$ rpki-client -vvf rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/D956F03AAB0211F083CD7E11C4F9AE02.roa File: D956F03AAB0211F083CD7E11C4F9AE02.roa (raw, json) Hash identifier: rrKRhHeiohcyIqeCIJv+44R0SbRHPDcNTcaSyqFnNBQ= Subject key identifier: 6B:F0:D9:91:F6:98:5F:1A:14:9D:97:88:50:61:DC:D1:37:47:AF:8B Certificate issuer: /CN=A91D824A/serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Certificate serial: 013F Authority key identifier: 5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/D956F03AAB0211F083CD7E11C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:17:36 +0000 ROA not before: Fri 05 Dec 2025 03:43:29 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153494 IP address blocks: 103.202.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D824A, serialNumber=5C722A26141C88F7CD40F39B374ADA7FBC1F9B1F Validity Not Before: Dec 5 03:43:29 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a58def-ed0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:be:8d:85:f7:6d:db:09:1c:62:c2:99:5e:00: c3:e2:45:90:75:58:e2:c1:01:2e:ba:46:28:fb:94: 10:4b:07:de:76:f6:94:96:1a:5c:c4:91:86:0e:51: df:2d:7a:1c:f9:60:10:51:4c:02:c4:95:ad:c8:6d: 80:98:2a:2b:31:9f:1e:88:5e:d8:d4:11:86:5a:5d: 7e:88:ea:ea:21:f5:28:ea:3b:7a:bf:31:c3:67:02: b1:86:15:1d:8d:1d:e5:8a:66:fe:91:57:4e:1b:63: 4f:94:35:0e:04:5e:1e:64:db:ab:3b:b8:74:bb:65: f3:4b:ba:5a:f3:73:86:89:ec:d6:71:e7:57:79:d0: 1a:bb:47:d8:2c:fb:38:f4:58:06:3a:e2:c5:5c:c8: de:5c:43:f4:fd:f3:ec:f0:ca:c9:5a:2b:a2:b7:81: ba:92:2e:40:a4:3f:f9:83:05:ec:01:65:4c:5c:cc: 5e:8a:85:eb:d2:00:92:d4:d1:f5:17:33:ef:54:c1: f7:e8:45:66:d7:a7:b7:cd:ff:3b:76:b5:23:96:0d: c8:24:ca:64:a3:ac:03:3b:01:fe:ce:a0:47:ce:de: 32:6e:f0:ac:c2:df:19:cb:24:c7:18:96:6a:1a:f9: d7:83:90:6c:c5:6e:5e:3a:a3:1b:54:b5:aa:5f:e0: dd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F0:D9:91:F6:98:5F:1A:14:9D:97:88:50:61:DC:D1:37:47:AF:8B X509v3 Authority Key Identifier: keyid:5C:72:2A:26:14:1C:88:F7:CD:40:F3:9B:37:4A:DA:7F:BC:1F:9B:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/XHIqJhQciPfNQPObN0raf7wfmx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XHIqJhQciPfNQPObN0raf7wfmx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D824A/4ADF33FC5B9A11EF8307F540C4F9AE02/D956F03AAB0211F083CD7E11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.202.48.0/22 Signature Algorithm: sha256WithRSAEncryption 07:bd:8e:d9:81:18:a0:b5:61:54:15:16:2d:e2:50:0a:cc:6f: 07:42:e6:dd:8e:9c:dd:4d:ea:c4:94:7e:66:9a:d3:77:49:d0: 79:0c:0c:78:b2:3b:0e:e9:f0:a0:08:48:81:c8:38:65:2c:f1: ab:cd:13:60:56:c8:31:84:be:53:7f:06:65:48:f4:01:88:77: 31:70:92:a7:80:1d:f1:47:f3:90:e9:26:5b:a4:e6:69:e3:12: 39:fc:4c:84:1f:b6:91:18:7a:20:94:c6:6c:b2:25:db:de:a1: 31:1b:51:3b:10:2a:be:c7:88:4a:cf:6f:80:70:8a:6e:3f:7b: 09:e6:3c:ef:16:ff:dc:c3:7f:3a:e2:ef:1c:24:f1:f8:52:d2: 49:1b:34:79:fc:12:7b:24:e0:97:f4:71:d6:f3:0e:6a:47:33: 06:c2:22:09:6e:49:e2:0e:6a:d5:7c:e6:52:d5:46:58:56:ad: 70:b9:3f:f9:22:fd:31:92:66:0a:d8:c8:dd:a1:f3:d8:7b:e1: 8e:b8:45:ff:4f:8f:dc:a8:17:b8:94:f1:93:98:94:7c:b0:6e: 68:90:45:52:12:52:f1:08:8a:0c:01:a9:9d:41:6a:e4:c8:82: 15:b3:25:5f:04:cc:dc:2d:a5:de:08:6f:7f:9a:6d:db:ef:6b: 29:b4:69:f6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgyNEExMTAvBgNVBAUTKDVDNzIyQTI2MTQxQzg4RjdDRDQwRjM5QjM3NEFEQTdG QkMxRjlCMUYwHhcNMjUxMjA1MDM0MzI5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGRlZi1lZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3r6Nhfdt2wkcYsKZXgDD4kWQdVjiwQEuukYo+5QQSwfedvaUlhpcxJGGDlHf LXoc+WAQUUwCxJWtyG2AmCorMZ8eiF7Y1BGGWl1+iOrqIfUo6jt6vzHDZwKxhhUd jR3limb+kVdOG2NPlDUOBF4eZNurO7h0u2XzS7pa83OGiezWcedXedAau0fYLPs4 9FgGOuLFXMjeXEP0/fPs8MrJWiuit4G6ki5ApD/5gwXsAWVMXMxeioXr0gCS1NH1 FzPvVMH36EVm16e3zf87drUjlg3IJMpko6wDOwH+zqBHzt4ybvCswt8ZyyTHGJZq GvnXg5BsxW5eOqMbVLWqX+DdWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGvw2ZH2 mF8aFJ2XiFBh3NE3R6+LMB8GA1UdIwQYMBaAFFxyKiYUHIj3zUDzmzdK2n+8H5sf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODI0QS80QURGMzNGQzVC OUExMUVGODMwN0Y1NDBDNEY5QUUwMi9YSElxSmhRY2lQZk5RUE9iTjByYWY3d2Zt eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hISXFKaFFjaVBmTlFQT2JOMHJhZjd3Zm14OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgyNEEvNEFERjMzRkM1QjlBMTFFRjgzMDdGNTQwQzRGOUFFMDIvRDk1NkYwM0FB QjAyMTFGMDgzQ0Q3RTExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8owMA0GCSqGSIb3DQEBCwUAA4IBAQAHvY7ZgRigtWFUFRYt4lAK zG8HQubdjpzdTerElH5mmtN3SdB5DAx4sjsO6fCgCEiByDhlLPGrzRNgVsgxhL5T fwZlSPQBiHcxcJKngB3xR/OQ6SZbpOZp4xI5/EyEH7aRGHoglMZssiXb3qExG1E7 ECq+x4hKz2+AcIpuP3sJ5jzvFv/cw3864u8cJPH4UtJJGzR5/BJ7JOCX9HHW8w5q RzMGwiIJbkniDmrVfOZS1UZYVq1wuT/5Iv0xkmYK2MjdofPYe+GOuEX/T4/cqBe4 lPGTmJR8sG5okEVSElLxCIoMAamdQWrkyIIVsyVfBMzcLaXeCG9/mm3b72sptGn2 -----END CERTIFICATE-----Generated at Sat Mar 21 22:37:41 2026 by rpki-client