$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/2A490316D97011F0A9AB95F59AD3641D.roa File: 2A490316D97011F0A9AB95F59AD3641D.roa (raw, json) Hash identifier: MTKYuHS54sbbIgz0FdQa7tPFCtPZViVZZlK3jzFk3Qo= Subject key identifier: 0B:ED:26:63:A3:64:C6:FE:9D:87:78:D8:69:8A:54:90:47:54:8E:4A Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 05C7 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/2A490316D97011F0A9AB95F59AD3641D.roa Signing time: Sun 01 Mar 2026 18:41:07 +0000 ROA not before: Wed 31 Dec 2025 23:19:08 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 395374 IP address blocks: 103.204.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 22:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1479 (0x5c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Dec 31 23:19:08 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48843-87ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:78:74:34:43:8d:6d:35:0a:99:fa:be:7a: 47:3c:28:52:a1:2a:85:bf:13:28:02:f3:8a:3a:df: e2:f4:eb:7f:8f:c5:b1:d3:45:ac:5e:b6:cf:af:ce: 7e:dc:c4:2b:2e:08:cc:4a:35:ee:a1:76:e3:00:a4: bf:03:8f:eb:b8:09:56:66:3e:eb:04:d1:ab:a6:ce: 17:00:50:19:9e:cc:a5:fd:1d:58:55:21:2a:0e:09: cd:d9:75:7b:4f:6a:7f:cc:56:9f:c1:3b:9d:9d:14: 07:6b:c9:d1:f8:c2:c3:fa:f0:a6:da:a4:6c:e3:3d: b9:ab:97:b5:7d:62:3c:ea:b9:a2:0e:6a:48:fa:40: ce:a2:8b:4c:90:47:a2:e6:cd:8b:ff:81:51:bb:f4: ef:f2:3b:2d:2e:fb:d9:30:15:45:ac:f0:6b:93:4c: e3:cc:64:46:54:ac:01:e6:bb:6b:d4:9a:1a:26:3b: a8:c8:7a:c1:94:c3:e8:0a:92:6b:4e:0e:8e:ba:3e: ad:1e:6d:93:e9:9b:d5:3d:65:77:a2:1f:fa:33:e9: fd:af:15:b6:fe:aa:81:52:e2:1d:28:ea:d8:e6:c2: e7:a2:63:b0:b3:2a:b9:4b:25:8a:a5:fc:49:77:01: 7c:0c:aa:36:d5:9b:36:9c:40:0b:7f:65:8a:bf:1e: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:ED:26:63:A3:64:C6:FE:9D:87:78:D8:69:8A:54:90:47:54:8E:4A X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/2A490316D97011F0A9AB95F59AD3641D.roa sbgp-ipAddrBlock: critical IPv4: 103.204.20.0/24 Signature Algorithm: sha256WithRSAEncryption 01:df:28:43:17:60:e4:f8:ef:50:f0:36:eb:f2:18:89:c8:7a: 96:f8:9c:c8:f7:c6:19:d8:79:57:0d:97:4e:43:d8:1e:00:26: 3f:38:b3:55:b1:ec:ec:0c:ac:bf:3f:b1:af:b6:83:4b:e8:b2: 4b:43:0c:3d:1f:94:24:22:f5:cd:b1:32:a5:48:6a:ef:f1:78: 42:a0:a8:3b:49:21:8d:cd:cb:82:16:f7:69:18:be:4e:87:24: 1e:16:e0:cc:a7:42:54:2d:35:43:1d:cb:2e:cc:cc:18:36:69: 56:86:0e:bf:e9:ea:dc:16:db:d2:ea:bd:9d:4c:63:9c:a4:53: e4:6c:6c:e3:ce:f1:46:c4:f3:c6:12:13:4f:6c:32:b9:94:f7: c6:ec:f8:e5:78:8d:f9:02:35:6b:86:c4:1a:35:bb:c2:7e:bd: 5f:7f:5d:54:44:62:b8:fb:6c:a8:56:4e:8e:a6:67:a2:af:4a: a4:2d:56:cf:4f:66:90:90:9c:de:47:b7:cf:95:68:8e:ac:36: 66:10:d6:33:b1:53:ce:52:5f:22:9c:19:94:7e:c3:b8:22:f9: 33:27:b0:53:db:68:49:b0:6c:96:a7:91:0f:ca:96:33:dd:fb: f9:b2:a5:34:3a:d5:51:22:84:ff:92:8f:48:0d:4f:5b:db:2b: 53:2f:38:21 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUxMjMxMjMxOTA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODg0My04N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2t14dDRDjW01Cpn6vnpHPChSoSqFvxMoAvOKOt/i9Ot/j8Wx00WsXrbPr85+ 3MQrLgjMSjXuoXbjAKS/A4/ruAlWZj7rBNGrps4XAFAZnsyl/R1YVSEqDgnN2XV7 T2p/zFafwTudnRQHa8nR+MLD+vCm2qRs4z25q5e1fWI86rmiDmpI+kDOootMkEei 5s2L/4FRu/Tv8jstLvvZMBVFrPBrk0zjzGRGVKwB5rtr1JoaJjuoyHrBlMPoCpJr Tg6Ouj6tHm2T6ZvVPWV3oh/6M+n9rxW2/qqBUuIdKOrY5sLnomOwsyq5SyWKpfxJ dwF8DKo21Zs2nEALf2WKvx5DzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAvtJmOj ZMb+nYd42GmKVJBHVI5KMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTBEODcvRjY4M0NFRjIyMUVCMTFFQzkyNTAxODE5QzRGOUFFMDIvMkE0OTAzMTZE OTcwMTFGMEE5QUI5NUY1OUFEMzY0MUQucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ8wUMA0GCSqGSIb3DQEBCwUAA4IBAQAB3yhDF2Dk+O9Q8Dbr8hiJ yHqW+JzI98YZ2HlXDZdOQ9geACY/OLNVsezsDKy/P7GvtoNL6LJLQww9H5QkIvXN sTKlSGrv8XhCoKg7SSGNzcuCFvdpGL5OhyQeFuDMp0JULTVDHcsuzMwYNmlWhg6/ 6ercFtvS6r2dTGOcpFPkbGzjzvFGxPPGEhNPbDK5lPfG7PjleI35AjVrhsQaNbvC fr1ff11URGK4+2yoVk6Opmeir0qkLVbPT2aQkJzeR7fPlWiOrDZmENYzsVPOUl8i nBmUfsO4IvkzJ7BT22hJsGyWp5EPypYz3fv5sqU0OtVRIoT/ko9IDU9b2ytTLzgh -----END CERTIFICATE-----Generated at Fri Mar 13 03:19:48 2026 by rpki-client