$ rpki-client -vvf rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/0BAA5EA48F1511F1B6C55BB93411F970.roa File: 0BAA5EA48F1511F1B6C55BB93411F970.roa (raw, json) Hash identifier: 4ocmF8bcmuU8D5x0eHK+eEnvm/vrX/4n7ForXo+hIOI= Subject key identifier: F0:65:CE:EE:2E:75:7D:2C:11:D2:4C:92:E8:18:18:92:A7:D6:9D:D6 Certificate issuer: /CN=A91250FA/serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Certificate serial: 0C47 Authority key identifier: 12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/0BAA5EA48F1511F1B6C55BB93411F970.roa Signing time: Fri 07 Aug 2026 15:22:54 +0000 ROA not before: Fri 07 Aug 2026 15:22:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153844 IP address blocks: 103.72.84.0/22 maxlen: 22 103.72.84.0/24 maxlen: 24 103.72.85.0/24 maxlen: 24 103.72.86.0/24 maxlen: 24 103.72.87.0/24 maxlen: 24 203.3.132.0/24 maxlen: 24 203.11.65.0/24 maxlen: 24 203.142.218.0/24 maxlen: 24 203.161.179.0/24 maxlen: 24 2406:c380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91250FA, serialNumber=1283A2F4C7BA11706C66E17BF1BD3E99627A1813 Validity Not Before: Aug 7 15:22:54 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a75f84e-593a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0b:66:6b:9f:2b:f2:1e:3c:a0:c6:07:96:da: 84:f7:80:a1:1e:ad:bf:8f:85:d1:90:3c:34:5a:4c: ee:2c:62:bc:6d:2c:e6:e2:7d:55:78:cc:2e:05:84: b0:d2:d1:91:92:f5:8f:4b:95:42:02:41:d9:99:8a: f6:9f:1e:9e:23:95:5b:75:33:18:9c:35:fb:2f:e2: 40:3a:7e:76:ef:1b:14:57:83:17:c8:f2:f5:4b:59: 1d:ea:a6:d1:21:2e:5f:e6:57:ba:ca:f9:7c:5e:b6: 55:63:76:c9:fb:0a:e9:87:2b:f5:d6:2b:34:ca:6c: af:80:c5:64:a7:8c:51:ee:03:c0:ed:d1:88:8e:48: fe:fa:ef:0b:11:28:be:56:d1:99:1c:dc:dc:3c:c3: df:84:e3:ef:41:1c:7f:61:6f:f0:87:6a:79:f9:8d: 32:7d:cd:43:f3:5a:93:80:f0:47:16:53:a1:f6:e8: a6:cf:c8:0e:21:29:c1:cc:d9:53:17:9e:95:8e:65: cd:56:eb:94:a7:a5:ef:bf:ee:62:44:7d:25:f9:68: eb:5b:3c:d6:b0:f2:88:2c:62:40:de:6d:bb:13:99: ec:cd:7f:54:7c:37:1d:49:2c:6e:3c:09:a3:17:bc: 52:c8:08:4b:7c:23:62:49:a9:36:d8:2e:c4:cd:a3: 46:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:65:CE:EE:2E:75:7D:2C:11:D2:4C:92:E8:18:18:92:A7:D6:9D:D6 X509v3 Authority Key Identifier: keyid:12:83:A2:F4:C7:BA:11:70:6C:66:E1:7B:F1:BD:3E:99:62:7A:18:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/EoOi9Me6EXBsZuF78b0-mWJ6GBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EoOi9Me6EXBsZuF78b0-mWJ6GBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91250FA/AAA0EBE0368E11EAA768FC7EC4F9AE02/0BAA5EA48F1511F1B6C55BB93411F970.roa sbgp-ipAddrBlock: critical IPv4: 103.72.84.0/22 203.3.132.0/24 203.11.65.0/24 203.142.218.0/24 203.161.179.0/24 IPv6: 2406:c380::/32 Signature Algorithm: sha256WithRSAEncryption 40:d9:9d:77:67:54:7a:6a:ab:d3:34:7a:43:c4:91:c6:45:a4: 38:18:1a:16:e5:27:43:e7:0e:74:a5:35:1c:8c:88:5a:53:87: f5:5e:32:6d:78:82:b5:83:b1:da:cf:d5:6a:df:b7:5f:02:7e: 69:48:ea:49:29:8e:be:fa:4a:21:96:c1:8b:d2:39:71:3b:13: ba:f0:09:62:3a:2b:e9:81:3b:a2:6d:86:29:5e:fe:ea:5c:24: b2:6e:c1:34:f1:7e:f2:ca:10:ed:bc:31:99:97:9b:4d:a9:69: 17:a1:09:2b:66:a0:af:dd:40:d0:ac:08:db:0c:2b:fd:77:07: f2:57:29:8c:a0:30:a2:59:e5:7f:a7:08:77:a2:2e:d4:e4:bb: 24:da:56:ed:db:88:e0:b5:1b:cd:3f:1d:62:2f:17:e1:a6:6b: 13:98:54:e4:10:ac:d2:32:70:1b:34:8b:19:ce:0b:35:5c:fd: ad:24:17:02:cb:ca:77:b6:1a:9f:4e:e9:44:9e:64:8f:64:e0: 76:f7:e7:7c:ec:8d:81:8d:a6:18:55:b5:de:19:7f:3e:13:ff: f3:09:c9:1f:a9:59:20:5c:fa:2e:a0:17:64:20:1d:7a:e2:a3: 0a:60:0e:b9:db:de:29:8e:ec:df:06:a3:07:cf:f1:c6:b0:32: 88:56:83:9c -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUwRkExMTAvBgNVBAUTKDEyODNBMkY0QzdCQTExNzA2QzY2RTE3QkYxQkQzRTk5 NjI3QTE4MTMwHhcNMjYwODA3MTUyMjU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1Zjg0ZS01OTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wtma58r8h48oMYHltqE94ChHq2/j4XRkDw0WkzuLGK8bSzm4n1VeMwuBYSw 0tGRkvWPS5VCAkHZmYr2nx6eI5VbdTMYnDX7L+JAOn527xsUV4MXyPL1S1kd6qbR IS5f5le6yvl8XrZVY3bJ+wrphyv11is0ymyvgMVkp4xR7gPA7dGIjkj++u8LESi+ VtGZHNzcPMPfhOPvQRx/YW/wh2p5+Y0yfc1D81qTgPBHFlOh9uimz8gOISnBzNlT F56VjmXNVuuUp6Xvv+5iRH0l+WjrWzzWsPKILGJA3m27E5nszX9UfDcdSSxuPAmj F7xSyAhLfCNiSak22C7EzaNG/QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFPBlzu4u dX0sEdJMkugYGJKn1p3WMB8GA1UdIwQYMBaAFBKDovTHuhFwbGbhe/G9PpliehgT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTBGQS9BQUEwRUJFMDM2 OEUxMUVBQTc2OEZDN0VDNEY5QUUwMi9Fb09pOU1lNkVYQnNadUY3OGIwLW1XSjZH Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VvT2k5TWU2RVhCc1p1Rjc4YjAtbVdKNkdCTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjUwRkEvQUFBMEVCRTAzNjhFMTFFQUE3NjhGQzdFQzRGOUFFMDIvMEJBQTVFQTQ4 RjE1MTFGMUI2QzU1QkI5MzQxMUY5NzAucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZ0hUAwQAywOEAwQAywtBAwQAy47aAwQAy6GzMA0EAgACMAcDBQAk BsOAMA0GCSqGSIb3DQEBCwUAA4IBAQBA2Z13Z1R6aqvTNHpDxJHGRaQ4GBoW5SdD 5w50pTUcjIhaU4f1XjJteIK1g7Haz9Vq37dfAn5pSOpJKY6++kohlsGL0jlxOxO6 8AliOivpgTuibYYpXv7qXCSybsE08X7yyhDtvDGZl5tNqWkXoQkrZqCv3UDQrAjb DCv9dwfyVymMoDCiWeV/pwh3oi7U5Lsk2lbt24jgtRvNPx1iLxfhpmsTmFTkEKzS MnAbNIsZzgs1XP2tJBcCy8p3thqfTulEnmSPZOB29+d87I2BjaYYVbXeGX8+E//z CckfqVkgXPouoBdkIB164qMKYA65294pjuzfBqMHz/HGsDKIVoOc -----END CERTIFICATE-----Generated at Wed Aug 19 12:53:00 2026 by rpki-client