$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/AD47BEC4320611EE845F4A5AC4F9AE02.roa File: AD47BEC4320611EE845F4A5AC4F9AE02.roa (raw, json) Hash identifier: fRHflQjmHWuxIA8GzoQ/LUn6cSoWoaT2DW9eSpxzVqI= Subject key identifier: A5:1D:A8:08:6D:3D:B1:E4:8D:E8:15:14:21:93:EB:1D:D2:F5:35:54 Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 0203 Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/AD47BEC4320611EE845F4A5AC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:31:46 +0000 ROA not before: Tue 27 May 2025 04:43:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 131214 IP address blocks: 27.50.8.0/22 maxlen: 24 103.19.170.0/23 maxlen: 24 103.73.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: May 27 04:43:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a59f52-4540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:31:e4:42:a1:6e:4d:e3:19:bd:6f:82:e7: 8c:14:dc:ae:46:80:39:0d:e6:8b:65:b9:88:41:b0: 4e:57:05:4f:09:c3:6d:04:21:62:2f:3a:aa:97:4c: ec:95:3c:75:58:fa:58:90:52:ca:49:b7:69:a2:f7: 64:04:f9:32:76:5d:39:e0:c6:d8:78:4d:c3:23:e9: ba:72:ea:94:92:e1:52:84:c2:91:2d:22:d6:15:26: 45:01:f4:9f:ab:4b:41:a7:e1:c5:6b:0f:ec:59:12: fb:d1:cd:09:2d:1e:00:b2:2d:33:f7:74:33:d5:fe: ce:4f:21:b9:75:65:c2:66:ef:c4:f1:5a:14:49:ce: 9c:79:0b:f1:0f:af:ee:7d:33:3e:f4:08:2a:d0:bc: 9e:11:44:a8:d1:2b:4a:fd:58:b1:a5:d6:da:fb:21: 55:9d:03:7f:88:97:23:14:bb:17:ca:63:78:1b:f3: 17:6a:ab:8a:a7:a6:01:e8:c5:ba:14:7f:2b:0d:84: ca:47:41:d3:1e:5d:fc:a5:c8:59:65:6c:b6:cd:77: a8:6b:9e:2b:b5:92:7e:f8:b0:7b:d1:47:ef:ff:ff: 89:31:3b:6d:68:17:63:c8:26:c0:f9:8d:e0:8e:fe: 15:c9:7a:94:4b:98:0a:26:34:90:46:d6:51:5b:cc: 5b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1D:A8:08:6D:3D:B1:E4:8D:E8:15:14:21:93:EB:1D:D2:F5:35:54 X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/AD47BEC4320611EE845F4A5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.50.8.0/22 103.19.170.0/23 103.73.112.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:96:1e:fe:38:67:d1:7f:a3:ab:bf:3e:d9:6b:67:65:5b:cb: 5f:3b:92:85:d5:0f:72:ad:eb:b3:c3:89:01:31:c5:fa:73:98: d8:3b:46:f6:b1:a5:38:24:27:43:9c:2e:bb:8e:8c:7f:29:60: 11:5f:88:8a:46:df:4d:39:ee:4e:e4:74:8f:ec:9e:f7:d1:47: ab:c3:2c:f2:a9:99:c5:f8:49:c1:fa:f3:6c:39:82:c5:17:a1: ef:f0:a3:46:f1:ba:91:34:b3:d1:8c:64:c3:83:e8:41:85:01: fc:0d:86:6d:8d:c8:ba:04:0b:b9:1b:ab:4b:fd:58:78:34:03: 5b:51:bd:6d:04:02:2f:dc:6c:72:69:fa:0f:aa:85:8e:78:a8: 5c:1c:b4:33:e1:41:03:2a:58:94:a0:62:ca:63:1f:74:3c:46: e7:99:ae:1c:64:d3:22:72:83:c8:c5:23:64:28:ff:ef:d5:f2: 25:ab:88:c9:f4:0a:dc:c5:fe:04:32:f5:ca:9d:85:f1:35:ed: a1:75:40:da:9a:34:98:d2:3c:8e:88:41:c2:1c:80:a8:5d:ef: 37:43:0c:54:32:53:49:32:c9:3a:72:9a:35:71:7f:bd:e9:ca: c5:04:5f:48:54:df:46:d2:f2:cb:5f:a7:ae:ee:f7:bc:76:9d: fb:28:ea:67 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUwNTI3MDQ0MzM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWY1Mi00NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnYx5EKhbk3jGb1vgueMFNyuRoA5DeaLZbmIQbBOVwVPCcNtBCFiLzqql0zs lTx1WPpYkFLKSbdpovdkBPkydl054MbYeE3DI+m6cuqUkuFShMKRLSLWFSZFAfSf q0tBp+HFaw/sWRL70c0JLR4Asi0z93Qz1f7OTyG5dWXCZu/E8VoUSc6ceQvxD6/u fTM+9Agq0LyeEUSo0StK/Vixpdba+yFVnQN/iJcjFLsXymN4G/MXaquKp6YB6MW6 FH8rDYTKR0HTHl38pchZZWy2zXeoa54rtZJ++LB70Ufv//+JMTttaBdjyCbA+Y3g jv4VyXqUS5gKJjSQRtZRW8xblQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKUdqAht PbHkjegVFCGT6x3S9TVUMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Q3QTQvM0NDNzE5OTYxMTg3MTFFRUIzOUZFMjQzQzRGOUFFMDIvQUQ0N0JFQzQz MjA2MTFFRTg0NUY0QTVBQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCGzIIAwQBZxOqAwQBZ0lwMA0GCSqGSIb3DQEBCwUAA4IBAQAdlh7+ OGfRf6Orvz7Za2dlW8tfO5KF1Q9yreuzw4kBMcX6c5jYO0b2saU4JCdDnC67jox/ KWARX4iKRt9NOe5O5HSP7J730UerwyzyqZnF+EnB+vNsOYLFF6Hv8KNG8bqRNLPR jGTDg+hBhQH8DYZtjci6BAu5G6tL/Vh4NANbUb1tBAIv3GxyafoPqoWOeKhcHLQz 4UEDKliUoGLKYx90PEbnma4cZNMicoPIxSNkKP/v1fIlq4jJ9Arcxf4EMvXKnYXx Ne2hdUDamjSY0jyOiEHCHICoXe83QwxUMlNJMsk6cpo1cX+96crFBF9IVN9G0vLL X6eu7ve8dp37KOpn -----END CERTIFICATE-----Generated at Thu Mar 26 11:52:17 2026 by rpki-client