$ rpki-client -vvf rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa File: D9C33050560B11EDA1636E52C4F9AE02.roa (raw, json) Hash identifier: 1Wfro6nDkyifFMqUFze0pL/toPGAMg3A2/IoY7wD4Ro= Subject key identifier: B4:51:D1:02:11:27:26:3E:1B:CF:16:E9:CD:CC:B3:12:A3:08:7A:1B Certificate issuer: /CN=A91747E1/serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Certificate serial: 0B85 Authority key identifier: 7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:59:18 +0000 ROA not before: Sat 08 Nov 2025 18:39:10 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138362 IP address blocks: 103.131.144.0/22 maxlen: 24 2403:cc40::/32 maxlen: 36 2403:cc40::/40 maxlen: 40 2403:cc40:1::/48 maxlen: 48 2403:cc40:2::/48 maxlen: 48 2403:cc40:3::/48 maxlen: 48 2403:cc40:22::/48 maxlen: 48 2403:cc40:100::/40 maxlen: 40 2403:cc40:200::/40 maxlen: 40 2403:cc40:300::/40 maxlen: 40 2403:cc40:400::/40 maxlen: 40 2403:cc40:1000::/40 maxlen: 40 2403:cc40:1100::/40 maxlen: 40 2403:cc40:1200::/40 maxlen: 40 2403:cc40:1300::/40 maxlen: 40 2403:cc40:1400::/40 maxlen: 40 2403:cc40:1500::/40 maxlen: 40 2403:cc40:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91747E1, serialNumber=7AC6EFFB04C2B580F5A56B6A746CDFE053AF6A9E Validity Not Before: Nov 8 18:39:10 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a44636-7ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:e6:d8:61:1e:97:66:a6:75:0d:88:a5:3a: c8:f0:70:cb:c5:09:d1:22:17:5f:be:49:34:1a:c4: 20:58:aa:17:84:a6:f0:d1:82:5e:51:82:17:63:4d: 69:a3:cc:46:8f:65:5d:6d:02:c6:c1:5a:88:00:a2: 17:a5:89:22:2d:28:af:11:93:7e:f9:2e:46:25:4e: 9e:5f:30:d5:9f:6f:94:93:f4:5a:03:97:69:fa:f7: fa:f0:a3:70:84:33:e0:64:31:a7:0a:72:f4:05:38: 46:99:b6:50:71:22:6a:d5:db:45:1d:d5:98:4f:82: 8c:24:42:45:c0:ea:21:05:67:a4:f8:ce:c6:a7:90: fb:b1:ab:8a:ce:a0:6c:3a:a2:f5:95:3c:08:e1:fd: 69:38:51:a2:e1:02:b7:1b:75:87:db:ad:2f:99:61: bb:be:4e:a3:54:84:9c:a6:7a:25:bd:01:98:28:6a: 6d:be:9d:e2:13:1d:2c:b3:29:0c:b9:8c:ea:97:ae: 79:bb:30:55:a5:30:1e:9a:a1:21:c2:8c:04:ce:01: 79:09:d7:6f:c6:72:89:a8:c3:89:1f:be:63:64:5f: 3a:a2:4d:16:4e:21:de:a7:86:f7:ba:39:7a:dc:2e: 98:a4:a9:1a:68:9b:33:6e:e1:13:51:7c:fe:88:eb: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:51:D1:02:11:27:26:3E:1B:CF:16:E9:CD:CC:B3:12:A3:08:7A:1B X509v3 Authority Key Identifier: keyid:7A:C6:EF:FB:04:C2:B5:80:F5:A5:6B:6A:74:6C:DF:E0:53:AF:6A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/esbv-wTCtYD1pWtqdGzf4FOvap4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/esbv-wTCtYD1pWtqdGzf4FOvap4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91747E1/CE3472DE4CC811EAA058EC14C4F9AE02/D9C33050560B11EDA1636E52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.131.144.0/22 IPv6: 2403:cc40::/32 Signature Algorithm: sha256WithRSAEncryption 24:b6:21:7f:93:c5:81:6b:b5:da:e0:c7:e8:37:6d:7e:ad:41: 18:ce:97:5b:d4:1d:5c:7b:92:25:82:2a:09:7a:59:57:41:89: 15:72:42:02:66:15:65:09:ce:60:8b:08:be:90:82:79:63:19: 9e:14:bd:94:dd:a9:ce:d5:0f:6c:c4:d1:b9:a2:77:3e:45:fa: bf:39:66:10:54:cc:a7:db:73:ae:67:1d:1e:45:4a:36:8f:27: 62:fc:4c:7a:89:73:2a:b4:9b:5b:56:69:6a:15:93:40:76:1c: 64:84:60:65:9f:9b:17:bd:62:e8:e8:80:3e:9a:7d:30:55:25: 43:df:fc:e4:8e:8e:b5:40:10:6b:48:fc:7c:8b:0c:30:b2:58: 0a:87:70:f4:44:1a:a2:ed:59:5b:ff:56:62:52:b6:3b:60:f6: 82:0d:cd:88:e3:43:5d:ad:e2:f4:eb:e9:52:95:5a:93:b6:ad: 79:e7:90:10:19:6d:3f:a3:02:d2:5f:5c:31:f0:e3:07:00:45: 3a:cc:c5:c1:20:08:98:9a:36:10:1f:77:ad:8d:8a:ac:41:2f: 1f:2a:6c:2c:52:ba:8d:04:9a:1b:70:85:4c:f3:9b:d2:1e:4f: 11:29:3c:ab:8a:09:bd:c2:65:ab:74:c1:d1:97:de:4f:8a:e3: 7d:26:be:04 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ3RTExMTAvBgNVBAUTKDdBQzZFRkZCMDRDMkI1ODBGNUE1NkI2QTc0NkNERkUw NTNBRjZBOUUwHhcNMjUxMTA4MTgzOTEwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDYzNi03ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHrm2GEel2amdQ2IpTrI8HDLxQnRIhdfvkk0GsQgWKoXhKbw0YJeUYIXY01p o8xGj2VdbQLGwVqIAKIXpYkiLSivEZN++S5GJU6eXzDVn2+Uk/RaA5dp+vf68KNw hDPgZDGnCnL0BThGmbZQcSJq1dtFHdWYT4KMJEJFwOohBWek+M7Gp5D7sauKzqBs OqL1lTwI4f1pOFGi4QK3G3WH260vmWG7vk6jVIScpnolvQGYKGptvp3iEx0ssykM uYzql655uzBVpTAemqEhwowEzgF5CddvxnKJqMOJH75jZF86ok0WTiHep4b3ujl6 3C6YpKkaaJszbuETUXz+iOs9hwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLRR0QIR JyY+G88W6c3MsxKjCHobMB8GA1UdIwQYMBaAFHrG7/sEwrWA9aVranRs3+BTr2qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDdFMS9DRTM0NzJERTRD QzgxMUVBQTA1OEVDMTRDNEY5QUUwMi9lc2J2LXdUQ3RZRDFwV3RxZEd6ZjRGT3Zh cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzYnYtd1RDdFlEMXBXdHFkR3pmNEZPdmFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQ3RTEvQ0UzNDcyREU0Q0M4MTFFQUEwNThFQzE0QzRGOUFFMDIvRDlDMzMwNTA1 NjBCMTFFREExNjM2RTUyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4OQMA0EAgACMAcDBQAkA8xAMA0GCSqGSIb3DQEBCwUAA4IBAQAk tiF/k8WBa7Xa4MfoN21+rUEYzpdb1B1ce5IlgioJellXQYkVckICZhVlCc5giwi+ kIJ5YxmeFL2U3anO1Q9sxNG5onc+Rfq/OWYQVMyn23OuZx0eRUo2jydi/Ex6iXMq tJtbVmlqFZNAdhxkhGBln5sXvWLo6IA+mn0wVSVD3/zkjo61QBBrSPx8iwwwslgK h3D0RBqi7Vlb/1ZiUrY7YPaCDc2I40NdreL06+lSlVqTtq1555AQGW0/owLSX1wx 8OMHAEU6zMXBIAiYmjYQH3etjYqsQS8fKmwsUrqNBJobcIVM85vSHk8RKTyrigm9 wmWrdMHRl95PiuN9Jr4E -----END CERTIFICATE-----Generated at Thu Mar 26 04:40:19 2026 by rpki-client