$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/FAF4A0E0FB3211EB967B1759C4F9AE02.roa File: FAF4A0E0FB3211EB967B1759C4F9AE02.roa (raw, json) Hash identifier: tMsJF1RkyUwJRBsH0zT5DwcSG9DDZ6NHm8vuVOU4VKc= Subject key identifier: F7:C9:4F:97:BE:02:37:BF:C2:CE:4D:DD:D6:14:5E:5D:7E:C2:37:70 Certificate issuer: /CN=A91E7E94/serialNumber=5201A89D30C48299450418C956B877249706E957 Certificate serial: 05D0 Authority key identifier: 52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/FAF4A0E0FB3211EB967B1759C4F9AE02.roa Signing time: Mon 02 Mar 2026 04:55:34 +0000 ROA not before: Sun 10 Aug 2025 23:36:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 142633 IP address blocks: 103.171.138.0/23 maxlen: 23 103.171.138.0/24 maxlen: 24 103.171.139.0/24 maxlen: 24 2001:df7:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:44:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E94, serialNumber=5201A89D30C48299450418C956B877249706E957 Validity Not Before: Aug 10 23:36:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a51846-b46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:90:dc:dd:bf:b6:2c:79:79:c3:06:16:a2: e1:d9:aa:84:74:51:bc:c1:27:49:df:81:9b:db:40: e8:a4:67:a2:d7:e4:18:85:50:00:5c:d0:04:70:d0: b9:4b:b2:83:4c:0f:f1:d3:5a:35:63:7d:7f:0c:1e: 7a:16:f1:42:e3:8c:14:ac:d5:f1:fc:ec:c7:e1:59: 0e:a2:99:4e:cb:e1:fe:b2:15:ea:75:f2:64:19:df: 02:aa:3e:3b:9e:fa:e8:b2:11:bb:0e:ec:36:64:2b: 6a:80:6b:2f:87:01:1f:6b:08:35:89:27:b1:d8:fb: 2f:26:f9:04:df:53:cf:9a:ee:4c:51:c5:f3:84:1f: 0f:35:b7:7b:be:4f:e9:97:21:b7:1c:a3:a4:7c:9b: 67:22:4c:70:ee:01:4a:a3:46:ce:5c:85:33:91:f8: 6b:a7:5d:ba:43:9a:9c:5f:cf:50:fa:d7:47:29:d2: 67:ff:d5:1b:dc:a9:aa:1e:5b:ce:2d:e4:86:3e:3b: 6d:a3:ae:08:47:83:f4:bf:8c:e3:06:a8:c1:05:47: 2d:2b:5b:ec:49:5d:51:f4:01:7c:df:0b:47:8b:23: 57:1c:ba:78:84:58:2e:fd:df:fa:41:e0:22:05:77: 57:f7:45:94:f6:4d:43:25:1e:fe:fe:bb:4c:1a:e7: 2a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C9:4F:97:BE:02:37:BF:C2:CE:4D:DD:D6:14:5E:5D:7E:C2:37:70 X509v3 Authority Key Identifier: keyid:52:01:A8:9D:30:C4:82:99:45:04:18:C9:56:B8:77:24:97:06:E9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/UgGonTDEgplFBBjJVrh3JJcG6Vc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UgGonTDEgplFBBjJVrh3JJcG6Vc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E94/A2A70C5AFB2F11EBA8409E54C4F9AE02/FAF4A0E0FB3211EB967B1759C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.171.138.0/23 IPv6: 2001:df7:4880::/48 Signature Algorithm: sha256WithRSAEncryption 33:dd:af:97:a0:68:8c:fe:74:62:d2:00:87:c0:e1:c8:ff:11: 3b:ed:a0:21:84:c7:40:93:28:69:a8:86:6c:d7:29:dc:1f:c5: 33:db:b5:99:0e:59:cc:d5:02:39:bc:6b:32:14:90:e6:4a:6f: 74:a0:b8:cf:de:ba:af:77:c0:a3:cf:75:6b:29:65:8a:09:54: 3d:0e:32:9e:c2:ee:1a:ab:03:87:21:bf:5a:79:3e:d8:ff:d7: bb:00:01:e3:ff:33:2d:01:0b:a7:b0:65:6a:bb:0d:f5:45:46: 87:50:3f:2c:b5:94:13:34:d1:5c:ba:8f:47:30:05:5b:86:70: 60:83:1b:58:ae:a7:8f:76:ce:70:fa:d6:e9:9e:db:a9:a1:30: 88:ab:4a:8a:49:79:7a:b0:b6:37:7a:95:da:7d:60:63:34:48: d3:a8:4a:68:74:0e:99:5b:03:e3:cc:63:e7:d4:a6:fb:57:b5: cd:01:b8:44:6f:79:a5:d1:3a:43:88:36:b0:a5:1f:49:63:24: a5:f3:19:f6:a6:6c:3e:6e:17:5f:a8:47:ec:43:74:26:33:75: dc:07:c6:42:f4:e2:db:9e:16:b5:c3:42:38:86:72:6f:a4:4b: 9c:77:4c:50:ac:c1:46:95:a6:20:e0:d6:69:d9:96:53:86:34: 43:93:2b:ec -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFOTQxMTAvBgNVBAUTKDUyMDFBODlEMzBDNDgyOTk0NTA0MThDOTU2Qjg3NzI0 OTcwNkU5NTcwHhcNMjUwODEwMjMzNjAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MTg0Ni1iNDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkdWQ3N2/tix5ecMGFqLh2aqEdFG8wSdJ34Gb20DopGei1+QYhVAAXNAEcNC5 S7KDTA/x01o1Y31/DB56FvFC44wUrNXx/OzH4VkOoplOy+H+shXqdfJkGd8Cqj47 nvroshG7Duw2ZCtqgGsvhwEfawg1iSex2PsvJvkE31PPmu5MUcXzhB8PNbd7vk/p lyG3HKOkfJtnIkxw7gFKo0bOXIUzkfhrp126Q5qcX89Q+tdHKdJn/9Ub3KmqHlvO LeSGPjtto64IR4P0v4zjBqjBBUctK1vsSV1R9AF83wtHiyNXHLp4hFgu/d/6QeAi BXdX90WU9k1DJR7+/rtMGucqdQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPfJT5e+ Aje/ws5N3dYUXl1+wjdwMB8GA1UdIwQYMBaAFFIBqJ0wxIKZRQQYyVa4dySXBulX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U5NC9BMkE3MEM1QUZC MkYxMUVCQTg0MDlFNTRDNEY5QUUwMi9VZ0dvblRERWdwbEZCQmpKVnJoM0pKY0c2 VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VnR29uVERFZ3BsRkJCakpWcmgzSkpjRzZWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdFOTQvQTJBNzBDNUFGQjJGMTFFQkE4NDA5RTU0QzRGOUFFMDIvRkFGNEEwRTBG QjMyMTFFQjk2N0IxNzU5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6uKMA8EAgACMAkDBwAgAQ33SIAwDQYJKoZIhvcNAQELBQADggEB ADPdr5egaIz+dGLSAIfA4cj/ETvtoCGEx0CTKGmohmzXKdwfxTPbtZkOWczVAjm8 azIUkOZKb3SguM/euq93wKPPdWspZYoJVD0OMp7C7hqrA4chv1p5Ptj/17sAAeP/ My0BC6ewZWq7DfVFRodQPyy1lBM00Vy6j0cwBVuGcGCDG1iup492znD61ume26mh MIirSopJeXqwtjd6ldp9YGM0SNOoSmh0DplbA+PMY+fUpvtXtc0BuERveaXROkOI NrClH0ljJKXzGfambD5uF1+oR+xDdCYzddwHxkL04tueFrXDQjiGcm+kS5x3TFCs wUaVpiDg1mnZllOGNEOTK+w= -----END CERTIFICATE-----Generated at Thu Mar 26 06:12:44 2026 by rpki-client