$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/21525A1C520B11EE8B79021AC4F9AE02.roa File: 21525A1C520B11EE8B79021AC4F9AE02.roa (raw, json) Hash identifier: UYmnUcinM/YS4tsBaXiXnl11jWQgRyt4rogH4x+mFlo= Subject key identifier: 90:E5:17:02:82:C9:28:50:A5:86:B2:55:52:BE:26:8E:8E:46:0C:83 Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 0228 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/21525A1C520B11EE8B79021AC4F9AE02.roa Signing time: Thu 13 Aug 2026 02:52:42 +0000 ROA not before: Thu 13 Aug 2026 02:52:42 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151664 IP address blocks: 103.253.100.0/23 maxlen: 23 2001:df2:d040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Aug 13 02:52:42 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7d317a-aaa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:49:e2:24:6f:db:40:1c:61:a8:fc:7a:8b: 3d:77:6c:f1:fa:3b:31:a1:55:ab:0c:bf:18:0b:ed: 56:b5:69:d3:a8:15:3f:df:5d:fb:e7:56:41:29:46: 7d:1a:68:d0:b2:ef:cc:48:35:9e:f7:59:bd:df:2c: 52:60:5b:56:c5:76:b4:b9:6c:18:e9:ed:56:5e:6a: 12:87:27:1f:67:5e:9c:a1:75:89:a5:bc:5a:d3:31: d3:33:85:ca:4a:8c:f4:3f:c0:70:65:eb:4c:0c:71: da:a0:0a:55:e0:e9:66:55:94:0b:c7:d7:f5:1f:b2: ba:00:16:be:0a:00:84:a1:a5:2b:e6:41:41:fc:3f: 85:b5:94:b3:ce:a4:a9:3e:7c:2c:61:79:ba:38:b9: b4:23:2c:0d:cc:21:9e:83:de:38:5d:d5:0b:ed:7d: a1:80:39:00:e8:58:88:f3:80:f8:42:99:bb:46:85: 18:08:86:1d:75:32:f5:ff:40:1f:0a:a9:a1:34:59: 80:2b:f8:3b:e2:2a:28:10:7a:d9:d6:75:03:5e:ee: 61:6e:1b:57:4d:d8:8e:f3:7c:6f:3f:33:8b:1a:c3: 27:87:da:0c:21:22:10:e6:ac:5b:87:59:d0:23:a0: 4e:d6:5c:67:ce:8c:41:ff:46:ac:0d:d3:c3:52:e4: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E5:17:02:82:C9:28:50:A5:86:B2:55:52:BE:26:8E:8E:46:0C:83 X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/21525A1C520B11EE8B79021AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.253.100.0/23 IPv6: 2001:df2:d040::/48 Signature Algorithm: sha256WithRSAEncryption 91:ef:96:0b:db:9d:c9:d5:a3:5c:60:f1:70:b8:66:51:ad:53: 32:bf:d4:61:28:9b:09:3a:76:1d:0a:a1:05:52:fd:71:8e:bb: 16:2e:95:be:94:43:63:56:90:ea:b7:82:0d:ea:e1:e3:5d:da: 89:78:02:24:41:3d:aa:21:2c:14:71:90:7f:4f:fd:8d:22:3f: 30:04:2d:0f:30:f6:24:45:0e:4c:f3:85:fe:b6:cb:f4:f6:f6: 36:5d:74:f8:0c:f8:f3:79:5a:81:75:a0:bb:0c:4a:b9:2e:66: 08:d5:96:ef:f9:b0:e5:a5:8b:4e:f2:f7:af:41:a3:ed:ab:a8: cd:11:d8:b0:d3:69:e0:24:65:b8:cb:52:bf:77:77:cf:26:88: 81:1a:60:71:2e:db:5d:9d:6d:52:9c:c4:9f:38:86:f0:84:0d: 1f:c2:67:5e:e2:c5:7d:55:48:0f:08:5c:99:0e:d0:30:e3:63: 4f:10:e5:35:d5:a3:43:de:86:14:ea:6c:1c:70:9d:49:6a:6f: 86:23:14:c6:d1:1a:9f:e9:16:d7:d5:53:c9:5e:01:41:ae:57: d6:4f:ea:8a:cc:36:ce:d9:73:a8:a2:90:9d:7f:68:49:97:8c: bf:57:b8:88:35:eb:c4:ec:45:2d:d2:57:59:80:aa:d0:23:db: 66:0a:10:44 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjYwODEzMDI1MjQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdkMzE3YS1hYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukhJ4iRv20AcYaj8eos9d2zx+jsxoVWrDL8YC+1WtWnTqBU/313751ZBKUZ9 GmjQsu/MSDWe91m93yxSYFtWxXa0uWwY6e1WXmoShycfZ16coXWJpbxa0zHTM4XK Soz0P8BwZetMDHHaoApV4OlmVZQLx9f1H7K6ABa+CgCEoaUr5kFB/D+FtZSzzqSp PnwsYXm6OLm0IywNzCGeg944XdUL7X2hgDkA6FiI84D4Qpm7RoUYCIYddTL1/0Af CqmhNFmAK/g74iooEHrZ1nUDXu5hbhtXTdiO83xvPzOLGsMnh9oMISIQ5qxbh1nQ I6BO1lxnzoxB/0asDdPDUuSlBQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJDlFwKC yShQpYayVVK+Jo6ORgyDMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzVBRUUvM0UzOTAxRjI1MjA3MTFFRUI1N0I1ODc3QzRGOUFFMDIvMjE1MjVBMUM1 MjBCMTFFRThCNzkwMjFBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ/1kMA8EAgACMAkDBwAgAQ3y0EAwDQYJKoZIhvcNAQELBQADggEB AJHvlgvbncnVo1xg8XC4ZlGtUzK/1GEomwk6dh0KoQVS/XGOuxYulb6UQ2NWkOq3 gg3q4eNd2ol4AiRBPaohLBRxkH9P/Y0iPzAELQ8w9iRFDkzzhf62y/T29jZddPgM +PN5WoF1oLsMSrkuZgjVlu/5sOWli07y969Bo+2rqM0R2LDTaeAkZbjLUr93d88m iIEaYHEu212dbVKcxJ84hvCEDR/CZ17ixX1VSA8IXJkO0DDjY08Q5TXVo0PehhTq bBxwnUlqb4YjFMbRGp/pFtfVU8leAUGuV9ZP6orMNs7Zc6iikJ1/aEmXjL9XuIg1 68TsRS3SV1mAqtAj22YKEEQ= -----END CERTIFICATE-----Generated at Thu Sep 3 12:57:23 2026 by rpki-client