$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/CC2C3CB684AC11F0B7B8977DC4F9AE02.roa File: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (raw, json) Hash identifier: MctOJZfpNmGzytE5FJJXm650+JtZjVtwencqZk15AMs= Subject key identifier: 3D:F5:F1:93:C0:F5:09:DB:ED:93:4A:D6:E3:B3:F5:D2:3B:92:D5:59 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 6B Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/CC2C3CB684AC11F0B7B8977DC4F9AE02.roa Signing time: Thu 05 Mar 2026 07:45:54 +0000 ROA not before: Thu 05 Mar 2026 07:45:54 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 153995 IP address blocks: 103.161.158.0/23 maxlen: 23 103.161.158.0/24 maxlen: 24 103.161.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:05:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Mar 5 07:45:54 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a934b2-950f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:69:d0:d3:b3:0d:9d:17:24:27:76:2a:dc:6b: 42:4d:13:ef:97:6b:3a:e2:46:56:87:55:ef:f0:2a: f1:08:96:3b:af:db:5e:07:bd:fd:ee:6a:1e:61:47: a5:66:35:b7:c8:6f:68:a9:1b:ac:30:98:f2:db:94: 35:b4:b8:ed:d5:b9:07:79:c6:8e:ef:5d:60:7e:65: 13:f2:e3:26:ed:dc:d7:57:a7:7f:2f:8f:d4:5a:b2: 08:2b:e2:62:f0:c5:ac:4c:ff:10:c5:11:51:f0:f1: b8:8b:5b:dc:e8:c5:cc:e0:58:e9:8f:93:65:59:5b: c6:7c:47:1f:7b:0d:f8:08:17:d2:77:fd:de:f1:e6: 7a:49:92:50:5e:e4:a2:ae:1c:98:67:bf:25:38:97: 93:ee:13:21:9b:76:d8:6f:b1:6f:b0:4d:43:30:d1: d2:37:b2:dd:bb:e6:52:d5:ad:f3:79:8a:e5:98:02: fd:2a:82:e0:c8:cc:e8:db:41:3b:ba:81:64:58:5c: 8b:ac:1c:bd:c9:95:43:10:e5:40:b6:73:39:ea:da: f7:23:be:bd:06:1c:59:65:4a:b3:94:d3:64:2f:2c: 7b:b3:cb:76:c5:8f:a6:b8:7a:5a:1c:28:62:8e:95: c0:23:95:8f:17:b9:5d:6c:0a:29:f9:8c:08:24:1a: f4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F5:F1:93:C0:F5:09:DB:ED:93:4A:D6:E3:B3:F5:D2:3B:92:D5:59 X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/CC2C3CB684AC11F0B7B8977DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.158.0/23 Signature Algorithm: sha256WithRSAEncryption 89:1f:7b:fe:3d:34:2e:1d:9c:89:7d:e4:2f:ac:af:8b:cb:8f: eb:48:78:b7:60:c6:8a:97:75:3f:ce:f0:28:8c:e7:95:e9:26: 69:b9:cb:89:df:4d:e9:8e:6c:7f:06:92:54:94:a9:d6:e9:30: b6:57:fb:34:61:1e:6e:43:3c:dc:f9:19:7a:38:8a:22:a7:0e: 6e:da:e7:10:18:9b:98:ac:ba:bd:d9:a6:92:b3:60:9f:31:10: 4e:0b:44:44:db:cd:74:b8:d1:87:42:0a:78:26:f4:6a:65:80: fc:41:a4:a3:d7:8a:ab:89:34:2d:21:17:9f:9f:0c:3f:da:e2: eb:1f:d4:7b:ab:c9:7e:62:b3:6b:2b:a6:b2:16:9a:9e:82:1d: 27:3a:73:bc:9c:ac:0d:68:3d:db:e3:09:fa:f2:ef:a7:bc:54: 89:4e:34:a2:8d:36:f3:7f:45:40:a5:38:c1:7b:64:71:d1:0c: 5b:b4:02:49:1f:b8:f5:7c:a4:86:18:ed:30:9a:9e:a4:4b:6d: 20:cf:8c:9e:73:f4:c1:c0:ee:14:ec:63:19:42:93:5e:25:8f: f7:33:5c:b8:ef:43:a9:b2:b4:79:48:4b:8d:d8:d4:db:65:65: f1:af:a9:55:9f:5a:3d:d5:27:19:bb:2f:3a:bd:47:27:49:6e: 43:13:2b:90 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNjAzMDUwNzQ1NTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTkzNGIyLTk1MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvadDTsw2dFyQndirca0JNE++XazriRlaHVe/wKvEIljuv214Hvf3uah5hR6Vm NbfIb2ipG6wwmPLblDW0uO3VuQd5xo7vXWB+ZRPy4ybt3NdXp38vj9Rasggr4mLw xaxM/xDFEVHw8biLW9zoxczgWOmPk2VZW8Z8Rx97DfgIF9J3/d7x5npJklBe5KKu HJhnvyU4l5PuEyGbdthvsW+wTUMw0dI3st275lLVrfN5iuWYAv0qguDIzOjbQTu6 gWRYXIusHL3JlUMQ5UC2cznq2vcjvr0GHFllSrOU02QvLHuzy3bFj6a4elocKGKO lcAjlY8XuV1sCin5jAgkGvSPAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUPfXxk8D1 Cdvtk0rW47P10juS1VkwHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODE4NS84NTAxMTUzMjg0QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9DQzJDM0NCNjg0 QUMxMUYwQjdCODk3N0RDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnoZ4wDQYJKoZIhvcNAQELBQADggEBAIkfe/49NC4dnIl95C+sr4vL j+tIeLdgxoqXdT/O8CiM55XpJmm5y4nfTemObH8GklSUqdbpMLZX+zRhHm5DPNz5 GXo4iiKnDm7a5xAYm5isur3ZppKzYJ8xEE4LRETbzXS40YdCCngm9GplgPxBpKPX iquJNC0hF5+fDD/a4usf1HuryX5is2srprIWmp6CHSc6c7ycrA1oPdvjCfry76e8 VIlONKKNNvN/RUClOMF7ZHHRDFu0AkkfuPV8pIYY7TCanqRLbSDPjJ5z9MHA7hTs YxlCk14lj/czXLjvQ6mytHlIS43Y1NtlZfGvqVWfWj3VJxm7Lzq9RydJbkMTK5A= -----END CERTIFICATE-----Generated at Thu Mar 26 19:24:38 2026 by rpki-client