$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/20C4803669A011EA9055BD0EC4F9AE02.roa File: 20C4803669A011EA9055BD0EC4F9AE02.roa (raw, json) Hash identifier: R+96bcwecFf2cVpU7ANBKtm0Iy1WRFMsackOslbooo0= Subject key identifier: EE:1F:40:F2:13:BD:4C:D7:16:08:8E:AF:85:FE:0D:88:B4:07:E3:EB Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1CC9 Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/20C4803669A011EA9055BD0EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:29:30 +0000 ROA not before: Wed 30 Apr 2025 16:24:40 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133538 IP address blocks: 101.128.4.0/22 maxlen: 24 103.9.16.0/22 maxlen: 24 202.52.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7369 (0x1cc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Apr 30 16:24:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4231a-e3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:66:91:3c:8c:da:72:8c:c9:cf:e0:42:5b: 26:13:3b:29:63:1d:e8:67:87:29:b7:a4:2f:55:83: 20:a5:ba:9a:39:5e:49:b8:3a:d0:0c:6b:16:f4:1b: a3:30:41:b7:a1:e7:fc:ce:e4:11:30:40:3c:a9:56: 46:82:9d:a2:d5:0a:5a:63:9d:04:4e:e4:52:63:d1: a6:09:d1:5f:0b:f4:79:95:5f:a0:a1:43:56:25:e7: ee:e6:6e:c3:cd:1a:0b:ef:15:2f:c7:3d:83:6c:d3: d3:2d:4b:37:26:cc:2d:fa:b1:d6:b7:a1:a2:79:1e: ba:29:17:cd:b3:53:42:02:8a:21:bb:d4:55:8d:68: 9a:ac:ce:e4:b7:75:41:fe:12:5a:ed:c6:d7:74:bf: a9:9a:bc:f3:5b:86:c3:5a:7c:07:26:f8:f2:cb:e7: 5f:8a:be:d0:ff:fc:87:de:7a:a2:63:ba:d5:0f:2a: d7:48:6b:7f:55:04:a8:8f:8f:49:23:be:86:45:47: 62:61:d6:24:bb:8e:fc:3e:56:55:11:c7:f6:ea:94: fc:f2:cc:ac:c9:92:4b:ad:86:66:29:ae:43:a0:27: 17:d3:aa:13:5e:6b:6c:04:4a:03:ea:62:68:72:b8: 32:45:98:b0:ad:b1:a3:5a:77:31:7c:5d:04:cf:8a: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:40:F2:13:BD:4C:D7:16:08:8E:AF:85:FE:0D:88:B4:07:E3:EB X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/20C4803669A011EA9055BD0EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.128.4.0/22 103.9.16.0/22 202.52.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:04:b6:93:bb:9b:0b:c9:ce:e8:6f:8b:63:80:5d:94:22:2d: 86:0a:b1:c5:33:91:a6:08:19:cc:bb:b2:2d:2f:14:3e:ea:23: da:d0:c6:2b:ec:ed:e2:ca:80:17:09:fc:17:be:31:7e:1b:5b: 26:86:bb:b3:9a:57:00:cc:d1:05:79:aa:ef:a7:fd:47:34:60: 8a:aa:e5:3e:10:4c:23:fb:9b:78:4d:76:0f:1b:22:0f:b6:e4: ea:ae:c7:62:7a:70:f2:d7:86:b1:11:5d:2a:32:93:73:aa:62: d5:be:12:d1:90:d1:72:04:06:ff:3b:fd:bf:a9:fe:5f:9f:cb: 92:ce:10:34:9d:04:f3:00:49:72:12:ab:d4:97:bd:ff:fe:bc: c2:ad:e7:a0:7f:54:68:5d:6a:8a:bb:f1:d0:b8:e5:b3:99:59: 66:02:12:01:a7:f5:41:a4:0b:f1:43:73:35:69:a3:7f:27:ec: 2a:8d:e8:17:65:0b:fc:80:f6:5f:d4:a7:69:a7:29:9c:00:fe: 28:89:72:85:17:65:99:9a:47:2a:23:0e:58:c8:61:d9:67:eb: 4b:48:ad:8f:a1:4b:23:0d:77:ec:00:a3:f6:ff:5a:68:e3:54: 26:7b:c3:cd:22:0c:01:15:c4:be:ba:a2:bb:0b:b4:ba:73:0f: 18:c4:a3:76 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICHMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjUwNDMwMTYyNDQwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjMxYS1lM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArR1mkTyM2nKMyc/gQlsmEzspYx3oZ4cpt6QvVYMgpbqaOV5JuDrQDGsW9Buj MEG3oef8zuQRMEA8qVZGgp2i1QpaY50ETuRSY9GmCdFfC/R5lV+goUNWJefu5m7D zRoL7xUvxz2DbNPTLUs3Jswt+rHWt6GieR66KRfNs1NCAoohu9RVjWiarM7kt3VB /hJa7cbXdL+pmrzzW4bDWnwHJvjyy+dfir7Q//yH3nqiY7rVDyrXSGt/VQSoj49J I76GRUdiYdYku478PlZVEcf26pT88sysyZJLrYZmKa5DoCcX06oTXmtsBEoD6mJo crgyRZiwrbGjWncxfF0Ez4rinQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFO4fQPIT vUzXFgiOr4X+DYi0B+PrMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBGRTIvMkZGOUJCMjJFODMyMTFFNkJGNTEyODQyQzRGOUFFMDIvMjBDNDgwMzY2 OUEwMTFFQTkwNTVCRDBFQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZYAEAwQCZwkQAwQAyjQuMA0GCSqGSIb3DQEBCwUAA4IBAQB6BLaT u5sLyc7ob4tjgF2UIi2GCrHFM5GmCBnMu7ItLxQ+6iPa0MYr7O3iyoAXCfwXvjF+ G1smhruzmlcAzNEFearvp/1HNGCKquU+EEwj+5t4TXYPGyIPtuTqrsdienDy14ax EV0qMpNzqmLVvhLRkNFyBAb/O/2/qf5fn8uSzhA0nQTzAElyEqvUl73//rzCreeg f1RoXWqKu/HQuOWzmVlmAhIBp/VBpAvxQ3M1aaN/J+wqjegXZQv8gPZf1Kdppymc AP4oiXKFF2WZmkcqIw5YyGHZZ+tLSK2PoUsjDXfsAKP2/1po41Qme8PNIgwBFcS+ uqK7C7S6cw8YxKN2 -----END CERTIFICATE-----Generated at Mon Mar 2 15:33:47 2026 by rpki-client