$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/4214E284606911EFBDF1A71AC4F9AE02.roa File: 4214E284606911EFBDF1A71AC4F9AE02.roa (raw, json) Hash identifier: jBVhEoVMxsZfp4aQB3vZNfOo6at1HuaSD70ob7lcoXc= Subject key identifier: FC:19:FE:54:C4:81:27:ED:67:D3:3B:6D:B8:3F:0F:CC:B2:AA:E7:26 Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 028D Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/4214E284606911EFBDF1A71AC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:09:39 +0000 ROA not before: Mon 05 May 2025 02:08:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 103.185.176.0/23 maxlen: 23 103.185.176.0/24 maxlen: 24 103.185.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: May 5 02:08:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a40253-c1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b3:43:95:e4:9a:ad:11:aa:c1:7a:25:e9:31: 2a:1a:4c:b8:eb:ec:0c:ab:0e:74:0d:6f:ef:fe:d3: 9c:4c:f3:68:a0:dc:4c:d5:09:5d:a4:a5:1d:8f:eb: d1:a9:a5:e7:99:39:e9:61:59:04:23:c9:b2:3d:4a: 6b:3e:ac:0e:a3:7b:a4:13:22:86:52:ff:5d:05:9f: ee:99:86:2e:4d:61:13:ae:ac:5b:f0:c3:c3:80:c2: 7b:8f:2b:d1:c1:8b:d7:8d:b8:89:c7:04:54:53:91: 60:58:ff:33:42:af:5d:29:d7:32:26:66:13:ff:75: f3:0b:74:81:72:db:c9:9a:b6:8a:57:6e:4b:c2:9d: 28:5c:74:36:ec:38:07:b6:48:6a:ce:74:55:48:6b: e1:4f:d8:b1:d5:be:e4:a5:a2:09:7f:94:dc:7f:ea: 68:e0:82:64:68:a8:da:7c:cf:fb:96:d0:1b:9b:d0: de:f3:45:0e:b4:00:16:32:e9:8b:22:f8:c4:09:de: f7:20:1a:3f:91:6a:83:5d:e6:a3:8a:ed:9c:08:a7: 9f:fe:10:64:66:92:e4:43:e5:8d:f3:1f:b6:b5:92: 66:91:eb:1c:9d:b2:b9:10:9e:8e:0d:5f:05:7e:7d: 97:ed:71:3f:f9:67:c5:e6:2a:7b:d4:8b:92:af:26: b3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:FE:54:C4:81:27:ED:67:D3:3B:6D:B8:3F:0F:CC:B2:AA:E7:26 X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/4214E284606911EFBDF1A71AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.185.176.0/23 Signature Algorithm: sha256WithRSAEncryption 59:ae:b7:6b:28:0b:85:df:9c:13:b6:88:77:cf:00:df:89:c8: d1:37:a6:61:61:52:a3:d6:35:26:a2:77:1b:32:6f:08:99:0d: 79:07:74:06:b3:e5:4a:ce:b5:60:03:ee:08:6c:8c:70:03:ad: f2:c8:93:7f:c7:bb:62:8e:2c:7e:44:2d:23:eb:7f:04:7d:15: 2d:1d:54:07:4b:72:f6:86:89:03:36:36:b7:1c:aa:f5:2c:83: 49:c0:a9:f4:ef:63:d5:3e:d8:74:c0:9c:94:7e:80:68:66:c8: 46:9c:6d:c6:69:f9:d2:17:4e:ad:ce:d1:18:b4:1f:c3:c2:58: ef:35:55:d9:bc:a1:e4:a9:83:1b:f1:bf:a4:b5:9e:95:f6:fb: f3:0c:04:3b:a6:04:9a:35:24:21:8a:22:97:dc:1c:2d:5b:99: 3e:c2:ae:53:75:eb:e2:2d:8a:34:5c:08:ba:10:58:4d:99:53: b6:18:4d:8d:06:08:5f:9a:b3:ee:a4:fc:95:2f:e3:2d:bc:bd: a2:98:b5:22:ed:25:f5:97:65:69:ad:88:52:b1:1a:09:d4:1b: 94:99:20:d9:7a:9b:d1:3c:89:5d:64:d8:ae:23:a8:09:28:ec: 09:56:02:c7:00:eb:7d:48:59:ac:73:1a:4a:a2:86:be:4f:29: e7:39:bb:fb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUwNTA1MDIwODUyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDI1My1jMWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7bNDleSarRGqwXol6TEqGky46+wMqw50DW/v/tOcTPNooNxM1QldpKUdj+vR qaXnmTnpYVkEI8myPUprPqwOo3ukEyKGUv9dBZ/umYYuTWETrqxb8MPDgMJ7jyvR wYvXjbiJxwRUU5FgWP8zQq9dKdcyJmYT/3XzC3SBctvJmraKV25Lwp0oXHQ27DgH tkhqznRVSGvhT9ix1b7kpaIJf5Tcf+po4IJkaKjafM/7ltAbm9De80UOtAAWMumL IvjECd73IBo/kWqDXeajiu2cCKef/hBkZpLkQ+WN8x+2tZJmkescnbK5EJ6ODV8F fn2X7XE/+WfF5ip71IuSryazRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPwZ/lTE gSftZ9M7bbg/D8yyqucmMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMyRjQvQjRDQTc3OTY0REUwMTFFREE2RjAxMDQ4QzRGOUFFMDIvNDIxNEUyODQ2 MDY5MTFFRkJERjFBNzFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ7mwMA0GCSqGSIb3DQEBCwUAA4IBAQBZrrdrKAuF35wTtoh3zwDf icjRN6ZhYVKj1jUmoncbMm8ImQ15B3QGs+VKzrVgA+4IbIxwA63yyJN/x7tijix+ RC0j638EfRUtHVQHS3L2hokDNja3HKr1LINJwKn072PVPth0wJyUfoBoZshGnG3G afnSF06tztEYtB/DwljvNVXZvKHkqYMb8b+ktZ6V9vvzDAQ7pgSaNSQhiiKX3Bwt W5k+wq5TdeviLYo0XAi6EFhNmVO2GE2NBghfmrPupPyVL+MtvL2imLUi7SX1l2Vp rYhSsRoJ1BuUmSDZepvRPIldZNiuI6gJKOwJVgLHAOt9SFmscxpKooa+TynnObv7 -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:07 2026 by rpki-client