$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa File: F719961A1A8611ECB908E939C4F9AE02.roa (raw, json) Hash identifier: 6Zu4L1ezgqlBaAtZaZeJDXKxjpiSp79xQrfuVaBXNZ8= Subject key identifier: F0:61:17:69:85:88:68:D2:B5:E2:74:0E:6E:A0:42:34:9E:37:06:00 Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Certificate serial: 0585 Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:23:29 +0000 ROA not before: Wed 03 Sep 2025 00:15:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55736 IP address blocks: 103.164.128.0/24 maxlen: 24 103.164.129.0/24 maxlen: 24 123.100.228.0/24 maxlen: 24 123.100.229.0/24 maxlen: 24 123.100.230.0/24 maxlen: 24 123.100.231.0/24 maxlen: 24 202.157.178.0/24 maxlen: 24 203.142.9.0/24 maxlen: 24 2405:70c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1413 (0x585) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F Validity Not Before: Sep 3 00:15:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a58f50-00f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:42:79:55:81:d6:30:63:d2:ae:ad:33:ff: e7:dd:cb:9a:62:01:9c:64:13:fe:4f:5b:2f:7e:bc: d8:48:cd:7f:63:70:c7:44:2f:ab:47:0c:91:a2:0f: 86:c6:2f:cb:99:93:e1:c3:15:f9:25:41:62:44:65: fd:bb:5e:33:fd:24:bd:78:2e:65:7d:12:55:ae:3a: d8:86:22:85:26:a9:2a:37:0e:45:39:87:e5:e1:46: ae:94:02:6e:c0:33:b5:a5:a7:1e:3b:ab:4b:50:9d: 8a:83:b7:56:54:02:22:45:8c:64:a7:1f:ea:73:a5: 4d:ce:6a:7c:7d:6c:06:6a:c8:97:13:cc:fe:7f:6a: 57:08:11:62:a8:1f:97:c5:72:76:91:62:0d:a9:fe: ee:ad:ac:6e:41:f2:9a:cf:c8:3c:b2:41:37:32:32: ab:37:3c:18:dd:59:19:ed:be:55:d1:0d:d3:f3:cd: 34:fb:13:03:33:88:91:d6:aa:51:21:b9:1d:57:cd: f7:08:ea:95:00:c1:a4:a1:47:1b:c8:1f:52:ee:60: 89:3b:89:5b:52:7e:de:06:da:99:6e:90:7d:f4:15: 78:c5:72:ef:19:f4:53:5e:cd:d5:a2:83:b7:ba:9e: 97:90:92:76:ee:e1:30:f0:4e:1b:1b:dc:4c:3f:9f: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:61:17:69:85:88:68:D2:B5:E2:74:0E:6E:A0:42:34:9E:37:06:00 X509v3 Authority Key Identifier: keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/F719961A1A8611ECB908E939C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.164.128.0/23 123.100.228.0/22 202.157.178.0/24 203.142.9.0/24 IPv6: 2405:70c0::/32 Signature Algorithm: sha256WithRSAEncryption 09:b7:ce:19:f2:49:cb:82:85:a3:2e:ec:f7:02:f6:ce:89:e3: f4:e6:c6:63:f4:58:5f:01:0e:51:52:c1:3d:68:43:9f:fd:f1: 23:e0:ae:92:ae:7a:d6:d0:72:08:87:95:4e:2f:dc:70:35:08: 3c:94:f4:d6:6c:90:40:95:3a:25:09:2b:01:f4:13:1f:5b:e4: 88:65:0f:ec:0b:17:2e:63:78:e4:92:3b:b9:5b:10:6b:04:16: 94:6e:fa:3e:d1:83:bb:b5:db:8b:36:57:15:9c:9e:f2:e6:fd: e9:a9:ca:2b:11:cc:af:8d:40:b7:2b:86:28:b5:eb:f3:12:70: 10:d5:94:d9:6c:81:34:6d:76:14:59:7d:71:2a:f1:19:74:78: 82:07:51:54:e1:8d:57:08:32:74:ea:ba:f4:fa:2a:88:c6:e9: 81:9d:f4:eb:56:0f:d0:bb:3c:66:8d:05:f7:3f:99:b7:87:62: ad:3d:83:42:d0:e0:e6:87:5b:ce:8b:63:ae:47:66:54:b5:cb: ea:d3:75:63:82:c3:08:37:22:f7:6d:93:1d:1f:ca:3a:f5:90: 38:d1:15:a5:4b:8d:d5:c5:af:d0:83:6b:5b:00:4b:e2:3f:9f: 5d:5d:1e:82:fc:9c:f9:8d:a1:a2:6b:17:4d:43:f1:27:14:15: 6e:2d:2a:f8 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICBYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk0MUIxMTAvBgNVBAUTKDA4MDI1QjlCNDRFRUQ4QUUwQjc2RjExRTAzNzJDRTk2 MTg3N0FEOUYwHhcNMjUwOTAzMDAxNTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGY1MC0wMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxpCeVWB1jBj0q6tM//n3cuaYgGcZBP+T1svfrzYSM1/Y3DHRC+rRwyRog+G xi/LmZPhwxX5JUFiRGX9u14z/SS9eC5lfRJVrjrYhiKFJqkqNw5FOYfl4UaulAJu wDO1paceO6tLUJ2Kg7dWVAIiRYxkpx/qc6VNzmp8fWwGasiXE8z+f2pXCBFiqB+X xXJ2kWINqf7uraxuQfKaz8g8skE3MjKrNzwY3VkZ7b5V0Q3T8800+xMDM4iR1qpR IbkdV833COqVAMGkoUcbyB9S7mCJO4lbUn7eBtqZbpB99BV4xXLvGfRTXs3VooO3 up6XkJJ27uEw8E4bG9xMP5/RdwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFPBhF2mF iGjSteJ0Dm6gQjSeNwYAMB8GA1UdIwQYMBaAFAgCW5tE7tiuC3bxHgNyzpYYd62f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQxQi82OUY2QjdERTFB ODMxMUVDOEM5MjIyMjlDNEY5QUUwMi9DQUpibTBUdTJLNExkdkVlQTNMT2xoaDNy WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBSmJtMFR1Mks0TGR2RWVBM0xPbGhoM3JaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk0MUIvNjlGNkI3REUxQTgzMTFFQzhDOTIyMjI5QzRGOUFFMDIvRjcxOTk2MUEx QTg2MTFFQ0I5MDhFOTM5QzRGOUFFMDIucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQBZ6SAAwQCe2TkAwQAyp2yAwQAy44JMA0EAgACMAcDBQAkBXDAMA0G CSqGSIb3DQEBCwUAA4IBAQAJt84Z8knLgoWjLuz3AvbOieP05sZj9FhfAQ5RUsE9 aEOf/fEj4K6SrnrW0HIIh5VOL9xwNQg8lPTWbJBAlTolCSsB9BMfW+SIZQ/sCxcu Y3jkkju5WxBrBBaUbvo+0YO7tduLNlcVnJ7y5v3pqcorEcyvjUC3K4YotevzEnAQ 1ZTZbIE0bXYUWX1xKvEZdHiCB1FU4Y1XCDJ06rr0+iqIxumBnfTrVg/QuzxmjQX3 P5m3h2KtPYNC0ODmh1vOi2OuR2ZUtcvq03VjgsMINyL3bZMdH8o69ZA40RWlS43V xa/Qg2tbAEviP59dXR6C/Jz5jaGiaxdNQ/EnFBVuLSr4 -----END CERTIFICATE-----Generated at Thu Mar 26 05:50:51 2026 by rpki-client