$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa File: 048E963C92B611F0841D2F21C4F9AE02.roa (raw, json) Hash identifier: f/D6SaNk7dFHnWpFP9ZlB7z7YG6qMADD7jIZSrlkNeI= Subject key identifier: F3:FC:4C:1F:B7:8B:6E:5A:92:5E:23:3D:B1:03:86:C8:8B:1A:D1:52 Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Certificate serial: C4 Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa Signing time: Thu 06 Aug 2026 20:39:48 +0000 ROA not before: Thu 06 Aug 2026 20:39:48 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 152177 IP address blocks: 103.214.156.0/22 maxlen: 22 103.214.156.0/23 maxlen: 23 103.214.156.0/24 maxlen: 24 103.214.157.0/24 maxlen: 24 103.214.158.0/24 maxlen: 24 144.48.112.0/22 maxlen: 22 144.48.112.0/23 maxlen: 23 144.48.112.0/24 maxlen: 24 144.48.113.0/24 maxlen: 24 144.48.114.0/24 maxlen: 24 2407:ea40::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:14:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Validity Not Before: Aug 6 20:39:48 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a74f114-0c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:02:1d:d6:22:ee:f5:ab:b4:80:36:38:d7: ea:86:78:52:db:94:2f:db:ea:b0:0a:88:16:7a:5f: f5:8b:54:3e:f2:05:fd:7f:82:65:28:94:a6:e9:45: 9e:18:08:25:47:2a:2b:3d:be:45:30:31:e1:a5:ed: c9:26:44:70:ff:7b:6c:76:8d:ec:4b:58:d5:1f:2f: 6e:c8:ed:ea:8f:b0:fc:5c:de:98:74:37:ef:7f:4c: 69:12:1c:7a:84:0e:f8:71:94:e9:20:8b:07:9b:46: 59:4c:32:3e:e8:81:cc:30:5d:ef:49:83:3d:d2:74: 58:f6:5b:6c:98:d8:ad:2b:f9:4b:4c:87:3d:aa:b7: 23:85:7b:ce:2a:c2:c1:2e:ae:a4:ca:68:13:23:92: 5c:6d:3f:07:65:fe:ea:79:d6:35:b9:58:46:ba:03: d5:9c:fe:a2:3a:1b:4b:bc:b5:e6:17:51:ce:38:ed: 54:7c:4d:bf:af:91:61:91:7e:d5:74:83:92:6c:c8: 3b:22:4d:7e:12:d5:2d:ea:38:87:cd:b5:6c:d3:28: 38:18:4c:9a:77:f3:a7:4f:49:9b:a7:dd:5b:46:00: be:86:24:0a:de:24:90:59:21:d6:89:0d:9c:1c:df: a5:88:d1:b4:eb:c9:30:00:a7:a1:5a:05:d8:9d:d5: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:4C:1F:B7:8B:6E:5A:92:5E:23:3D:B1:03:86:C8:8B:1A:D1:52 X509v3 Authority Key Identifier: keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/048E963C92B611F0841D2F21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.156.0/22 144.48.112.0/22 IPv6: 2407:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 52:04:fc:f9:d5:6f:32:5c:e4:de:65:6d:b9:fd:cb:ae:25:4e: 34:b9:27:92:6f:7a:7e:0a:68:7b:63:7a:13:1f:d2:0e:f5:7a: b8:35:d1:3d:90:2b:ea:a7:f9:50:8d:29:e3:53:42:be:c1:9b: 3e:35:fe:a0:dc:12:e4:24:5d:d3:55:d1:12:5b:42:68:1d:25: d8:43:89:4b:a8:df:a3:bb:d2:8c:4c:aa:38:9b:97:44:eb:64: 82:72:ca:e3:23:81:aa:79:9d:c1:9a:f1:c4:0f:a9:ab:ed:e3: 87:61:c0:bf:4d:f3:76:64:6c:c6:ea:46:c8:ff:14:4c:6e:86: 0d:98:d3:4e:c4:9f:b8:cf:c2:8d:75:26:69:10:90:64:e1:2a: d3:64:d5:9d:ee:db:d6:cb:38:64:7d:60:76:23:3d:50:67:47: bc:39:33:f3:70:5b:4e:b7:11:37:1a:f9:5d:50:52:3d:0c:82: 8c:ed:6e:63:45:b0:87:dc:8c:ff:20:37:e8:c0:e1:f0:8e:bc: ff:00:43:d8:18:0f:1a:a2:e4:7d:48:46:83:84:09:a3:e8:d5: 10:88:fe:eb:8e:f7:be:3f:c7:8e:08:60:6b:b9:c3:93:0f:6d: 5d:71:03:ec:aa:68:83:22:03:a3:56:d3:0c:52:6b:d5:00:6e: 25:3d:8e:49 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlCNUE1MzY1REEyQjI1RkE2OThCNzAzMDkzQ0ZCREMy QTJDMjNGQ0YwHhcNMjYwODA2MjAzOTQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc0ZjExNC0wYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwc8CHdYi7vWrtIA2ONfqhnhS25Qv2+qwCogWel/1i1Q+8gX9f4JlKJSm6UWe GAglRyorPb5FMDHhpe3JJkRw/3tsdo3sS1jVHy9uyO3qj7D8XN6YdDfvf0xpEhx6 hA74cZTpIIsHm0ZZTDI+6IHMMF3vSYM90nRY9ltsmNitK/lLTIc9qrcjhXvOKsLB Lq6kymgTI5JcbT8HZf7qedY1uVhGugPVnP6iOhtLvLXmF1HOOO1UfE2/r5FhkX7V dIOSbMg7Ik1+EtUt6jiHzbVs0yg4GEyad/OnT0mbp91bRgC+hiQK3iSQWSHWiQ2c HN+liNG068kwAKehWgXYndUnNwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPP8TB+3 i25akl4jPbEDhsiLGtFSMB8GA1UdIwQYMBaAFJtaU2XaKyX6aYtwMJPPvcKiwj/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tMXBUWmRvckpmcHBpM0F3azgtOXdxTENQ ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCNjgvNTNBN0I5MkNCMEE1MTFFQThGOTJFRDE3QzRGOUFFMDIvMDQ4RTk2M0M5 MkI2MTFGMDg0MUQyRjIxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ9acAwQCkDBwMA0EAgACMAcDBQAkB+pAMA0GCSqGSIb3DQEBCwUA A4IBAQBSBPz51W8yXOTeZW25/cuuJU40uSeSb3p+Cmh7Y3oTH9IO9Xq4NdE9kCvq p/lQjSnjU0K+wZs+Nf6g3BLkJF3TVdESW0JoHSXYQ4lLqN+ju9KMTKo4m5dE62SC csrjI4GqeZ3BmvHED6mr7eOHYcC/TfN2ZGzG6kbI/xRMboYNmNNOxJ+4z8KNdSZp EJBk4SrTZNWd7tvWyzhkfWB2Iz1QZ0e8OTPzcFtOtxE3GvldUFI9DIKM7W5jRbCH 3Iz/IDfowOHwjrz/AEPYGA8aouR9SEaDhAmj6NUQiP7rjve+P8eOCGBrucOTD21d cQPsqmiDIgOjVtMMUmvVAG4lPY5J -----END CERTIFICATE-----Generated at Wed Aug 19 12:50:45 2026 by rpki-client