$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/3D88426C974511E982D6FD1BC4F9AE02.roa File: 3D88426C974511E982D6FD1BC4F9AE02.roa (raw, json) Hash identifier: VIZdhiYSpiKQJVRkddgrRD+Jy12svVReopMn7lF4O6I= Subject key identifier: 7C:48:44:5C:4C:0C:13:8C:A1:43:53:CF:29:99:1E:66:B0:4D:BD:0E Certificate issuer: /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Certificate serial: 0F00 Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/3D88426C974511E982D6FD1BC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:36:05 +0000 ROA not before: Fri 20 Jun 2025 17:51:45 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139236 IP address blocks: 103.140.64.0/23 maxlen: 24 2001:df0:b080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3840 (0xf00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40 Validity Not Before: Jun 20 17:51:45 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a424a5-2008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:18:39:87:d4:51:49:47:be:b6:12:54:c7:59: 29:d4:89:12:4d:ca:29:72:98:32:d6:39:97:83:71: 00:ca:fc:f7:18:31:29:bf:08:43:72:22:26:48:79: 7d:04:95:65:0a:a6:e5:1c:25:45:cc:fa:c8:e1:02: ee:c5:d2:ef:44:cd:cb:7e:9b:57:cb:21:55:65:9b: 92:a6:db:b7:15:be:7a:20:09:c6:e5:fc:ef:30:c2: e6:eb:42:29:c2:1a:a1:b1:02:8f:8b:80:54:56:59: c8:11:4c:eb:d9:c1:71:0b:87:e5:90:32:7e:1f:e0: 2d:89:9a:9c:86:0c:08:0a:d2:6b:02:f8:6f:2f:b2: e7:c5:3a:66:51:2b:de:71:99:a6:40:bc:68:4a:c4: cd:50:8f:ac:00:30:df:21:37:6f:d1:3e:37:47:c4: 31:3e:5d:1f:b3:21:7c:e3:aa:9e:b2:b6:86:8e:9c: 0e:2d:8e:11:b5:f4:7e:f4:01:e0:4e:40:b4:af:fa: bc:de:d7:71:15:cb:a1:b8:a2:2b:60:da:48:98:5c: 0c:9d:b9:78:2b:1c:37:0a:79:4f:e7:2c:4f:44:04: 53:1f:be:59:98:ff:91:f0:fa:9e:c0:aa:4c:0b:3d: 51:1b:99:58:24:1c:e2:b3:5e:d3:38:99:b1:5f:fa: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:44:5C:4C:0C:13:8C:A1:43:53:CF:29:99:1E:66:B0:4D:BD:0E X509v3 Authority Key Identifier: keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/3D88426C974511E982D6FD1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.140.64.0/23 IPv6: 2001:df0:b080::/48 Signature Algorithm: sha256WithRSAEncryption bf:0a:94:79:c9:7b:14:78:3c:d5:6a:0e:28:9d:15:e3:89:02: 40:f9:a9:fd:f3:ca:ba:4f:1d:72:69:a1:e3:0c:75:eb:ab:4d: 84:05:9c:a9:15:cc:4c:d2:6a:a0:79:a8:1c:30:6a:7e:1f:d2: 08:d0:06:ba:75:5e:37:87:81:a1:c3:21:21:be:49:bd:0d:d9: 45:be:f2:b0:7b:80:57:f6:a7:74:c7:37:ea:90:34:1a:6d:fe: 65:1d:b0:ab:fa:10:a3:71:c4:1d:6c:33:9c:f2:ce:23:fc:fe: 01:a7:80:d3:d3:1c:fe:49:97:e1:58:4a:b6:2a:5b:34:ec:17: 9c:22:49:7b:4e:78:c1:d1:11:30:00:a4:93:34:9c:b5:7a:f1: 38:f5:d6:9c:8f:58:a2:6c:bf:91:29:de:fa:2c:51:ab:a4:1a: 7c:1e:bd:0c:e3:48:dc:0e:63:55:2e:53:4d:ea:62:a4:91:df: be:b1:d0:e0:7a:af:dd:63:52:90:75:54:9e:78:29:43:c7:8f: 7b:46:7e:6c:4c:ff:7f:4f:5f:9a:a9:38:d5:4b:c8:ac:e9:fb: 27:69:d2:be:3b:ab:9e:3b:ac:f4:ae:90:fb:8f:9e:b7:33:2e: 1f:4c:b9:71:30:6e:a0:be:e8:9a:16:70:44:cc:99:61:9b:81: 85:6b:23:2b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU2MzcxMTAvBgNVBAUTKDEwOTg1MkJBNURDNEEzNjhDRjc2MTIwNTE1RUNBQzYy RUZEQTNFNDAwHhcNMjUwNjIwMTc1MTQ1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjRhNS0yMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxg5h9RRSUe+thJUx1kp1IkSTcopcpgy1jmXg3EAyvz3GDEpvwhDciImSHl9 BJVlCqblHCVFzPrI4QLuxdLvRM3LfptXyyFVZZuSptu3Fb56IAnG5fzvMMLm60Ip whqhsQKPi4BUVlnIEUzr2cFxC4flkDJ+H+AtiZqchgwICtJrAvhvL7LnxTpmUSve cZmmQLxoSsTNUI+sADDfITdv0T43R8QxPl0fsyF846qesraGjpwOLY4RtfR+9AHg TkC0r/q83tdxFcuhuKIrYNpImFwMnbl4Kxw3CnlP5yxPRARTH75ZmP+R8PqewKpM Cz1RG5lYJBzis17TOJmxX/ohwwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHxIRFxM DBOMoUNTzymZHmawTb0OMB8GA1UdIwQYMBaAFBCYUrpdxKNoz3YSBRXsrGLv2j5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTYzNy85QkFFQTEzQTk3 NDMxMUU5QkZEOEU1MTlDNEY5QUUwMi9FSmhTdWwzRW8yalBkaElGRmV5c1l1X2FQ a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VKaFN1bDNFbzJqUGRoSUZGZXlzWXVfYVBrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkU2MzcvOUJBRUExM0E5NzQzMTFFOUJGRDhFNTE5QzRGOUFFMDIvM0Q4ODQyNkM5 NzQ1MTFFOTgyRDZGRDFCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4xAMA8EAgACMAkDBwAgAQ3wsIAwDQYJKoZIhvcNAQELBQADggEB AL8KlHnJexR4PNVqDiidFeOJAkD5qf3zyrpPHXJpoeMMdeurTYQFnKkVzEzSaqB5 qBwwan4f0gjQBrp1XjeHgaHDISG+Sb0N2UW+8rB7gFf2p3THN+qQNBpt/mUdsKv6 EKNxxB1sM5zyziP8/gGngNPTHP5Jl+FYSrYqWzTsF5wiSXtOeMHRETAApJM0nLV6 8Tj11pyPWKJsv5Ep3vosUaukGnwevQzjSNwOY1UuU03qYqSR376x0OB6r91jUpB1 VJ54KUPHj3tGfmxM/39PX5qpONVLyKzp+ydp0r47q547rPSukPuPnrczLh9MuXEw bqC+6JoWcETMmWGbgYVrIys= -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:08 2026 by rpki-client