$ rpki-client -vvf rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/DEE5E3C49F0511EC9DA80B77C4F9AE02.roa File: DEE5E3C49F0511EC9DA80B77C4F9AE02.roa (raw, json) Hash identifier: AXOdS8FamXWGpVb8dVSV9L7c5bFjLM5GeduJrKDw4hE= Subject key identifier: F9:77:E7:EF:2A:46:C3:88:4F:CC:FE:E1:F9:38:D0:FD:52:0C:37:6B Certificate issuer: /CN=A91398A3/serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Certificate serial: 04D7 Authority key identifier: 77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/DEE5E3C49F0511EC9DA80B77C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:21:28 +0000 ROA not before: Sat 07 Feb 2026 00:20:05 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136038 IP address blocks: 103.80.132.0/22 maxlen: 22 103.80.132.0/24 maxlen: 24 103.80.133.0/24 maxlen: 24 103.80.134.0/24 maxlen: 24 103.80.135.0/24 maxlen: 24 182.161.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91398A3, serialNumber=775FE5A1F61A7408DFEED47F1447E3464DA50B2A Validity Not Before: Feb 7 00:20:05 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a483a8-ed40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:fb:32:35:54:1e:e1:37:d8:e4:e9:b1:8a: 3f:22:9c:ab:32:e8:82:e6:5f:6e:d3:47:dc:7f:af: 57:01:bd:b1:c6:92:47:d5:24:1f:a8:6b:27:23:6f: ac:0c:67:b5:c2:0e:04:cf:08:ac:84:04:0c:f1:97: ab:33:87:d6:ae:a8:9d:37:e6:82:95:70:2c:d3:5d: 66:88:36:3a:bc:a5:50:8f:c2:3f:1d:9b:de:c1:6a: 6e:d5:1e:9e:2a:3a:9d:f0:79:08:bb:bc:b7:c3:ae: 8e:94:6a:a5:6b:7b:f6:f1:c3:d7:8b:43:04:79:5e: a3:29:ac:34:23:69:8c:30:d3:e6:28:5a:a0:54:d1: d1:d0:84:38:4c:f1:ea:82:1a:57:13:25:d6:37:21: f1:00:23:c5:87:a8:50:43:b9:e0:10:40:15:57:f8: 24:ef:d2:3f:f2:97:fa:1f:06:cf:58:af:75:fb:9e: 26:be:70:1b:76:a7:b3:d5:0e:df:a1:a8:1d:0b:91: bb:2f:b6:fe:59:4c:d0:88:35:87:c8:c2:2a:a6:75: 11:08:0f:24:b3:c5:f3:25:3a:c4:fa:66:e4:17:0b: 51:6f:7b:86:ac:1e:38:08:4f:8e:80:b6:95:36:a4: 07:86:f4:1e:4a:04:a9:e0:e6:0a:14:48:dc:92:36: e2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:E7:EF:2A:46:C3:88:4F:CC:FE:E1:F9:38:D0:FD:52:0C:37:6B X509v3 Authority Key Identifier: keyid:77:5F:E5:A1:F6:1A:74:08:DF:EE:D4:7F:14:47:E3:46:4D:A5:0B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/d1_lofYadAjf7tR_FEfjRk2lCyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d1_lofYadAjf7tR_FEfjRk2lCyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398A3/E219B61C711311ECBC308919C4F9AE02/DEE5E3C49F0511EC9DA80B77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.80.132.0/22 182.161.66.0/24 Signature Algorithm: sha256WithRSAEncryption a6:93:92:03:95:0f:21:cb:7b:e8:2e:a4:be:23:af:d9:2d:7e: 85:3d:d0:08:57:8a:da:ad:7d:a8:02:a7:5a:51:87:20:1e:4e: bd:20:97:cf:97:b6:26:06:96:53:3a:e8:09:43:ca:87:78:ea: 11:a0:6b:3f:69:9a:c5:c9:4f:b6:93:5e:85:ab:7c:ab:87:90: 48:3d:2d:ec:b5:5d:0a:ac:01:e8:7c:a5:1b:7f:62:2d:b7:e5: 9b:75:bc:52:d6:5b:8b:8d:d7:f4:ba:ab:68:d0:14:cd:b6:f2: 48:cd:63:4c:10:65:a5:1d:bb:fc:e2:b5:29:05:17:72:bf:01: ed:f9:e5:d4:cd:a6:18:3f:9d:f6:3e:29:f8:7a:e6:1e:ac:63: d2:8b:67:3d:0d:14:f3:eb:f6:5b:8b:ca:c1:9a:53:e9:84:0d: 90:4a:24:67:67:00:8f:2b:e8:09:71:ae:8f:f6:da:50:ca:a2: 96:53:26:ea:78:d2:16:cb:03:46:ae:2c:a4:5c:b0:c8:02:07: b5:82:50:d7:e2:c7:cb:da:f9:8f:07:bc:f9:fe:83:60:ef:5d: 3e:b8:16:df:60:4e:30:a1:de:1a:4c:16:49:d1:2e:37:c8:99: cb:fa:8a:0e:7f:af:e0:c0:d5:f7:4c:c3:53:32:43:bb:e4:3f: 29:6c:10:bd -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk4QTMxMTAvBgNVBAUTKDc3NUZFNUExRjYxQTc0MDhERkVFRDQ3RjE0NDdFMzQ2 NERBNTBCMkEwHhcNMjYwMjA3MDAyMDA1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODNhOC1lZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxD7MjVUHuE32OTpsYo/IpyrMuiC5l9u00fcf69XAb2xxpJH1SQfqGsnI2+s DGe1wg4EzwishAQM8ZerM4fWrqidN+aClXAs011miDY6vKVQj8I/HZvewWpu1R6e Kjqd8HkIu7y3w66OlGqla3v28cPXi0MEeV6jKaw0I2mMMNPmKFqgVNHR0IQ4TPHq ghpXEyXWNyHxACPFh6hQQ7ngEEAVV/gk79I/8pf6HwbPWK91+54mvnAbdqez1Q7f oagdC5G7L7b+WUzQiDWHyMIqpnURCA8ks8XzJTrE+mbkFwtRb3uGrB44CE+OgLaV NqQHhvQeSgSp4OYKFEjckjbiowIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPl35+8q RsOIT8z+4fk40P1SDDdrMB8GA1UdIwQYMBaAFHdf5aH2GnQI3+7UfxRH40ZNpQsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOThBMy9FMjE5QjYxQzcx MTMxMUVDQkMzMDg5MTlDNEY5QUUwMi9kMV9sb2ZZYWRBamY3dFJfRkVmalJrMmxD eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QxX2xvZllhZEFqZjd0Ul9GRWZqUmsybEN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk4QTMvRTIxOUI2MUM3MTEzMTFFQ0JDMzA4OTE5QzRGOUFFMDIvREVFNUUzQzQ5 RjA1MTFFQzlEQTgwQjc3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1CEAwQAtqFCMA0GCSqGSIb3DQEBCwUAA4IBAQCmk5IDlQ8hy3vo LqS+I6/ZLX6FPdAIV4rarX2oAqdaUYcgHk69IJfPl7YmBpZTOugJQ8qHeOoRoGs/ aZrFyU+2k16Fq3yrh5BIPS3stV0KrAHofKUbf2Itt+WbdbxS1luLjdf0uqto0BTN tvJIzWNMEGWlHbv84rUpBRdyvwHt+eXUzaYYP532Pin4euYerGPSi2c9DRTz6/Zb i8rBmlPphA2QSiRnZwCPK+gJca6P9tpQyqKWUybqeNIWywNGriykXLDIAge1glDX 4sfL2vmPB7z5/oNg710+uBbfYE4wod4aTBZJ0S43yJnL+ooOf6/gwNX3TMNTMkO7 5D8pbBC9 -----END CERTIFICATE-----Generated at Thu Mar 26 09:53:15 2026 by rpki-client