$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa File: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (raw, json) Hash identifier: 8ERTDv7Mz23v2Rbdakt8Gt3XJ8tL5M1Uk1kQf/u/YMs= Subject key identifier: 51:D8:68:FE:96:A1:C8:D4:F2:00:E2:86:2E:46:88:E9:C9:D5:96:76 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0EC2 Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa Signing time: Mon 16 Mar 2026 18:22:39 +0000 ROA not before: Mon 16 Mar 2026 18:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132459 IP address blocks: 103.137.220.0/23 maxlen: 24 2404:b940::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3778 (0xec2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Mar 16 18:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69b84a6f-75d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ca:41:57:45:02:a7:07:56:1a:74:9a:2d:04: bf:6c:9e:2f:ea:3a:83:c0:80:03:04:3a:12:d3:fd: ef:1e:83:9b:7d:bf:5e:3a:6c:84:be:cd:47:75:c2: dd:ad:74:2b:db:da:07:40:d8:19:de:61:32:3f:55: 2f:64:cd:47:94:b5:8b:1b:ac:17:49:86:10:4a:ec: 09:a5:b7:3a:f3:28:d7:9f:77:36:5a:1d:68:13:c8: cd:27:7c:9f:b8:a9:6a:18:48:8d:6f:6c:7d:06:ff: cf:e3:6c:62:af:17:d7:1a:10:43:11:dc:97:89:b1: a2:ad:04:7a:48:15:d1:c6:83:88:d1:57:2b:a7:94: 92:54:77:04:86:e1:f0:57:c3:51:dc:b2:35:29:b7: 17:83:31:05:34:d6:43:ed:09:e6:6d:87:b6:3b:15: fa:49:49:f2:d9:1c:80:49:85:56:ce:05:46:78:d7: c8:82:4c:30:fa:c9:8c:db:ae:27:a8:8e:6d:d0:49: 19:14:9d:fd:3b:ba:7f:d0:7f:30:4d:e6:bc:2e:8d: 81:83:3b:ad:0e:0d:4a:32:77:d7:d6:05:7d:9b:0f: dd:f6:ad:c2:65:ec:20:00:01:2d:c6:f9:36:75:02: 65:af:9e:d1:4e:19:4b:fc:7f:7a:7c:92:4d:26:39: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D8:68:FE:96:A1:C8:D4:F2:00:E2:86:2E:46:88:E9:C9:D5:96:76 X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/10E6D9CAB55C11ECA9565039C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.137.220.0/23 IPv6: 2404:b940::/32 Signature Algorithm: sha256WithRSAEncryption c9:55:64:06:8f:4e:a5:f8:cc:f2:c6:c6:f5:39:92:dc:91:52: 3d:29:17:c1:69:74:06:ad:6b:db:4f:49:ac:39:85:a3:0e:c0: ee:c2:ec:b3:16:93:6a:4b:a7:0f:6b:3f:74:e5:d0:69:89:b5: 15:0e:c8:68:0b:89:d4:97:00:16:6c:6a:5a:f6:f2:0d:bc:b6: 8e:f1:fc:e0:d6:4a:31:83:74:41:f3:c0:ec:10:fe:09:36:51: a7:71:26:86:d3:4b:91:62:98:d0:12:ed:c3:78:46:31:f6:04: a6:91:18:2e:66:29:e0:e7:29:27:48:1c:3a:55:a0:b1:08:c9: f4:94:69:6d:36:d2:89:3d:ec:e7:62:13:01:00:52:92:8a:7e: 1a:80:9f:97:59:84:c6:57:e7:d0:77:a1:44:b1:1f:58:57:6c: f5:75:b7:85:d2:cc:3c:19:80:2d:55:9d:7d:a4:27:51:81:c3: 57:5e:a1:4d:25:a5:8a:56:b3:3b:5d:27:98:18:45:68:62:70: 7b:e0:f8:b6:0d:55:9e:3d:bc:d6:79:f1:41:c1:8f:f3:d3:a4: 71:9f:d5:95:00:ba:d3:b5:04:11:e1:90:0a:6d:3e:c1:e4:cc: 57:ac:ec:17:42:15:5c:6c:77:e5:6b:7b:47:f1:f9:11:ed:09: 5b:da:1f:df -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjYwMzE2MTgyMjM5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4NGE2Zi03NWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA28pBV0UCpwdWGnSaLQS/bJ4v6jqDwIADBDoS0/3vHoObfb9eOmyEvs1HdcLd rXQr29oHQNgZ3mEyP1UvZM1HlLWLG6wXSYYQSuwJpbc68yjXn3c2Wh1oE8jNJ3yf uKlqGEiNb2x9Bv/P42xirxfXGhBDEdyXibGirQR6SBXRxoOI0Vcrp5SSVHcEhuHw V8NR3LI1KbcXgzEFNNZD7QnmbYe2OxX6SUny2RyASYVWzgVGeNfIgkww+smM264n qI5t0EkZFJ39O7p/0H8wTea8Lo2BgzutDg1KMnfX1gV9mw/d9q3CZewgAAEtxvk2 dQJlr57RThlL/H96fJJNJjnhywIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFHYaP6W ocjU8gDihi5GiOnJ1ZZ2MB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNEMDQvN0ExN0ZFOEVBREQ5MTFFOUI3NDA5QTcyQzRGOUFFMDIvMTBFNkQ5Q0FC NTVDMTFFQ0E5NTY1MDM5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4ncMA0EAgACMAcDBQAkBLlAMA0GCSqGSIb3DQEBCwUAA4IBAQDJ VWQGj06l+Mzyxsb1OZLckVI9KRfBaXQGrWvbT0msOYWjDsDuwuyzFpNqS6cPaz90 5dBpibUVDshoC4nUlwAWbGpa9vINvLaO8fzg1koxg3RB88DsEP4JNlGncSaG00uR YpjQEu3DeEYx9gSmkRguZing5yknSBw6VaCxCMn0lGltNtKJPeznYhMBAFKSin4a gJ+XWYTGV+fQd6FEsR9YV2z1dbeF0sw8GYAtVZ19pCdRgcNXXqFNJaWKVrM7XSeY GEVoYnB74Pi2DVWePbzWefFBwY/z06Rxn9WVALrTtQQR4ZAKbT7B5MxXrOwXQhVc bHfla3tH8fkR7Qlb2h/f -----END CERTIFICATE-----Generated at Thu Mar 26 05:54:07 2026 by rpki-client