$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/52E56FA806C711EA84978821C4F9AE02.roa File: 52E56FA806C711EA84978821C4F9AE02.roa (raw, json) Hash identifier: Ar9Bunxzx+IzrJnS3InP70mlYzYuHl3fsl1SQ+2WUx0= Subject key identifier: 9A:24:66:73:1D:97:C7:38:68:7E:0F:1B:F8:D5:CC:23:F9:35:28:09 Certificate issuer: /CN=A91B7B34/serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Certificate serial: 0CDD Authority key identifier: BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/52E56FA806C711EA84978821C4F9AE02.roa Signing time: Sun 08 Mar 2026 18:23:14 +0000 ROA not before: Sun 08 Mar 2026 18:23:14 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 137492 IP address blocks: 103.110.112.0/24 maxlen: 24 103.110.113.0/24 maxlen: 24 103.110.114.0/24 maxlen: 24 103.110.115.0/24 maxlen: 24 2402:88c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7B34, serialNumber=BA382DEA3A2F5B8C4C2205EC929F601BE34FE77F Validity Not Before: Mar 8 18:23:14 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69adbe91-d3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:1c:0e:73:49:e0:cb:40:92:a5:3b:3f:86: 44:bc:dc:89:60:65:6e:cd:a5:4d:84:5d:95:56:ce: 2c:52:8e:c6:26:51:65:b7:d8:cc:b3:55:d1:11:ca: 4a:26:b9:18:94:da:dd:56:e9:bf:a9:40:fd:2a:19: f2:bd:73:49:c5:86:fc:26:e2:d4:94:25:55:86:7e: 9d:fa:9e:8b:81:b3:9b:22:30:bb:e5:8a:71:9d:44: 7e:75:22:72:bf:4b:c2:de:6d:ea:f2:24:d1:03:2f: 2d:65:c6:af:09:19:0f:1d:97:c7:44:96:b4:b2:52: d4:a0:0e:92:0d:9c:aa:47:a9:8c:58:a7:1b:3d:c1: 35:5a:e4:ae:e9:17:95:10:93:33:9a:69:58:0d:12: 70:79:6d:79:75:9c:0e:a5:ed:41:73:f5:6d:50:c7: 77:39:ba:9c:d8:34:8c:66:b3:d6:62:2a:02:44:d7: 2e:79:92:e9:73:dc:7b:32:4b:c0:e2:9b:30:c7:24: 0b:ae:60:58:94:89:aa:d3:d9:15:80:0d:00:2d:33: 90:35:1c:35:80:c9:a7:d8:37:55:50:96:ae:e5:b8: af:2a:a6:d5:3f:7e:be:bb:12:d1:f6:51:eb:4d:18: 22:a8:f1:17:56:85:97:30:69:d3:5a:0f:67:fb:f7: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:24:66:73:1D:97:C7:38:68:7E:0F:1B:F8:D5:CC:23:F9:35:28:09 X509v3 Authority Key Identifier: keyid:BA:38:2D:EA:3A:2F:5B:8C:4C:22:05:EC:92:9F:60:1B:E3:4F:E7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/ujgt6jovW4xMIgXskp9gG-NP538.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ujgt6jovW4xMIgXskp9gG-NP538.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B34/DECE3EBA06C611EAA51A6021C4F9AE02/52E56FA806C711EA84978821C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.110.112.0/22 IPv6: 2402:88c0::/32 Signature Algorithm: sha256WithRSAEncryption b7:fe:fb:f3:aa:b4:90:13:33:78:ae:66:eb:e5:ae:c3:9b:2b: c4:c6:64:54:ec:5b:fb:2d:6f:bf:67:7a:09:59:9e:2d:1b:5d: 8a:48:e4:fd:4e:51:ef:ef:c8:a0:6e:10:dc:75:5b:b0:a1:ae: ae:5e:c4:69:eb:e1:d3:34:24:2e:e7:47:ef:a2:cb:6f:bf:47: e1:00:9b:55:fe:ba:a0:9e:17:24:a4:1c:c7:aa:e2:2d:57:5e: cb:7b:99:1c:b5:bf:af:d3:8c:53:54:62:a1:56:31:0f:b0:4d: 46:99:f1:b7:2b:02:30:31:40:19:06:00:15:6f:3c:24:76:8f: 0a:73:34:8c:f8:c6:72:16:a3:31:e1:a2:7c:fa:5d:ef:b0:d5: 98:43:13:29:d6:0e:a2:9c:bb:93:68:cc:d0:e6:fd:3a:17:a8: 54:ab:8f:f4:da:9c:4a:9e:7e:1e:63:c2:26:ad:39:4b:ed:05: 32:0a:8e:7f:7e:a6:aa:91:71:6b:9a:53:4b:b9:71:ee:31:36: f0:56:47:82:6e:69:34:b3:36:6d:d1:0b:55:e9:ab:8b:8b:f0: bf:3a:63:6e:1c:68:85:f9:16:7b:0b:aa:a4:32:cc:81:bc:c9: d1:31:f1:8d:23:bc:3e:dd:2a:35:97:b9:db:48:4b:c4:53:e6: 65:ae:53:d1 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCMzQxMTAvBgNVBAUTKEJBMzgyREVBM0EyRjVCOEM0QzIyMDVFQzkyOUY2MDFC RTM0RkU3N0YwHhcNMjYwMzA4MTgyMzE0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWFkYmU5MS1kM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJgcDnNJ4MtAkqU7P4ZEvNyJYGVuzaVNhF2VVs4sUo7GJlFlt9jMs1XREcpK JrkYlNrdVum/qUD9KhnyvXNJxYb8JuLUlCVVhn6d+p6LgbObIjC75YpxnUR+dSJy v0vC3m3q8iTRAy8tZcavCRkPHZfHRJa0slLUoA6SDZyqR6mMWKcbPcE1WuSu6ReV EJMzmmlYDRJweW15dZwOpe1Bc/VtUMd3Obqc2DSMZrPWYioCRNcueZLpc9x7MkvA 4pswxyQLrmBYlImq09kVgA0ALTOQNRw1gMmn2DdVUJau5bivKqbVP36+uxLR9lHr TRgiqPEXVoWXMGnTWg9n+/c0bQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJokZnMd l8c4aH4PG/jVzCP5NSgJMB8GA1UdIwQYMBaAFLo4Leo6L1uMTCIF7JKfYBvjT+d/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0IzNC9ERUNFM0VCQTA2 QzYxMUVBQTUxQTYwMjFDNEY5QUUwMi91amd0Nmpvdlc0eE1JZ1hza3A5Z0ctTlA1 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VqZ3Q2am92VzR4TUlnWHNrcDlnRy1OUDUzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCMzQvREVDRTNFQkEwNkM2MTFFQUE1MUE2MDIxQzRGOUFFMDIvNTJFNTZGQTgw NkM3MTFFQTg0OTc4ODIxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ25wMA0EAgACMAcDBQAkAojAMA0GCSqGSIb3DQEBCwUAA4IBAQC3 /vvzqrSQEzN4rmbr5a7DmyvExmRU7Fv7LW+/Z3oJWZ4tG12KSOT9TlHv78igbhDc dVuwoa6uXsRp6+HTNCQu50fvostvv0fhAJtV/rqgnhckpBzHquItV17Le5kctb+v 04xTVGKhVjEPsE1GmfG3KwIwMUAZBgAVbzwkdo8KczSM+MZyFqMx4aJ8+l3vsNWY QxMp1g6inLuTaMzQ5v06F6hUq4/02pxKnn4eY8ImrTlL7QUyCo5/fqaqkXFrmlNL uXHuMTbwVkeCbmk0szZt0QtV6auLi/C/OmNuHGiF+RZ7C6qkMsyBvMnRMfGNI7w+ 3So1l7nbSEvEU+ZlrlPR -----END CERTIFICATE-----Generated at Thu Mar 26 06:09:06 2026 by rpki-client