$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/52DF0E62B2FA11EFA36E0387C4F9AE02.roa File: 52DF0E62B2FA11EFA36E0387C4F9AE02.roa (raw, json) Hash identifier: Z+DrfE+gqHihIiYtOwJ20Al7Qo+Lrwz4FvqdoOjvXzs= Subject key identifier: 8F:48:9F:FF:33:34:99:E9:E7:70:1E:8B:B4:3B:8B:3E:63:4B:BE:8C Certificate issuer: /CN=A91EAD80/serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2 Certificate serial: 0106 Authority key identifier: A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/52DF0E62B2FA11EFA36E0387C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:59:10 +0000 ROA not before: Thu 05 Jun 2025 06:40:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55720 IP address blocks: 103.187.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 05:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAD80, serialNumber=A1147E847BCFEEEADD9E89A97A8D9F33679CA7E2 Validity Not Before: Jun 5 06:40:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5a5bd-229a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:01:04:c4:8e:57:42:1c:84:0e:83:1e:61: 91:81:dc:9e:86:36:ff:0d:80:b4:99:5d:00:09:3e: 59:2e:91:65:ee:91:72:77:11:51:c3:5a:3b:9d:3a: e8:14:9b:0e:3d:ee:dc:b2:86:89:d2:21:fa:a0:f8: bc:3d:e5:3d:34:74:c6:76:c5:2e:8c:da:12:00:2c: 6e:08:a2:b3:17:23:81:c1:63:30:6f:23:e3:f7:22: 44:f1:b2:67:f3:8f:31:46:a3:7c:63:54:3a:f7:7d: 7b:4d:6c:79:74:a6:32:d1:95:04:74:37:18:2f:b0: c8:b1:43:85:67:33:4f:b9:80:aa:ab:8c:64:28:b8: f5:f6:11:99:a3:d5:76:eb:9b:1c:3c:14:11:e8:02: 11:45:99:13:3b:2d:4a:1f:17:34:83:a9:c1:e2:29: 5c:de:d7:8c:41:a3:36:8d:e7:ce:05:bc:75:3e:ee: bc:ab:b3:34:fd:28:13:54:6c:76:0c:64:10:7f:49: fa:43:71:1c:4f:89:f6:1d:22:a7:9c:bf:e6:20:a1: c8:e7:14:2b:fb:bc:c1:20:04:ea:3f:2e:e1:04:ff: d7:6c:ad:12:4b:18:0e:7b:77:25:92:da:ac:83:76: ac:4e:ed:31:a0:bc:a5:3b:cc:64:26:9a:da:60:83: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:9F:FF:33:34:99:E9:E7:70:1E:8B:B4:3B:8B:3E:63:4B:BE:8C X509v3 Authority Key Identifier: keyid:A1:14:7E:84:7B:CF:EE:EA:DD:9E:89:A9:7A:8D:9F:33:67:9C:A7:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/oRR-hHvP7urdnompeo2fM2ecp-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oRR-hHvP7urdnompeo2fM2ecp-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAD80/D223C5AE94C911EF92CD7258C4F9AE02/52DF0E62B2FA11EFA36E0387C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.187.27.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:65:26:d0:47:bd:dd:c4:47:cc:36:04:09:b4:03:45:20:51: 6c:b2:69:a3:58:d6:85:97:c0:74:9b:c9:a9:94:9a:53:ca:a9: a2:66:7e:46:50:46:3c:3f:c8:6d:54:31:2b:cd:ff:16:21:ff: 9c:45:1f:a7:69:5d:de:e6:48:c2:45:2c:8d:13:09:85:03:de: 1c:69:67:9e:0e:fe:5d:01:db:d5:3b:e8:03:3e:45:b4:cf:99: fa:30:03:3b:af:0e:20:57:c1:40:78:88:8e:2d:ea:9b:d8:df: 84:26:8a:29:1d:8f:7a:d9:e0:70:82:4d:76:00:c1:aa:17:02: 64:c6:68:14:f4:68:05:cb:23:ad:d2:08:17:d0:1e:24:54:23: 2d:e0:50:27:a7:60:40:3a:76:1d:ae:37:ce:2e:68:f2:a0:02: 10:83:50:5c:f9:39:dd:9d:ee:c4:22:0f:3e:d3:36:e5:dc:0e: 71:04:d8:80:b5:24:cd:1a:0c:e7:58:28:65:c5:31:e3:2e:87: 83:69:e2:61:fe:7b:35:61:e7:be:a9:bf:f5:8f:9f:74:4d:69: 8f:c5:91:a5:9b:a4:1a:0b:d0:74:81:5a:38:5e:01:59:e4:01: 09:7b:c8:5b:1e:0f:86:e6:93:62:dd:ea:16:4e:15:67:f2:d1: fe:b5:4d:ea -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFEODAxMTAvBgNVBAUTKEExMTQ3RTg0N0JDRkVFRUFERDlFODlBOTdBOEQ5RjMz Njc5Q0E3RTIwHhcNMjUwNjA1MDY0MDUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTViZC0yMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMABBMSOV0IchA6DHmGRgdyehjb/DYC0mV0ACT5ZLpFl7pFydxFRw1o7nTro FJsOPe7csoaJ0iH6oPi8PeU9NHTGdsUujNoSACxuCKKzFyOBwWMwbyPj9yJE8bJn 848xRqN8Y1Q69317TWx5dKYy0ZUEdDcYL7DIsUOFZzNPuYCqq4xkKLj19hGZo9V2 65scPBQR6AIRRZkTOy1KHxc0g6nB4ilc3teMQaM2jefOBbx1Pu68q7M0/SgTVGx2 DGQQf0n6Q3EcT4n2HSKnnL/mIKHI5xQr+7zBIATqPy7hBP/XbK0SSxgOe3clktqs g3asTu0xoLylO8xkJpraYIMvQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI9In/8z NJnp53Aei7Q7iz5jS76MMB8GA1UdIwQYMBaAFKEUfoR7z+7q3Z6JqXqNnzNnnKfi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUQ4MC9EMjIzQzVBRTk0 QzkxMUVGOTJDRDcyNThDNEY5QUUwMi9vUlItaEh2UDd1cmRub21wZW8yZk0yZWNw LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29SUi1oSHZQN3VyZG5vbXBlbzJmTTJlY3AtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFEODAvRDIyM0M1QUU5NEM5MTFFRjkyQ0Q3MjU4QzRGOUFFMDIvNTJERjBFNjJC MkZBMTFFRkEzNkUwMzg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ7sbMA0GCSqGSIb3DQEBCwUAA4IBAQBOZSbQR73dxEfMNgQJtANF IFFssmmjWNaFl8B0m8mplJpTyqmiZn5GUEY8P8htVDErzf8WIf+cRR+naV3e5kjC RSyNEwmFA94caWeeDv5dAdvVO+gDPkW0z5n6MAM7rw4gV8FAeIiOLeqb2N+EJoop HY962eBwgk12AMGqFwJkxmgU9GgFyyOt0ggX0B4kVCMt4FAnp2BAOnYdrjfOLmjy oAIQg1Bc+Tndne7EIg8+0zbl3A5xBNiAtSTNGgznWChlxTHjLoeDaeJh/ns1Yee+ qb/1j590TWmPxZGlm6QaC9B0gVo4XgFZ5AEJe8hbHg+G5pNi3eoWThVn8tH+tU3q -----END CERTIFICATE-----Generated at Wed Mar 4 13:14:44 2026 by rpki-client