$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/5D4B0B5E153611ECA897546BC4F9AE02.roa File: 5D4B0B5E153611ECA897546BC4F9AE02.roa (raw, json) Hash identifier: 0gXBEALTKiAZV/3PwvwooAb07fvGjb4W70kWE3ZaJgI= Subject key identifier: 1A:DC:A1:C4:49:88:D4:6D:54:D6:BF:67:42:2F:D0:65:69:BE:E0:C0 Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 05D4 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/5D4B0B5E153611ECA897546BC4F9AE02.roa Signing time: Thu 23 Jul 2026 00:25:03 +0000 ROA not before: Thu 23 Jul 2026 00:25:03 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 140927 IP address blocks: 103.152.216.0/23 maxlen: 23 103.152.216.0/24 maxlen: 24 103.152.217.0/24 maxlen: 24 2001:df4:4680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Jul 23 00:25:03 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a615f5f-f8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:c8:5e:be:91:ad:a4:4e:a5:a7:92:ba:d7: 98:b6:ad:34:b0:e0:9d:4f:2b:57:c8:8f:82:d1:45: 31:43:52:91:2c:1a:2f:0c:b0:fc:ae:64:e8:58:b6: 8b:65:de:f6:f6:b5:2f:26:00:22:fd:74:4a:25:d9: 32:d9:41:b1:ee:1d:bf:51:3d:18:65:c3:1d:2f:a8: ed:5c:03:42:20:95:ca:5c:f8:71:64:ad:fb:91:b6: d6:44:95:6d:cd:22:4a:4c:ca:db:53:16:98:9f:94: a5:99:3d:47:df:f3:b5:86:21:70:fc:ef:2c:83:54: 46:d8:e1:b9:c3:62:9d:65:06:66:6a:c4:e2:e0:8f: bb:de:bf:95:a2:86:49:00:9d:83:7e:57:8f:9b:35: 1d:b2:eb:ce:da:cf:b5:81:6a:ea:cf:ce:04:02:bc: 7b:d3:fd:2c:f0:71:ff:3c:cd:00:91:25:61:58:53: 22:00:d5:9e:ed:11:61:76:e6:9c:c5:d3:f8:61:fc: 5f:91:3c:76:1e:d7:19:e3:0f:bb:50:2c:8a:8f:a7: b4:55:13:90:a6:32:7d:63:f2:ac:72:a9:54:cb:27: 7b:a0:e1:3e:cb:a4:78:96:8f:b7:ac:a8:10:af:f7: c3:02:5c:ed:d3:60:6b:9c:ca:8d:8c:d2:b7:37:37: 38:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DC:A1:C4:49:88:D4:6D:54:D6:BF:67:42:2F:D0:65:69:BE:E0:C0 X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/5D4B0B5E153611ECA897546BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.216.0/23 IPv6: 2001:df4:4680::/48 Signature Algorithm: sha256WithRSAEncryption a3:6d:91:3d:e5:83:59:a8:e1:b9:d3:47:a1:e4:67:57:9a:16: ee:7b:62:09:d4:c1:8a:54:2c:79:57:e6:3a:02:42:33:cd:f6: 26:fe:30:c4:0c:ae:15:a0:9d:8a:8a:14:2e:d6:cd:40:fb:a5: e0:28:1c:01:da:5b:6a:4f:f2:ec:3e:06:4f:fb:01:a6:62:b2: 3a:31:24:72:1f:aa:4b:fc:71:e7:a6:90:e8:0c:4c:25:61:5e: 97:bb:63:fc:66:04:ee:95:df:65:73:1b:6c:d6:ea:b6:4d:32: f6:d0:aa:a3:db:24:51:ad:cc:31:12:fd:d1:b6:7f:c0:a9:29: e1:b6:e1:40:03:eb:64:2e:ad:eb:0a:89:f3:4d:e0:af:34:51: b9:11:b1:2d:f3:db:3c:7b:df:94:2a:14:81:6d:db:80:38:e4: 6b:a5:bd:43:8b:d9:3e:36:07:b8:0d:55:6e:b9:a3:9e:ee:c4: f7:2d:74:d8:f7:76:5d:1b:56:9e:8d:1f:62:c5:5c:ba:a6:e2: 6e:90:a6:e4:52:90:ee:cc:47:9f:48:7c:39:d2:9e:f6:c6:08: bb:7a:12:4a:da:ed:25:2d:0f:61:1b:8b:08:a2:ad:f2:78:3e: 7a:b0:f4:c6:e9:16:d3:b6:13:01:06:ed:1d:dc:eb:3e:e2:4c: 06:b8:1c:38 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjYwNzIzMDAyNTAzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxNWY1Zi1mOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiuDIXr6RraROpaeSuteYtq00sOCdTytXyI+C0UUxQ1KRLBovDLD8rmToWLaL Zd729rUvJgAi/XRKJdky2UGx7h2/UT0YZcMdL6jtXANCIJXKXPhxZK37kbbWRJVt zSJKTMrbUxaYn5SlmT1H3/O1hiFw/O8sg1RG2OG5w2KdZQZmasTi4I+73r+VooZJ AJ2DflePmzUdsuvO2s+1gWrqz84EArx70/0s8HH/PM0AkSVhWFMiANWe7RFhduac xdP4YfxfkTx2HtcZ4w+7UCyKj6e0VROQpjJ9Y/KscqlUyyd7oOE+y6R4lo+3rKgQ r/fDAlzt02BrnMqNjNK3Nzc4dwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBrcocRJ iNRtVNa/Z0Iv0GVpvuDAMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI0Q0MvRjg5QzNFQjYxNTMxMTFFQ0I1OTRGQjdEQzRGOUFFMDIvNUQ0QjBCNUUx NTM2MTFFQ0E4OTc1NDZCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5jYMA8EAgACMAkDBwAgAQ30RoAwDQYJKoZIhvcNAQELBQADggEB AKNtkT3lg1mo4bnTR6HkZ1eaFu57YgnUwYpULHlX5joCQjPN9ib+MMQMrhWgnYqK FC7WzUD7peAoHAHaW2pP8uw+Bk/7AaZisjoxJHIfqkv8ceemkOgMTCVhXpe7Y/xm BO6V32VzG2zW6rZNMvbQqqPbJFGtzDES/dG2f8CpKeG24UAD62QuresKifNN4K80 UbkRsS3z2zx735QqFIFt24A45GulvUOL2T42B7gNVW65o57uxPctdNj3dl0bVp6N H2LFXLqm4m6QpuRSkO7MR59IfDnSnvbGCLt6Ekra7SUtD2EbiwiirfJ4Pnqw9Mbp FtO2EwEG7R3c6z7iTAa4HDg= -----END CERTIFICATE-----Generated at Fri Jul 24 04:01:28 2026 by rpki-client