$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/521DCED89C5911EC97E58855C4F9AE02.roa File: 521DCED89C5911EC97E58855C4F9AE02.roa (raw, json) Hash identifier: dLAnyeTxvDfQF9JYWN7ad+kpYFAFicvcPDptysNHc+Q= Subject key identifier: 8D:22:83:B9:3C:21:5D:B6:F0:A8:2E:F2:38:5F:8B:A4:CA:F1:10:D0 Certificate issuer: /CN=A91D9E03/serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Certificate serial: 042D Authority key identifier: A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/521DCED89C5911EC97E58855C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:23:53 +0000 ROA not before: Tue 27 Jan 2026 00:20:10 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138522 IP address blocks: 103.127.176.0/22 maxlen: 22 103.127.176.0/23 maxlen: 23 103.127.176.0/24 maxlen: 24 103.127.177.0/24 maxlen: 24 103.127.178.0/23 maxlen: 23 103.127.178.0/24 maxlen: 24 103.127.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1069 (0x42d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E03, serialNumber=A30409541839054B1C3E15D1983D7DBD8A7D6482 Validity Not Before: Jan 27 00:20:10 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44bf9-d784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:20:0f:ce:5d:c6:ad:1c:76:df:17:99:a8:f8: 24:fe:e5:fe:bb:c9:7a:e3:56:8d:1b:36:1e:8d:5c: de:b2:7a:42:d2:bb:29:59:47:61:8c:81:43:4f:ad: 95:23:a7:ab:4c:93:be:a0:73:04:79:d8:f5:a8:87: fd:3a:90:85:b3:db:91:55:a9:7b:34:a4:5d:6a:4c: c7:33:01:7f:25:f4:cb:46:a4:99:18:31:df:c5:98: 21:22:b1:d9:e2:92:cd:24:27:9c:88:6f:91:a4:27: 30:01:b3:1f:0f:c6:aa:2a:54:1b:21:2c:4c:64:0b: 0e:69:b2:00:88:ff:31:dd:13:54:6c:c5:2c:f6:14: 6c:d5:46:73:dd:b4:f6:a4:1e:12:0d:6a:e2:b9:de: f1:ee:79:19:4c:e8:58:c5:3a:44:9f:e0:b5:d2:5a: cf:9c:83:48:79:ee:b5:40:29:a5:54:2e:ca:9d:ef: fd:93:ad:1b:4b:13:57:e4:1f:52:12:2c:26:2f:73: 1a:ff:85:dc:c8:ae:ec:d1:eb:be:d5:84:89:34:24: 5c:44:35:62:73:8b:f3:39:de:1b:78:87:ef:26:8e: 70:c1:f3:b1:08:f0:1a:09:ef:bd:78:3e:38:3a:14: b1:14:a5:b6:97:30:e6:d2:bf:7f:b2:85:1e:ca:74: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:22:83:B9:3C:21:5D:B6:F0:A8:2E:F2:38:5F:8B:A4:CA:F1:10:D0 X509v3 Authority Key Identifier: keyid:A3:04:09:54:18:39:05:4B:1C:3E:15:D1:98:3D:7D:BD:8A:7D:64:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/owQJVBg5BUscPhXRmD19vYp9ZII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owQJVBg5BUscPhXRmD19vYp9ZII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E03/996A7E889C5611ECBDEE0553C4F9AE02/521DCED89C5911EC97E58855C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.127.176.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:cd:7a:b6:b2:cb:12:77:99:91:4e:2f:e4:37:8e:c2:49:ef: 72:90:83:e8:df:b9:fe:30:a7:96:ca:34:6a:be:c7:e7:8e:bb: 96:26:2d:8a:5e:93:b2:94:86:4b:2a:4a:b0:6f:df:08:a1:c6: 5c:d2:9c:4d:62:8e:e3:68:8e:29:91:76:5e:ca:33:f9:da:5e: 4a:04:3b:f3:a1:08:be:89:c9:c6:89:cc:d7:8f:0c:7e:da:1d: 80:e2:d6:ff:d3:69:c6:66:34:21:46:d4:fa:b5:55:97:de:64: d7:72:1b:4c:6d:83:df:f3:7e:52:c9:4e:30:55:15:b2:6b:7f: 85:0f:76:81:75:5f:9f:cd:fa:60:a0:2b:8a:5a:51:a0:bb:71: 06:b7:9f:91:bb:98:6d:59:6d:e2:de:f1:22:f8:6c:5e:49:be: 97:08:4e:be:3f:fe:fb:f2:a1:2e:c1:02:ac:45:a0:86:fd:1d: d9:76:f1:f7:33:02:7a:35:2b:19:2c:83:99:6a:c3:2b:08:2f: e8:bc:d0:83:d0:6a:d1:1f:b4:ae:79:e2:98:c9:9d:87:97:a8: 91:b0:12:6a:5f:38:43:13:43:60:57:08:47:ee:51:9d:42:51: d1:cd:55:4a:09:c2:db:ef:d4:3b:65:a0:75:1c:2e:b2:2f:b2: 4f:9c:4e:5d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFMDMxMTAvBgNVBAUTKEEzMDQwOTU0MTgzOTA1NEIxQzNFMTVEMTk4M0Q3REJE OEE3RDY0ODIwHhcNMjYwMTI3MDAyMDEwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGJmOS1kNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+iAPzl3GrRx23xeZqPgk/uX+u8l641aNGzYejVzesnpC0rspWUdhjIFDT62V I6erTJO+oHMEedj1qIf9OpCFs9uRVal7NKRdakzHMwF/JfTLRqSZGDHfxZghIrHZ 4pLNJCeciG+RpCcwAbMfD8aqKlQbISxMZAsOabIAiP8x3RNUbMUs9hRs1UZz3bT2 pB4SDWriud7x7nkZTOhYxTpEn+C10lrPnINIee61QCmlVC7Kne/9k60bSxNX5B9S EiwmL3Ma/4XcyK7s0eu+1YSJNCRcRDVic4vzOd4beIfvJo5wwfOxCPAaCe+9eD44 OhSxFKW2lzDm0r9/soUeynT4IQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI0ig7k8 IV228Kgu8jhfi6TK8RDQMB8GA1UdIwQYMBaAFKMECVQYOQVLHD4V0Zg9fb2KfWSC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUUwMy85OTZBN0U4ODlD NTYxMUVDQkRFRTA1NTNDNEY5QUUwMi9vd1FKVkJnNUJVc2NQaFhSbUQxOXZZcDla SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL293UUpWQmc1QlVzY1BoWFJtRDE5dllwOVpJSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlFMDMvOTk2QTdFODg5QzU2MTFFQ0JERUUwNTUzQzRGOUFFMDIvNTIxRENFRDg5 QzU5MTFFQzk3RTU4ODU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3+wMA0GCSqGSIb3DQEBCwUAA4IBAQCPzXq2sssSd5mRTi/kN47C Se9ykIPo37n+MKeWyjRqvsfnjruWJi2KXpOylIZLKkqwb98IocZc0pxNYo7jaI4p kXZeyjP52l5KBDvzoQi+icnGiczXjwx+2h2A4tb/02nGZjQhRtT6tVWX3mTXchtM bYPf835SyU4wVRWya3+FD3aBdV+fzfpgoCuKWlGgu3EGt5+Ru5htWW3i3vEi+Gxe Sb6XCE6+P/778qEuwQKsRaCG/R3ZdvH3MwJ6NSsZLIOZasMrCC/ovNCD0GrRH7Su eeKYyZ2Hl6iRsBJqXzhDE0NgVwhH7lGdQlHRzVVKCcLb79Q7ZaB1HC6yL7JPnE5d -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:08 2026 by rpki-client