$ rpki-client -vvf rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/3E730FA28E8111EAB2038B6BC4F9AE02.roa File: 3E730FA28E8111EAB2038B6BC4F9AE02.roa (raw, json) Hash identifier: vSaXKWRBXUPLPn7+Q/yDSX8ApY9DTLpiFPD4ogaWMGI= Subject key identifier: 5D:2D:DB:70:AE:45:33:F4:D4:AB:3D:A3:34:56:5E:F7:9C:0C:B6:BF Certificate issuer: /CN=A91293F4/serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E Certificate serial: 0A2E Authority key identifier: E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/3E730FA28E8111EAB2038B6BC4F9AE02.roa Signing time: Mon 02 Mar 2026 04:48:31 +0000 ROA not before: Wed 08 Oct 2025 20:21:13 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45355 IP address blocks: 45.117.244.0/22 maxlen: 22 103.1.180.0/22 maxlen: 22 103.101.240.0/22 maxlen: 22 202.129.228.0/22 maxlen: 22 2400:6d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293F4, serialNumber=E6A54BAD7D176E4447A9E94F24480327C1B40C9E Validity Not Before: Oct 8 20:21:13 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5169e-256a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:08:c9:fa:a2:3e:0c:c3:b4:27:dd:58:4e: 28:d7:e6:44:8c:cf:4a:08:82:8f:ce:a0:28:2d:db: 78:1f:9c:84:40:5c:8c:3a:00:c6:dd:94:df:1d:e4: e8:37:5a:d0:c2:bd:52:64:fe:79:fa:63:ce:f2:c9: ef:8b:99:66:90:de:1d:b4:49:a2:c9:a3:03:12:65: a3:de:27:26:29:78:1f:a5:63:bb:0b:68:07:b1:1e: aa:21:9e:08:b3:36:52:fc:6b:0d:9f:50:ef:dd:72: f9:20:a4:cb:54:41:0d:de:6f:c6:93:84:bb:ba:5a: 7f:5a:be:1b:b6:c3:db:b9:3d:e4:db:fe:d9:78:cb: a0:ec:e0:1a:e3:48:16:e9:ee:28:6d:56:05:4f:e3: 55:99:8d:f7:7d:13:4b:76:cc:32:83:8c:c1:84:65: ad:b2:1c:85:18:86:82:98:e8:c3:fa:64:80:88:ab: e1:12:10:13:85:6e:df:18:f5:97:88:57:54:b3:40: 6a:1c:a8:a4:87:14:42:e0:e3:d1:ee:26:8a:35:79: 1d:e4:e2:57:bf:1b:20:f3:d3:ab:f2:62:20:59:80: d5:5a:b9:29:6e:65:b2:f1:46:91:8b:eb:69:82:e5: f7:de:97:19:b5:b6:59:c7:86:9a:4d:5e:2c:a5:a7: ea:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:DB:70:AE:45:33:F4:D4:AB:3D:A3:34:56:5E:F7:9C:0C:B6:BF X509v3 Authority Key Identifier: keyid:E6:A5:4B:AD:7D:17:6E:44:47:A9:E9:4F:24:48:03:27:C1:B4:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qVLrX0XbkRHqelPJEgDJ8G0DJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293F4/1F695EEC8E7F11EAA9584C67C4F9AE02/3E730FA28E8111EAB2038B6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.117.244.0/22 103.1.180.0/22 103.101.240.0/22 202.129.228.0/22 IPv6: 2400:6d00::/32 Signature Algorithm: sha256WithRSAEncryption 0c:7d:73:c4:54:28:47:5e:57:04:ee:47:72:3d:14:f4:67:dd: 7e:5a:d3:0e:68:c6:7f:39:1c:a3:64:7c:b4:6c:06:e0:32:bd: 0b:b1:73:45:84:c7:e5:34:84:15:84:3f:f1:58:ae:a0:47:b5: 66:d3:44:63:c8:17:24:20:c0:67:5e:57:fb:31:a1:98:95:88: 29:3d:34:79:5f:21:84:b7:b1:d2:1d:ba:c0:fc:f2:de:af:d5: d7:e2:ab:cb:f4:93:46:19:8e:aa:43:66:fe:fa:c5:da:2c:f6: 16:33:e8:88:81:2d:9c:b6:cb:92:2d:cd:7b:dc:d3:96:ea:a0: 79:1a:63:0b:e9:99:62:46:0e:4d:06:5b:00:8d:00:bb:40:e7: 90:af:60:ba:fa:5e:4c:0c:22:c2:fe:55:68:ff:8a:b5:f7:6f: cd:95:9b:c7:ac:6e:90:6b:63:65:72:c0:12:d7:89:6e:69:80: e4:73:a9:1b:98:cf:99:f2:eb:24:ea:7b:8b:3c:ca:46:b3:4b: c1:a4:e9:5a:0f:ae:86:42:fd:eb:46:09:35:29:20:2e:95:ff: 7f:9b:33:57:f5:6d:f9:ff:ab:53:d4:5d:8b:7e:f5:95:b6:f6: 8e:55:cc:df:05:16:ac:7f:26:2d:10:e7:19:95:16:e8:e8:07: 5f:ed:96:b8 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRjQxMTAvBgNVBAUTKEU2QTU0QkFEN0QxNzZFNDQ0N0E5RTk0RjI0NDgwMzI3 QzFCNDBDOUUwHhcNMjUxMDA4MjAyMTEzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTY5ZS0yNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3N8IyfqiPgzDtCfdWE4o1+ZEjM9KCIKPzqAoLdt4H5yEQFyMOgDG3ZTfHeTo N1rQwr1SZP55+mPO8snvi5lmkN4dtEmiyaMDEmWj3icmKXgfpWO7C2gHsR6qIZ4I szZS/GsNn1Dv3XL5IKTLVEEN3m/Gk4S7ulp/Wr4btsPbuT3k2/7ZeMug7OAa40gW 6e4obVYFT+NVmY33fRNLdswyg4zBhGWtshyFGIaCmOjD+mSAiKvhEhAThW7fGPWX iFdUs0BqHKikhxRC4OPR7iaKNXkd5OJXvxsg89Or8mIgWYDVWrkpbmWy8UaRi+tp guX33pcZtbZZx4aaTV4spafqfwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFF0t23Cu RTP01Ks9ozRWXvecDLa/MB8GA1UdIwQYMBaAFOalS619F25ER6npTyRIAyfBtAye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNGNC8xRjY5NUVFQzhF N0YxMUVBQTk1ODRDNjdDNEY5QUUwMi81cVZMclgwWGJrUkhxZWxQSkVnREo4RzBE SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVxVkxyWDBYYmtSSHFlbFBKRWdESjhHMERKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjkzRjQvMUY2OTVFRUM4RTdGMTFFQUE5NTg0QzY3QzRGOUFFMDIvM0U3MzBGQTI4 RTgxMTFFQUIyMDM4QjZCQzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCLXX0AwQCZwG0AwQCZ2XwAwQCyoHkMA0EAgACMAcDBQAkAG0AMA0G CSqGSIb3DQEBCwUAA4IBAQAMfXPEVChHXlcE7kdyPRT0Z91+WtMOaMZ/ORyjZHy0 bAbgMr0LsXNFhMflNIQVhD/xWK6gR7Vm00RjyBckIMBnXlf7MaGYlYgpPTR5XyGE t7HSHbrA/PLer9XX4qvL9JNGGY6qQ2b++sXaLPYWM+iIgS2ctsuSLc173NOW6qB5 GmML6ZliRg5NBlsAjQC7QOeQr2C6+l5MDCLC/lVo/4q192/NlZvHrG6Qa2NlcsAS 14luaYDkc6kbmM+Z8usk6nuLPMpGs0vBpOlaD66GQv3rRgk1KSAulf9/mzNX9W35 /6tT1F2LfvWVtvaOVczfBRasfyYtEOcZlRbo6Adf7Za4 -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:30 2026 by rpki-client