$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa File: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (raw, json) Hash identifier: gBz8HJRPLaRfbm/14pT/YlUN+IK55NeTgaW7teRMBP4= Subject key identifier: 1A:C6:6F:F9:C6:36:65:AC:29:80:4F:38:E3:9C:E5:AF:7A:42:A1:06 Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Certificate serial: 06DC Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:33:50 +0000 ROA not before: Fri 28 Nov 2025 21:22:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138476 IP address blocks: 103.126.184.0/23 maxlen: 23 103.126.184.0/24 maxlen: 24 103.126.185.0/24 maxlen: 24 2001:df6:6780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0 Validity Not Before: Nov 28 21:22:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4322e-9d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:93:a5:66:37:6f:2d:20:31:75:ef:b8:2f: d0:fd:84:a8:d1:fa:c8:6c:b5:78:00:fb:a5:1e:b8: b2:60:3d:a3:13:47:23:fa:70:11:b7:30:09:35:bc: 28:68:07:78:51:4e:d2:73:12:63:64:12:e6:af:95: 8a:fa:3e:67:07:0f:fe:64:45:51:7c:37:78:95:db: 82:6a:6f:7b:24:e8:1a:ce:8b:ed:36:47:6a:e5:42: 7f:e1:d9:09:fc:ef:1d:71:c1:1b:07:70:c0:9a:d1: 19:d4:37:5a:39:56:dd:f8:e3:95:e0:28:25:0a:6a: c6:62:e6:74:68:29:ae:d7:11:d9:b6:9d:89:8d:ea: 3d:8a:d3:6e:b8:c6:bd:7a:4e:17:95:8f:10:11:01: 87:d6:3d:41:12:39:98:31:ad:4b:57:7e:4e:3e:c8: a0:21:4f:96:29:1f:29:60:b9:32:be:25:6f:ba:c5: 4f:2d:5a:05:72:b4:f0:64:79:ba:1e:d1:0d:be:10: a9:2a:af:39:c6:0c:bb:05:e9:69:9b:8d:e1:e4:c0: 56:0b:4b:d2:66:b7:a6:f7:d3:c5:dc:0b:9a:4f:de: 30:3e:e6:51:ea:cb:36:6c:94:2e:6f:80:a7:ae:e4: d5:6d:78:fb:c6:9d:a5:93:b2:b0:ec:ea:54:c0:81: f7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C6:6F:F9:C6:36:65:AC:29:80:4F:38:E3:9C:E5:AF:7A:42:A1:06 X509v3 Authority Key Identifier: keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/DDCD4C168EC611EBAB7F3476C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.126.184.0/23 IPv6: 2001:df6:6780::/48 Signature Algorithm: sha256WithRSAEncryption 6b:fd:74:4a:3a:89:79:37:06:e2:01:af:57:c7:1c:f5:3e:5d: 61:8e:a1:6f:ca:fc:06:83:d9:b1:35:09:2f:34:76:8b:94:44: e9:dc:31:7c:54:c4:db:02:27:ba:0e:fe:42:72:ab:8d:1d:44: 05:bf:38:94:0b:e2:28:ed:bf:d7:fd:fd:63:c2:ba:ef:9d:a8: 9e:7c:58:56:e5:72:b1:8c:ac:f4:14:41:47:2d:68:f5:78:93: 32:c7:11:48:c0:ea:ac:48:90:f6:3b:b0:a1:1a:0e:0a:7a:7c: 59:36:a3:eb:b8:17:29:07:2b:5d:62:11:d5:88:25:2e:88:90: 53:db:50:70:6e:ae:50:9d:b5:90:d3:22:59:69:b8:b9:8d:61: fb:3e:12:1d:05:7c:9b:bb:a1:35:bc:f7:80:59:45:7b:d2:b3: f4:52:0b:e9:85:32:59:ee:9d:44:d9:95:f4:d8:34:d5:e5:38: ab:27:11:b3:50:82:67:57:3d:63:2b:fb:cd:28:5f:f2:a4:82: 0c:cd:20:06:bd:b0:d2:89:56:33:85:21:6e:98:18:b2:44:7b: 1c:b5:0f:c5:9d:29:9c:f0:68:54:68:08:f3:47:37:d8:93:c3: f8:d4:60:19:c0:d0:49:a4:8f:eb:0c:d6:34:c5:6a:07:dd:46: a4:69:7f:db -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE OUZEREJFRDAwHhcNMjUxMTI4MjEyMjU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzIyZS05ZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pGTpWY3by0gMXXvuC/Q/YSo0frIbLV4APulHriyYD2jE0cj+nARtzAJNbwo aAd4UU7ScxJjZBLmr5WK+j5nBw/+ZEVRfDd4lduCam97JOgazovtNkdq5UJ/4dkJ /O8dccEbB3DAmtEZ1DdaOVbd+OOV4CglCmrGYuZ0aCmu1xHZtp2Jjeo9itNuuMa9 ek4XlY8QEQGH1j1BEjmYMa1LV35OPsigIU+WKR8pYLkyviVvusVPLVoFcrTwZHm6 HtENvhCpKq85xgy7Belpm43h5MBWC0vSZrem99PF3AuaT94wPuZR6ss2bJQub4Cn ruTVbXj7xp2lk7Kw7OpUwIH3WwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBrGb/nG NmWsKYBPOOOc5a96QqEGMB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2 dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMxQTYvNDREODkwQ0E4RUM1MTFFQjk3QjEyMDc0QzRGOUFFMDIvRERDRDRDMTY4 RUM2MTFFQkFCN0YzNDc2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ364MA8EAgACMAkDBwAgAQ32Z4AwDQYJKoZIhvcNAQELBQADggEB AGv9dEo6iXk3BuIBr1fHHPU+XWGOoW/K/AaD2bE1CS80douUROncMXxUxNsCJ7oO /kJyq40dRAW/OJQL4ijtv9f9/WPCuu+dqJ58WFblcrGMrPQUQUctaPV4kzLHEUjA 6qxIkPY7sKEaDgp6fFk2o+u4FykHK11iEdWIJS6IkFPbUHBurlCdtZDTIllpuLmN Yfs+Eh0FfJu7oTW894BZRXvSs/RSC+mFMlnunUTZlfTYNNXlOKsnEbNQgmdXPWMr +80oX/KkggzNIAa9sNKJVjOFIW6YGLJEexy1D8WdKZzwaFRoCPNHN9iTw/jUYBnA 0Emkj+sM1jTFagfdRqRpf9s= -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:50 2026 by rpki-client