$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa File: 81E9653E5B8A11EB857A3F77C4F9AE02.roa (raw, json) Hash identifier: NHvUGTdmuwIhXvGpasqL3enB4HKIbc5EZnmgVQdvyDA= Subject key identifier: 3D:AA:BB:F0:EE:25:72:8A:59:28:18:EE:F2:FF:81:C9:9C:BE:3E:A6 Certificate issuer: /CN=A91AD643/serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Certificate serial: 0769 Authority key identifier: 39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:54:54 +0000 ROA not before: Tue 30 Sep 2025 22:24:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 140220 IP address blocks: 103.192.152.0/22 maxlen: 24 103.196.80.0/22 maxlen: 24 202.182.80.0/20 maxlen: 24 2405:da40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1897 (0x769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD643, serialNumber=39D7468CF80C5055E9D04C9B4FAD31175C14D65F Validity Not Before: Sep 30 22:24:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4533e-3f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:09:ac:40:c9:23:a7:9b:14:5c:dc:31:84: ad:4b:8d:e0:01:9c:e5:f9:40:ba:82:ea:cb:e5:9e: a6:59:00:f6:72:ca:09:91:42:d6:de:93:24:5d:5d: 4e:3e:ec:2b:11:2f:52:77:6c:34:29:aa:49:36:b5: 21:6e:12:f5:4a:27:46:87:d4:13:74:95:fd:59:55: e4:67:9b:2d:76:07:6c:33:41:4f:dc:cd:da:96:4c: 3a:f7:63:de:12:a4:74:87:04:20:c6:db:61:27:dc: ba:25:c7:97:ab:19:d7:74:77:45:7d:f8:d5:a3:7e: 31:7a:45:25:51:3b:e1:2f:cc:58:ff:31:e0:fa:6d: 6c:52:b2:93:7a:43:f3:a1:b7:37:77:70:64:96:4b: 47:08:b0:38:37:4b:0a:b4:66:39:84:86:92:fb:b7: 5d:fb:86:76:77:94:74:87:6a:6a:6d:e6:c2:57:b6: be:6c:26:b6:6e:c9:10:a3:5e:aa:c1:83:2f:28:67: f3:30:7e:d4:81:66:e7:22:e7:7f:3e:8c:3e:0a:66: 21:ba:6b:9a:03:6c:1a:4d:cb:c5:bd:05:b9:22:14: 18:e4:aa:9d:6f:2d:f3:09:be:3b:f9:e4:9f:8d:d1: f7:0c:14:b8:cc:cd:8e:be:32:b8:c0:c5:a5:a0:5f: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:BB:F0:EE:25:72:8A:59:28:18:EE:F2:FF:81:C9:9C:BE:3E:A6 X509v3 Authority Key Identifier: keyid:39:D7:46:8C:F8:0C:50:55:E9:D0:4C:9B:4F:AD:31:17:5C:14:D6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/OddGjPgMUFXp0EybT60xF1wU1l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OddGjPgMUFXp0EybT60xF1wU1l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD643/EFBE6EB25B8811EBBD5F3076C4F9AE02/81E9653E5B8A11EB857A3F77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.192.152.0/22 103.196.80.0/22 202.182.80.0/20 IPv6: 2405:da40::/32 Signature Algorithm: sha256WithRSAEncryption c1:44:5b:65:d0:ae:b8:b5:fe:6d:68:49:32:e9:1d:c5:e5:7c: c9:36:03:06:e3:8e:3b:a0:57:a3:f4:38:ac:ad:cd:2d:8f:db: 38:0e:a8:3c:5b:01:bd:68:e3:69:f4:81:dd:54:3d:03:85:5e: f2:bb:5e:3c:27:55:c9:11:36:1e:aa:ca:bb:08:31:3b:d1:4c: 9f:94:a1:27:0f:e7:86:9a:36:56:0b:8a:f5:dd:38:22:19:56: 67:6b:83:10:e8:24:34:a4:01:d3:05:0f:79:a0:e2:d3:fd:46: a9:44:b3:44:ee:da:6a:61:34:6f:e3:ef:18:e8:68:be:15:84: 87:4e:4c:ad:45:88:1e:9d:20:cb:23:5a:eb:ed:eb:57:82:3c: 8e:5f:f3:ab:8e:8a:62:05:f1:16:9f:8f:9c:7c:97:26:f9:5b: 56:3b:2b:de:94:26:ec:d8:26:c8:88:5c:c8:d9:41:de:dc:1e: a6:2c:12:65:e8:c0:e2:30:d1:32:66:29:ca:a5:8f:3c:f3:b1: 7e:7e:42:72:1f:8e:01:e5:e6:7f:cf:6c:75:61:da:4e:28:4e: 39:ff:a6:29:1b:91:6d:a2:41:93:12:5c:91:69:b7:14:e4:9c: 22:7e:7f:de:af:be:01:5b:5e:aa:cf:9c:15:3b:1e:77:63:c4: 5c:09:61:a9 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ2NDMxMTAvBgNVBAUTKDM5RDc0NjhDRjgwQzUwNTVFOUQwNEM5QjRGQUQzMTE3 NUMxNEQ2NUYwHhcNMjUwOTMwMjIyNDQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTMzZS0zZjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg4JrEDJI6ebFFzcMYStS43gAZzl+UC6gurL5Z6mWQD2csoJkULW3pMkXV1O PuwrES9Sd2w0KapJNrUhbhL1SidGh9QTdJX9WVXkZ5stdgdsM0FP3M3alkw692Pe EqR0hwQgxtthJ9y6JceXqxnXdHdFffjVo34xekUlUTvhL8xY/zHg+m1sUrKTekPz obc3d3BklktHCLA4N0sKtGY5hIaS+7dd+4Z2d5R0h2pqbebCV7a+bCa2bskQo16q wYMvKGfzMH7UgWbnIud/Pow+CmYhumuaA2waTcvFvQW5IhQY5Kqdby3zCb47+eSf jdH3DBS4zM2OvjK4wMWloF9cRwIDAQABo4ICezCCAncwHQYDVR0OBBYEFD2qu/Du JXKKWSgY7vL/gcmcvj6mMB8GA1UdIwQYMBaAFDnXRoz4DFBV6dBMm0+tMRdcFNZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDY0My9FRkJFNkVCMjVC ODgxMUVCQkQ1RjMwNzZDNEY5QUUwMi9PZGRHalBnTVVGWHAwRXliVDYweEYxd1Ux bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kZEdqUGdNVUZYcDBFeWJUNjB4RjF3VTFsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUQ2NDMvRUZCRTZFQjI1Qjg4MTFFQkJENUYzMDc2QzRGOUFFMDIvODFFOTY1M0U1 QjhBMTFFQjg1N0EzRjc3QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ8CYAwQCZ8RQAwQEyrZQMA0EAgACMAcDBQAkBdpAMA0GCSqGSIb3 DQEBCwUAA4IBAQDBRFtl0K64tf5taEky6R3F5XzJNgMG4447oFej9Disrc0tj9s4 Dqg8WwG9aONp9IHdVD0DhV7yu148J1XJETYeqsq7CDE70UyflKEnD+eGmjZWC4r1 3TgiGVZna4MQ6CQ0pAHTBQ95oOLT/UapRLNE7tpqYTRv4+8Y6Gi+FYSHTkytRYge nSDLI1rr7etXgjyOX/OrjopiBfEWn4+cfJcm+VtWOyvelCbs2CbIiFzI2UHe3B6m LBJl6MDiMNEyZinKpY8887F+fkJyH44B5eZ/z2x1YdpOKE45/6YpG5FtokGTElyR abcU5Jwifn/er74BW16qz5wVOx53Y8RcCWGp -----END CERTIFICATE-----Generated at Thu Mar 26 14:26:11 2026 by rpki-client