$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/0FD437CAC11811EE8328EF7AC4F9AE02.roa File: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (raw, json) Hash identifier: YLqs8j5I9Oued0rnV/KVHPEdZA2XD39GzEPZsSpw0f4= Subject key identifier: 20:E9:17:22:09:77:31:D5:17:38:5C:BD:DA:3D:77:FA:63:A2:92:81 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0A9B Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/0FD437CAC11811EE8328EF7AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:47:58 +0000 ROA not before: Wed 12 Feb 2025 20:58:33 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 979 IP address blocks: 103.207.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Feb 12 20:58:33 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4519e-ff5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:f4:56:f7:4a:f9:a6:af:ce:dc:de:e1:26: 0d:51:d5:39:9e:32:da:68:fe:62:fb:ec:fc:eb:b2: 61:41:fc:ca:65:63:fa:b0:e2:e2:d7:21:9a:f8:fb: d9:e6:53:67:b9:f9:33:70:87:f8:7b:2e:77:15:ba: 7f:cf:57:ec:84:88:8a:fa:e6:e0:65:17:ca:5b:fd: 8c:56:68:96:24:b8:94:f4:74:f2:93:e1:87:74:6c: 9f:c0:36:d7:0e:f1:f0:3b:a9:de:f1:71:b8:74:b4: 2d:28:c3:96:17:51:e5:88:fd:64:25:19:e2:ce:e5: a6:3a:86:74:cc:48:98:3b:f6:70:1f:90:6a:5c:f3: c1:2f:a0:f7:2a:f8:96:94:8e:2f:78:2d:cb:c7:b6: 02:1f:7d:fe:c7:f4:08:7c:67:ea:77:eb:75:3d:1c: fd:11:f9:3b:c4:c9:60:eb:7f:51:ff:4e:06:d0:48: ba:36:64:4d:1c:bc:a7:5b:c9:28:ba:90:9b:6d:53: e1:94:90:8f:29:83:ec:90:d8:5b:8d:6d:f2:7f:36: eb:8d:3d:0b:71:b4:bd:f4:e6:ac:5e:f9:1a:5b:08: 11:27:5b:3b:01:e6:96:01:5b:e7:fc:4b:d5:c0:cb: 53:65:52:bd:53:35:50:07:93:88:50:59:40:de:c7: 10:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E9:17:22:09:77:31:D5:17:38:5C:BD:DA:3D:77:FA:63:A2:92:81 X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/0FD437CAC11811EE8328EF7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.207.68.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:a5:cc:c2:68:ed:f2:9d:63:97:f3:40:0b:44:42:6b:08:ac: 06:d8:a9:fd:4d:90:3b:de:4c:38:3f:81:2d:e6:b2:e0:92:c0: a0:f3:c4:b4:2b:2f:93:a8:b3:1d:5a:3a:84:72:c8:a7:3f:1e: 36:f7:23:53:b2:1e:08:ef:42:3b:a2:e2:c0:03:ae:19:7b:58: 9f:64:6b:52:ef:ad:2b:c9:7a:4a:ba:19:94:cb:78:36:59:83: 40:49:2a:06:a8:6f:63:85:e1:b2:65:cf:f8:84:da:11:78:7c: 22:70:74:6e:01:0e:9e:23:d4:59:75:ae:48:8e:88:59:68:5a: 4e:f1:f9:08:9f:2d:df:bc:7d:99:82:0e:dd:e8:f8:74:62:25: cc:ec:01:8f:6a:2f:a8:0c:b9:58:75:39:90:58:bc:84:cf:bd: 5d:a6:e7:cf:26:5d:de:a7:8f:6f:be:60:f8:06:8d:00:37:60: 81:ec:f2:3f:7e:00:c0:46:e5:66:4f:fb:2b:e2:83:67:9a:3a: f5:84:54:1f:c5:ac:43:42:69:64:2e:c9:d6:89:8e:60:5c:35: e5:68:aa:a1:52:e0:8a:28:78:9e:d0:8f:b8:a8:a9:78:4b:54: 7f:49:97:84:b0:2a:69:ea:06:93:5c:6b:6d:ec:3b:f4:eb:3d: 6e:5f:0e:7a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUwMjEyMjA1ODMzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTE5ZS1mZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4L0VvdK+aavztze4SYNUdU5njLaaP5i++z867JhQfzKZWP6sOLi1yGa+PvZ 5lNnufkzcIf4ey53Fbp/z1fshIiK+ubgZRfKW/2MVmiWJLiU9HTyk+GHdGyfwDbX DvHwO6ne8XG4dLQtKMOWF1HliP1kJRnizuWmOoZ0zEiYO/ZwH5BqXPPBL6D3KviW lI4veC3Lx7YCH33+x/QIfGfqd+t1PRz9Efk7xMlg639R/04G0Ei6NmRNHLynW8ko upCbbVPhlJCPKYPskNhbjW3yfzbrjT0LcbS99OasXvkaWwgRJ1s7AeaWAVvn/EvV wMtTZVK9UzVQB5OIUFlA3scQAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCDpFyIJ dzHVFzhcvdo9d/pjopKBMB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdFNDUvMDZDODU2M0M4M0Q5MTFFQUEzMTI0RjVDQzRGOUFFMDIvMEZENDM3Q0FD MTE4MTFFRTgzMjhFRjdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ89EMA0GCSqGSIb3DQEBCwUAA4IBAQBspczCaO3ynWOX80ALREJr CKwG2Kn9TZA73kw4P4Et5rLgksCg88S0Ky+TqLMdWjqEcsinPx429yNTsh4I70I7 ouLAA64Ze1ifZGtS760ryXpKuhmUy3g2WYNASSoGqG9jheGyZc/4hNoReHwicHRu AQ6eI9RZda5IjohZaFpO8fkIny3fvH2Zgg7d6Ph0YiXM7AGPai+oDLlYdTmQWLyE z71dpufPJl3ep49vvmD4Bo0AN2CB7PI/fgDARuVmT/sr4oNnmjr1hFQfxaxDQmlk LsnWiY5gXDXlaKqhUuCKKHie0I+4qKl4S1R/SZeEsCpp6gaTXGtt7Dv06z1uXw56 -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:14 2026 by rpki-client