$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/B7AD6F08264611F1A7E2573D9F833773.roa File: B7AD6F08264611F1A7E2573D9F833773.roa (raw, json) Hash identifier: cAi1E/gIPdIvRZ5EylPtBXr5xfvPwzP6uzvwERgkasg= Subject key identifier: E0:67:57:19:60:E4:D6:A8:50:1E:98:37:9C:DD:5D:C2:1A:B4:63:C3 Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08AE Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/B7AD6F08264611F1A7E2573D9F833773.roa Signing time: Sun 22 Mar 2026 23:27:40 +0000 ROA not before: Sun 22 Mar 2026 23:27:40 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 24544 IP address blocks: 103.39.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2222 (0x8ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 22 23:27:40 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c07aeb-4380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:9e:2e:fd:af:84:c7:6c:75:ad:99:be:f4: 98:0f:4d:82:1b:4c:f8:61:72:dd:06:22:6e:3c:fb: 14:e0:cd:6e:37:42:73:ce:f6:bc:df:64:18:3b:d0: 07:f9:11:b4:a5:df:66:52:66:41:67:bb:d1:ce:28: ee:f7:b7:b2:68:e4:2a:86:0a:ad:c4:22:8f:a1:54: 2e:ef:40:84:d8:35:c1:53:ae:6b:e5:74:0b:48:ca: 7e:ac:7e:67:de:35:84:01:2c:cb:22:33:09:73:ed: a7:ec:f8:dd:b3:d8:db:fd:3d:f7:23:3c:56:08:e1: a8:09:5b:fb:f9:42:23:30:40:1e:05:76:a6:ca:09: c1:12:3b:ed:87:74:c2:d9:d6:17:3c:e4:11:0d:3e: 5c:b2:e4:6b:9e:bf:cc:21:92:85:f9:99:3a:d6:ff: 3b:a7:b2:83:56:78:5c:18:93:84:0d:21:33:cc:60: b7:29:d8:d7:a8:02:ed:8c:6f:06:65:3e:68:dc:07: 8d:e8:8d:fe:08:de:ae:e5:6c:0e:ba:88:40:48:6c: a7:2e:05:3d:57:a6:81:43:09:c3:62:b3:22:1a:2e: 1d:4b:36:41:b0:01:60:d8:72:b6:e5:e0:ab:0b:1d: 8c:6c:56:82:04:c3:ff:69:76:68:1a:e7:07:57:f1: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:67:57:19:60:E4:D6:A8:50:1E:98:37:9C:DD:5D:C2:1A:B4:63:C3 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/B7AD6F08264611F1A7E2573D9F833773.roa sbgp-ipAddrBlock: critical IPv4: 103.39.108.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:47:4d:e9:26:2c:b2:bd:b9:35:4e:25:39:b8:1e:4b:32:97: e5:55:1f:05:e6:36:c2:14:98:56:66:47:d3:66:0c:43:f3:02: 2c:e7:0e:5a:24:68:4d:4d:92:2d:0f:0a:41:e8:47:81:60:e0: 33:f4:fa:56:ef:80:48:f9:2e:4a:0e:ba:d1:8c:19:63:2d:20: fb:32:9d:45:58:b0:7a:57:f7:78:51:1e:4c:88:e8:12:53:26: b0:b5:3e:cd:aa:c7:fe:de:f6:e9:e6:06:fb:36:af:35:df:cc: 24:b7:fc:88:13:0c:86:00:bb:78:39:c8:7b:a4:e1:53:ca:dc: 4a:6d:a0:78:4a:d7:53:11:11:c5:d2:c8:1d:32:ca:6c:94:3b: 61:01:e0:da:fd:00:18:13:ee:be:8c:3a:54:c5:cb:fa:72:c0: b7:52:7a:fc:cc:d6:12:b8:f5:3a:e8:60:8a:db:97:43:dc:b2: 5a:5b:45:97:a2:50:8a:eb:1d:51:22:d8:94:98:64:e6:0a:8b: 43:2f:80:62:b2:b8:fa:c0:c5:c1:55:d4:dd:11:fd:f6:50:33: 5a:a5:a1:1b:12:89:ab:20:02:50:37:fd:99:e2:32:12:31:66: 4b:5a:bc:cb:25:bf:6e:83:5a:5d:c4:0b:8f:2c:36:be:58:6f: eb:86:70:2d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwMzIyMjMyNzQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWMwN2FlYi00MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgZieLv2vhMdsda2ZvvSYD02CG0z4YXLdBiJuPPsU4M1uN0Jzzva832QYO9AH +RG0pd9mUmZBZ7vRziju97eyaOQqhgqtxCKPoVQu70CE2DXBU65r5XQLSMp+rH5n 3jWEASzLIjMJc+2n7Pjds9jb/T33IzxWCOGoCVv7+UIjMEAeBXamygnBEjvth3TC 2dYXPOQRDT5csuRrnr/MIZKF+Zk61v87p7KDVnhcGJOEDSEzzGC3KdjXqALtjG8G ZT5o3AeN6I3+CN6u5WwOuohASGynLgU9V6aBQwnDYrMiGi4dSzZBsAFg2HK25eCr Cx2MbFaCBMP/aXZoGucHV/GEGQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOBnVxlg 5NaoUB6YN5zdXcIatGPDMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvQjdBRDZGMDgy NjQ2MTFGMUE3RTI1NzNEOUY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZydsMA0GCSqGSIb3DQEBCwUAA4IBAQAvR03pJiyyvbk1TiU5uB5L MpflVR8F5jbCFJhWZkfTZgxD8wIs5w5aJGhNTZItDwpB6EeBYOAz9PpW74BI+S5K DrrRjBljLSD7Mp1FWLB6V/d4UR5MiOgSUyawtT7Nqsf+3vbp5gb7Nq8138wkt/yI EwyGALt4Och7pOFTytxKbaB4StdTERHF0sgdMspslDthAeDa/QAYE+6+jDpUxcv6 csC3Unr8zNYSuPU66GCK25dD3LJaW0WXolCK6x1RItiUmGTmCotDL4Bisrj6wMXB VdTdEf32UDNapaEbEomrIAJQN/2Z4jISMWZLWrzLJb9ug1pdxAuPLDa+WG/rhnAt -----END CERTIFICATE-----Generated at Thu Mar 26 15:03:22 2026 by rpki-client