$ rpki-client -vvf rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/7F17B380BED411EBA325CC76C4F9AE02.roa File: 7F17B380BED411EBA325CC76C4F9AE02.roa (raw, json) Hash identifier: K2XjwQUcwBjQz3JduuHoPDcdQU/IInU/L9zJSSzQVAQ= Subject key identifier: BB:DC:4A:B9:AE:0A:8F:2F:C1:47:D5:4F:C3:A0:2B:4F:F9:DA:52:8C Certificate issuer: /CN=A91C02B3/serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A Certificate serial: 0670 Authority key identifier: 1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/7F17B380BED411EBA325CC76C4F9AE02.roa Signing time: Tue 31 Mar 2026 23:28:54 +0000 ROA not before: Tue 31 Mar 2026 23:28:54 +0000 ROA not after: Sat 01 Aug 2026 00:00:00 +0000 asID: 137431 IP address blocks: 103.108.104.0/22 maxlen: 24 2402:6540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C02B3, serialNumber=1BDC8A9C113DBDF33FBCF1C141B94BBB7D70127A Validity Not Before: Mar 31 23:28:54 2026 GMT Not After : Aug 1 00:00:00 2026 GMT Subject: CN=69cc58b6-bb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:34:98:38:7e:ab:e4:6b:29:fd:99:d3:f5:8e: 09:56:82:23:b5:83:4f:b5:83:b2:95:ab:4a:e9:52: c1:e9:27:63:04:d2:61:ba:46:87:a3:15:21:bc:0a: 1f:ae:e2:ab:cf:ab:9e:e9:b0:d0:92:bf:e6:28:e9: 43:81:21:df:d7:04:79:73:bf:87:75:82:0b:8e:ab: 65:2f:ab:47:80:aa:d2:06:bc:63:d4:a7:58:a5:d4: 47:fa:97:8a:e4:22:5b:75:c3:8f:93:43:47:bd:e6: 93:aa:8e:b5:51:f6:85:e2:bf:11:71:6a:b8:e0:f7: b6:3d:6a:fd:f7:5f:36:cd:bf:cd:e2:e3:d3:4d:c5: fc:cd:92:50:8e:69:2b:d2:50:60:94:22:b7:2d:9a: 4f:a0:55:99:c0:d1:94:0e:df:b3:2f:37:ba:90:e2: db:36:d1:cb:0e:72:cf:b7:b1:c3:fd:99:ba:4f:9a: 4d:14:76:93:21:af:80:84:f9:1d:c8:ed:67:e2:56: 69:13:95:3b:b5:bb:70:9e:e7:4d:51:f4:60:5e:50: 1b:7a:5e:6a:41:d8:f9:cd:95:8a:c4:2b:43:7e:b2: d5:30:f2:b3:11:be:3b:54:6a:ff:bf:26:3c:61:aa: 6a:af:be:ac:61:24:d3:27:7f:e4:d4:1a:f9:72:eb: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DC:4A:B9:AE:0A:8F:2F:C1:47:D5:4F:C3:A0:2B:4F:F9:DA:52:8C X509v3 Authority Key Identifier: keyid:1B:DC:8A:9C:11:3D:BD:F3:3F:BC:F1:C1:41:B9:4B:BB:7D:70:12:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/G9yKnBE9vfM_vPHBQblLu31wEno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G9yKnBE9vfM_vPHBQblLu31wEno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C02B3/2C8242AEBED211EB9F409076C4F9AE02/7F17B380BED411EBA325CC76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.104.0/22 IPv6: 2402:6540::/32 Signature Algorithm: sha256WithRSAEncryption 5f:48:e3:3c:d1:c9:5d:03:c5:54:15:81:9c:88:94:d3:91:5f: a3:a3:be:ba:48:e5:03:b2:59:79:af:b7:1f:68:9b:3a:ee:a9: df:a9:7e:1f:7f:14:90:dc:b4:a5:d0:df:c2:0c:70:6c:0b:de: 3b:8b:f2:d5:8f:43:af:a5:74:1d:71:b4:93:ca:f5:08:c2:35: 2c:b2:09:95:e7:3e:e6:aa:da:64:55:60:f4:bf:29:54:93:d6: 00:2a:4c:4b:bc:40:61:2b:29:ea:06:78:1d:a9:73:69:1a:13: ac:16:46:ac:fa:8a:17:9f:07:bd:04:a4:fc:e4:d7:40:75:f5: ed:61:57:f8:a9:53:ab:1e:29:62:3e:e1:c0:e0:87:54:8d:92: 9c:24:c4:0c:e9:c3:d1:e7:cf:fa:d2:cc:3e:57:14:b9:84:73: e6:0c:6c:77:c0:30:60:be:61:30:db:48:66:62:65:1f:e1:03: fc:d3:d3:ef:10:3e:b2:83:e8:61:d5:40:25:a8:41:48:8a:ea: 99:3c:96:fb:f2:72:55:41:80:16:dc:4b:c1:c1:00:89:03:15: 87:bc:8a:4a:1c:ec:55:46:12:59:c0:a7:dc:9d:04:f8:87:83: 0c:c2:37:fa:58:81:2c:f1:8a:e1:a0:84:73:64:1d:17:22:eb: d4:02:9a:d5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAyQjMxMTAvBgNVBAUTKDFCREM4QTlDMTEzREJERjMzRkJDRjFDMTQxQjk0QkJC N0Q3MDEyN0EwHhcNMjYwMzMxMjMyODU0WhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjNThiNi1iYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzSYOH6r5Gsp/ZnT9Y4JVoIjtYNPtYOylatK6VLB6SdjBNJhukaHoxUhvAof ruKrz6ue6bDQkr/mKOlDgSHf1wR5c7+HdYILjqtlL6tHgKrSBrxj1KdYpdRH+peK 5CJbdcOPk0NHveaTqo61UfaF4r8RcWq44Pe2PWr99182zb/N4uPTTcX8zZJQjmkr 0lBglCK3LZpPoFWZwNGUDt+zLze6kOLbNtHLDnLPt7HD/Zm6T5pNFHaTIa+AhPkd yO1n4lZpE5U7tbtwnudNUfRgXlAbel5qQdj5zZWKxCtDfrLVMPKzEb47VGr/vyY8 Yapqr76sYSTTJ3/k1Br5cuupfQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLvcSrmu Co8vwUfVT8OgK0/52lKMMB8GA1UdIwQYMBaAFBvcipwRPb3zP7zxwUG5S7t9cBJ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDJCMy8yQzgyNDJBRUJF RDIxMUVCOUY0MDkwNzZDNEY5QUUwMi9HOXlLbkJFOXZmTV92UEhCUWJsTHUzMXdF bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c5eUtuQkU5dmZNX3ZQSEJRYmxMdTMxd0Vuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzAyQjMvMkM4MjQyQUVCRUQyMTFFQjlGNDA5MDc2QzRGOUFFMDIvN0YxN0IzODBC RUQ0MTFFQkEzMjVDQzc2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2xoMA0EAgACMAcDBQAkAmVAMA0GCSqGSIb3DQEBCwUAA4IBAQBf SOM80cldA8VUFYGciJTTkV+jo766SOUDsll5r7cfaJs67qnfqX4ffxSQ3LSl0N/C DHBsC947i/LVj0OvpXQdcbSTyvUIwjUssgmV5z7mqtpkVWD0vylUk9YAKkxLvEBh KynqBngdqXNpGhOsFkas+ooXnwe9BKT85NdAdfXtYVf4qVOrHiliPuHA4IdUjZKc JMQM6cPR58/60sw+VxS5hHPmDGx3wDBgvmEw20hmYmUf4QP809PvED6yg+hh1UAl qEFIiuqZPJb78nJVQYAW3EvBwQCJAxWHvIpKHOxVRhJZwKfcnQT4h4MMwjf6WIEs 8YrhoIRzZB0XIuvUAprV -----END CERTIFICATE-----Generated at Mon Apr 6 10:08:12 2026 by rpki-client