlF MTUxMUU5OTAxNTM2NEFDNEY5QUUwMi8wd09McEVrT3FCV3RzSjhhT0dXTHpZc1g5 SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB3T0xwRWtPcUJXdHNKOGFPR1dMellzWDlJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjAxOEUvRkE1NjhFNUU5RTE1MTFFOTkwMTUzNjRBQzRGOUFFMDIvNzIxNEIwQUE5 RTE3MTFFOUIzNzEwOTUwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZxIAMA8EAgACMAkDBwAgAQ3zAAAwDQYJKoZIhvcNAQELBQADggEB AAI31hLwq6sABpMQ3I2yEPWkAgopycalFU4zAmo0Ry+cBOuD+zeyesjvInRtKOJ5 GoPp8vh7f4qnxWER4EL+U3AWv3qm9Qlk3wqLZNq03d8wpDac3W/8XAT1EuLURWYC oG8QPODU5m4B3j8I+JIuOHjpabkFxh7oeLoYLAGYz7bkYarV0Df4sYWpxO8Xnxxm qbdY1aiBXpjqMy5Ab1dcF2oO5huDmmZK9zBbhgOPZUVwoP0mSf/42ucxSRWqtMD4 kfh/0qloLicDT8g03IPsATnaAwAtkUVn7SUggOx3E/j/mfJMvtLeR8rZjmIWgKGL 0aKetgPlJSxxALRhl7yTKok= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:01 2026 by rpki-client