$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/4F0E3CBCD22411ED99FF3546C4F9AE02.roa File: 4F0E3CBCD22411ED99FF3546C4F9AE02.roa (raw, json) Hash identifier: EHjk/F86ucLzY9sYVqsytzQA1yeTqJoqFn2Dz1cc9Fk= Subject key identifier: CA:5E:0A:25:74:B2:AF:41:A9:A3:26:5A:F5:F9:48:14:10:F7:12:0E Certificate issuer: /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Certificate serial: 0C76 Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/4F0E3CBCD22411ED99FF3546C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:55:56 +0000 ROA not before: Tue 02 Dec 2025 18:49:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139881 IP address blocks: 103.146.150.0/24 maxlen: 24 103.146.151.0/24 maxlen: 24 2001:df2:6580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3190 (0xc76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9286, serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682 Validity Not Before: Dec 2 18:49:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4456c-38ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:fc:97:d2:b7:2d:95:a4:75:09:c1:22:35: 97:4d:0f:90:e6:05:e0:10:43:51:db:71:d8:32:2d: 34:30:ce:ef:f3:dc:02:9d:50:58:0f:3e:39:23:7e: b5:4e:c9:bd:78:3f:64:6a:2a:3b:98:6d:d6:a7:33: 7a:df:e0:9d:e6:cf:59:81:ca:2a:2a:5c:5a:45:73: 3d:bc:26:2b:74:19:76:12:e2:c8:e9:ac:6c:e4:c0: b8:e2:c0:4d:73:68:4f:31:b3:58:c9:4e:49:07:98: 7d:eb:a2:56:1c:e6:e5:05:25:3e:53:01:f8:09:a8: a8:f5:4b:8e:04:dd:c5:28:8e:69:9b:68:40:16:52: d6:7a:cc:ea:88:03:74:26:c9:f6:00:76:bc:46:98: de:7f:08:e0:9b:4a:72:d1:e2:c1:ec:9d:76:af:eb: 26:11:f6:53:8e:26:9d:aa:e5:3a:dd:27:ca:c7:71: 63:90:ff:a9:de:3c:f4:3f:b5:11:81:49:07:bf:75: 2b:82:2d:8a:d9:43:b3:ae:7e:67:29:68:9a:6c:be: 4b:ee:81:9b:6a:87:10:43:ee:cc:6a:7b:cf:04:54: 18:2d:2c:63:f2:30:09:19:89:93:62:f9:92:61:09: f9:7f:f2:3c:48:8e:fd:2e:da:20:62:31:d4:12:c7: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5E:0A:25:74:B2:AF:41:A9:A3:26:5A:F5:F9:48:14:10:F7:12:0E X509v3 Authority Key Identifier: keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/4F0E3CBCD22411ED99FF3546C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.150.0/23 IPv6: 2001:df2:6580::/48 Signature Algorithm: sha256WithRSAEncryption 54:a5:7d:09:f0:4f:4f:2f:42:5b:ad:8e:f8:fd:b1:a3:2e:41: 8c:d5:96:9d:bf:7b:0c:f4:f7:45:20:de:be:08:19:d7:e2:c4: 65:20:16:46:2d:f8:e2:d0:8d:bf:9f:10:84:54:f0:f6:7c:a8: f2:b5:8f:c1:ad:fa:5e:fc:8c:d2:b5:c5:05:08:1c:e2:58:7f: 16:79:6d:1e:77:30:05:5b:a3:64:6b:7e:65:6f:5c:ef:34:95: af:c2:cb:72:48:6a:2a:11:dd:55:d9:7a:93:37:15:6a:83:f7: 66:42:2b:cd:53:b3:7d:37:86:a1:69:74:40:9e:54:f7:f5:a7: 09:54:bd:83:b5:dd:a8:75:3d:21:2d:b3:78:8e:a5:46:e0:8f: d9:00:b3:7c:ea:a7:7e:c1:b2:b0:08:7d:91:91:4b:17:f9:45: 3a:8c:81:8f:d3:98:d6:76:cb:b6:30:58:ea:cd:ef:44:b7:0c: d8:d1:58:00:de:e2:73:6f:08:9d:8b:8a:db:b0:bb:43:f8:04: 43:98:74:98:02:aa:92:9e:3e:8e:b0:7d:9c:29:1b:46:95:1a: f5:5a:a0:c7:c8:73:f1:81:a4:15:7e:5e:1e:4a:20:4d:16:8c: 25:20:2a:95:47:71:18:03:1e:c3:05:33:31:5c:b5:2b:54:03: a9:45:42:1d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyODYxMTAvBgNVBAUTKEM4OTEyREY0QzQ3RjhBNjZCQzQ4OUVDODQyNzI0ODBB MjExQjA2ODIwHhcNMjUxMjAyMTg0OTExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDU2Yy0zOGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUD8l9K3LZWkdQnBIjWXTQ+Q5gXgEENR23HYMi00MM7v89wCnVBYDz45I361 Tsm9eD9kaio7mG3WpzN63+Cd5s9ZgcoqKlxaRXM9vCYrdBl2EuLI6axs5MC44sBN c2hPMbNYyU5JB5h966JWHOblBSU+UwH4Caio9UuOBN3FKI5pm2hAFlLWeszqiAN0 Jsn2AHa8Rpjefwjgm0py0eLB7J12r+smEfZTjiadquU63SfKx3FjkP+p3jz0P7UR gUkHv3Urgi2K2UOzrn5nKWiabL5L7oGbaocQQ+7ManvPBFQYLSxj8jAJGYmTYvmS YQn5f/I8SI79LtogYjHUEsd1uQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMpeCiV0 sq9BqaMmWvX5SBQQ9xIOMB8GA1UdIwQYMBaAFMiRLfTEf4pmvEieyEJySAohGwaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTI4Ni9DQTk2MUMwMjIw OEQxMUVBOUZCN0NBM0ZDNEY5QUUwMi95SkV0OU1SX2ltYThTSjdJUW5KSUNpRWJC b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lKRXQ5TVJfaW1hOFNKN0lRbkpJQ2lFYkJvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkyODYvQ0E5NjFDMDIyMDhEMTFFQTlGQjdDQTNGQzRGOUFFMDIvNEYwRTNDQkNE MjI0MTFFRDk5RkYzNTQ2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5KWMA8EAgACMAkDBwAgAQ3yZYAwDQYJKoZIhvcNAQELBQADggEB AFSlfQnwT08vQlutjvj9saMuQYzVlp2/ewz090Ug3r4IGdfixGUgFkYt+OLQjb+f EIRU8PZ8qPK1j8Gt+l78jNK1xQUIHOJYfxZ5bR53MAVbo2RrfmVvXO80la/Cy3JI aioR3VXZepM3FWqD92ZCK81Ts303hqFpdECeVPf1pwlUvYO13ah1PSEts3iOpUbg j9kAs3zqp37BsrAIfZGRSxf5RTqMgY/TmNZ2y7YwWOrN70S3DNjRWADe4nNvCJ2L ituwu0P4BEOYdJgCqpKePo6wfZwpG0aVGvVaoMfIc/GBpBV+Xh5KIE0WjCUgKpVH cRgDHsMFMzFctStUA6lFQh0= -----END CERTIFICATE-----Generated at Fri Mar 27 02:39:38 2026 by rpki-client