$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa File: 2815D106041A11EEA67A6B4DC4F9AE02.roa (raw, json) Hash identifier: OYerZcew/z3W1QIzxa4XrF+WiLMIJxrcPO1hXH0kxM4= Subject key identifier: D0:57:A1:18:8F:DA:65:43:12:9C:BE:A3:DD:86:C0:0A:67:96:2C:CC Certificate issuer: /CN=A91CDAFB/serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Certificate serial: 0203 Authority key identifier: 09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:36:21 +0000 ROA not before: Wed 21 May 2025 03:02:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141730 IP address blocks: 103.148.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDAFB, serialNumber=09E9057747F63BA0A281AE78013668CEDEA40AB4 Validity Not Before: May 21 03:02:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3de65-9f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:f0:b0:47:e9:5f:d1:71:51:1d:2d:7d:ec: 88:e3:a6:87:f1:68:ef:bd:48:02:0a:8c:42:31:8a: 9d:4a:80:82:85:0a:f6:0e:84:ba:ee:5c:0c:55:a2: aa:ab:fd:a7:b8:d6:39:e1:d4:26:da:2a:04:46:26: d4:86:ce:6a:80:1c:d1:23:72:37:60:ee:47:98:64: 02:92:bc:62:de:45:2a:58:3f:2c:fb:d9:e0:e2:f2: 8b:93:c1:27:cf:79:62:1a:84:b6:cf:1f:b6:51:bc: c9:d9:28:ac:1b:b5:f6:7b:cb:4a:12:6e:1f:81:24: 24:ae:15:1a:8b:57:86:fe:f1:ed:8f:35:9f:0d:20: f0:fd:1b:c0:37:65:bf:5f:da:16:fc:f2:a0:f1:b9: c0:f1:1f:aa:a0:e9:79:02:62:4c:e9:07:32:9d:b8: 94:e9:1c:04:cb:96:ec:d7:e7:b7:19:8f:cd:c5:60: d9:cd:e6:af:12:f4:bd:9f:68:83:5b:94:5c:62:17: b0:49:77:16:84:53:d9:d2:27:39:a9:fc:1a:0c:96: c0:17:54:2f:d0:2a:e5:da:04:db:5f:42:b6:2f:b4: 4e:f0:e5:e2:e5:a7:a4:fa:fa:34:38:78:b3:2d:a8: 43:4a:45:78:7c:8a:74:6d:04:39:23:6b:50:6b:9c: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:57:A1:18:8F:DA:65:43:12:9C:BE:A3:DD:86:C0:0A:67:96:2C:CC X509v3 Authority Key Identifier: keyid:09:E9:05:77:47:F6:3B:A0:A2:81:AE:78:01:36:68:CE:DE:A4:0A:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/CekFd0f2O6Ciga54ATZozt6kCrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CekFd0f2O6Ciga54ATZozt6kCrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDAFB/EC0F6A38034111EEA5215247C4F9AE02/2815D106041A11EEA67A6B4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.106.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:87:86:27:82:46:64:27:72:ff:e5:5e:1e:19:80:33:48:6b: db:7d:f9:9f:74:1f:99:8f:fa:7c:a5:0a:1f:02:a5:3e:2b:b1: cb:99:d8:b1:d8:e6:82:ed:2d:6d:3e:a7:43:3a:71:89:f5:18: 38:10:74:03:4d:e1:de:80:c8:36:a1:bd:c0:25:42:4d:c1:4a: 08:e4:06:a6:d3:e7:d6:a5:06:0f:31:c2:8f:60:f2:15:64:80: 2d:97:8d:95:a2:24:4e:6f:e1:c7:f5:0c:8d:09:69:74:2d:a4: a2:04:cf:4f:00:43:de:2e:c2:69:fa:5b:2c:fb:b9:3c:ea:4a: d5:d3:30:56:f6:06:24:b6:ad:56:5f:78:a9:80:5b:94:f7:7f: d8:78:2d:dd:c2:15:03:09:82:8b:5b:45:3c:68:8f:90:93:12: 37:1a:04:df:ac:ce:98:11:f6:a3:c0:2b:68:9c:3b:6c:cc:9a: 4a:b5:2f:02:6d:b9:33:0f:43:96:42:8d:6a:ec:63:74:56:6f: b8:8c:4e:4d:cb:94:ad:fb:d1:b1:c1:ff:04:37:ea:f5:3d:66: e1:9d:2f:a4:55:0a:57:bc:b2:0c:a1:9a:31:36:0e:6f:7d:00: 86:82:e2:b1:f9:27:f0:7c:e6:80:39:f0:04:dc:a7:f8:07:f1: 5b:9d:be:1a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RBRkIxMTAvBgNVBAUTKDA5RTkwNTc3NDdGNjNCQTBBMjgxQUU3ODAxMzY2OENF REVBNDBBQjQwHhcNMjUwNTIxMDMwMjU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGU2NS05ZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaTwsEfpX9FxUR0tfeyI46aH8WjvvUgCCoxCMYqdSoCChQr2DoS67lwMVaKq q/2nuNY54dQm2ioERibUhs5qgBzRI3I3YO5HmGQCkrxi3kUqWD8s+9ng4vKLk8En z3liGoS2zx+2UbzJ2SisG7X2e8tKEm4fgSQkrhUai1eG/vHtjzWfDSDw/RvAN2W/ X9oW/PKg8bnA8R+qoOl5AmJM6QcynbiU6RwEy5bs1+e3GY/NxWDZzeavEvS9n2iD W5RcYhewSXcWhFPZ0ic5qfwaDJbAF1Qv0Crl2gTbX0K2L7RO8OXi5aek+vo0OHiz LahDSkV4fIp0bQQ5I2tQa5zapQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNBXoRiP 2mVDEpy+o92GwApnlizMMB8GA1UdIwQYMBaAFAnpBXdH9jugooGueAE2aM7epAq0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREFGQi9FQzBGNkEzODAz NDExMUVFQTUyMTUyNDdDNEY5QUUwMi9DZWtGZDBmMk82Q2lnYTU0QVRab3p0NmtD clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Nla0ZkMGYyTzZDaWdhNTRBVFpvenQ2a0NyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0RBRkIvRUMwRjZBMzgwMzQxMTFFRUE1MjE1MjQ3QzRGOUFFMDIvMjgxNUQxMDYw NDFBMTFFRUE2N0E2QjREQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5RqMA0GCSqGSIb3DQEBCwUAA4IBAQCah4YngkZkJ3L/5V4eGYAz SGvbffmfdB+Zj/p8pQofAqU+K7HLmdix2OaC7S1tPqdDOnGJ9Rg4EHQDTeHegMg2 ob3AJUJNwUoI5Aam0+fWpQYPMcKPYPIVZIAtl42VoiROb+HH9QyNCWl0LaSiBM9P AEPeLsJp+lss+7k86krV0zBW9gYktq1WX3ipgFuU93/YeC3dwhUDCYKLW0U8aI+Q kxI3GgTfrM6YEfajwCtonDtszJpKtS8CbbkzD0OWQo1q7GN0Vm+4jE5Ny5St+9Gx wf8EN+r1PWbhnS+kVQpXvLIMoZoxNg5vfQCGguKx+SfwfOaAOfAE3Kf4B/Fbnb4a -----END CERTIFICATE-----Generated at Sat Mar 28 15:13:15 2026 by rpki-client