$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/0498FE5C1E0611F1A8C5706A1E3D8C67.roa File: 0498FE5C1E0611F1A8C5706A1E3D8C67.roa (raw, json) Hash identifier: 6KL/1k/PavSns2HAK7Vdx1DicEMrmeJINyd12T0VaqM= Subject key identifier: CF:05:A4:93:18:24:C0:3A:64:60:2D:13:0D:DA:CB:DF:E5:ED:CC:47 Certificate issuer: /CN=A91C8B4F/serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Certificate serial: 04CB Authority key identifier: 40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/0498FE5C1E0611F1A8C5706A1E3D8C67.roa Signing time: Thu 12 Mar 2026 12:27:02 +0000 ROA not before: Thu 12 Mar 2026 12:27:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 45814 IP address blocks: 103.48.24.0/24 maxlen: 24 103.48.25.0/24 maxlen: 24 103.104.84.0/24 maxlen: 24 103.104.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 23:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8B4F, serialNumber=40DB9E2CBADECDA9B972351021507ADCD1A5627F Validity Not Before: Mar 12 12:27:02 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69b2b116-9536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:df:93:9b:1c:e0:ec:f5:05:57:9b:a2:a6: d8:0a:b3:9d:59:db:50:98:d1:77:da:d1:f8:89:9c: 17:9c:37:a6:0e:65:64:e8:38:19:ee:4e:49:05:24: a4:e1:ef:09:cd:d2:8e:12:86:45:34:57:7d:ce:d7: 59:1b:45:19:85:aa:77:da:97:fa:e9:21:64:33:f5: 9e:c0:71:60:c5:9a:6b:7c:d9:1f:80:44:20:8d:d5: 87:c8:ca:b6:8f:bc:f5:25:38:64:da:7e:e7:0d:fd: 84:ec:93:a2:5b:0b:3d:28:d8:d0:07:4b:7b:05:06: 93:a5:08:69:ef:50:1f:3d:81:5a:a5:85:b5:d2:78: 2b:5c:ba:48:35:30:66:e7:11:e2:8a:7c:24:46:b3: da:69:aa:fc:42:20:e2:57:a3:3c:dd:90:f9:64:b7: 87:a8:96:b9:bf:ac:3d:67:15:15:12:23:08:48:dd: 00:8a:a5:d1:78:64:cb:2d:7b:77:51:bc:ef:6a:ae: 22:cb:2d:32:3b:7a:98:6a:c0:bc:ef:8e:a8:e7:27: e2:b1:50:88:af:fc:a0:d9:05:f4:b9:a1:14:f4:d2: fb:a3:40:f0:da:7c:fa:9b:ef:c4:98:21:72:7b:e2: fe:7e:20:7e:c9:7f:00:08:a2:7b:cc:96:ee:6f:12: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:A4:93:18:24:C0:3A:64:60:2D:13:0D:DA:CB:DF:E5:ED:CC:47 X509v3 Authority Key Identifier: keyid:40:DB:9E:2C:BA:DE:CD:A9:B9:72:35:10:21:50:7A:DC:D1:A5:62:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/QNueLLrezam5cjUQIVB63NGlYn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QNueLLrezam5cjUQIVB63NGlYn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8B4F/DD73264868BC11EC87807948C4F9AE02/0498FE5C1E0611F1A8C5706A1E3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.48.24.0/23 103.104.84.0/23 Signature Algorithm: sha256WithRSAEncryption 35:e2:70:09:e4:5f:8b:12:43:ee:b8:74:e3:d1:98:11:f1:bc: 25:81:5d:94:51:b6:8b:bb:46:b0:0e:52:ff:4f:2b:d7:0e:bc: ff:2b:39:f8:07:f8:fe:a0:4c:6d:ad:ee:7c:18:55:61:c1:2e: 0c:62:9a:1c:f9:19:8d:27:06:9a:1a:14:9c:4f:03:82:0a:e6: bc:31:cb:f7:bb:74:20:7a:e2:08:8b:5d:df:80:80:ba:88:cf: 68:44:45:bb:58:58:3c:ab:96:70:ec:6e:af:60:84:d3:84:83: 0f:b0:da:9a:90:d5:a1:15:89:fc:ab:f5:aa:a0:5c:5c:19:52: b8:8f:9b:4b:90:aa:86:87:cf:0e:47:9e:45:bf:b8:09:07:dc: f7:78:de:15:e6:10:29:55:2f:79:20:b6:5a:4b:85:14:55:c8: da:62:49:06:6c:8f:ec:b1:35:11:9f:f2:e4:10:af:b1:c6:0e: f7:a4:a1:fd:7c:10:3a:c4:fb:48:68:ab:8a:d0:9b:28:67:1b: 26:5e:26:e0:b1:5d:30:39:5b:f5:77:7e:4f:a1:3b:83:1c:4d: 1c:97:8d:23:6b:15:2e:1f:d0:17:e4:c1:2c:2c:3d:f6:ab:b5: 22:62:4f:ec:47:ee:34:5d:95:17:bc:f5:5c:f3:bd:d0:8d:af: ff:8f:95:ed -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCNEYxMTAvBgNVBAUTKDQwREI5RTJDQkFERUNEQTlCOTcyMzUxMDIxNTA3QURD RDFBNTYyN0YwHhcNMjYwMzEyMTIyNzAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIyYjExNi05NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl2jfk5sc4Oz1BVeboqbYCrOdWdtQmNF32tH4iZwXnDemDmVk6DgZ7k5JBSSk 4e8JzdKOEoZFNFd9ztdZG0UZhap32pf66SFkM/WewHFgxZprfNkfgEQgjdWHyMq2 j7z1JThk2n7nDf2E7JOiWws9KNjQB0t7BQaTpQhp71AfPYFapYW10ngrXLpINTBm 5xHiinwkRrPaaar8QiDiV6M83ZD5ZLeHqJa5v6w9ZxUVEiMISN0AiqXReGTLLXt3 Ubzvaq4iyy0yO3qYasC8746o5yfisVCIr/yg2QX0uaEU9NL7o0Dw2nz6m+/EmCFy e+L+fiB+yX8ACKJ7zJbubxKp4wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFM8FpJMY JMA6ZGAtEw3ay9/l7cxHMB8GA1UdIwQYMBaAFEDbniy63s2puXI1ECFQetzRpWJ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEI0Ri9ERDczMjY0ODY4 QkMxMUVDODc4MDc5NDhDNEY5QUUwMi9RTnVlTExyZXphbTVjalVRSVZCNjNOR2xZ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FOdWVMTHJlemFtNWNqVVFJVkI2M05HbFluOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhCNEYvREQ3MzI2NDg2OEJDMTFFQzg3ODA3OTQ4QzRGOUFFMDIvMDQ5OEZFNUMx RTA2MTFGMUE4QzU3MDZBMUUzRDhDNjcucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZzAYAwQBZ2hUMA0GCSqGSIb3DQEBCwUAA4IBAQA14nAJ5F+LEkPu uHTj0ZgR8bwlgV2UUbaLu0awDlL/TyvXDrz/Kzn4B/j+oExtre58GFVhwS4MYpoc +RmNJwaaGhScTwOCCua8Mcv3u3QgeuIIi13fgIC6iM9oREW7WFg8q5Zw7G6vYITT hIMPsNqakNWhFYn8q/WqoFxcGVK4j5tLkKqGh88OR55Fv7gJB9z3eN4V5hApVS95 ILZaS4UUVcjaYkkGbI/ssTURn/LkEK+xxg73pKH9fBA6xPtIaKuK0JsoZxsmXibg sV0wOVv1d35PoTuDHE0cl40jaxUuH9AX5MEsLD32q7UiYk/sR+40XZUXvPVc873Q ja//j5Xt -----END CERTIFICATE-----Generated at Sat Mar 14 00:58:57 2026 by rpki-client