$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa File: CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa (raw, json) Hash identifier: jAa33zySKD0mAn7r2v7MBjntJgbOB3pz/8LhzG43AK8= Subject key identifier: C5:FF:34:23:D4:62:C8:45:F7:7C:EB:D5:8A:B9:11:AA:09:08:9D:32 Certificate issuer: /CN=A91A5C90/serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Certificate serial: 0524 Authority key identifier: 2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:01:04 +0000 ROA not before: Sun 14 Dec 2025 23:19:36 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.175.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C90, serialNumber=2F77F7ED34F66A6FC67080FB9B61BB26792F85A1 Validity Not Before: Dec 14 23:19:36 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a454b0-dc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:72:cd:f6:06:01:85:44:12:62:88:d7:36:70: 68:7a:88:21:6d:f7:2b:41:05:ca:f6:1b:c4:dd:7b: 29:5d:69:24:59:93:76:d6:88:18:b2:2d:68:a4:6d: f2:59:68:3d:d6:2c:b9:f5:97:af:4b:af:ba:0c:c9: 11:8b:6f:fb:f4:89:68:19:b7:f6:d8:67:f3:95:61: 10:45:b9:cf:49:ba:67:cd:8c:ed:6d:76:f9:02:66: 4e:0b:c4:52:46:4d:03:7f:f1:6f:05:40:63:86:10: 50:cf:53:c5:55:92:ec:1a:e3:dd:ea:9b:f4:76:f7: 63:02:ec:3e:46:0a:1c:a0:86:97:80:13:db:10:fa: 79:1f:bd:72:d8:3a:80:dd:78:bc:aa:d3:db:58:76: 6b:84:64:65:38:29:4d:82:07:e9:d3:d5:c1:ff:12: 41:5c:5c:1e:b2:cc:9a:56:4e:ca:60:d1:33:18:af: 68:70:a8:2f:b8:99:f2:69:d5:da:4f:08:fa:1d:ea: 16:94:59:bb:bd:42:62:e4:7c:99:e9:70:4d:22:ba: 0a:55:79:01:6e:ec:03:d5:cb:18:7d:95:f5:13:bf: c7:0b:61:f2:dc:c7:f6:d8:91:6f:9d:56:3f:27:ad: cb:36:81:d8:18:49:aa:58:6d:86:f3:ca:57:3c:97: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FF:34:23:D4:62:C8:45:F7:7C:EB:D5:8A:B9:11:AA:09:08:9D:32 X509v3 Authority Key Identifier: keyid:2F:77:F7:ED:34:F6:6A:6F:C6:70:80:FB:9B:61:BB:26:79:2F:85:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/L3f37TT2am_GcID7m2G7JnkvhaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3f37TT2am_GcID7m2G7JnkvhaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C90/42E1FD2A3D2911ECB0BCD21FC4F9AE02/CDA06D9C3D2A11EC8ECCEB1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.175.120.0/23 Signature Algorithm: sha256WithRSAEncryption 02:de:7b:53:29:e5:13:e0:5b:d3:d4:40:a7:64:c8:08:38:24: 8c:00:da:f4:8e:b4:49:2f:6f:2b:ca:67:39:7b:d5:99:6a:56: 37:00:70:85:c9:42:f3:75:db:67:9a:31:6e:92:9d:90:8e:9a: 65:84:89:b3:a3:21:c8:42:b7:ea:d2:35:9c:ed:e9:21:f5:18: 06:62:bf:15:67:40:a2:b6:90:25:6d:d7:b4:bd:63:2a:c0:78: e7:33:89:37:16:b6:2c:fa:1d:61:c9:fa:2f:5c:db:f6:a2:1a: ff:5b:1e:68:57:bb:e2:4a:e0:fe:5f:9e:19:1d:b1:df:96:87: 5b:b9:9f:f0:f6:c8:7e:e6:01:b9:96:7b:dc:f9:29:35:2d:e6: e6:d3:ab:61:65:67:3b:c2:a2:0e:7b:b9:b6:83:16:8b:cd:ff: 76:d6:6f:73:8d:28:75:df:cc:96:39:ce:0c:65:a4:69:63:df: c1:4d:71:18:88:cd:64:17:85:d7:23:9d:cf:57:80:c9:f4:17: 58:a8:05:80:09:45:12:29:97:9c:4d:75:29:88:de:34:13:04: 67:75:01:bd:7d:53:67:2f:db:e7:a5:67:cc:66:84:d8:28:85: ec:1d:70:5b:41:0f:8b:86:ff:d2:90:77:80:22:af:57:89:ae: e7:c9:63:c3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDOTAxMTAvBgNVBAUTKDJGNzdGN0VEMzRGNjZBNkZDNjcwODBGQjlCNjFCQjI2 NzkyRjg1QTEwHhcNMjUxMjE0MjMxOTM2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTRiMC1kYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73LN9gYBhUQSYojXNnBoeoghbfcrQQXK9hvE3XspXWkkWZN21ogYsi1opG3y WWg91iy59ZevS6+6DMkRi2/79IloGbf22GfzlWEQRbnPSbpnzYztbXb5AmZOC8RS Rk0Df/FvBUBjhhBQz1PFVZLsGuPd6pv0dvdjAuw+RgocoIaXgBPbEPp5H71y2DqA 3Xi8qtPbWHZrhGRlOClNggfp09XB/xJBXFwessyaVk7KYNEzGK9ocKgvuJnyadXa Twj6HeoWlFm7vUJi5HyZ6XBNIroKVXkBbuwD1csYfZX1E7/HC2Hy3Mf22JFvnVY/ J63LNoHYGEmqWG2G88pXPJckqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMX/NCPU YshF93zr1Yq5EaoJCJ0yMB8GA1UdIwQYMBaAFC939+009mpvxnCA+5thuyZ5L4Wh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM5MC80MkUxRkQyQTNE MjkxMUVDQjBCQ0QyMUZDNEY5QUUwMi9MM2YzN1RUMmFtX0djSUQ3bTJHN0pua3Zo YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzZjM3VFQyYW1fR2NJRDdtMkc3Sm5rdmhhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVDOTAvNDJFMUZEMkEzRDI5MTFFQ0IwQkNEMjFGQzRGOUFFMDIvQ0RBMDZEOUMz RDJBMTFFQzhFQ0NFQjFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ694MA0GCSqGSIb3DQEBCwUAA4IBAQAC3ntTKeUT4FvT1ECnZMgI OCSMANr0jrRJL28rymc5e9WZalY3AHCFyULzddtnmjFukp2QjpplhImzoyHIQrfq 0jWc7ekh9RgGYr8VZ0CitpAlbde0vWMqwHjnM4k3FrYs+h1hyfovXNv2ohr/Wx5o V7viSuD+X54ZHbHflodbuZ/w9sh+5gG5lnvc+Sk1Lebm06thZWc7wqIOe7m2gxaL zf921m9zjSh138yWOc4MZaRpY9/BTXEYiM1kF4XXI53PV4DJ9BdYqAWACUUSKZec TXUpiN40EwRndQG9fVNnL9vnpWfMZoTYKIXsHXBbQQ+Lhv/SkHeAIq9Xia7nyWPD -----END CERTIFICATE-----Generated at Thu Mar 26 03:10:43 2026 by rpki-client