$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/37D4A3DE20BA11EF9B035D1FC4F9AE02.roa File: 37D4A3DE20BA11EF9B035D1FC4F9AE02.roa (raw, json) Hash identifier: Tj5gTHhoX9WWHocvM2xmwzU702FbIz9gPO8dWq1koOk= Subject key identifier: 21:46:0B:88:B4:4C:5E:1F:81:73:0D:F0:93:38:A1:37:CE:B8:AC:C6 Certificate issuer: /CN=A91D3D89/serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Certificate serial: 014F Authority key identifier: 48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/37D4A3DE20BA11EF9B035D1FC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:57:58 +0000 ROA not before: Sun 25 May 2025 05:36:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152856 IP address blocks: 103.159.210.0/23 maxlen: 24 2001:df3:d140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3D89, serialNumber=48F96009BCD4CE06CD60D125F0A91B23FEC30360 Validity Not Before: May 25 05:36:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5a576-48eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:14:cd:63:1f:d7:e6:16:0b:ea:fd:ec:51: 4a:12:4d:96:ac:fe:eb:1e:42:4a:c6:fc:1b:bb:7c: 37:50:e4:1f:51:28:88:58:72:b9:31:92:51:9d:4d: a0:c7:04:a1:63:52:9c:a1:5a:6c:98:07:eb:67:e8: 1b:19:93:a5:8d:ed:f4:e4:91:5f:7c:18:39:28:a5: b2:4b:8e:74:ba:b8:6f:ba:f9:c5:34:fb:6e:22:aa: ee:b7:60:5a:97:23:34:82:73:f1:8e:bc:1b:44:e2: 59:64:68:fe:28:c9:fd:8b:f2:6c:f6:9d:a2:c9:b4: bb:bf:33:3d:da:b6:2e:5c:2a:4c:26:86:e2:d2:64: b2:82:72:c2:95:c1:66:b8:a6:b0:33:d8:7c:ed:55: c9:4b:41:1e:17:88:32:5a:ed:9d:a6:60:54:de:bd: a6:7e:d7:28:7c:39:78:2c:e7:af:34:11:f6:f9:f2: 67:aa:e8:4a:43:73:bc:e6:fe:e3:da:2b:1d:18:4f: bb:27:38:0c:f7:55:02:92:f8:29:49:62:0c:20:f7: e2:75:36:f5:a5:35:6b:89:e8:21:9e:72:1c:ef:ee: 1f:1a:6b:66:12:48:6e:f9:fb:88:a7:f2:42:71:8d: 53:f3:08:f6:7f:77:e5:4d:2e:dc:77:af:95:95:97: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:0B:88:B4:4C:5E:1F:81:73:0D:F0:93:38:A1:37:CE:B8:AC:C6 X509v3 Authority Key Identifier: keyid:48:F9:60:09:BC:D4:CE:06:CD:60:D1:25:F0:A9:1B:23:FE:C3:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/SPlgCbzUzgbNYNEl8KkbI_7DA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SPlgCbzUzgbNYNEl8KkbI_7DA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3D89/D3ED585820B811EFBE1C2815C4F9AE02/37D4A3DE20BA11EF9B035D1FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.210.0/23 IPv6: 2001:df3:d140::/48 Signature Algorithm: sha256WithRSAEncryption 44:64:ab:8c:da:97:67:81:22:6e:b4:5f:40:85:f5:30:38:0b: 20:b7:12:86:76:9c:8c:ef:65:a0:36:79:00:72:37:96:88:72: fc:42:5f:44:c6:72:5b:71:59:7b:9b:e2:d2:2f:9f:3d:0f:b4: 64:7e:21:68:e5:27:72:53:e0:7a:a4:b3:d0:53:a9:70:ce:01: 55:6f:ff:8c:52:f9:5e:7a:8d:75:65:05:bd:1e:69:b0:92:c2: dd:87:eb:d0:0c:97:a9:61:fb:74:e3:2f:b2:c6:e6:c2:c3:52: 22:80:46:92:30:ed:7c:16:5f:32:cd:ec:45:12:f8:7e:d1:ec: 79:3c:9a:00:e7:b2:9a:27:ed:b9:2a:19:d4:e0:39:b3:ed:02: d4:04:3f:5d:dc:b4:98:75:42:22:c6:1c:57:d8:7a:be:c9:22: 5b:e0:20:92:e2:d9:0b:8e:44:51:8d:5d:1b:5a:75:62:3f:b3: c7:82:f5:2d:47:68:dd:69:1b:7f:5e:96:5f:22:8f:97:2e:77: 42:4f:50:23:e6:e5:69:ae:1a:d7:3a:5e:4c:05:a8:8c:e0:b8: 68:e0:49:b1:33:35:43:58:b3:91:ee:43:de:5a:9a:ce:27:01: 0d:6c:c2:53:97:c6:6c:28:c5:48:8d:6d:4f:b7:69:de:59:63: ac:96:4c:ad -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDNEODkxMTAvBgNVBAUTKDQ4Rjk2MDA5QkNENENFMDZDRDYwRDEyNUYwQTkxQjIz RkVDMzAzNjAwHhcNMjUwNTI1MDUzNjQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTU3Ni00OGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkgUzWMf1+YWC+r97FFKEk2WrP7rHkJKxvwbu3w3UOQfUSiIWHK5MZJRnU2g xwShY1KcoVpsmAfrZ+gbGZOlje305JFffBg5KKWyS450urhvuvnFNPtuIqrut2Ba lyM0gnPxjrwbROJZZGj+KMn9i/Js9p2iybS7vzM92rYuXCpMJobi0mSygnLClcFm uKawM9h87VXJS0EeF4gyWu2dpmBU3r2mftcofDl4LOevNBH2+fJnquhKQ3O85v7j 2isdGE+7JzgM91UCkvgpSWIMIPfidTb1pTVrieghnnIc7+4fGmtmEkhu+fuIp/JC cY1T8wj2f3flTS7cd6+VlZewfwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCFGC4i0 TF4fgXMN8JM4oTfOuKzGMB8GA1UdIwQYMBaAFEj5YAm81M4GzWDRJfCpGyP+wwNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0Q4OS9EM0VENTg1ODIw QjgxMUVGQkUxQzI4MTVDNEY5QUUwMi9TUGxnQ2J6VXpnYk5ZTkVsOEtrYklfN0RB MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NQbGdDYnpVemdiTllORWw4S2tiSV83REEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDNEODkvRDNFRDU4NTgyMEI4MTFFRkJFMUMyODE1QzRGOUFFMDIvMzdENEEzREUy MEJBMTFFRjlCMDM1RDFGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5/SMA8EAgACMAkDBwAgAQ3z0UAwDQYJKoZIhvcNAQELBQADggEB AERkq4zal2eBIm60X0CF9TA4CyC3EoZ2nIzvZaA2eQByN5aIcvxCX0TGcltxWXub 4tIvnz0PtGR+IWjlJ3JT4Hqks9BTqXDOAVVv/4xS+V56jXVlBb0eabCSwt2H69AM l6lh+3TjL7LG5sLDUiKARpIw7XwWXzLN7EUS+H7R7Hk8mgDnspon7bkqGdTgObPt AtQEP13ctJh1QiLGHFfYer7JIlvgIJLi2QuORFGNXRtadWI/s8eC9S1HaN1pG39e ll8ij5cud0JPUCPm5WmuGtc6XkwFqIzguGjgSbEzNUNYs5HuQ95ams4nAQ1swlOX xmwoxUiNbU+3ad5ZY6yWTK0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:38:07 2026 by rpki-client