$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/C7C714A2B19D11F0AB4AC87EC4F9AE02.roa File: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (raw, json) Hash identifier: D6VPmXFDc+G5ZgUvGAmbcPnFMvgmVskOcccS3cS1IpY= Subject key identifier: A1:20:AF:A0:2B:D6:DF:E2:0E:EC:C8:E7:2F:24:CE:04:3E:D5:8B:83 Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0401 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/C7C714A2B19D11F0AB4AC87EC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:10:09 +0000 ROA not before: Sat 25 Oct 2025 12:26:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137034 IP address blocks: 103.102.204.0/22 maxlen: 22 103.102.204.0/24 maxlen: 24 103.102.205.0/24 maxlen: 24 103.102.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1025 (0x401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Oct 25 12:26:08 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a464e0-99eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:da:0e:c8:da:1a:f6:fd:dc:0c:ea:68:bb: e7:78:f0:fd:7a:81:71:75:11:42:01:8f:1e:d8:9e: af:e1:49:c3:38:49:a9:b3:a2:73:b5:ff:11:7d:ed: a0:23:6d:64:a3:da:38:e7:06:e8:63:3b:b0:15:70: 1b:64:9e:81:6c:ff:9b:6f:55:c7:b2:f6:06:d6:39: a3:9d:9b:e9:1f:f3:89:7e:bf:3a:4c:98:88:8a:4f: 0d:bf:54:3c:64:51:ad:7e:c1:3c:78:21:b0:8c:51: 34:ba:9d:48:c7:3d:0d:80:27:b3:74:22:fe:64:ab: c1:66:fe:d6:54:c7:8e:f3:5a:a3:b0:12:28:5f:3f: 3a:9d:ae:65:bd:40:5f:df:e7:b5:de:3f:10:ac:53: 86:ce:8d:b5:d9:9e:4f:80:db:90:a6:bf:e9:41:04: 20:63:30:6c:0d:b9:73:ad:a1:de:b8:67:7e:9f:73: cf:39:a4:72:eb:d7:f2:66:a8:49:e7:be:66:ec:6b: 4e:48:40:c6:16:97:40:83:1f:02:f8:c4:24:b2:8b: 74:e2:46:1e:ea:21:87:95:bf:53:55:4c:f2:ec:8f: 74:b6:8a:57:48:71:ab:d7:60:b6:87:e3:54:5d:03: ba:dd:51:7e:24:bd:58:55:92:dd:1a:d8:fe:6b:15: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:20:AF:A0:2B:D6:DF:E2:0E:EC:C8:E7:2F:24:CE:04:3E:D5:8B:83 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/C7C714A2B19D11F0AB4AC87EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.102.204.0/22 Signature Algorithm: sha256WithRSAEncryption 47:4d:6f:fc:be:86:e8:33:f7:00:40:44:f9:a6:27:aa:22:23: 6a:1d:d4:89:bb:38:47:ed:1d:ac:42:21:de:15:3a:2b:2f:c2: db:55:cd:43:46:dd:3a:0f:5c:77:78:45:45:83:1e:18:1a:5f: 9f:ee:ea:85:21:22:58:0f:99:34:27:ec:4e:7b:86:19:59:cb: f7:b0:4a:79:1e:0f:19:5c:13:28:c3:84:5c:58:ee:60:5c:34: 08:ce:4e:34:1e:35:d9:2e:50:91:64:75:82:49:29:86:76:08: 1b:9a:f3:c9:8f:ba:d1:15:9b:a5:87:e9:d0:9a:34:f2:a6:b6: d8:8a:d4:61:a9:2a:1c:cd:72:a9:83:2d:17:4b:8b:df:13:68: 2a:5a:fe:36:f0:96:08:55:0c:13:c9:91:b5:6d:23:42:ef:10: fe:a3:e7:52:c2:35:68:d6:54:71:de:45:bb:2e:b1:ab:f6:06: 38:51:b5:c6:21:a7:0a:0e:61:21:ea:a5:c4:9a:20:18:b2:d2: 24:b9:aa:c7:fd:e5:cd:e3:e5:7a:48:10:aa:b4:ce:00:61:31: 5c:80:4e:6a:f7:35:da:d7:77:b9:ea:72:9b:c0:e1:e3:2b:d6: 19:c0:df:5b:98:51:d6:4f:de:4e:1e:3b:c0:3c:92:3c:68:5c: d4:c2:b1:82 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUxMDI1MTIyNjA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjRlMC05OWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotXaDsjaGvb93AzqaLvnePD9eoFxdRFCAY8e2J6v4UnDOEmps6Jztf8Rfe2g I21ko9o45wboYzuwFXAbZJ6BbP+bb1XHsvYG1jmjnZvpH/OJfr86TJiIik8Nv1Q8 ZFGtfsE8eCGwjFE0up1Ixz0NgCezdCL+ZKvBZv7WVMeO81qjsBIoXz86na5lvUBf 3+e13j8QrFOGzo212Z5PgNuQpr/pQQQgYzBsDblzraHeuGd+n3PPOaRy69fyZqhJ 575m7GtOSEDGFpdAgx8C+MQksot04kYe6iGHlb9TVUzy7I90topXSHGr12C2h+NU XQO63VF+JL1YVZLdGtj+axWCQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKEgr6Ar 1t/iDuzI5y8kzgQ+1YuDMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYwMzgvOTFFMEM4NTJBRkZDMTFFQ0IwQzM4ODVEQzRGOUFFMDIvQzdDNzE0QTJC MTlEMTFGMEFCNEFDODdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2bMMA0GCSqGSIb3DQEBCwUAA4IBAQBHTW/8voboM/cAQET5pieq IiNqHdSJuzhH7R2sQiHeFTorL8LbVc1DRt06D1x3eEVFgx4YGl+f7uqFISJYD5k0 J+xOe4YZWcv3sEp5Hg8ZXBMow4RcWO5gXDQIzk40HjXZLlCRZHWCSSmGdggbmvPJ j7rRFZulh+nQmjTyprbYitRhqSoczXKpgy0XS4vfE2gqWv428JYIVQwTyZG1bSNC 7xD+o+dSwjVo1lRx3kW7LrGr9gY4UbXGIacKDmEh6qXEmiAYstIkuarH/eXN4+V6 SBCqtM4AYTFcgE5q9zXa13e56nKbwOHjK9YZwN9bmFHWT95OHjvAPJI8aFzUwrGC -----END CERTIFICATE-----Generated at Thu Mar 26 15:57:54 2026 by rpki-client