$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E2C4774F5C911ECAE15AE0BC4F9AE02.roa File: 7E2C4774F5C911ECAE15AE0BC4F9AE02.roa (raw, json) Hash identifier: AbGXyfoi9NQcrU5kTzU0jcNzmryPisWZ8XakFHj0AwY= Subject key identifier: 22:5E:CE:AF:14:A9:8F:0A:4E:62:D9:6A:32:F0:74:C4:91:15:89:6D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DD6 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E2C4774F5C911ECAE15AE0BC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:15:38 +0000 ROA not before: Thu 28 Aug 2025 14:53:02 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135901 IP address blocks: 103.68.68.0/24 maxlen: 24 103.68.69.0/24 maxlen: 24 103.68.70.0/24 maxlen: 24 103.68.71.0/24 maxlen: 24 103.172.78.0/24 maxlen: 24 103.172.79.0/24 maxlen: 24 103.173.228.0/24 maxlen: 24 103.173.229.0/24 maxlen: 24 103.188.244.0/24 maxlen: 24 103.188.245.0/24 maxlen: 24 113.192.16.0/24 maxlen: 24 113.192.17.0/24 maxlen: 24 2401:57e0::/48 maxlen: 48 2406:cbc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24022 (0x5dd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:02 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60c0a-d97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:0d:4f:35:8f:fa:56:6c:7a:07:0d:f0:82: c6:c5:31:be:53:f3:d0:fe:85:25:6e:49:8c:40:9c: 9d:56:a6:04:dd:24:59:c1:40:56:cf:d3:13:c9:17: 20:16:95:da:d0:6b:22:6d:96:d9:78:08:02:3c:c7: ad:bd:42:ad:1e:ee:ce:52:77:0f:b5:3d:71:27:da: 8b:52:9c:1f:d3:69:c2:ce:22:4e:66:59:61:59:d1: 1e:9f:8f:22:0e:6f:35:89:f9:41:25:2a:6b:9e:a8: bf:d4:31:6d:1c:c2:be:69:7a:8c:57:1e:e5:2f:c4: cf:bd:2b:75:66:b4:aa:29:5e:cf:86:47:22:a1:f5: 76:e5:eb:40:a2:d3:24:02:12:ea:16:1e:48:3b:5c: 43:79:6f:39:c1:78:a3:5b:87:a6:cc:a4:11:3e:68: 06:67:44:1e:ab:25:bf:af:da:70:43:44:b9:f0:f0: 00:2d:97:6e:bd:56:47:18:7d:75:ab:84:84:70:85: 04:68:19:7d:fb:89:1a:e5:ee:3f:c8:95:98:68:da: ae:d5:3a:af:1b:fb:5e:0f:43:55:e3:c3:8b:f4:7e: ff:c4:e0:da:83:3a:33:88:da:89:43:c1:4c:4f:de: 6c:04:9c:e0:62:d6:73:25:84:c5:8c:ee:c0:2b:e5: ad:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5E:CE:AF:14:A9:8F:0A:4E:62:D9:6A:32:F0:74:C4:91:15:89:6D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7E2C4774F5C911ECAE15AE0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.68.0/22 103.172.78.0/23 103.173.228.0/23 103.188.244.0/23 113.192.16.0/23 IPv6: 2401:57e0::/48 2406:cbc0::/48 Signature Algorithm: sha256WithRSAEncryption 53:bd:c9:ae:e7:49:4d:3c:af:34:92:f5:08:83:87:ad:37:63: bc:ad:ec:f4:fc:b5:70:86:4a:83:c7:cc:4b:aa:5a:1b:b5:97: 55:60:3c:48:81:00:a0:bc:6a:f5:ce:45:30:c0:4f:ab:cb:6a: 4b:0f:e6:bf:8c:18:af:5a:64:20:a8:db:b2:73:ce:8f:e8:da: f7:cd:4e:8b:4a:23:1d:99:ec:c1:1e:cd:1e:e7:03:df:a5:ee: 9d:0d:a5:06:2a:a1:39:23:d5:f9:17:66:05:71:9e:5a:1a:f6: 4f:c8:6c:30:11:2e:c8:ba:93:6a:e2:5e:9d:f8:33:de:92:61: dc:f7:03:6b:10:8a:64:c6:a9:b2:da:8e:ad:d1:dd:5b:96:62: 70:05:c1:6a:73:c9:01:84:a9:2c:c1:89:70:a0:cd:1f:e5:24: 81:69:5b:81:29:8c:a5:31:7d:9d:b8:8f:8c:fd:26:97:ac:82: 15:0c:22:50:b2:b3:fe:23:80:80:80:dc:06:35:7e:f7:75:6c: 33:1d:df:5d:ac:db:07:76:c4:d9:66:3c:a2:9d:5d:df:75:fc: 64:80:4c:d8:b5:f0:f4:40:19:a9:8e:4c:a1:2c:7e:88:7e:45: a1:79:fa:98:f6:59:37:17:93:70:cb:0f:c7:8f:0c:3a:65:96: 42:90:97:37 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICXdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzAyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGMwYS1kOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAYNTzWP+lZsegcN8ILGxTG+U/PQ/oUlbkmMQJydVqYE3SRZwUBWz9MTyRcg FpXa0GsibZbZeAgCPMetvUKtHu7OUncPtT1xJ9qLUpwf02nCziJOZllhWdEen48i Dm81iflBJSprnqi/1DFtHMK+aXqMVx7lL8TPvSt1ZrSqKV7PhkciofV25etAotMk AhLqFh5IO1xDeW85wXijW4emzKQRPmgGZ0QeqyW/r9pwQ0S58PAALZduvVZHGH11 q4SEcIUEaBl9+4ka5e4/yJWYaNqu1TqvG/teD0NV48OL9H7/xODagzoziNqJQ8FM T95sBJzgYtZzJYTFjO7AK+WtFQIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFCJezq8U qY8KTmLZajLwdMSRFYltMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvN0UyQzQ3NzRG NUM5MTFFQ0FFMTVBRTBCQzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDAk BAIAATAeAwQCZ0REAwQBZ6xOAwQBZ63kAwQBZ7z0AwQBccAQMBgEAgACMBIDBwAk AVfgAAADBwAkBsvAAAAwDQYJKoZIhvcNAQELBQADggEBAFO9ya7nSU08rzSS9QiD h603Y7yt7PT8tXCGSoPHzEuqWhu1l1VgPEiBAKC8avXORTDAT6vLaksP5r+MGK9a ZCCo27Jzzo/o2vfNTotKIx2Z7MEezR7nA9+l7p0NpQYqoTkj1fkXZgVxnloa9k/I bDARLsi6k2riXp34M96SYdz3A2sQimTGqbLajq3R3VuWYnAFwWpzyQGEqSzBiXCg zR/lJIFpW4EpjKUxfZ24j4z9JpesghUMIlCys/4jgICA3AY1fvd1bDMd312s2wd2 xNlmPKKdXd91/GSATNi18PRAGamOTKEsfoh+RaF5+pj2WTcXk3DLD8ePDDpllkKQ lzc= -----END CERTIFICATE-----Generated at Sat Mar 7 22:49:18 2026 by rpki-client