$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/E8DA2D1C5F5211EABFCF4128C4F9AE02.roa File: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (raw, json) Hash identifier: 7rxQ44c/qdRbGP8wrso0qxvln83h8xRgmyXIf3/sc94= Subject key identifier: 82:C7:DD:96:08:FB:62:40:B2:5E:D2:17:1F:6E:FE:F7:2F:BD:63:90 Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0B09 Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/E8DA2D1C5F5211EABFCF4128C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:16:14 +0000 ROA not before: Fri 14 Mar 2025 19:52:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136929 IP address blocks: 103.149.36.0/23 maxlen: 23 103.149.36.0/24 maxlen: 24 103.149.37.0/24 maxlen: 24 2405:e140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2825 (0xb09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: Mar 14 19:52:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a5a9be-5fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:77:b2:1e:26:8a:df:cd:39:d9:53:9c:c9: f9:6d:04:6b:08:38:85:4c:f3:e4:90:19:d9:02:2f: 76:f6:3a:53:0a:42:07:c8:19:44:ef:a2:25:1e:a0: 15:5f:35:bf:f8:92:f1:f5:3d:ef:f4:3f:c8:61:cd: 7b:fe:e1:41:a0:be:ff:31:e3:09:fc:0c:d5:4f:26: 9f:e1:aa:3f:3a:79:1d:2f:43:52:f3:8c:61:69:8d: cc:5d:8a:cb:bf:ad:1d:15:89:7d:9c:93:52:5c:7b: e0:26:4f:58:58:ab:16:36:65:bc:6a:34:75:89:67: 36:8c:6b:bd:8c:9d:b5:ca:d7:62:aa:51:b7:b5:ff: 1a:af:2d:38:da:e9:9e:f0:06:9a:c0:96:2b:04:af: 7c:3c:f6:67:4b:ae:d6:ae:f2:9a:b2:e1:b0:85:e7: 39:e2:db:1e:9e:f1:4e:3b:c5:d0:cb:35:18:45:a8: bd:86:18:e3:6a:7c:55:ec:70:06:7b:53:dd:20:77: b1:0c:69:85:c6:4d:17:70:69:9a:2d:5a:04:76:c9: 45:82:f2:80:ef:af:30:d2:f9:de:d2:89:11:34:c0: 9a:e6:b9:a2:23:1d:80:0c:a1:1a:10:d1:df:78:3e: 8d:c8:51:09:72:52:72:35:af:e6:1f:82:cd:b6:3b: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C7:DD:96:08:FB:62:40:B2:5E:D2:17:1F:6E:FE:F7:2F:BD:63:90 X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/E8DA2D1C5F5211EABFCF4128C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.36.0/23 IPv6: 2405:e140::/32 Signature Algorithm: sha256WithRSAEncryption 2e:42:61:3e:4b:f0:db:28:cd:7e:d6:0a:7f:9f:d7:96:e1:4c: 02:51:27:d7:27:ca:90:7c:92:0a:3d:78:3b:ef:fc:b0:c3:f2: d7:5c:86:43:ad:c8:52:c9:39:9e:d1:cc:76:d0:d8:31:8d:0d: 69:3b:ac:86:a9:9a:45:ab:7e:82:88:5e:76:cf:86:c1:f0:73: 86:ae:9f:b8:fc:a6:d8:ee:84:33:a2:97:7b:d8:21:25:bf:2d: 05:5c:92:2a:06:0d:d0:a7:e9:ee:32:9c:1d:dd:22:44:24:73: 51:3a:9e:05:5a:c2:6e:1a:e2:14:76:09:cd:72:fa:8d:75:a7: 5b:a3:1e:0c:04:c7:db:ab:de:b7:6b:f7:d3:5d:14:e5:d3:b1: 6b:ad:e4:ec:d4:ac:41:90:22:6c:cf:95:33:44:1b:30:6a:a4: 41:c1:14:e8:8d:1b:17:44:3a:bf:a0:b4:56:39:b1:41:9f:8b: 29:1b:f5:48:d9:04:ff:f3:50:5d:35:7b:a7:b3:20:55:65:45: 21:a3:07:c5:cc:32:79:bf:45:68:9e:60:42:a8:ce:f6:84:2a: 53:1b:bf:33:a4:42:a5:51:35:da:b5:57:4e:e8:20:63:73:dc: ec:92:09:97:d7:90:36:0d:3a:02:f0:d6:7d:58:b6:f1:9c:ff: cd:c9:94:f0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjUwMzE0MTk1MjI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTliZS01ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApot3sh4mit/NOdlTnMn5bQRrCDiFTPPkkBnZAi929jpTCkIHyBlE76IlHqAV XzW/+JLx9T3v9D/IYc17/uFBoL7/MeMJ/AzVTyaf4ao/OnkdL0NS84xhaY3MXYrL v60dFYl9nJNSXHvgJk9YWKsWNmW8ajR1iWc2jGu9jJ21ytdiqlG3tf8ary042ume 8AaawJYrBK98PPZnS67WrvKasuGwhec54tsenvFOO8XQyzUYRai9hhjjanxV7HAG e1PdIHexDGmFxk0XcGmaLVoEdslFgvKA768w0vne0okRNMCa5rmiIx2ADKEaENHf eD6NyFEJclJyNa/mH4LNtjsj9wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFILH3ZYI +2JAsl7SFx9u/vcvvWOQMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REIwQzIvRkQ4ODM4MjI1RjUxMTFFQTg5OTkzRDI3QzRGOUFFMDIvRThEQTJEMUM1 RjUyMTFFQUJGQ0Y0MTI4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5UkMA0EAgACMAcDBQAkBeFAMA0GCSqGSIb3DQEBCwUAA4IBAQAu QmE+S/DbKM1+1gp/n9eW4UwCUSfXJ8qQfJIKPXg77/yww/LXXIZDrchSyTme0cx2 0NgxjQ1pO6yGqZpFq36CiF52z4bB8HOGrp+4/KbY7oQzopd72CElvy0FXJIqBg3Q p+nuMpwd3SJEJHNROp4FWsJuGuIUdgnNcvqNdadbox4MBMfbq963a/fTXRTl07Fr reTs1KxBkCJsz5UzRBswaqRBwRTojRsXRDq/oLRWObFBn4spG/VI2QT/81BdNXun syBVZUUhowfFzDJ5v0VonmBCqM72hCpTG78zpEKlUTXatVdO6CBjc9zskgmX15A2 DToC8NZ9WLbxnP/NyZTw -----END CERTIFICATE-----Generated at Thu Mar 26 12:51:51 2026 by rpki-client