$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa File: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (raw, json) Hash identifier: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU= Subject key identifier: C8:B0:52:9C:A5:06:26:1E:61:BF:0C:E6:FF:85:12:10:57:1C:56:32 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0BA0 Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:44:42 +0000 ROA not before: Mon 26 Jan 2026 19:16:09 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 63969 IP address blocks: 103.147.182.0/23 maxlen: 23 103.147.182.0/24 maxlen: 24 103.147.183.0/24 maxlen: 24 103.204.80.0/23 maxlen: 23 103.204.80.0/24 maxlen: 24 103.204.81.0/24 maxlen: 24 2001:df2:9f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Jan 26 19:16:09 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46cfa-4991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dc:92:8b:fc:62:35:e7:21:94:0b:fc:52:81: db:da:2e:f3:3c:6c:c8:90:65:7e:bf:00:c7:c4:23: ba:b5:2e:c1:6a:bc:a8:77:8d:f0:3d:2e:85:4e:48: 13:26:ab:59:61:45:ea:1a:6d:8e:48:31:da:c8:91: 3a:69:96:98:a0:40:5a:30:52:5c:3c:b4:23:26:72: b9:d6:ef:7c:60:f2:70:5d:91:41:0d:dd:42:0a:3f: 4a:8e:7c:01:49:9c:b5:f1:96:3f:59:c2:5f:83:02: 64:86:e5:cb:1c:7a:62:8d:a9:4b:ca:51:64:fb:ff: 82:2a:5f:eb:24:79:13:5c:ea:bc:58:4c:14:79:9d: 5a:c1:59:3c:23:19:45:61:af:78:63:44:99:4c:73: ef:65:5b:da:da:6d:f8:30:22:96:aa:16:39:ad:c9: 93:36:02:98:39:13:aa:30:f0:07:9e:78:ff:8d:cd: e2:12:4c:4d:b0:11:9a:54:bf:22:dd:8f:66:06:1a: ba:6f:93:d1:2a:39:af:21:b2:05:8a:53:b6:cc:f6: 44:35:88:c6:10:6d:a8:74:6e:dc:c0:65:49:cc:32: ed:b1:4f:21:a7:7a:1b:89:32:9a:e9:51:eb:f6:9d: b8:54:a1:76:61:ee:1a:cb:1b:36:a0:e2:9b:4f:18: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B0:52:9C:A5:06:26:1E:61:BF:0C:E6:FF:85:12:10:57:1C:56:32 X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.182.0/23 103.204.80.0/23 IPv6: 2001:df2:9f80::/48 Signature Algorithm: sha256WithRSAEncryption 97:05:9b:88:d2:40:b5:ca:63:25:54:31:0f:3d:a3:a1:62:7f: 39:18:0a:74:3e:30:a4:fc:63:45:ee:ad:b3:a2:b6:b8:f4:90: 91:07:fb:94:5d:65:ea:cd:4d:0f:f2:81:9d:9e:07:6c:fa:34: 60:84:4f:9c:c1:ca:bc:6c:b6:93:41:4e:9f:f7:8b:aa:77:ab: f3:64:8b:cd:52:f8:21:31:aa:82:7b:1a:15:ef:03:f4:22:9d: eb:f3:66:d6:ff:63:f1:b3:3e:5d:b1:1f:7f:c8:f9:36:1f:42: 73:ea:97:79:a4:39:4c:a3:81:ed:75:08:28:8d:e1:e1:68:0e: 97:b4:e0:14:f4:cb:58:c5:c3:f0:f5:4b:7d:f2:1c:d5:33:7d: 79:25:67:85:2d:59:45:fa:9d:f6:dc:53:0e:2b:07:c4:6c:d3: a6:ad:d3:f5:5e:ad:9a:a4:88:fb:d8:41:30:59:6b:e0:48:a6: b6:cb:da:8b:0d:1b:0d:81:0a:8f:8a:ad:61:d4:00:4c:ee:56: b1:ce:ea:97:3e:46:07:8a:c8:67:a4:f3:01:d4:63:8d:cc:f9: 9a:cd:ff:ff:42:d4:79:5e:1c:e1:84:a4:2d:1d:21:48:d6:4c: 46:14:89:9a:8b:06:86:9a:4d:df:68:4c:4c:e1:9a:14:07:c6: 26:e0:47:fd -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjYwMTI2MTkxNjA5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNmYS00OTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29ySi/xiNechlAv8UoHb2i7zPGzIkGV+vwDHxCO6tS7Baryod43wPS6FTkgT JqtZYUXqGm2OSDHayJE6aZaYoEBaMFJcPLQjJnK51u98YPJwXZFBDd1CCj9KjnwB SZy18ZY/WcJfgwJkhuXLHHpijalLylFk+/+CKl/rJHkTXOq8WEwUeZ1awVk8IxlF Ya94Y0SZTHPvZVva2m34MCKWqhY5rcmTNgKYOROqMPAHnnj/jc3iEkxNsBGaVL8i 3Y9mBhq6b5PRKjmvIbIFilO2zPZENYjGEG2odG7cwGVJzDLtsU8hp3obiTKa6VHr 9p24VKF2Ye4ayxs2oOKbTxhr1QIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFMiwUpyl BiYeYb8M5v+FEhBXHFYyMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTMwNzgvODYzMEIxQzg0QzhDMTFFQUI5RTI3MDU3QzRGOUFFMDIvQ0VGRUVGRUE4 NTRFMTFFQkEyQ0ZEQzg3QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ5O2AwQBZ8xQMA8EAgACMAkDBwAgAQ3yn4AwDQYJKoZIhvcNAQEL BQADggEBAJcFm4jSQLXKYyVUMQ89o6FifzkYCnQ+MKT8Y0XurbOitrj0kJEH+5Rd ZerNTQ/ygZ2eB2z6NGCET5zByrxstpNBTp/3i6p3q/Nki81S+CExqoJ7GhXvA/Qi nevzZtb/Y/GzPl2xH3/I+TYfQnPql3mkOUyjge11CCiN4eFoDpe04BT0y1jFw/D1 S33yHNUzfXklZ4UtWUX6nfbcUw4rB8Rs06at0/VerZqkiPvYQTBZa+BIprbL2osN Gw2BCo+KrWHUAEzuVrHO6pc+RgeKyGek8wHUY43M+ZrN//9C1HleHOGEpC0dIUjW TEYUiZqLBoaaTd9oTEzhmhQHxibgR/0= -----END CERTIFICATE-----Generated at Sat Mar 14 06:20:56 2026 by rpki-client