$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/13D68EB430AB11F0A15DC75AC4F9AE02.roa File: 13D68EB430AB11F0A15DC75AC4F9AE02.roa (raw, json) Hash identifier: Tu30AU0o2UBF3Q9Ji3CUOd6/yb/H5yOQ7wtb9Y5l1xA= Subject key identifier: 84:F7:73:B0:40:78:40:EB:2B:5D:55:A9:C5:AC:46:E9:4C:D0:A7:7D Certificate issuer: /CN=A91FAA91/serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Certificate serial: 0240 Authority key identifier: A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/13D68EB430AB11F0A15DC75AC4F9AE02.roa Signing time: Sun 01 Mar 2026 04:22:48 +0000 ROA not before: Sun 01 Mar 2026 04:22:48 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 214143 IP address blocks: 103.83.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAA91, serialNumber=A0C80CEE063C9CC82CDCB0BC745C4FE46DD02657 Validity Not Before: Mar 1 04:22:48 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3bf17-af68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:6e:16:0c:ea:d6:7d:e9:0c:2d:50:4e:91: b9:3d:8a:18:81:79:fc:46:ab:32:9c:df:9a:1a:14: ff:92:68:68:c1:1a:4f:8c:d4:98:1d:54:89:07:39: 10:76:58:5a:d6:5f:32:a3:00:d9:97:80:4e:d7:f8: 5f:93:13:b2:0c:65:c2:09:be:97:73:72:52:be:50: 4a:64:dd:72:a7:51:37:eb:b2:ed:80:6c:e1:39:d5: 65:83:a6:0c:16:3f:7b:3c:61:a7:91:1c:67:19:1d: 9c:29:f0:7c:74:1b:f4:c6:4c:d6:5f:8f:c4:09:53: de:13:e2:1f:a9:4f:b6:93:df:b7:87:19:18:91:39: c4:a6:76:86:66:f4:3c:5b:fd:45:b5:6d:af:aa:81: 89:cd:82:4f:ac:eb:10:05:6e:98:ff:71:49:c6:0b: ee:ab:a4:b6:41:d1:fa:52:95:a0:fb:9e:19:53:0f: 21:6d:f0:f0:d5:0f:30:b6:e4:34:5a:52:c3:10:e8: 7f:99:86:12:69:66:dc:99:1c:c2:77:38:46:e2:9d: ab:05:da:65:80:dd:19:f9:bf:d9:6a:87:42:c6:e3: 09:52:a2:a1:0a:64:ed:01:2a:93:31:ee:93:69:9a: 44:67:1e:a1:4f:d2:ed:98:90:c7:72:4e:9f:a4:03: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F7:73:B0:40:78:40:EB:2B:5D:55:A9:C5:AC:46:E9:4C:D0:A7:7D X509v3 Authority Key Identifier: keyid:A0:C8:0C:EE:06:3C:9C:C8:2C:DC:B0:BC:74:5C:4F:E4:6D:D0:26:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/oMgM7gY8nMgs3LC8dFxP5G3QJlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMgM7gY8nMgs3LC8dFxP5G3QJlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAA91/9420D2100A5A11EEA3F5B441C4F9AE02/13D68EB430AB11F0A15DC75AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.83.42.0/24 Signature Algorithm: sha256WithRSAEncryption a4:94:2d:6e:27:04:4e:56:44:64:9f:7f:15:21:e0:32:3e:33: 87:51:77:44:5e:c0:4a:8c:2f:97:3f:16:12:13:34:38:a9:a7: d2:08:95:7a:5e:45:c4:7b:36:08:2e:eb:b7:ea:5a:22:8c:53: 67:40:2c:85:ef:9e:65:be:b9:01:a8:64:d3:76:be:42:1e:34: 34:11:03:e7:af:5d:3b:52:9c:2f:35:86:e6:12:fa:da:5d:f9: 38:6a:aa:91:65:bc:11:50:75:bf:5e:80:75:80:f5:b2:0a:01: 48:b4:54:be:33:b1:61:87:dd:be:d1:eb:d9:af:e3:6f:89:d4: 60:46:fc:ae:10:ff:91:c7:4f:95:96:62:3a:01:78:4f:bc:47: 88:3f:4f:88:c6:88:8a:61:2c:fd:b4:8b:ac:28:a3:40:17:6b: e5:48:f0:f5:67:ac:ba:e9:60:59:7c:a8:e2:aa:41:65:f5:1e: 66:19:96:47:17:86:d9:2c:12:9e:13:4b:15:1d:23:56:f1:42: 67:53:cb:93:22:b0:e0:3d:46:07:17:45:b6:d3:87:16:53:90: 7c:fa:ec:fb:88:39:3b:b7:0d:a4:e9:83:87:7e:bd:bf:08:4b: 6c:9b:4b:63:3b:f8:64:d2:1e:34:f5:2a:ca:dd:0f:2e:53:bc: 30:07:6b:dc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFBOTExMTAvBgNVBAUTKEEwQzgwQ0VFMDYzQzlDQzgyQ0RDQjBCQzc0NUM0RkU0 NkREMDI2NTcwHhcNMjYwMzAxMDQyMjQ4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OWEzYmYxNy1hZjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK5uFgzq1n3pDC1QTpG5PYoYgXn8RqsynN+aGhT/kmhowRpPjNSYHVSJBzkQ dlha1l8yowDZl4BO1/hfkxOyDGXCCb6Xc3JSvlBKZN1yp1E367LtgGzhOdVlg6YM Fj97PGGnkRxnGR2cKfB8dBv0xkzWX4/ECVPeE+IfqU+2k9+3hxkYkTnEpnaGZvQ8 W/1FtW2vqoGJzYJPrOsQBW6Y/3FJxgvuq6S2QdH6UpWg+54ZUw8hbfDw1Q8wtuQ0 WlLDEOh/mYYSaWbcmRzCdzhG4p2rBdplgN0Z+b/ZaodCxuMJUqKhCmTtASqTMe6T aZpEZx6hT9LtmJDHck6fpAM/YQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIT3c7BA eEDrK11VqcWsRulM0Kd9MB8GA1UdIwQYMBaAFKDIDO4GPJzILNywvHRcT+Rt0CZX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUE5MS85NDIwRDIxMDBB NUExMUVFQTNGNUI0NDFDNEY5QUUwMi9vTWdNN2dZOG5NZ3MzTEM4ZEZ4UDVHM1FK bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NZ003Z1k4bk1nczNMQzhkRnhQNUczUUpsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFBOTEvOTQyMEQyMTAwQTVBMTFFRUEzRjVCNDQxQzRGOUFFMDIvMTNENjhFQjQz MEFCMTFGMEExNURDNzVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ1MqMA0GCSqGSIb3DQEBCwUAA4IBAQCklC1uJwROVkRkn38VIeAy PjOHUXdEXsBKjC+XPxYSEzQ4qafSCJV6XkXEezYILuu36loijFNnQCyF755lvrkB qGTTdr5CHjQ0EQPnr107UpwvNYbmEvraXfk4aqqRZbwRUHW/XoB1gPWyCgFItFS+ M7Fhh92+0evZr+NvidRgRvyuEP+Rx0+VlmI6AXhPvEeIP0+IxoiKYSz9tIusKKNA F2vlSPD1Z6y66WBZfKjiqkFl9R5mGZZHF4bZLBKeE0sVHSNW8UJnU8uTIrDgPUYH F0W204cWU5B8+uz7iDk7tw2k6YOHfr2/CEtsm0tjO/hk0h409SrK3Q8uU7wwB2vc -----END CERTIFICATE-----Generated at Mon Mar 2 00:23:39 2026 by rpki-client