$ rpki-client -vvf rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa File: B4D2B6A2C1A811EA80577A47C4F9AE02.roa (raw, json) Hash identifier: XsfyCgy8g5kHLYmZ6IEzpkYjqKuCoWEp9cV6g7rlqWg= Subject key identifier: DE:AD:21:70:E4:77:E5:5A:0E:55:DF:C1:B5:1F:3C:B5:E6:EE:A4:92 Certificate issuer: /CN=A91C254D/serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Certificate serial: 090D Authority key identifier: 8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:52:56 +0000 ROA not before: Mon 16 Jun 2025 20:46:51 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140633 IP address blocks: 103.151.150.0/23 maxlen: 23 2001:df3:c680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:09:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2317 (0x90d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C254D, serialNumber=8D41336CB5D0AFFF1028216D9534BB7E02C3E785 Validity Not Before: Jun 16 20:46:51 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42898-7744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:25:35:f8:26:82:31:a4:52:68:1a:c8:30: a9:6b:ee:a0:d6:ee:83:c2:cc:b0:58:cc:db:27:b9: ed:97:1a:cd:4d:0d:8b:1e:5f:e5:2a:07:54:2b:60: ef:55:fe:e4:00:40:a7:fc:58:47:3a:2f:8b:20:b8: ef:0f:35:70:a2:61:69:5a:96:29:1e:0c:77:19:32: c4:df:1b:01:02:2a:e8:49:2b:4e:18:5e:4b:4d:27: c6:f6:e2:f3:34:49:c0:53:27:66:8a:00:3e:42:94: e5:8f:8f:70:23:b6:55:31:9d:14:d5:bc:b9:83:40: 98:f3:6f:14:d7:9b:a0:a7:68:e3:d8:04:80:2e:3a: 16:6b:b0:c2:07:36:b7:e2:b8:54:d9:cc:45:d3:84: 17:12:ab:56:5d:9f:fb:7d:4c:9c:96:bd:8e:d6:af: ef:c8:13:09:83:54:50:df:7a:5b:8a:24:79:09:d3: cc:72:fa:13:c7:e7:e6:8d:0e:30:4e:7b:f1:6c:7e: dd:14:bd:eb:60:73:bc:e9:40:83:b1:c9:36:3e:7f: 78:e7:b3:25:dd:68:ef:d2:33:96:bf:3e:58:71:41: e1:89:3c:c2:8d:df:50:c5:74:cc:1e:90:02:18:b5: d3:8d:e6:0e:ff:e9:e9:7c:1e:01:34:69:f8:20:1f: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:21:70:E4:77:E5:5A:0E:55:DF:C1:B5:1F:3C:B5:E6:EE:A4:92 X509v3 Authority Key Identifier: keyid:8D:41:33:6C:B5:D0:AF:FF:10:28:21:6D:95:34:BB:7E:02:C3:E7:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/jUEzbLXQr_8QKCFtlTS7fgLD54U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jUEzbLXQr_8QKCFtlTS7fgLD54U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C254D/8CE62DFAC1A711EA9D6B8743C4F9AE02/B4D2B6A2C1A811EA80577A47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.150.0/23 IPv6: 2001:df3:c680::/48 Signature Algorithm: sha256WithRSAEncryption a5:58:d3:83:8f:6a:ba:03:24:9b:6e:c1:a6:62:cf:e2:9a:fe: 5f:ad:ae:6d:56:b5:ce:c4:fe:b1:40:78:db:4f:ec:fa:47:6b: 97:c8:12:b8:df:03:a2:c2:4d:f1:8f:fa:83:ef:c5:14:94:2a: 08:86:e5:3d:b6:4b:ab:2d:26:e1:08:70:57:24:60:b8:55:67: d2:9e:83:d0:4c:5c:8f:82:1d:d3:7e:5d:2b:7a:66:6f:f2:3d: 01:58:f0:10:c3:80:5e:f0:29:28:d6:ac:26:76:6a:05:04:1d: cd:85:c0:88:d9:3e:5c:2b:4a:69:1d:ac:57:44:bf:fc:05:35: 76:4b:26:66:e1:5a:67:41:65:3c:73:75:a1:5b:cd:06:f5:63: 48:e1:60:f1:fe:7a:46:95:16:3a:8b:48:87:50:0c:56:51:af: b2:9f:81:87:63:b2:79:aa:66:76:0c:a5:4c:b2:91:fb:52:3e: bf:75:59:72:94:7a:3d:17:ff:04:d2:90:ae:da:41:aa:70:1e: 26:d0:5c:09:35:e5:ac:de:e0:2a:66:68:93:ed:41:ed:36:0d: e6:b3:36:f6:79:8e:2c:af:08:52:46:4f:9a:f6:02:61:33:67: 91:db:6c:3e:c9:ba:d3:c9:f6:1a:36:4b:da:1e:47:e1:5b:a9: 96:89:00:73 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI1NEQxMTAvBgNVBAUTKDhENDEzMzZDQjVEMEFGRkYxMDI4MjE2RDk1MzRCQjdF MDJDM0U3ODUwHhcNMjUwNjE2MjA0NjUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjg5OC03NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiSclNfgmgjGkUmgayDCpa+6g1u6DwsywWMzbJ7ntlxrNTQ2LHl/lKgdUK2Dv Vf7kAECn/FhHOi+LILjvDzVwomFpWpYpHgx3GTLE3xsBAiroSStOGF5LTSfG9uLz NEnAUydmigA+QpTlj49wI7ZVMZ0U1by5g0CY828U15ugp2jj2ASALjoWa7DCBza3 4rhU2cxF04QXEqtWXZ/7fUyclr2O1q/vyBMJg1RQ33pbiiR5CdPMcvoTx+fmjQ4w TnvxbH7dFL3rYHO86UCDsck2Pn9457Ml3Wjv0jOWvz5YcUHhiTzCjd9QxXTMHpAC GLXTjeYO/+npfB4BNGn4IB9BNQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFN6tIXDk d+VaDlXfwbUfPLXm7qSSMB8GA1UdIwQYMBaAFI1BM2y10K//ECghbZU0u34Cw+eF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjU0RC84Q0U2MkRGQUMx QTcxMUVBOUQ2Qjg3NDNDNEY5QUUwMi9qVUV6YkxYUXJfOFFLQ0Z0bFRTN2ZnTEQ1 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pVRXpiTFhRcl84UUtDRnRsVFM3ZmdMRDU0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzI1NEQvOENFNjJERkFDMUE3MTFFQTlENkI4NzQzQzRGOUFFMDIvQjREMkI2QTJD MUE4MTFFQTgwNTc3QTQ3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5eWMA8EAgACMAkDBwAgAQ3zxoAwDQYJKoZIhvcNAQELBQADggEB AKVY04OParoDJJtuwaZiz+Ka/l+trm1Wtc7E/rFAeNtP7PpHa5fIErjfA6LCTfGP +oPvxRSUKgiG5T22S6stJuEIcFckYLhVZ9Keg9BMXI+CHdN+XSt6Zm/yPQFY8BDD gF7wKSjWrCZ2agUEHc2FwIjZPlwrSmkdrFdEv/wFNXZLJmbhWmdBZTxzdaFbzQb1 Y0jhYPH+ekaVFjqLSIdQDFZRr7KfgYdjsnmqZnYMpUyykftSPr91WXKUej0X/wTS kK7aQapwHibQXAk15aze4CpmaJPtQe02DeazNvZ5jiyvCFJGT5r2AmEzZ5HbbD7J utPJ9ho2S9oeR+FbqZaJAHM= -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:44 2026 by rpki-client