$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/E2DF828CF20211ECBCC9B986C4F9AE02.roa File: E2DF828CF20211ECBCC9B986C4F9AE02.roa (raw, json) Hash identifier: jiBvZp8q2/HrEtfhJqrPwYsS1vT/hkyHd2m0OXQ6h8E= Subject key identifier: CA:E8:3F:ED:02:30:24:9C:3E:3D:63:2A:AF:5C:DF:5C:D2:6A:90:7D Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Certificate serial: 0356 Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/E2DF828CF20211ECBCC9B986C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:01:45 +0000 ROA not before: Thu 03 Jul 2025 02:06:14 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149983 IP address blocks: 103.189.246.0/23 maxlen: 23 103.189.246.0/24 maxlen: 24 103.189.247.0/24 maxlen: 24 2001:df0:dfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 854 (0x356) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE Validity Not Before: Jul 3 02:06:14 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40079-e48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:44:1d:36:2d:46:38:52:1c:79:2c:10:77: c5:6a:54:c6:f5:59:12:5c:9f:82:e6:9d:d5:df:de: da:b2:e3:d7:8d:53:1b:f5:65:9f:ef:68:de:37:cd: c8:86:b3:d5:7f:65:f7:ab:c6:25:b3:bf:42:68:3b: 7e:1c:f3:36:90:e2:91:83:64:87:ca:dc:33:47:a7: 1e:97:dc:d5:5a:b4:44:e1:e3:b5:c6:49:f0:fa:5d: b8:6e:66:32:80:e4:0e:9f:f7:4e:2a:2d:e7:0a:2a: 87:86:a5:40:4d:0e:90:1e:08:e5:cf:6d:59:67:2a: 7c:a5:af:6b:14:52:4a:2d:54:70:42:48:11:a8:89: cb:6f:e0:9e:b6:ac:ad:f9:db:a7:0a:44:86:c3:7e: b4:b4:8b:40:55:cc:33:e5:22:aa:ec:26:e4:de:7a: 3a:cf:e8:81:e3:d3:72:7a:8a:9d:63:d4:6d:0a:c2: 64:5d:dd:35:1d:26:f6:37:20:e6:8d:62:3b:e4:35: 7b:aa:bd:d6:2c:0e:83:9b:23:11:ea:c2:3f:58:f2: c4:9b:e2:f2:da:cb:aa:aa:04:a2:47:9b:4a:ef:eb: f0:12:1f:5c:d7:db:79:bd:f0:a6:f2:01:90:d9:fa: 03:38:19:33:33:89:b2:f5:f3:22:6d:58:a0:b8:fa: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E8:3F:ED:02:30:24:9C:3E:3D:63:2A:AF:5C:DF:5C:D2:6A:90:7D X509v3 Authority Key Identifier: keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/E2DF828CF20211ECBCC9B986C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.189.246.0/23 IPv6: 2001:df0:dfc0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:67:e4:8d:41:79:11:d6:1e:f6:d6:21:8c:22:e6:50:de:0b: ea:04:46:46:88:90:a3:b4:a5:26:1d:1c:8c:1b:29:b2:e9:7e: b4:67:70:1d:80:7e:74:83:5a:e4:f2:09:ff:3a:7c:75:34:ce: 33:be:22:b6:8b:02:22:71:81:b7:23:9e:5f:76:e0:75:87:56: 07:1a:8d:42:f6:d4:0f:77:6a:02:d4:11:c1:cd:ba:bd:94:9a: fe:f9:ef:6c:c8:03:8a:b0:76:5e:95:17:0b:f1:4f:b2:f8:48: 69:f7:8a:be:03:46:d9:62:1b:a7:e8:0e:59:26:b7:62:6a:93: 33:07:31:fe:4a:27:da:29:72:83:8d:46:be:ba:31:77:f9:6c: 43:47:1f:f6:08:23:63:2f:c3:6a:33:26:6a:5e:ad:91:0d:d0: 2e:17:9e:05:38:37:66:69:22:5f:9c:c3:8e:13:7e:d3:f2:15: 9a:8f:18:b8:5f:b7:ba:be:99:b5:bb:32:c9:59:3f:ca:c1:83: 59:75:14:02:3c:cc:0b:50:7c:fe:21:20:d9:8a:7d:7d:f3:f7: 93:95:70:f9:b9:f3:4d:1d:3b:e8:fc:a9:21:50:d4:d7:80:27: 34:59:16:be:b4:45:e9:75:8e:08:1d:5f:cf:65:b9:68:ba:36: 54:2d:6f:c9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICA1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZBRTAxMTAvBgNVBAUTKEUxNDg5RTA1NDU2RTkyQ0FENzE1ODQ3MjAwRTRBNzVE NkMzRTQzQ0UwHhcNMjUwNzAzMDIwNjE0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDA3OS1lNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkX1EHTYtRjhSHHksEHfFalTG9VkSXJ+C5p3V397asuPXjVMb9WWf72jeN83I hrPVf2X3q8Yls79CaDt+HPM2kOKRg2SHytwzR6cel9zVWrRE4eO1xknw+l24bmYy gOQOn/dOKi3nCiqHhqVATQ6QHgjlz21ZZyp8pa9rFFJKLVRwQkgRqInLb+Cetqyt +dunCkSGw360tItAVcwz5SKq7Cbk3no6z+iB49NyeoqdY9RtCsJkXd01HSb2NyDm jWI75DV7qr3WLA6DmyMR6sI/WPLEm+Ly2suqqgSiR5tK7+vwEh9c19t5vfCm8gGQ 2foDOBkzM4my9fMibViguPqOsQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMroP+0C MCScPj1jKq9c31zSapB9MB8GA1UdIwQYMBaAFOFIngVFbpLK1xWEcgDkp11sPkPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkFFMC9GQTA0N0Y1NEYx RkMxMUVDOTlCMkNCNkJDNEY5QUUwMi80VWllQlVWdWtzclhGWVJ5QU9TblhXdy1R ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVaWVCVVZ1a3NyWEZZUnlBT1NuWFd3LVE4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZBRTAvRkEwNDdGNTRGMUZDMTFFQzk5QjJDQjZCQzRGOUFFMDIvRTJERjgyOENG MjAyMTFFQ0JDQzlCOTg2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ732MA8EAgACMAkDBwAgAQ3w38AwDQYJKoZIhvcNAQELBQADggEB AF9n5I1BeRHWHvbWIYwi5lDeC+oERkaIkKO0pSYdHIwbKbLpfrRncB2AfnSDWuTy Cf86fHU0zjO+IraLAiJxgbcjnl924HWHVgcajUL21A93agLUEcHNur2Umv7572zI A4qwdl6VFwvxT7L4SGn3ir4DRtliG6foDlkmt2JqkzMHMf5KJ9opcoONRr66MXf5 bENHH/YII2Mvw2ozJmperZEN0C4XngU4N2ZpIl+cw44TftPyFZqPGLhft7q+mbW7 MslZP8rBg1l1FAI8zAtQfP4hINmKfX3z95OVcPm5800dO+j8qSFQ1NeAJzRZFr60 Rel1jggdX89luWi6NlQtb8k= -----END CERTIFICATE-----Generated at Mon Mar 2 12:35:13 2026 by rpki-client