$ rpki-client -vvf rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa File: B6C2A27AF16A11E89550B621C4F9AE02.roa (raw, json) Hash identifier: h+tzRhpe2AsXoHJ8CBPjL2tTeLXiRNNuDMYfrMmyPpI= Subject key identifier: E7:BC:D6:02:F7:CD:47:B2:00:01:02:20:4A:30:74:D7:33:EF:57:18 Certificate issuer: /CN=A91371E4/serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Certificate serial: 125B Authority key identifier: 29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:46:24 +0000 ROA not before: Thu 04 Dec 2025 16:47:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138148 IP address blocks: 103.198.68.0/24 maxlen: 24 103.198.69.0/24 maxlen: 24 103.198.70.0/24 maxlen: 24 103.198.71.0/24 maxlen: 24 2001:df6:b400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4699 (0x125b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91371E4, serialNumber=29B9E6AC019298CCA096DE8971A9DC8F7D78E1D9 Validity Not Before: Dec 4 16:47:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44330-77d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:cd:e8:96:5a:c2:bc:01:c2:05:28:ed:e4: 96:71:f9:5d:d5:e0:33:fa:b3:d1:e4:fe:43:38:a6: 57:de:1c:c0:57:d2:7e:c6:26:ba:96:6c:76:71:e2: 0e:eb:dd:10:ae:a1:ef:83:b8:12:25:f9:b5:4f:7d: 4d:c3:27:82:ca:02:ac:8a:81:8e:32:6d:84:22:40: 93:83:9d:c3:35:bf:82:64:14:82:59:1f:6e:95:19: fc:93:71:a9:70:c4:0f:bc:be:0a:3d:d8:32:1f:7c: ae:98:ef:74:1b:cb:d4:7d:87:ac:cd:8d:03:0b:59: 61:ab:db:36:64:3b:7e:f6:73:67:87:f0:36:42:1a: 2b:05:c9:60:49:ac:85:e2:1a:40:55:10:e2:12:93: d9:eb:49:a8:cd:e1:6d:25:b8:ac:ca:74:49:5a:11: e4:f9:08:6a:55:5e:43:4b:e3:b8:c8:05:8b:c9:a0: b6:28:ee:9e:a6:1d:a5:11:68:9f:e8:30:29:5e:76: dc:58:3b:e3:c3:57:bc:b5:e9:33:61:96:9d:7c:c2: 5b:32:cb:a8:aa:f5:73:9f:57:2d:c9:a4:e6:85:f3: 02:e8:ca:0c:b0:be:dc:f0:83:30:c6:44:65:e4:aa: cf:f5:97:73:00:35:5e:6b:04:af:63:fc:5c:85:ed: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BC:D6:02:F7:CD:47:B2:00:01:02:20:4A:30:74:D7:33:EF:57:18 X509v3 Authority Key Identifier: keyid:29:B9:E6:AC:01:92:98:CC:A0:96:DE:89:71:A9:DC:8F:7D:78:E1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/KbnmrAGSmMyglt6Jcancj3144dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KbnmrAGSmMyglt6Jcancj3144dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91371E4/38247A70F16911E8B3A79D1EC4F9AE02/B6C2A27AF16A11E89550B621C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.198.68.0/22 IPv6: 2001:df6:b400::/48 Signature Algorithm: sha256WithRSAEncryption bf:34:1c:88:ad:97:56:c1:84:4b:40:c4:2b:1e:9c:56:c1:57: 30:77:5d:18:73:07:10:24:45:bd:1f:10:71:f4:49:a4:0a:79: 0a:9d:a4:f0:95:56:19:a6:ec:10:c2:3d:7c:30:30:9c:7a:92: a7:61:66:0b:9d:3b:d5:19:15:e0:f5:87:9b:21:6c:c5:1a:a3: 74:a3:c4:c7:f6:9e:55:9f:9a:37:47:71:58:2f:02:b4:30:86: 00:03:90:14:71:88:52:58:41:0c:9d:3c:cc:96:a9:99:3c:1e: ee:4a:ee:68:2b:2f:5c:6b:72:9c:6f:90:2a:04:5f:82:7d:c2: ae:75:12:b2:60:cb:94:58:6a:cc:29:07:22:c5:f0:11:08:f7: 79:62:b0:b7:9b:73:8f:0a:0f:46:78:49:39:f6:e5:44:d2:8c: c2:a9:88:50:2c:99:ca:47:98:2f:8b:ed:0e:5c:1e:14:50:2b: 80:7c:81:64:e7:9d:57:71:be:69:ac:80:61:95:3b:e2:fc:1f: 0b:a2:e0:1d:34:e5:b2:99:6f:f1:94:07:a5:a6:1e:ba:0c:52: 2a:7e:fc:30:96:48:a1:7a:c7:ac:9d:79:30:ef:e9:35:14:2e: 0e:c1:36:96:4a:a9:d9:e1:ca:a2:cd:95:89:dc:c2:8a:17:90: d0:34:85:db -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICElswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzcxRTQxMTAvBgNVBAUTKDI5QjlFNkFDMDE5Mjk4Q0NBMDk2REU4OTcxQTlEQzhG N0Q3OEUxRDkwHhcNMjUxMjA0MTY0NzA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDMzMC03N2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7XN6JZawrwBwgUo7eSWcfld1eAz+rPR5P5DOKZX3hzAV9J+xia6lmx2ceIO 690QrqHvg7gSJfm1T31NwyeCygKsioGOMm2EIkCTg53DNb+CZBSCWR9ulRn8k3Gp cMQPvL4KPdgyH3yumO90G8vUfYeszY0DC1lhq9s2ZDt+9nNnh/A2QhorBclgSayF 4hpAVRDiEpPZ60mozeFtJbisynRJWhHk+QhqVV5DS+O4yAWLyaC2KO6eph2lEWif 6DApXnbcWDvjw1e8tekzYZadfMJbMsuoqvVzn1ctyaTmhfMC6MoMsL7c8IMwxkRl 5KrP9ZdzADVeawSvY/xche2joQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOe81gL3 zUeyAAECIEowdNcz71cYMB8GA1UdIwQYMBaAFCm55qwBkpjMoJbeiXGp3I99eOHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzFFNC8zODI0N0E3MEYx NjkxMUU4QjNBNzlEMUVDNEY5QUUwMi9LYm5tckFHU21NeWdsdDZKY2FuY2ozMTQ0 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tibm1yQUdTbU15Z2x0NkpjYW5jajMxNDRkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzcxRTQvMzgyNDdBNzBGMTY5MTFFOEIzQTc5RDFFQzRGOUFFMDIvQjZDMkEyN0FG MTZBMTFFODk1NTBCNjIxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ8ZEMA8EAgACMAkDBwAgAQ32tAAwDQYJKoZIhvcNAQELBQADggEB AL80HIitl1bBhEtAxCsenFbBVzB3XRhzBxAkRb0fEHH0SaQKeQqdpPCVVhmm7BDC PXwwMJx6kqdhZgudO9UZFeD1h5shbMUao3SjxMf2nlWfmjdHcVgvArQwhgADkBRx iFJYQQydPMyWqZk8Hu5K7mgrL1xrcpxvkCoEX4J9wq51ErJgy5RYaswpByLF8BEI 93lisLebc48KD0Z4STn25UTSjMKpiFAsmcpHmC+L7Q5cHhRQK4B8gWTnnVdxvmms gGGVO+L8Hwui4B005bKZb/GUB6WmHroMUip+/DCWSKF6x6ydeTDv6TUULg7BNpZK qdnhyqLNlYncwooXkNA0hds= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:29 2026 by rpki-client