$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/DE349762DBA311EA8DE35866C4F9AE02.roa File: DE349762DBA311EA8DE35866C4F9AE02.roa (raw, json) Hash identifier: ye2w1MU0xLNOAhuqrYhDu4NrB2vk1m6TjmRZeLmnbh4= Subject key identifier: 4C:23:CC:ED:68:90:E5:91:C1:30:4B:73:D0:D5:24:65:43:3D:8F:68 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 08AB Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/DE349762DBA311EA8DE35866C4F9AE02.roa Signing time: Mon 16 Mar 2026 20:27:04 +0000 ROA not before: Mon 16 Mar 2026 20:27:04 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45572 IP address blocks: 103.107.152.0/24 maxlen: 24 103.107.153.0/24 maxlen: 24 103.107.154.0/24 maxlen: 24 103.107.155.0/24 maxlen: 24 2402:58c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2219 (0x8ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: Mar 16 20:27:04 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b86798-5a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:e3:13:9b:08:1e:a2:83:57:b7:35:e8:6f: 1d:18:07:cc:dc:64:ef:b9:9c:62:b4:cd:91:c2:3a: 82:54:f5:0a:39:f6:41:d4:2d:28:30:c7:80:7c:7a: e6:f9:3d:5c:95:9e:5e:f8:b5:63:3f:44:85:39:fc: e6:2f:c9:1f:e8:33:5f:13:f5:c5:53:8c:a3:e2:1a: c6:a6:2d:9a:b8:3e:94:25:e9:7f:e3:57:cd:d4:55: 0e:5f:f8:1b:8c:27:b6:de:7a:90:2b:26:02:ac:1d: fa:d5:eb:89:8b:df:d2:3a:27:86:4c:e0:86:26:34: 2d:42:ba:be:46:7b:b1:ff:21:42:39:b5:4e:40:f0: cc:24:1f:6e:6a:f6:73:9c:6b:c3:11:ae:2c:1e:47: 6c:cc:9e:8a:d2:8f:1b:1a:b3:b8:68:ff:5a:68:6c: 96:54:5c:cc:55:68:9f:e4:cd:51:73:9d:65:d1:70: 8d:f7:d3:c5:d9:2b:33:0c:e4:0f:f2:b0:00:c0:d0: c0:e3:04:88:bc:bc:b2:7c:4d:61:7f:af:72:fc:9b: 10:2a:a8:66:97:9a:85:0b:7e:28:61:fd:d3:8c:1a: d1:7f:44:8e:8f:6a:eb:de:e8:54:f5:a2:ac:dc:3d: a8:46:a2:35:f7:f6:a9:68:e6:70:c9:2e:16:80:ad: 3f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:23:CC:ED:68:90:E5:91:C1:30:4B:73:D0:D5:24:65:43:3D:8F:68 X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/DE349762DBA311EA8DE35866C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.107.152.0/22 IPv6: 2402:58c0::/32 Signature Algorithm: sha256WithRSAEncryption 07:f8:21:a4:74:53:b3:01:0f:7e:f6:20:de:b9:68:67:51:d9: 0f:0f:35:46:ac:92:65:d0:5b:d0:ce:51:80:b6:92:2f:2a:19: 04:52:8d:80:66:62:f5:3d:f2:4e:57:86:53:a2:37:c5:0a:86: 39:51:93:37:a9:19:b0:87:5b:3f:af:49:af:15:30:06:20:c4: 3e:f2:ff:9d:0a:f7:d3:f9:4b:6e:1f:4e:3d:55:62:a0:59:e5: 95:c9:50:b6:c5:fc:d3:29:27:29:3a:2d:00:7c:57:2c:57:03: bd:ea:c4:ee:49:85:f6:f6:71:c2:31:6b:2d:ee:52:6d:f6:09: ce:ee:65:ed:73:79:f3:c3:ef:98:ac:90:85:5a:36:b9:ef:7f: 30:76:41:82:08:da:2b:9a:b8:01:5f:80:bb:83:40:2b:61:c0: e1:0a:a9:25:75:6f:75:0c:8e:0a:9c:d4:33:54:f3:bd:de:70: 7d:34:c9:ac:fa:6b:01:e7:f7:7a:2c:00:f1:bf:74:82:6c:2a: eb:17:82:02:08:95:54:49:71:87:dd:c7:33:22:a0:67:05:74: f5:c9:98:c1:e3:a0:af:96:71:a6:19:93:fa:df:e7:43:ed:f4: ec:e2:09:1c:2c:a3:72:9b:ac:61:79:d2:1a:98:f9:8d:0c:9c: 29:e2:84:af -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjYwMzE2MjAyNzA0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4Njc5OC01YTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+TjE5sIHqKDV7c16G8dGAfM3GTvuZxitM2RwjqCVPUKOfZB1C0oMMeAfHrm +T1clZ5e+LVjP0SFOfzmL8kf6DNfE/XFU4yj4hrGpi2auD6UJel/41fN1FUOX/gb jCe23nqQKyYCrB361euJi9/SOieGTOCGJjQtQrq+Rnux/yFCObVOQPDMJB9uavZz nGvDEa4sHkdszJ6K0o8bGrO4aP9aaGyWVFzMVWif5M1Rc51l0XCN99PF2SszDOQP 8rAAwNDA4wSIvLyyfE1hf69y/JsQKqhml5qFC34oYf3TjBrRf0SOj2rr3uhU9aKs 3D2oRqI19/apaOZwyS4WgK0/BQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEwjzO1o kOWRwTBLc9DVJGVDPY9oMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdFRDkvRjhFMEIzQjJEQkEyMTFFQUE4OEYyMDY2QzRGOUFFMDIvREUzNDk3NjJE QkEzMTFFQThERTM1ODY2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2uYMA0EAgACMAcDBQAkAljAMA0GCSqGSIb3DQEBCwUAA4IBAQAH +CGkdFOzAQ9+9iDeuWhnUdkPDzVGrJJl0FvQzlGAtpIvKhkEUo2AZmL1PfJOV4ZT ojfFCoY5UZM3qRmwh1s/r0mvFTAGIMQ+8v+dCvfT+UtuH049VWKgWeWVyVC2xfzT KScpOi0AfFcsVwO96sTuSYX29nHCMWst7lJt9gnO7mXtc3nzw++YrJCFWja5738w dkGCCNormrgBX4C7g0ArYcDhCqkldW91DI4KnNQzVPO93nB9NMms+msB5/d6LADx v3SCbCrrF4ICCJVUSXGH3cczIqBnBXT1yZjB46CvlnGmGZP63+dD7fTs4gkcLKNy m6xhedIamPmNDJwp4oSv -----END CERTIFICATE-----Generated at Thu Mar 26 05:58:29 2026 by rpki-client