$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/492317188E2A11F0B9BB726BC4F9AE02.roa File: 492317188E2A11F0B9BB726BC4F9AE02.roa (raw, json) Hash identifier: HYvMLgC1MHFAUoLdJHhGm7IqHD4gMmLft4YLWobMVbI= Subject key identifier: EF:D0:11:72:37:14:5D:CE:EE:76:88:28:C4:AC:D3:D1:AB:38:AC:39 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 73 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/492317188E2A11F0B9BB726BC4F9AE02.roa Signing time: Wed 25 Mar 2026 07:45:48 +0000 ROA not before: Wed 25 Mar 2026 07:45:48 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 15830 IP address blocks: 103.182.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Mar 25 07:45:48 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c392ac-89cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:da:bb:4b:c9:6a:c3:5a:05:37:40:49:28: 34:c4:7d:f8:a6:b7:51:0a:fc:31:c3:86:7e:ab:4b: 0b:69:93:86:25:d1:bf:a8:e6:3f:dc:29:6c:30:c1: 67:e5:26:c8:a3:75:17:5d:35:e6:e5:79:9a:f8:48: cb:c1:72:41:92:37:dd:05:c0:eb:ad:d5:43:0c:b3: 2b:e2:d6:c7:ed:8c:db:d2:30:8c:28:9b:e6:b7:10: 5f:01:d6:de:e9:ee:7c:cb:6e:4a:ce:d0:76:e2:f0: 63:a7:c4:be:9c:54:0f:ea:67:16:05:13:72:db:de: 85:9c:df:a6:97:d5:69:91:e6:ce:50:31:f9:fd:52: 8d:f6:fb:0d:8d:67:99:66:62:fb:4d:2d:bf:3e:8b: 0a:95:bc:6e:b3:a3:98:5d:86:64:6f:d0:66:41:ed: e5:2b:06:53:ea:73:9c:ab:f0:a0:25:3e:ca:0f:42: 6f:d2:d5:6d:80:b5:66:30:0f:65:5e:1a:f1:f2:50: dd:04:60:07:2f:3f:01:20:34:46:22:25:40:98:16: 98:26:38:96:52:9f:20:3f:aa:d2:2c:f3:40:50:18: 82:6d:40:43:17:a4:10:95:19:d0:f5:6e:8f:45:4b: c3:d0:e4:78:87:8e:fd:8c:48:bb:5f:91:6d:fe:67: d4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D0:11:72:37:14:5D:CE:EE:76:88:28:C4:AC:D3:D1:AB:38:AC:39 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/492317188E2A11F0B9BB726BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.182.173.0/24 Signature Algorithm: sha256WithRSAEncryption 33:9f:d7:81:3f:6e:d4:fa:50:63:b7:da:c0:94:5d:97:2f:9f: 04:8a:a0:a0:8c:09:4a:e1:4b:e3:49:9a:8d:85:25:9f:dd:e0: c3:24:34:d0:78:6f:77:e7:ab:eb:c2:b7:cd:f9:be:b5:fb:41: 03:b6:cd:49:db:6a:2c:fc:f2:0f:42:05:3f:40:87:90:24:23: e3:78:ac:eb:c1:2a:c5:d3:b8:55:dd:62:65:2b:a6:7f:bb:59: 2f:cc:42:93:30:27:81:d5:5c:d9:b7:bc:aa:ce:59:a0:93:5e: 56:27:0f:a3:a3:ad:70:ef:6e:85:7f:c7:e0:2d:70:28:95:3c: 7c:5b:fc:98:18:c4:7c:71:78:12:7c:22:20:72:ec:6c:6d:71: 3f:14:ee:5c:f0:d0:98:76:ed:bd:80:ba:71:0c:bd:ed:41:89: e8:67:96:76:0a:0d:7c:1e:08:88:6e:51:40:5a:99:c5:5e:89: 07:7d:d8:c3:1b:8c:9b:60:57:c1:f0:2f:18:dc:72:08:b9:7c: 02:a2:8b:9c:81:20:7d:6a:8c:11:0a:f1:42:17:ab:cd:bd:7b: 2c:d1:40:fc:51:e6:1a:2a:48:1d:94:cb:4d:3f:4b:00:51:76: d9:d5:e4:89:0c:c6:0d:f0:3c:b4:58:d0:69:60:4d:e0:57:b6: 52:88:ab:f3 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNjAzMjUwNzQ1NDhaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzM5MmFjLTg5Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCil9q7S8lqw1oFN0BJKDTEffimt1EK/DHDhn6rSwtpk4Yl0b+o5j/cKWwwwWfl JsijdRddNebleZr4SMvBckGSN90FwOut1UMMsyvi1sftjNvSMIwom+a3EF8B1t7p 7nzLbkrO0Hbi8GOnxL6cVA/qZxYFE3Lb3oWc36aX1WmR5s5QMfn9Uo32+w2NZ5lm YvtNLb8+iwqVvG6zo5hdhmRv0GZB7eUrBlPqc5yr8KAlPsoPQm/S1W2AtWYwD2Ve GvHyUN0EYAcvPwEgNEYiJUCYFpgmOJZSnyA/qtIs80BQGIJtQEMXpBCVGdD1bo9F S8PQ5HiHjv2MSLtfkW3+Z9TZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU79ARcjcU Xc7udogoxKzT0as4rDkwHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjhBMC9CMjA2OENGODhFMjgxMUYwOUMyQTZCNDlDNEY5QUUwMi80OTIzMTcxODhF MkExMUYwQjlCQjcyNkJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBABntq0wDQYJKoZIhvcNAQELBQADggEBADOf14E/btT6UGO32sCUXZcv nwSKoKCMCUrhS+NJmo2FJZ/d4MMkNNB4b3fnq+vCt835vrX7QQO2zUnbaiz88g9C BT9Ah5AkI+N4rOvBKsXTuFXdYmUrpn+7WS/MQpMwJ4HVXNm3vKrOWaCTXlYnD6Oj rXDvboV/x+AtcCiVPHxb/JgYxHxxeBJ8IiBy7GxtcT8U7lzw0Jh27b2AunEMve1B iehnlnYKDXweCIhuUUBamcVeiQd92MMbjJtgV8HwLxjccgi5fAKii5yBIH1qjBEK 8UIXq829eyzRQPxR5hoqSB2Uy00/SwBRdtnV5IkMxg3wPLRY0GlgTeBXtlKIq/M= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:25 2026 by rpki-client