$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/5AF61D0CEDD811EF8D4FD882C4F9AE02.roa File: 5AF61D0CEDD811EF8D4FD882C4F9AE02.roa (raw, json) Hash identifier: rnduJ2NpU+LIFZlZ+rkpxldWRpJwaPya7QDINOEsPrs= Subject key identifier: BB:18:02:FF:75:87:40:6E:C8:68:3E:1D:55:28:11:18:54:CE:70:44 Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0130 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/5AF61D0CEDD811EF8D4FD882C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:10:03 +0000 ROA not before: Sun 07 Sep 2025 06:43:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 137535 IP address blocks: 103.110.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 09:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Sep 7 06:43:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a480fb-acf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:10:78:dc:85:f2:cb:3b:5e:a6:88:3b:8c:6e: e8:ae:35:e4:66:63:6a:3a:e6:dc:13:63:ba:ba:e2: c4:f4:e9:95:24:19:4c:87:65:12:44:4a:79:ed:6d: b6:4b:76:d3:46:73:ad:fc:7c:7a:c2:79:7c:f7:80: 67:22:ff:f9:67:8a:7d:c5:26:01:47:c2:32:80:b5: f0:0d:b2:24:d7:ad:4e:3a:3f:2f:43:f9:f3:01:8f: 6e:d1:38:1e:c0:03:67:7d:bc:12:ff:f3:88:0f:f9: a1:6c:44:e9:5f:ab:f7:13:33:96:11:a4:ef:d6:0d: 6c:ef:6c:42:e9:48:47:e8:35:c7:eb:b4:60:7c:13: d5:ed:90:7b:ae:e0:85:de:10:b9:fd:4a:83:10:d3: 0b:c8:5e:f6:6f:17:5b:d4:50:36:4f:d8:f4:47:50: 76:1d:10:c9:3c:0e:fc:c6:55:4f:8a:37:39:54:4a: 18:42:86:0c:11:a8:48:ff:13:4a:86:40:30:d0:47: 1a:96:21:61:f7:00:52:4b:26:76:2b:9b:f7:02:9a: e7:a9:70:3d:7c:b1:b2:00:30:41:fa:b7:0e:cb:08: 02:37:84:03:5c:12:c4:57:82:63:a2:67:04:10:da: b7:80:3b:d7:fd:1b:d3:aa:8b:fe:fe:7f:ef:6d:09: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:18:02:FF:75:87:40:6E:C8:68:3E:1D:55:28:11:18:54:CE:70:44 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/5AF61D0CEDD811EF8D4FD882C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.110.220.0/23 Signature Algorithm: sha256WithRSAEncryption 17:44:4e:cf:97:d5:98:38:e2:23:06:4f:03:1f:1f:c0:7e:c0: 87:9f:ae:68:56:41:58:0c:b3:b2:fd:34:ae:ed:22:8c:ee:bd: 06:a0:f3:d5:65:a7:a6:ac:e9:74:12:c3:f6:10:bd:47:31:2a: da:ee:77:21:9b:b4:c1:77:ee:5c:e1:ad:e1:57:0b:95:1f:25: f3:82:81:6c:07:b3:7d:74:ee:69:02:56:e2:1b:fb:00:aa:d0: ca:d3:e9:52:80:3c:5b:b8:5d:52:a4:ae:5a:98:2e:6f:75:f5: 26:d9:4c:c6:eb:9a:60:9c:ee:8b:fc:d3:9f:e0:e4:0e:3a:43: cb:4d:dc:3b:1d:33:f0:76:da:97:8b:df:98:92:29:63:d3:bd: fb:3f:20:f6:0d:b7:1d:72:e0:57:95:62:e8:3f:82:b6:cf:9e: 50:51:81:89:fa:8d:9e:78:7c:61:5c:8b:f9:7f:29:ba:18:fe: a2:86:0d:8d:64:4a:65:fe:94:c3:d2:1d:1c:a1:83:73:db:f0: ee:ed:ac:1f:93:7b:15:98:80:4c:90:5f:0f:f5:89:9e:70:af: 54:7b:df:95:70:c5:56:78:cc:5c:ef:0d:a1:b9:24:b3:29:f3: fc:2a:87:cd:73:58:13:d4:51:2f:b2:5c:b1:e1:45:b7:53:32: 0e:d5:b8:cc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwOTA3MDY0MzI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODBmYi1hY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoxB43IXyyztepog7jG7orjXkZmNqOubcE2O6uuLE9OmVJBlMh2USREp57W22 S3bTRnOt/Hx6wnl894BnIv/5Z4p9xSYBR8IygLXwDbIk161OOj8vQ/nzAY9u0Tge wANnfbwS//OID/mhbETpX6v3EzOWEaTv1g1s72xC6UhH6DXH67RgfBPV7ZB7ruCF 3hC5/UqDENMLyF72bxdb1FA2T9j0R1B2HRDJPA78xlVPijc5VEoYQoYMEahI/xNK hkAw0EcaliFh9wBSSyZ2K5v3AprnqXA9fLGyADBB+rcOywgCN4QDXBLEV4JjomcE ENq3gDvX/RvTqov+/n/vbQkS3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLsYAv91 h0BuyGg+HVUoERhUznBEMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNCNEMvREM5REUyOEU4QzUwMTFFRkEwNjdDODE1QzRGOUFFMDIvNUFGNjFEMENF REQ4MTFFRjhENEZEODgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ27cMA0GCSqGSIb3DQEBCwUAA4IBAQAXRE7Pl9WYOOIjBk8DHx/A fsCHn65oVkFYDLOy/TSu7SKM7r0GoPPVZaemrOl0EsP2EL1HMSra7nchm7TBd+5c 4a3hVwuVHyXzgoFsB7N9dO5pAlbiG/sAqtDK0+lSgDxbuF1SpK5amC5vdfUm2UzG 65pgnO6L/NOf4OQOOkPLTdw7HTPwdtqXi9+Ykilj0737PyD2DbcdcuBXlWLoP4K2 z55QUYGJ+o2eeHxhXIv5fym6GP6ihg2NZEpl/pTD0h0coYNz2/Du7awfk3sVmIBM kF8P9YmecK9Ue9+VcMVWeMxc7w2huSSzKfP8KofNc1gT1FEvslyx4UW3UzIO1bjM -----END CERTIFICATE-----Generated at Thu Mar 26 18:48:28 2026 by rpki-client