$ rpki-client -vvf rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/2245CE0A606811EB80E3D531C4F9AE02.roa File: 2245CE0A606811EB80E3D531C4F9AE02.roa (raw, json) Hash identifier: VX0mY2WD7ZljHbXizsuob/HBTfQ0LiFuSS4MaL/xmKE= Subject key identifier: 6C:63:C1:B3:93:D0:CC:C0:C2:CE:22:84:F2:15:07:93:16:BA:8A:9A Certificate issuer: /CN=A91560A3/serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Certificate serial: 1212 Authority key identifier: 0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/2245CE0A606811EB80E3D531C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:36:19 +0000 ROA not before: Thu 05 Feb 2026 04:14:37 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135025 IP address blocks: 14.102.168.0/22 maxlen: 22 14.102.168.0/24 maxlen: 24 14.102.169.0/24 maxlen: 24 14.102.170.0/24 maxlen: 24 14.102.171.0/24 maxlen: 24 103.206.80.0/22 maxlen: 22 103.206.80.0/24 maxlen: 24 103.206.81.0/24 maxlen: 24 103.206.82.0/24 maxlen: 24 103.206.83.0/24 maxlen: 24 2404:2380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4626 (0x1212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91560A3, serialNumber=0E2DEA14FD7CFFD0D0A9EA3E37437B91E454B236 Validity Not Before: Feb 5 04:14:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44ee3-f715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ff:db:c4:03:e8:4b:73:26:4a:45:bb:2a:9e: 9e:56:9e:53:38:bc:9f:91:38:58:8b:c4:5f:b7:71: 4e:93:ac:7c:83:c2:6a:f8:ba:60:1d:99:a3:e1:c9: cc:d4:c8:bb:3a:a2:19:47:d9:fb:77:d7:e9:06:5e: f4:ae:05:fe:60:db:db:a8:7f:49:52:1d:71:db:d9: 26:42:09:29:64:be:d1:11:7e:b6:6a:cc:36:cc:e4: 7c:6c:e0:bc:63:41:da:74:a9:91:f1:9c:2e:96:75: 40:b3:ea:d6:55:39:aa:9f:d2:b0:46:23:7a:df:68: 4b:72:63:f3:bc:1d:ce:b1:f9:37:67:ec:5f:04:74: 1c:50:6c:f6:13:56:93:a8:39:f6:c7:fc:62:d8:48: 5b:2e:25:bc:b2:25:c2:c8:c2:cb:1d:9f:d5:5c:f8: b2:3e:12:f7:dd:f0:7a:30:d4:78:2f:bc:e0:a6:df: 06:8d:bd:6b:ca:75:c4:a9:de:f7:57:93:ad:d0:96: 6b:a3:6b:2e:8d:c1:84:00:15:55:c3:60:9d:2a:91: 31:6a:93:31:bc:c0:52:65:04:c8:d0:f3:bf:2e:a0: cf:dd:2b:2b:00:45:91:e4:b4:af:5a:45:c3:19:6c: ba:8d:13:05:11:aa:66:aa:87:af:94:d4:ba:41:12: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:63:C1:B3:93:D0:CC:C0:C2:CE:22:84:F2:15:07:93:16:BA:8A:9A X509v3 Authority Key Identifier: keyid:0E:2D:EA:14:FD:7C:FF:D0:D0:A9:EA:3E:37:43:7B:91:E4:54:B2:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/Di3qFP18_9DQqeo-N0N7keRUsjY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Di3qFP18_9DQqeo-N0N7keRUsjY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91560A3/E4DF96AAFDF811E8AD2C1262C4F9AE02/2245CE0A606811EB80E3D531C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.102.168.0/22 103.206.80.0/22 IPv6: 2404:2380::/32 Signature Algorithm: sha256WithRSAEncryption 59:0a:5a:59:a5:12:ef:a8:76:25:a3:84:bd:90:a8:27:83:85: 45:fe:f0:72:71:50:5d:ff:ef:d7:1b:f6:68:96:3d:49:09:d2: 40:91:2a:37:65:c4:98:d4:5f:d1:da:0d:82:fc:11:f0:c4:7b: c2:63:f0:b7:1f:6e:a8:c0:23:18:d7:43:77:bc:d2:d8:db:68: 2d:69:6f:19:b0:38:7c:43:3e:54:62:cb:d5:dc:03:07:57:d5: bd:cd:20:4e:d0:d4:bd:74:63:38:d3:8a:e7:9d:22:92:22:79: ea:d5:48:ef:fe:fa:c1:5c:c4:a3:80:ea:4e:f9:e8:8e:6f:48: 6b:29:17:75:22:a7:8e:ed:7f:49:ea:bc:7d:56:f2:b8:24:e9: 3f:e6:78:02:26:39:cd:b0:8c:10:a6:9c:7c:f0:e2:5d:73:2d: 07:51:b2:c8:44:58:22:d5:c6:95:b8:7a:84:46:91:7b:fd:88: 5c:d0:92:0f:45:ec:b9:e3:94:48:c8:35:03:b9:92:3c:f9:4c: 50:1a:9a:50:0d:5f:94:60:b5:a7:55:0b:52:7d:43:b6:3b:2a: 96:b2:f0:0f:6b:8b:02:41:83:99:19:83:51:ef:df:d6:f3:d9: 2c:d3:f6:3f:c4:05:94:9e:8b:4d:cb:86:35:e8:a6:c3:b0:a0: b8:f4:31:86 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICEhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYwQTMxMTAvBgNVBAUTKDBFMkRFQTE0RkQ3Q0ZGRDBEMEE5RUEzRTM3NDM3Qjkx RTQ1NEIyMzYwHhcNMjYwMjA1MDQxNDM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGVlMy1mNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAof/bxAPoS3MmSkW7Kp6eVp5TOLyfkThYi8Rft3FOk6x8g8Jq+LpgHZmj4cnM 1Mi7OqIZR9n7d9fpBl70rgX+YNvbqH9JUh1x29kmQgkpZL7REX62asw2zOR8bOC8 Y0HadKmR8ZwulnVAs+rWVTmqn9KwRiN632hLcmPzvB3Osfk3Z+xfBHQcUGz2E1aT qDn2x/xi2EhbLiW8siXCyMLLHZ/VXPiyPhL33fB6MNR4L7zgpt8Gjb1rynXEqd73 V5Ot0JZro2sujcGEABVVw2CdKpExapMxvMBSZQTI0PO/LqDP3SsrAEWR5LSvWkXD GWy6jRMFEapmqoevlNS6QRJRvwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGxjwbOT 0MzAws4ihPIVB5MWuoqaMB8GA1UdIwQYMBaAFA4t6hT9fP/Q0KnqPjdDe5HkVLI2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjBBMy9FNERGOTZBQUZE RjgxMUU4QUQyQzEyNjJDNEY5QUUwMi9EaTNxRlAxOF85RFFxZW8tTjBON2tlUlVz alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RpM3FGUDE4XzlEUXFlby1OME43a2VSVXNqWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTYwQTMvRTRERjk2QUFGREY4MTFFOEFEMkMxMjYyQzRGOUFFMDIvMjI0NUNFMEE2 MDY4MTFFQjgwRTNENTMxQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCDmaoAwQCZ85QMA0EAgACMAcDBQAkBCOAMA0GCSqGSIb3DQEBCwUA A4IBAQBZClpZpRLvqHYlo4S9kKgng4VF/vBycVBd/+/XG/Zolj1JCdJAkSo3ZcSY 1F/R2g2C/BHwxHvCY/C3H26owCMY10N3vNLY22gtaW8ZsDh8Qz5UYsvV3AMHV9W9 zSBO0NS9dGM404rnnSKSInnq1Ujv/vrBXMSjgOpO+eiOb0hrKRd1IqeO7X9J6rx9 VvK4JOk/5ngCJjnNsIwQppx88OJdcy0HUbLIRFgi1caVuHqERpF7/Yhc0JIPRey5 45RIyDUDuZI8+UxQGppQDV+UYLWnVQtSfUO2OyqWsvAPa4sCQYOZGYNR79/W89ks 0/Y/xAWUnotNy4Y16KbDsKC49DGG -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:15 2026 by rpki-client