$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/984426AE2C2A11F19F1796939D833773.roa File: 984426AE2C2A11F19F1796939D833773.roa (raw, json) Hash identifier: rPjNnZO3RJvZDFFfwLXpFfpD2vHmmkjycbK2kFTaDc4= Subject key identifier: A3:FF:0D:D5:EE:AA:1E:29:28:13:92:C3:8C:4B:62:A7:E6:0E:D0:03 Certificate issuer: /CN=A91D4345/serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Certificate serial: 0D03 Authority key identifier: E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/984426AE2C2A11F19F1796939D833773.roa Signing time: Mon 30 Mar 2026 11:21:28 +0000 ROA not before: Mon 30 Mar 2026 11:21:28 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17471 IP address blocks: 103.7.112.0/22 maxlen: 24 122.99.96.0/21 maxlen: 24 202.125.64.0/20 maxlen: 22 202.125.65.0/24 maxlen: 24 202.125.68.0/22 maxlen: 24 202.125.72.0/21 maxlen: 23 202.125.72.0/22 maxlen: 24 202.125.76.0/23 maxlen: 24 202.125.78.0/24 maxlen: 24 203.83.160.0/19 maxlen: 24 203.191.32.0/23 maxlen: 24 2407:f040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4345, serialNumber=E537D0C348FD7DC49F5FC3B0066A31C584FAE1AB Validity Not Before: Mar 30 11:21:28 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69ca5cb8-2df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:0f:fe:b1:0b:dd:a3:94:02:e2:4d:83:ca: a4:fe:2b:0f:ee:7b:64:6b:dc:26:00:2b:e1:d4:8f: 38:c0:fc:63:6c:09:fb:07:aa:f2:f2:1f:e7:5d:c2: eb:f4:35:6f:62:57:dd:2a:27:bf:28:9a:3c:d3:2a: 79:ad:e2:0d:2d:2a:23:e4:45:3e:0c:48:01:5d:8b: 6c:1e:28:3f:9c:4e:e1:81:51:c5:aa:2a:e2:c0:a6: da:13:53:4a:81:af:08:7d:1b:49:04:c2:20:55:46: fa:3d:d4:2d:ca:8c:07:7e:1d:cf:b2:46:71:83:4e: af:57:3e:d6:6d:4b:11:3a:11:dd:88:7d:db:f2:f5: 11:99:c9:4c:ca:bf:0c:96:d4:15:69:0c:01:68:be: d4:93:f3:36:41:8a:e5:69:07:24:1d:a9:67:a6:6e: 53:bb:dc:a1:af:66:a0:06:f6:bd:36:80:97:53:be: 1e:4b:36:02:26:77:1c:15:bc:43:1e:15:f7:2a:ec: 75:99:9c:50:47:fd:38:d1:5a:8c:2b:1f:3c:41:14: 67:a8:52:04:f1:6f:f9:21:65:cf:18:58:16:5c:32: bd:bf:68:fd:f6:a2:78:97:5b:ef:cc:1d:f2:c2:dc: de:ec:be:84:0f:b0:c6:44:00:94:75:3e:f9:08:e1: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FF:0D:D5:EE:AA:1E:29:28:13:92:C3:8C:4B:62:A7:E6:0E:D0:03 X509v3 Authority Key Identifier: keyid:E5:37:D0:C3:48:FD:7D:C4:9F:5F:C3:B0:06:6A:31:C5:84:FA:E1:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/5TfQw0j9fcSfX8OwBmoxxYT64as.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5TfQw0j9fcSfX8OwBmoxxYT64as.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4345/EC78CDDA053811EAB5897668C4F9AE02/984426AE2C2A11F19F1796939D833773.roa sbgp-ipAddrBlock: critical IPv4: 103.7.112.0/22 122.99.96.0/21 202.125.64.0/20 203.83.160.0/19 203.191.32.0/23 IPv6: 2407:f040::/32 Signature Algorithm: sha256WithRSAEncryption c5:0b:77:f5:1a:03:c2:ea:1d:60:c0:4b:5d:b4:b0:fc:ce:72: e2:85:a1:18:27:2e:45:d4:fd:fc:7e:b8:55:52:29:bf:f2:70: 73:a9:6b:61:8e:87:54:cf:e7:9e:9e:01:1b:4d:b2:5f:7d:b9: a3:28:1a:49:6a:81:1a:13:03:3f:ae:e9:fe:be:d5:c1:e6:42: 58:3e:31:90:bd:56:8d:08:c2:64:7c:bb:c1:79:f5:39:22:4e: ec:2f:1b:85:df:22:c9:9b:d6:69:47:db:0c:18:af:66:50:64: 66:8a:20:85:9c:e2:67:1a:f6:89:29:eb:5f:fe:3d:d3:df:5f: 36:6a:f4:c6:db:d9:81:14:ed:06:ef:fa:e8:fb:b8:e4:d6:53: 17:f2:ec:4e:b6:29:88:c1:0b:cc:66:db:e7:a9:22:d8:44:ca: 59:f0:ab:c7:c9:ee:73:6a:fc:03:24:f7:9b:e9:23:92:da:bc: e8:45:54:77:fd:12:3d:7a:56:f2:7b:29:6a:72:d0:e9:2f:90: d9:eb:54:f6:3f:4a:02:b2:67:f1:10:8f:bb:e6:82:c1:51:1a: 5b:8f:cd:0f:ea:5e:11:d5:14:91:65:00:21:46:a6:e9:9b:c5: cc:55:36:96:e1:6c:2d:03:8e:fc:69:81:2f:a4:8c:cd:dc:b9: 9d:e4:6c:bb -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQzNDUxMTAvBgNVBAUTKEU1MzdEMEMzNDhGRDdEQzQ5RjVGQzNCMDA2NkEzMUM1 ODRGQUUxQUIwHhcNMjYwMzMwMTEyMTI4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhNWNiOC0yZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSoP/rEL3aOUAuJNg8qk/isP7ntka9wmACvh1I84wPxjbAn7B6ry8h/nXcLr 9DVvYlfdKie/KJo80yp5reINLSoj5EU+DEgBXYtsHig/nE7hgVHFqiriwKbaE1NK ga8IfRtJBMIgVUb6PdQtyowHfh3PskZxg06vVz7WbUsROhHdiH3b8vURmclMyr8M ltQVaQwBaL7Uk/M2QYrlaQckHalnpm5Tu9yhr2agBva9NoCXU74eSzYCJnccFbxD HhX3Kux1mZxQR/040VqMKx88QRRnqFIE8W/5IWXPGFgWXDK9v2j99qJ4l1vvzB3y wtze7L6ED7DGRACUdT75COELVwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFKP/DdXu qh4pKBOSw4xLYqfmDtADMB8GA1UdIwQYMBaAFOU30MNI/X3En1/DsAZqMcWE+uGr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDM0NS9FQzc4Q0REQTA1 MzgxMUVBQjU4OTc2NjhDNEY5QUUwMi81VGZRdzBqOWZjU2ZYOE93Qm1veHhZVDY0 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVUZlF3MGo5ZmNTZlg4T3dCbW94eFlUNjRhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQzNDUvRUM3OENEREEwNTM4MTFFQUI1ODk3NjY4QzRGOUFFMDIvOTg0NDI2QUUy QzJBMTFGMTlGMTc5NjkzOUQ4MzM3NzMucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZwdwAwQDemNgAwQEyn1AAwQFy1OgAwQBy78gMA0EAgACMAcDBQAk B/BAMA0GCSqGSIb3DQEBCwUAA4IBAQDFC3f1GgPC6h1gwEtdtLD8znLihaEYJy5F 1P38frhVUim/8nBzqWthjodUz+eengEbTbJffbmjKBpJaoEaEwM/run+vtXB5kJY PjGQvVaNCMJkfLvBefU5Ik7sLxuF3yLJm9ZpR9sMGK9mUGRmiiCFnOJnGvaJKetf /j3T3182avTG29mBFO0G7/ro+7jk1lMX8uxOtimIwQvMZtvnqSLYRMpZ8KvHye5z avwDJPeb6SOS2rzoRVR3/RI9elbyeylqctDpL5DZ61T2P0oCsmfxEI+75oLBURpb j80P6l4R1RSRZQAhRqbpm8XMVTaW4WwtA478aYEvpIzN3Lmd5Gy7 -----END CERTIFICATE-----Generated at Sun Apr 5 21:04:16 2026 by rpki-client