$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa File: 08FFFEEAB4A811F0B6628E78C4F9AE02.roa (raw, json) Hash identifier: PFqs1v8g/lMRswRdNuL4gkb37G+LdAcLYSiZK7YXKcM= Subject key identifier: 61:4C:86:99:BA:27:3E:DD:78:48:17:8A:23:D3:B6:5A:3C:1E:D2:0A Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0B44 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa Signing time: Sat 04 Apr 2026 19:24:47 +0000 ROA not before: Sat 04 Apr 2026 19:24:47 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 140228 IP address blocks: 103.148.212.0/23 maxlen: 23 103.148.212.0/24 maxlen: 24 103.148.213.0/24 maxlen: 24 2001:df2:ed80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2884 (0xb44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Apr 4 19:24:47 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d1657f-26d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9f:fe:23:d4:05:7d:48:cc:d2:9c:68:8e:87: 85:69:fb:a8:d8:87:59:e7:be:a9:a3:1e:16:47:7a: 82:5a:39:a2:46:c9:8f:06:d7:2a:14:d2:14:25:ae: 62:29:23:72:5c:f3:47:1d:8c:34:54:48:35:2e:21: df:33:3a:75:b0:47:9d:0b:93:e3:ff:f9:48:3c:48: 27:00:c0:f5:78:0b:c0:85:32:c4:cf:58:d3:14:dc: cd:a1:b3:eb:b4:59:a8:62:0b:6a:4f:00:23:e7:a3: e6:4e:18:b0:b3:6b:08:b6:24:ed:7b:a8:ad:99:13: 3c:2b:8c:42:a7:45:ae:0a:97:f2:da:aa:3a:73:10: e1:96:e5:16:ea:da:05:dc:71:a6:93:2c:d1:e5:e9: 8c:6c:0f:26:61:3a:9b:fe:f7:3c:18:50:2b:b3:79: 63:06:1c:5f:d9:7e:23:65:6b:38:dd:f6:2c:6c:ea: 2f:90:7b:8c:c0:8f:17:8a:4f:ad:53:54:d6:cc:83: b3:d3:78:e7:67:67:5d:6f:58:d0:c9:02:29:7a:c7: df:f7:38:99:ad:1e:50:58:19:9c:ba:b4:c3:b9:65: a3:3e:98:00:11:c8:3b:a5:01:1b:d2:80:15:54:01: a1:9a:99:68:c1:dc:dd:d2:0c:15:3d:0e:e4:92:1a: 9e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:86:99:BA:27:3E:DD:78:48:17:8A:23:D3:B6:5A:3C:1E:D2:0A X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.212.0/23 IPv6: 2001:df2:ed80::/48 Signature Algorithm: sha256WithRSAEncryption b3:aa:4e:8f:19:92:98:e6:1a:4a:02:bf:6a:2c:3c:a2:6f:cc: 71:64:ae:3a:fb:1f:5d:f2:6a:09:c5:e6:14:c3:1b:a3:20:0f: dc:95:99:a0:d2:4a:68:0c:be:6f:3d:60:24:52:5d:41:4d:83: 6c:e9:68:b4:83:0d:f9:12:1b:4f:69:f2:d9:34:80:44:65:1b: 0c:a6:0b:77:3e:b6:07:21:86:dc:8d:01:50:50:8e:69:b2:1c: 75:a9:72:c8:ea:51:7f:55:53:33:3c:16:0c:72:83:a3:a5:36: 56:ed:41:83:d0:0c:28:95:bb:79:66:98:67:ec:58:6f:9e:f3: e1:01:0a:4f:45:c2:7f:21:23:de:83:09:98:b0:29:66:5e:3b: d7:f3:79:29:b5:c5:ad:8a:e7:c5:67:e7:59:89:e6:9e:91:d0: 70:01:e0:30:18:e9:71:4c:39:59:cf:d0:75:b8:3a:dd:45:7a: be:13:11:69:99:97:a6:05:36:18:80:cc:8b:42:a3:aa:8a:5e: 33:88:6c:4e:20:45:eb:89:56:98:fd:2c:e9:a0:09:c2:25:ea: 12:8e:f2:13:cd:0e:9e:bd:c8:1a:54:a9:47:72:67:b7:50:5d: 3a:2e:74:4a:4f:73:c8:dc:52:90:1e:2c:e7:38:6e:30:70:24: a3:97:a8:c5 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICC0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjYwNDA0MTkyNDQ3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQxNjU3Zi0yNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgZ/+I9QFfUjM0pxojoeFafuo2IdZ576pox4WR3qCWjmiRsmPBtcqFNIUJa5i KSNyXPNHHYw0VEg1LiHfMzp1sEedC5Pj//lIPEgnAMD1eAvAhTLEz1jTFNzNobPr tFmoYgtqTwAj56PmThiws2sItiTte6itmRM8K4xCp0WuCpfy2qo6cxDhluUW6toF 3HGmkyzR5emMbA8mYTqb/vc8GFArs3ljBhxf2X4jZWs43fYsbOovkHuMwI8Xik+t U1TWzIOz03jnZ2ddb1jQyQIpesff9ziZrR5QWBmcurTDuWWjPpgAEcg7pQEb0oAV VAGhmplowdzd0gwVPQ7kkhqerQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGFMhpm6 Jz7deEgXiiPTtlo8HtIKMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThDQjYvNTZBNEE2NDA1QUU2MTFFQTlDODhDQjgyQzRGOUFFMDIvMDhGRkZFRUFC NEE4MTFGMEI2NjI4RTc4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5TUMA8EAgACMAkDBwAgAQ3y7YAwDQYJKoZIhvcNAQELBQADggEB ALOqTo8ZkpjmGkoCv2osPKJvzHFkrjr7H13yagnF5hTDG6MgD9yVmaDSSmgMvm89 YCRSXUFNg2zpaLSDDfkSG09p8tk0gERlGwymC3c+tgchhtyNAVBQjmmyHHWpcsjq UX9VUzM8Fgxyg6OlNlbtQYPQDCiVu3lmmGfsWG+e8+EBCk9Fwn8hI96DCZiwKWZe O9fzeSm1xa2K58Vn51mJ5p6R0HAB4DAY6XFMOVnP0HW4Ot1Fer4TEWmZl6YFNhiA zItCo6qKXjOIbE4gReuJVpj9LOmgCcIl6hKO8hPNDp69yBpUqUdyZ7dQXToudEpP c8jcUpAeLOc4bjBwJKOXqMU= -----END CERTIFICATE-----Generated at Mon Apr 6 12:26:52 2026 by rpki-client