$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa File: A7DF537AF98D11EF9F6D6028C4F9AE02.roa (raw, json) Hash identifier: fAezqyW8kUZMQsfnI9ZbHU1ltHfU6BFcfvlbUeIAK5M= Subject key identifier: EE:21:A5:1E:A0:3A:8D:F6:D7:2A:4D:ED:8F:D7:7D:CD:B4:77:8D:A7 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5E6E Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:18:10 +0000 ROA not before: Thu 28 Aug 2025 14:55:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150855 IP address blocks: 103.109.186.0/23 maxlen: 24 103.112.210.0/23 maxlen: 24 2401:10e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24174 (0x5e6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:55:20 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60ca2-5667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:93:c7:a0:4b:45:cc:35:00:7c:7e:2b:ad:5f: 6b:37:5d:83:81:e6:f1:36:28:66:7e:e5:85:0b:bc: 9c:fb:aa:6a:9f:90:4a:c8:5b:66:01:1c:4c:cc:7c: 35:3b:2e:74:c6:6f:06:e9:9b:a3:ee:94:8d:63:b4: 18:a8:e2:e7:e8:4d:ed:ac:3e:bc:85:ac:f3:57:89: a7:27:ce:a5:53:ee:7b:a2:87:69:6b:e0:34:2b:61: 4f:70:ba:04:9d:d8:f4:42:4a:8d:66:e1:e6:2d:dc: 44:8e:c9:a5:1b:8f:79:03:09:23:9e:4e:c1:53:d0: 38:f9:4b:cc:24:f7:7d:7d:38:0e:ce:bd:b8:e5:8d: 98:43:7e:0d:ea:86:16:04:ba:68:01:ac:79:c1:7e: ff:81:8b:3a:a8:9c:61:f7:5c:46:8f:01:95:2b:f5: 14:87:df:9a:99:67:62:5e:b1:fc:be:e1:39:28:1e: f6:a2:ca:67:97:42:12:7c:0d:5b:76:a9:ee:c5:ee: 51:96:54:7a:a7:49:f0:ab:8d:c2:50:e7:d6:41:9f: ac:97:1c:71:4f:77:20:d5:f7:90:5d:99:15:c8:35: 59:61:21:9c:3d:5c:5a:25:8d:e9:f6:18:f2:e4:b6: 1f:61:54:ed:fc:53:bb:12:d3:af:db:b7:59:a9:73: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:A5:1E:A0:3A:8D:F6:D7:2A:4D:ED:8F:D7:7D:CD:B4:77:8D:A7 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A7DF537AF98D11EF9F6D6028C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.109.186.0/23 103.112.210.0/23 IPv6: 2401:10e0::/48 Signature Algorithm: sha256WithRSAEncryption 49:8d:ef:4e:83:98:fd:a4:4d:82:f5:9d:31:c7:b4:f0:f5:38: 0f:5e:74:42:15:a7:0e:61:e4:ee:b4:be:6b:cd:0f:25:4e:aa: 89:3a:20:de:2e:07:1d:b8:ce:6b:52:3b:86:4d:65:e4:0c:f3: 9c:a7:13:8b:70:d0:86:78:bc:77:60:37:d9:fe:92:a2:4d:f5: 1c:9e:79:52:19:04:65:c9:3b:ca:59:49:8a:83:a4:98:36:a0: ea:76:71:18:f6:1b:68:a5:3c:a9:83:58:ba:2c:c5:71:7a:31: 11:82:ef:7b:5b:af:e9:c9:f0:67:b2:84:98:25:50:a5:53:77: eb:ff:53:5f:ab:24:3a:9d:0d:2f:3a:cf:77:8c:df:17:6e:89: 5f:db:e0:11:93:8e:68:ba:ee:c1:eb:d0:85:12:66:aa:06:5c: fd:bd:c3:51:b5:96:91:83:da:47:a5:e4:71:1d:f0:10:f8:b1: fb:c7:ed:4c:8d:d3:19:8c:f7:5f:57:04:7b:78:a6:69:49:c4: 22:9f:e1:35:5b:fe:25:65:de:8f:83:05:d6:68:37:12:95:a3: 9f:8b:8a:8a:36:3c:ce:df:e0:f8:34:a2:dc:7c:f6:07:63:7e: 19:be:fd:40:1e:07:d4:74:66:0e:cc:f5:39:15:1d:73:01:69: 6e:82:c1:47 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICXm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NTIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGNhMi01NjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JPHoEtFzDUAfH4rrV9rN12DgebxNihmfuWFC7yc+6pqn5BKyFtmARxMzHw1 Oy50xm8G6Zuj7pSNY7QYqOLn6E3trD68hazzV4mnJ86lU+57oodpa+A0K2FPcLoE ndj0QkqNZuHmLdxEjsmlG495Awkjnk7BU9A4+UvMJPd9fTgOzr245Y2YQ34N6oYW BLpoAax5wX7/gYs6qJxh91xGjwGVK/UUh9+amWdiXrH8vuE5KB72ospnl0ISfA1b dqnuxe5RllR6p0nwq43CUOfWQZ+slxxxT3cg1feQXZkVyDVZYSGcPVxaJY3p9hjy 5LYfYVTt/FO7EtOv27dZqXO4uQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFO4hpR6g Oo321ypN7Y/Xfc20d42nMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTdERjUzN0FG OThEMTFFRjlGNkQ2MDI4QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQBZ226AwQBZ3DSMA8EAgACMAkDBwAkARDgAAAwDQYJKoZIhvcNAQEL BQADggEBAEmN706DmP2kTYL1nTHHtPD1OA9edEIVpw5h5O60vmvNDyVOqok6IN4u Bx24zmtSO4ZNZeQM85ynE4tw0IZ4vHdgN9n+kqJN9RyeeVIZBGXJO8pZSYqDpJg2 oOp2cRj2G2ilPKmDWLosxXF6MRGC73tbr+nJ8GeyhJglUKVTd+v/U1+rJDqdDS86 z3eM3xduiV/b4BGTjmi67sHr0IUSZqoGXP29w1G1lpGD2kel5HEd8BD4sfvH7UyN 0xmM919XBHt4pmlJxCKf4TVb/iVl3o+DBdZoNxKVo5+Lioo2PM7f4Pg0otx89gdj fhm+/UAeB9R0Zg7M9TkVHXMBaW6CwUc= -----END CERTIFICATE-----Generated at Sat Mar 7 22:43:03 2026 by rpki-client