$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/BA3A46C28D3211EB9BFE873BC4F9AE02.roa File: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (raw, json) Hash identifier: stFWg1dMHznKMtzRSOUwWm0CGmuogU2NNcwYBYm0LzM= Subject key identifier: 89:4F:BB:7F:63:B2:DE:8E:1A:F8:D2:D6:8B:2C:66:E6:F7:6C:1F:6D Certificate issuer: /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Certificate serial: 0F1B Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/BA3A46C28D3211EB9BFE873BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:43:03 +0000 ROA not before: Wed 14 Jan 2026 18:14:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38199 IP address blocks: 103.7.68.0/22 maxlen: 22 120.138.80.0/20 maxlen: 20 163.47.88.0/22 maxlen: 22 221.133.32.0/21 maxlen: 21 221.133.40.0/21 maxlen: 21 223.27.128.0/20 maxlen: 20 2402:9a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3867 (0xf1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Validity Not Before: Jan 14 18:14:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46c97-b601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:d2:3d:ff:da:81:17:ba:79:41:d2:91:15: b1:d5:17:fb:64:d1:1f:72:5b:2f:ac:e7:a9:1a:11: de:72:55:00:5f:18:69:12:1d:93:56:7f:4c:21:ea: 62:46:53:78:c1:40:ae:db:22:f3:5d:25:0a:88:9d: 9d:1d:df:4c:2f:9a:90:f7:89:71:3d:b2:a2:50:c1: 43:21:c5:b5:a0:c8:67:70:8f:48:e9:89:28:b0:4b: cd:e9:4e:41:b3:87:0d:19:5d:c0:c7:40:8a:45:6d: 4f:94:07:41:68:e4:24:f7:66:fc:74:fa:9d:b1:82: 0c:68:84:1d:57:77:3c:ac:88:0c:23:d0:6a:f0:f0: 0f:6c:5b:05:2d:07:4f:e3:f7:90:23:e7:93:cb:f4: c5:70:44:09:82:62:3e:d7:fe:39:1c:96:0c:23:76: 43:f6:37:72:37:3b:bd:7f:0e:0e:02:cc:ee:3d:64: d8:28:a6:96:44:43:76:47:c9:b6:a6:3c:31:33:c9: 5b:3e:5a:08:6e:a6:df:e7:02:a7:cf:fb:55:f4:c7: 71:26:31:60:9b:0c:9b:24:aa:93:90:70:b3:e7:d8: d7:52:7b:cc:45:1e:2e:90:82:03:dd:35:00:8f:f7: 9c:7a:02:19:9e:ec:f2:dc:f4:35:79:96:c9:b5:a7: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4F:BB:7F:63:B2:DE:8E:1A:F8:D2:D6:8B:2C:66:E6:F7:6C:1F:6D X509v3 Authority Key Identifier: keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/BA3A46C28D3211EB9BFE873BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.7.68.0/22 120.138.80.0/20 163.47.88.0/22 221.133.32.0/20 223.27.128.0/20 IPv6: 2402:9a00::/32 Signature Algorithm: sha256WithRSAEncryption bc:0a:c8:9f:bc:b2:c7:b0:a3:c1:b0:ff:9a:d0:69:8d:a5:46: 8d:2f:53:44:b8:a8:2e:ff:34:84:63:46:18:19:38:1e:69:08: 11:4c:d5:13:c2:88:ad:be:d5:6a:75:10:c5:c5:7d:29:e7:ff: e3:ae:2a:62:01:f5:df:38:d6:27:a1:f6:c3:c5:f4:32:57:fa: 7f:39:c0:af:4e:77:c7:ef:88:05:0c:01:d0:08:27:82:f9:1d: d0:e2:41:62:60:1c:99:42:ce:fc:79:48:5d:f0:68:02:28:e1: cf:af:e9:f4:56:71:47:d3:b8:f4:03:02:2b:13:d9:10:7a:39: 8a:2b:02:50:fa:58:05:b3:3d:bc:5e:50:63:84:f1:0d:f0:4b: 2d:50:1a:82:52:f0:03:4d:ef:17:b9:72:16:94:8a:62:09:e2: 59:ad:69:a9:b0:74:70:2c:13:5b:5f:66:8c:a6:fb:a6:67:89: c5:18:71:98:cb:9b:ed:d7:a7:9c:63:db:5d:e2:02:da:b2:1a: 1f:70:7b:04:82:43:b5:ac:61:02:a6:04:29:2d:dd:fd:bf:05: e5:94:56:c5:a3:30:6a:3d:b7:d1:f5:6b:76:23:b1:06:82:78: 9e:40:cd:62:69:a1:a8:4a:55:61:f7:27:cd:8b:13:27:2e:92: c2:99:92:3b -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICDxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5 NTVFRDg5RTAwHhcNMjYwMTE0MTgxNDM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmM5Ny1iNjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwrSPf/agRe6eUHSkRWx1Rf7ZNEfclsvrOepGhHeclUAXxhpEh2TVn9MIepi RlN4wUCu2yLzXSUKiJ2dHd9ML5qQ94lxPbKiUMFDIcW1oMhncI9I6YkosEvN6U5B s4cNGV3Ax0CKRW1PlAdBaOQk92b8dPqdsYIMaIQdV3c8rIgMI9Bq8PAPbFsFLQdP 4/eQI+eTy/TFcEQJgmI+1/45HJYMI3ZD9jdyNzu9fw4OAszuPWTYKKaWREN2R8m2 pjwxM8lbPloIbqbf5wKnz/tV9MdxJjFgmwybJKqTkHCz59jXUnvMRR4ukIID3TUA j/ecegIZnuzy3PQ1eZbJtafxCwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFIlPu39j st6OGvjS1ossZub3bB9tMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxRDcvNjhGMDkyOTI5RTJGMTFFOUIyRTUyODBBQzRGOUFFMDIvQkEzQTQ2QzI4 RDMyMTFFQjlCRkU4NzNCQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCZwdEAwQEeIpQAwQCoy9YAwQE3YUgAwQE3xuAMA0EAgACMAcDBQAk ApoAMA0GCSqGSIb3DQEBCwUAA4IBAQC8CsifvLLHsKPBsP+a0GmNpUaNL1NEuKgu /zSEY0YYGTgeaQgRTNUTwoitvtVqdRDFxX0p5//jripiAfXfONYnofbDxfQyV/p/ OcCvTnfH74gFDAHQCCeC+R3Q4kFiYByZQs78eUhd8GgCKOHPr+n0VnFH07j0AwIr E9kQejmKKwJQ+lgFsz28XlBjhPEN8EstUBqCUvADTe8XuXIWlIpiCeJZrWmpsHRw LBNbX2aMpvumZ4nFGHGYy5vt16ecY9td4gLashofcHsEgkO1rGECpgQpLd39vwXl lFbFozBqPbfR9Wt2I7EGgnieQM1iaaGoSlVh9yfNixMnLpLCmZI7 -----END CERTIFICATE-----Generated at Thu Mar 26 16:15:05 2026 by rpki-client