$ rpki-client -vvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa File: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (raw, json) Hash identifier: xOj/wZXPscupT3ElrTmBaHlsw670Pw+Hr4mehf5CVBo= Subject key identifier: AF:3F:FA:70:E5:59:8D:0D:E3:32:31:22:E2:4C:FA:C8:45:55:1D:2B Certificate issuer: /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Certificate serial: 047C Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:22:01 +0000 ROA not before: Sat 03 Jan 2026 00:19:29 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138958 IP address blocks: 103.180.200.0/23 maxlen: 23 103.180.200.0/24 maxlen: 24 103.180.201.0/24 maxlen: 24 2400:5520::/32 maxlen: 32 2400:5520::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7 Validity Not Before: Jan 3 00:19:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44b88-235f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:45:d2:60:56:33:d1:2e:71:d2:f2:7c:ce: 00:14:67:d3:bb:a1:30:22:fd:fa:59:04:84:8f:52: 2c:2e:c3:3c:18:cf:90:f3:90:cc:36:03:4d:57:07: 13:d2:50:7f:9c:1e:2e:21:7c:32:df:73:03:47:7b: ed:ed:37:77:73:c6:a8:e0:6e:64:2b:29:3f:31:57: eb:70:6a:16:33:15:ba:83:86:ae:7b:74:79:3f:3c: 91:dc:d9:75:19:43:c6:48:44:94:30:a0:ec:df:7a: f0:7e:ed:45:e9:8b:2f:c9:fd:39:9f:8b:c7:37:1d: cc:7d:63:34:62:af:41:e5:b0:80:ac:bf:77:46:78: 0c:87:2a:5f:0e:df:4e:33:62:0b:11:d7:74:2a:49: 39:e4:64:75:0e:a8:ec:93:69:7f:d0:16:76:2d:67: 42:a7:95:67:c5:e3:56:41:e3:c4:b0:f8:28:97:90: c6:eb:dc:39:44:8a:2a:dd:26:d7:f4:f6:69:af:82: 57:e2:1b:a1:0f:79:70:cb:67:c6:1c:ad:ca:96:66: f3:b2:c6:46:aa:78:5b:49:37:09:c5:6a:3d:d4:76: 72:e3:12:50:e1:cb:a3:20:fa:fb:57:d6:b7:43:fd: 35:f1:aa:e8:16:70:81:9d:85:74:d9:45:ef:ca:6c: 78:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3F:FA:70:E5:59:8D:0D:E3:32:31:22:E2:4C:FA:C8:45:55:1D:2B X509v3 Authority Key Identifier: keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/4AB730E0800B11EC84B3FA3BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.180.200.0/23 IPv6: 2400:5520::/32 Signature Algorithm: sha256WithRSAEncryption 00:1f:8f:02:51:60:82:28:de:09:6a:3b:4b:9b:d9:d6:9d:70: 75:7f:3c:8d:a7:fd:28:98:31:00:df:b8:8a:2b:59:7a:e1:96: 0e:c8:7e:0a:30:19:4c:b4:c7:aa:09:5f:b5:09:83:43:4d:5a: 7a:c8:27:9e:1c:e6:5a:bb:c9:ed:93:50:5c:c3:78:cd:2e:08: 1f:21:b3:80:f8:00:68:a5:f0:dd:04:3a:1d:68:8c:25:76:9f: b4:51:1e:66:47:7e:64:e4:10:b9:6a:05:67:3b:e9:40:ac:cd: d7:fd:80:5b:84:aa:6c:eb:6e:4d:1d:da:6c:4f:31:eb:e2:f9: 28:22:2a:25:74:af:ad:cd:b2:87:ab:93:f5:c5:e9:01:21:fc: 61:ad:9d:22:c3:3d:c3:c0:42:e1:f3:cc:ae:b7:02:e8:6a:00: 69:89:c7:38:42:91:76:44:72:5f:8b:64:6c:06:f4:24:5a:cb: 41:ec:ed:c2:56:36:9d:dd:b5:ba:23:9b:62:ab:6e:87:9f:7e: 76:3e:a7:33:8f:09:70:6c:74:f2:e2:4c:06:1c:cc:9e:6e:1d: d3:88:5d:e2:0b:30:85:22:91:a5:3d:f7:70:a0:63:f2:84:1a: 63:2d:fa:7d:c3:41:37:bb:61:34:58:07:0d:d5:d8:b7:95:3a: 6d:18:60:f5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ1QTIxMTAvBgNVBAUTKDFDMDQzMDc3MjQxNTczQ0VCODU4RDk1MUYwMkIyMjA1 N0JBMzk2RTcwHhcNMjYwMTAzMDAxOTI5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGI4OC0yMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJxF0mBWM9EucdLyfM4AFGfTu6EwIv36WQSEj1IsLsM8GM+Q85DMNgNNVwcT 0lB/nB4uIXwy33MDR3vt7Td3c8ao4G5kKyk/MVfrcGoWMxW6g4aue3R5PzyR3Nl1 GUPGSESUMKDs33rwfu1F6Ysvyf05n4vHNx3MfWM0Yq9B5bCArL93RngMhypfDt9O M2ILEdd0Kkk55GR1Dqjsk2l/0BZ2LWdCp5VnxeNWQePEsPgol5DG69w5RIoq3SbX 9PZpr4JX4huhD3lwy2fGHK3KlmbzssZGqnhbSTcJxWo91HZy4xJQ4cujIPr7V9a3 Q/018aroFnCBnYV02UXvymx4AwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFK8/+nDl WY0N4zIxIuJM+shFVR0rMB8GA1UdIwQYMBaAFBwEMHckFXPOuFjZUfArIgV7o5bn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDVBMi9BM0QyRENBQTgw MDcxMUVDOTA4QUE5NjdDNEY5QUUwMi9IQVF3ZHlRVmM4NjRXTmxSOENzaUJYdWps dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hBUXdkeVFWYzg2NFdObFI4Q3NpQlh1amx1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ1QTIvQTNEMkRDQUE4MDA3MTFFQzkwOEFBOTY3QzRGOUFFMDIvNEFCNzMwRTA4 MDBCMTFFQzg0QjNGQTNCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ7TIMA0EAgACMAcDBQAkAFUgMA0GCSqGSIb3DQEBCwUAA4IBAQAA H48CUWCCKN4JajtLm9nWnXB1fzyNp/0omDEA37iKK1l64ZYOyH4KMBlMtMeqCV+1 CYNDTVp6yCeeHOZau8ntk1Bcw3jNLggfIbOA+ABopfDdBDodaIwldp+0UR5mR35k 5BC5agVnO+lArM3X/YBbhKps625NHdpsTzHr4vkoIioldK+tzbKHq5P1xekBIfxh rZ0iwz3DwELh88yutwLoagBpicc4QpF2RHJfi2RsBvQkWstB7O3CVjad3bW6I5ti q26Hn352PqczjwlwbHTy4kwGHMyebh3TiF3iCzCFIpGlPfdwoGPyhBpjLfp9w0E3 u2E0WAcN1di3lTptGGD1 -----END CERTIFICATE-----Generated at Sat Mar 28 13:34:55 2026 by rpki-client