$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/403E4D226B5511F098DBE84BC4F9AE02.roa File: 403E4D226B5511F098DBE84BC4F9AE02.roa (raw, json) Hash identifier: 0KZvnBBxZzmzzXsQ7Q4dkmZoRNFaa0p/htfxJiOoA88= Subject key identifier: 75:4B:ED:4D:F9:14:E0:03:41:5D:66:BF:9E:27:FF:9C:2F:D7:66:19 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6BF9 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/403E4D226B5511F098DBE84BC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:31:43 +0000 ROA not before: Thu 28 Aug 2025 14:53:31 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135951 IP address blocks: 101.101.96.0/23 maxlen: 24 103.130.216.0/22 maxlen: 23 103.142.24.0/23 maxlen: 24 103.142.26.0/23 maxlen: 24 103.155.162.0/23 maxlen: 24 103.161.178.0/23 maxlen: 23 103.162.14.0/23 maxlen: 24 103.162.20.0/23 maxlen: 24 103.162.22.0/23 maxlen: 23 103.164.154.0/23 maxlen: 24 103.177.110.0/23 maxlen: 24 103.179.184.0/23 maxlen: 24 116.118.44.0/22 maxlen: 24 180.93.136.0/22 maxlen: 24 2400:4de0::/48 maxlen: 48 2401:45e0::/48 maxlen: 48 2405:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27641 (0x6bf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:31 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61dde-51be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:1a:49:2a:1c:f4:2c:ce:e9:13:2c:7a:ff: c6:90:ef:bb:4f:de:78:ab:b9:ab:e7:88:f7:d0:77: 3a:2a:ae:a5:15:ba:87:f3:8a:3a:fd:7b:88:a5:40: f7:d7:63:03:fd:d0:70:89:74:c1:a8:5b:19:84:57: 5b:b9:36:37:0d:81:1b:40:e3:95:1d:c2:59:d6:e1: fc:95:bc:b6:1c:ef:71:a6:79:6a:e3:d3:07:67:86: 5d:ec:e8:25:9b:c8:39:76:19:66:ac:60:e0:01:52: fa:b8:31:72:4b:2d:e0:f4:91:93:6a:f3:1f:3f:f3: c9:6d:77:a5:66:fb:75:77:d1:6f:32:ea:b8:01:c8: bd:b9:2d:97:44:ed:6d:14:67:4c:10:e1:6c:95:d8: b5:ce:04:56:ce:0d:81:9e:ab:1b:5d:b8:fd:b5:9a: 03:c1:df:0d:79:15:cf:bd:74:c4:38:95:00:20:1b: 33:77:a1:c8:a4:04:34:52:ee:48:f6:24:d6:3d:eb: 6f:34:cf:c9:0e:fd:c6:3d:92:72:7d:b2:c8:8d:ea: 9e:04:ec:49:f1:12:5a:c3:7a:61:7b:1e:06:0d:03: a9:1a:f0:45:39:b0:02:ba:62:d4:0f:89:2b:26:50: 62:59:06:aa:07:73:b0:54:ff:c1:71:95:26:6c:8a: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4B:ED:4D:F9:14:E0:03:41:5D:66:BF:9E:27:FF:9C:2F:D7:66:19 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/403E4D226B5511F098DBE84BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.101.96.0/23 103.130.216.0/22 103.142.24.0/22 103.155.162.0/23 103.161.178.0/23 103.162.14.0/23 103.162.20.0/22 103.164.154.0/23 103.177.110.0/23 103.179.184.0/23 116.118.44.0/22 180.93.136.0/22 IPv6: 2400:4de0::/48 2401:45e0::/48 2405:2840::/48 Signature Algorithm: sha256WithRSAEncryption 88:f6:c6:be:02:6e:76:b0:f4:4f:a8:6c:04:16:c9:32:eb:3d: c8:fe:45:ee:9c:2b:52:39:4c:fa:0c:91:c0:75:c4:32:1d:5c: 9d:12:87:e1:2e:6f:1b:fd:1a:dc:c9:75:5f:85:8f:3f:16:4a: a5:07:ad:82:51:47:ae:8d:64:73:dd:dd:54:b9:3b:b1:da:ea: 65:af:cd:c5:4c:b5:f9:8a:26:42:10:c9:91:a0:d6:ec:c6:78: e8:37:72:8c:cb:8e:ad:a8:dd:ad:61:6f:57:e0:6f:7d:df:cb: 40:fa:c4:b6:8d:36:e4:bf:6e:9d:a2:3a:6d:c7:18:54:ca:0c: e8:9c:b2:28:dc:35:05:46:f9:fa:d1:62:fb:fd:0f:06:35:0e: 2e:42:7b:84:89:3e:f4:10:a4:e1:95:06:27:1f:9d:ef:ff:53: 2c:06:3c:5e:c1:ba:7b:fe:a8:7a:e2:fd:9b:97:a2:35:18:c1: 7e:96:12:e6:58:5a:46:01:dc:6e:b1:47:eb:19:7d:74:84:c2: 13:6b:a1:95:cd:63:0f:30:3e:d0:29:b7:fb:14:a4:57:3b:f3: bb:21:7a:1a:3a:90:0a:c2:fb:bb:b1:6f:d1:3b:1f:ce:89:42: a7:98:37:96:fd:7d:44:dd:ae:de:1a:cd:93:29:01:22:3e:f5: f2:b9:d0:88 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgICa/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWRkZS01MWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzsaSSoc9CzO6RMsev/GkO+7T954q7mr54j30Hc6Kq6lFbqH84o6/XuIpUD3 12MD/dBwiXTBqFsZhFdbuTY3DYEbQOOVHcJZ1uH8lby2HO9xpnlq49MHZ4Zd7Ogl m8g5dhlmrGDgAVL6uDFySy3g9JGTavMfP/PJbXelZvt1d9FvMuq4Aci9uS2XRO1t FGdMEOFsldi1zgRWzg2BnqsbXbj9tZoDwd8NeRXPvXTEOJUAIBszd6HIpAQ0Uu5I 9iTWPetvNM/JDv3GPZJyfbLIjeqeBOxJ8RJaw3phex4GDQOpGvBFObACumLUD4kr JlBiWQaqB3OwVP/BcZUmbIobSwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFHVL7U35 FOADQV1mv54n/5wv12YZMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDAzRTREMjI2 QjU1MTFGMDk4REJFODRCQzRGOUFFMDIucm9hMIGEBggrBgEFBQcBBwEB/wR1MHMw TgQCAAEwSAMEAWVlYAMEAmeC2AMEAmeOGAMEAWebogMEAWehsgMEAWeiDgMEAmei FAMEAWekmgMEAWexbgMEAWezuAMEAnR2LAMEArRdiDAhBAIAAjAbAwcAJABN4AAA AwcAJAFF4AAAAwcAJAUoQAAAMA0GCSqGSIb3DQEBCwUAA4IBAQCI9sa+Am52sPRP qGwEFsky6z3I/kXunCtSOUz6DJHAdcQyHVydEofhLm8b/RrcyXVfhY8/FkqlB62C UUeujWRz3d1UuTux2uplr83FTLX5iiZCEMmRoNbsxnjoN3KMy46tqN2tYW9X4G99 38tA+sS2jTbkv26dojptxxhUygzonLIo3DUFRvn60WL7/Q8GNQ4uQnuEiT70EKTh lQYnH53v/1MsBjxewbp7/qh64v2bl6I1GMF+lhLmWFpGAdxusUfrGX10hMITa6GV zWMPMD7QKbf7FKRXO/O7IXoaOpAKwvu7sW/ROx/OiUKnmDeW/X1E3a7eGs2TKQEi PvXyudCI -----END CERTIFICATE-----Generated at Sat Mar 7 22:43:46 2026 by rpki-client