$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa File: E50E6E14B63411EDB4416786C4F9AE02.roa (raw, json) Hash identifier: Qem7Qx6nHXKKXruykk4z4oiib+jLq+m3t0rz8jytBUE= Subject key identifier: 56:CF:EA:2A:BC:0E:C6:90:3B:C0:CF:AA:36:29:08:F2:06:47:B2:08 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 224F Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:54:07 +0000 ROA not before: Tue 04 Mar 2025 16:33:16 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38330 IP address blocks: 103.232.252.0/22 maxlen: 22 125.214.80.0/21 maxlen: 21 203.83.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8783 (0x224f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Mar 4 16:33:16 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4611e-8731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:84:f0:35:19:16:ac:1e:e4:0a:93:c9:e2: 2e:5a:48:0f:7b:f7:65:08:e1:3b:7b:05:d8:24:3c: ed:93:58:a0:f8:34:16:64:a9:c2:0c:ad:0c:62:b3: 88:de:58:53:3c:e2:25:f0:48:83:43:33:44:c6:61: 3c:94:68:10:c3:4f:87:c1:b5:a6:ff:a5:9f:17:1e: 41:d6:14:37:f8:2b:0a:b4:69:fe:ed:18:3e:28:8c: 6a:6d:fb:15:73:e3:17:c1:c4:8b:2f:0b:ab:31:d4: d0:27:3d:24:65:ec:39:fc:98:26:21:d1:ea:31:b5: 70:8f:80:c5:39:11:12:60:07:53:c6:c1:ab:b8:b0: ef:6f:36:62:7e:37:f5:a0:88:12:88:8e:39:55:43: 25:a4:85:67:82:89:9e:0e:87:36:47:4a:22:2a:d9: b5:0d:bf:ca:71:00:05:9e:d6:e0:2a:1c:61:3b:57: e9:fa:da:3d:9d:0e:d2:10:20:8f:6b:7f:11:36:2e: 0b:c7:23:5c:ff:ae:f2:61:a6:9a:03:96:1c:96:c6: 4b:c5:5a:bd:08:a1:32:1d:51:2d:9a:e6:dc:48:72: f6:e5:4a:a2:6a:fd:15:dc:81:84:4b:eb:ff:fd:a5: b3:56:1b:86:81:4b:96:06:27:d8:2e:73:7f:8d:d1: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:CF:EA:2A:BC:0E:C6:90:3B:C0:CF:AA:36:29:08:F2:06:47:B2:08 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.232.252.0/22 125.214.80.0/21 203.83.4.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:4e:66:70:f4:55:e2:77:de:3c:3c:3e:79:10:b0:52:1c:dd: dc:b4:65:a0:1c:a3:88:06:05:cf:b5:e2:09:94:bf:f2:43:8a: 06:10:b2:ee:11:dd:7c:31:df:32:ed:de:c3:4b:5c:84:03:74: 77:3d:3e:01:bc:9d:8a:d6:6d:c8:2b:0e:34:69:e0:0a:06:55: 96:ed:15:84:74:57:4e:8e:6f:3d:1c:bc:e1:e2:57:65:dd:88: 96:b1:7b:81:aa:59:c0:a5:62:e1:73:73:74:69:34:46:f0:78: e6:b2:32:6c:68:27:c5:8f:95:ed:10:94:99:68:eb:e5:65:5d: 03:f2:82:86:46:a9:7c:d1:92:ea:43:0b:a1:19:48:c5:36:b0: dd:a4:85:1e:83:68:42:ed:9e:62:54:61:65:64:14:60:76:75: e2:68:1e:ce:ae:07:cd:40:a7:cc:9d:7c:84:9a:9a:af:ce:15: 12:c9:11:b9:13:90:86:0f:c4:27:cc:7a:be:22:e0:d5:e2:26: 24:bb:e8:53:f2:86:13:f1:21:79:57:45:9c:3d:d6:b5:60:98: dd:37:c9:a5:26:2e:81:f3:f3:e2:dd:4b:a3:18:8b:91:8c:32: a2:6f:ad:e5:ce:48:f7:83:bf:a6:c4:40:73:80:a2:21:e6:88: b0:b8:5f:85 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICIk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjUwMzA0MTYzMzE2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjExZS04NzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkeE8DUZFqwe5AqTyeIuWkgPe/dlCOE7ewXYJDztk1ig+DQWZKnCDK0MYrOI 3lhTPOIl8EiDQzNExmE8lGgQw0+HwbWm/6WfFx5B1hQ3+CsKtGn+7Rg+KIxqbfsV c+MXwcSLLwurMdTQJz0kZew5/JgmIdHqMbVwj4DFORESYAdTxsGruLDvbzZifjf1 oIgSiI45VUMlpIVngomeDoc2R0oiKtm1Db/KcQAFntbgKhxhO1fp+to9nQ7SECCP a38RNi4LxyNc/67yYaaaA5YclsZLxVq9CKEyHVEtmubcSHL25Uqiav0V3IGES+v/ /aWzVhuGgUuWBifYLnN/jdGSowIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFbP6iq8 DsaQO8DPqjYpCPIGR7IIMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvRTUwRTZFMTRC NjM0MTFFREI0NDE2Nzg2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ+j8AwQDfdZQAwQCy1MEMA0GCSqGSIb3DQEBCwUAA4IBAQBaTmZw 9FXid948PD55ELBSHN3ctGWgHKOIBgXPteIJlL/yQ4oGELLuEd18Md8y7d7DS1yE A3R3PT4BvJ2K1m3IKw40aeAKBlWW7RWEdFdOjm89HLzh4ldl3YiWsXuBqlnApWLh c3N0aTRG8HjmsjJsaCfFj5XtEJSZaOvlZV0D8oKGRql80ZLqQwuhGUjFNrDdpIUe g2hC7Z5iVGFlZBRgdnXiaB7OrgfNQKfMnXyEmpqvzhUSyRG5E5CGD8QnzHq+IuDV 4iYku+hT8oYT8SF5V0WcPda1YJjdN8mlJi6B8/Pi3UujGIuRjDKib63lzkj3g7+m xEBzgKIh5oiwuF+F -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:08 2026 by rpki-client