$ rpki-client -vvf rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/57BAE77C517D11EB8949D438C4F9AE02.roa File: 57BAE77C517D11EB8949D438C4F9AE02.roa (raw, json) Hash identifier: aBoUkT3XfOno4ZFpM1LCowGFp8BTgYEHGaCNCAbFWpE= Subject key identifier: D4:80:F5:66:EB:66:3F:D9:CF:E9:AF:B1:06:C3:B2:A1:E9:BC:D0:09 Certificate issuer: /CN=A91276A3/serialNumber=9275993DC9C433F25D3580AC77E395D06696483D Certificate serial: 077B Authority key identifier: 92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/57BAE77C517D11EB8949D438C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:11:44 +0000 ROA not before: Sun 28 Dec 2025 21:17:54 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139816 IP address blocks: 103.159.114.0/23 maxlen: 23 103.159.114.0/24 maxlen: 24 103.159.115.0/24 maxlen: 24 2407:340::/32 maxlen: 32 2407:340::/48 maxlen: 48 2407:340:1::/48 maxlen: 48 2407:340:2::/48 maxlen: 48 2407:340:3::/48 maxlen: 48 2407:340:4::/48 maxlen: 48 2407:340:5::/48 maxlen: 48 2407:340:6::/48 maxlen: 48 2407:340:7::/48 maxlen: 48 2407:340:8::/48 maxlen: 48 2407:340:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1915 (0x77b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91276A3, serialNumber=9275993DC9C433F25D3580AC77E395D06696483D Validity Not Before: Dec 28 21:17:54 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44920-e348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:9c:06:e9:dc:94:e1:db:46:b6:84:f6:32: 6f:4a:90:12:1c:77:03:52:1a:67:34:b4:c3:ff:53: e0:ad:dd:08:24:7a:b7:d1:62:12:47:32:a5:4f:07: a1:9a:c6:4f:9e:57:86:5c:d6:86:f8:20:c3:e2:c0: 7d:01:68:a3:ec:d1:36:23:19:58:18:b3:35:32:6f: 74:20:31:09:e5:38:7e:88:63:fe:99:5c:4f:ef:ff: ef:88:d4:7e:1d:1e:df:b9:62:f6:84:33:47:96:00: d0:03:ab:8a:f3:44:e0:ee:ba:5c:14:69:2f:05:38: e8:e0:b5:ed:0a:bb:7b:42:3f:97:99:b8:73:1f:0f: c7:1f:ff:be:35:6a:80:1d:9d:41:c1:54:14:63:1e: 82:16:65:c3:12:a9:90:6e:f8:fc:45:b5:a8:4c:39: 02:fb:98:6b:a1:d2:1e:06:e7:be:1c:9c:ee:64:a7: a1:7a:c0:11:61:4e:c1:22:3d:7e:07:a4:0b:29:f0: c9:fe:2f:26:8c:fd:2e:be:69:72:a6:85:b4:91:0b: e6:33:f2:a7:c1:cf:50:b3:1c:c4:4a:4d:a4:19:52: 96:66:f7:8b:1b:b3:f0:1c:3c:7a:64:71:a6:c3:46: c7:12:fe:2f:0d:da:70:ec:dc:ea:51:6d:77:48:1e: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:80:F5:66:EB:66:3F:D9:CF:E9:AF:B1:06:C3:B2:A1:E9:BC:D0:09 X509v3 Authority Key Identifier: keyid:92:75:99:3D:C9:C4:33:F2:5D:35:80:AC:77:E3:95:D0:66:96:48:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/knWZPcnEM_JdNYCsd-OV0GaWSD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/knWZPcnEM_JdNYCsd-OV0GaWSD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276A3/8320BD1C517B11EB86C2D736C4F9AE02/57BAE77C517D11EB8949D438C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.114.0/23 IPv6: 2407:340::/32 Signature Algorithm: sha256WithRSAEncryption 70:f4:5d:b5:6f:14:8e:0c:b2:1b:d8:6a:ef:2f:3f:d3:1a:26: 02:1d:31:cf:67:95:6e:90:14:96:13:cb:0f:11:45:69:b3:fa: 2a:5e:d3:e4:97:1e:fb:0c:19:79:78:45:e5:93:40:d7:37:48: d8:95:0b:54:71:68:c6:cc:b3:e9:04:ff:4c:62:63:ff:e8:35: ab:7f:78:95:59:7b:a4:5e:9d:ae:8b:42:1a:af:62:51:dc:e6: 5a:8f:a7:13:0a:aa:46:39:ff:ea:03:fc:af:50:6e:59:9e:10: 92:a9:bf:4f:b1:0d:13:bb:46:28:20:be:5b:82:dc:89:bf:8a: e3:69:35:59:4d:ca:b1:21:23:83:e5:47:45:cc:6f:0b:cb:85: 31:26:f1:77:3d:22:34:3c:d9:40:9e:3f:b6:f6:e1:c7:4c:06: 55:9d:bd:a4:7a:4c:67:f1:36:21:66:ef:35:e1:fb:bb:8d:91: 41:02:6e:92:01:e9:c9:e7:51:71:48:6e:35:06:d4:07:f3:40: 1b:26:08:71:e2:d8:26:18:b2:91:ca:5c:2c:14:06:2b:b3:51: 20:98:89:20:2c:71:9d:fd:36:78:2e:54:ac:f8:f8:e7:7b:84: 95:b7:e5:c8:64:90:d3:f5:62:72:93:21:73:0a:87:20:a0:ad: ba:5e:61:0b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2QTMxMTAvBgNVBAUTKDkyNzU5OTNEQzlDNDMzRjI1RDM1ODBBQzc3RTM5NUQw NjY5NjQ4M0QwHhcNMjUxMjI4MjExNzU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDkyMC1lMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aWcBunclOHbRraE9jJvSpASHHcDUhpnNLTD/1Pgrd0IJHq30WISRzKlTweh msZPnleGXNaG+CDD4sB9AWij7NE2IxlYGLM1Mm90IDEJ5Th+iGP+mVxP7//viNR+ HR7fuWL2hDNHlgDQA6uK80Tg7rpcFGkvBTjo4LXtCrt7Qj+XmbhzHw/HH/++NWqA HZ1BwVQUYx6CFmXDEqmQbvj8RbWoTDkC+5hrodIeBue+HJzuZKehesARYU7BIj1+ B6QLKfDJ/i8mjP0uvmlypoW0kQvmM/Knwc9QsxzESk2kGVKWZveLG7PwHDx6ZHGm w0bHEv4vDdpw7NzqUW13SB7aMwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNSA9Wbr Zj/Zz+mvsQbDsqHpvNAJMB8GA1UdIwQYMBaAFJJ1mT3JxDPyXTWArHfjldBmlkg9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzZBMy84MzIwQkQxQzUx N0IxMUVCODZDMkQ3MzZDNEY5QUUwMi9rbldaUGNuRU1fSmROWUNzZC1PVjBHYVdT RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tuV1pQY25FTV9KZE5ZQ3NkLU9WMEdhV1NEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc2QTMvODMyMEJEMUM1MTdCMTFFQjg2QzJENzM2QzRGOUFFMDIvNTdCQUU3N0M1 MTdEMTFFQjg5NDlENDM4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ59yMA0EAgACMAcDBQAkBwNAMA0GCSqGSIb3DQEBCwUAA4IBAQBw 9F21bxSODLIb2GrvLz/TGiYCHTHPZ5VukBSWE8sPEUVps/oqXtPklx77DBl5eEXl k0DXN0jYlQtUcWjGzLPpBP9MYmP/6DWrf3iVWXukXp2ui0Iar2JR3OZaj6cTCqpG Of/qA/yvUG5ZnhCSqb9PsQ0Tu0YoIL5bgtyJv4rjaTVZTcqxISOD5UdFzG8Ly4Ux JvF3PSI0PNlAnj+29uHHTAZVnb2kekxn8TYhZu814fu7jZFBAm6SAenJ51FxSG41 BtQH80AbJghx4tgmGLKRylwsFAYrs1EgmIkgLHGd/TZ4LlSs+Pjne4SVt+XIZJDT 9WJykyFzCocgoK26XmEL -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:51 2026 by rpki-client