$ rpki-client -vvf rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa File: 7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa (raw, json) Hash identifier: EIvm3xLw4Nyp5EuKey6WkJaoQc2wgEjOvCaL4fAv+m8= Subject key identifier: 02:0D:C2:A9:D8:FD:4B:A2:2B:14:89:20:9C:2D:7D:D7:86:B0:95:7A Certificate issuer: /CN=A91E81A5/serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Certificate serial: 023C Authority key identifier: 30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:05:39 +0000 ROA not before: Fri 11 Jul 2025 03:39:34 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133616 IP address blocks: 103.238.195.0/24 maxlen: 24 2001:df3:4300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E81A5, serialNumber=3034DEF04D9A03EE22898924E31264C01DE00303 Validity Not Before: Jul 11 03:39:34 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a51aa3-6f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:f7:6e:bb:80:25:fb:97:df:cc:2e:5d:fa: 70:71:7d:ac:91:44:51:0f:40:e3:bb:6f:c1:19:39: 3c:8e:52:29:ee:ee:0e:76:2b:5e:2b:f0:f2:7b:6e: 3d:e5:e1:ba:1f:7b:79:bb:97:29:ab:1f:ad:1a:1c: 6d:bd:bf:37:47:8a:7e:7f:63:7e:62:2a:b2:7c:66: a3:41:aa:94:51:ff:a2:aa:d4:e8:2b:d2:21:a4:51: fa:84:da:0f:b6:43:fc:36:a4:40:75:f3:44:32:e4: bd:38:8e:ba:d3:7e:f2:1e:04:98:29:db:f4:59:fc: e7:8e:9b:4e:4f:eb:79:78:af:9c:f6:c6:14:85:a4: 0a:80:02:6b:df:39:54:7b:7c:55:54:f8:5d:86:c3: 0a:80:08:1e:7e:3c:d6:20:b0:c2:25:6e:93:6e:6e: de:f1:39:8c:1b:0d:16:81:53:38:c1:5c:60:d2:f4: bd:e7:27:a7:6e:19:1b:b0:e3:42:4e:23:07:36:08: d8:fe:46:45:97:ad:2d:7c:90:c7:14:1d:e1:4c:ea: 92:f1:34:aa:2c:3a:de:ce:e6:93:48:f5:0c:1a:19: e4:87:5f:c7:55:0c:28:5d:ed:c4:f5:e6:f9:01:09: 6e:7a:3f:20:c0:da:ba:47:71:9e:2f:fa:75:6f:85: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:C2:A9:D8:FD:4B:A2:2B:14:89:20:9C:2D:7D:D7:86:B0:95:7A X509v3 Authority Key Identifier: keyid:30:34:DE:F0:4D:9A:03:EE:22:89:89:24:E3:12:64:C0:1D:E0:03:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/MDTe8E2aA-4iiYkk4xJkwB3gAwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDTe8E2aA-4iiYkk4xJkwB3gAwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E81A5/C15843B4CA0711ED8F9E2A70C4F9AE02/7BD5A1FCCA0B11ED8B414F75C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.238.195.0/24 IPv6: 2001:df3:4300::/48 Signature Algorithm: sha256WithRSAEncryption 25:52:3d:84:27:1d:fd:f4:30:8f:1f:64:14:bf:21:54:9f:4d: 6e:0d:09:3c:bb:7b:bd:5b:af:19:f1:c3:d7:7c:f6:b0:49:72: 64:26:59:58:9a:b6:36:e0:9d:df:cb:97:81:e0:11:7b:2a:21: 65:97:79:57:96:01:08:d8:91:71:a5:dc:1e:bc:6c:33:80:08: 8a:a6:dc:df:16:89:3d:81:40:7b:86:ae:71:0f:a2:22:96:72: 08:2b:0d:a0:aa:9c:bd:b4:14:48:1e:ae:61:35:69:4d:67:5d: b6:2a:16:6e:98:84:e4:67:03:05:af:aa:76:35:2e:25:e4:15: 4a:f2:d1:60:ab:51:ce:d7:5c:e5:0f:2d:40:bb:2e:e8:87:d1: 24:73:86:d1:43:d9:dc:2b:3d:19:16:2a:19:c9:cf:cf:af:e9: ec:0c:8f:47:97:50:5e:53:53:65:a9:b1:2d:0c:b9:20:e1:68: a6:5e:18:69:8e:b1:7d:9a:74:ba:07:de:7e:16:cb:be:0a:ea: e0:b0:af:91:d3:09:6b:f4:e1:fe:60:de:97:32:6f:fd:c1:fb: 31:3b:dc:a1:a0:1f:41:26:9c:99:ff:a1:05:62:2d:f3:e2:52: c9:72:b3:d1:5e:f8:11:fc:d6:7c:a9:41:c3:18:a6:5a:fc:0d: cf:bc:c3:21 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxQTUxMTAvBgNVBAUTKDMwMzRERUYwNEQ5QTAzRUUyMjg5ODkyNEUzMTI2NEMw MURFMDAzMDMwHhcNMjUwNzExMDMzOTM0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWFhMy02ZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtD73bruAJfuX38wuXfpwcX2skURRD0Dju2/BGTk8jlIp7u4OditeK/Dye249 5eG6H3t5u5cpqx+tGhxtvb83R4p+f2N+YiqyfGajQaqUUf+iqtToK9IhpFH6hNoP tkP8NqRAdfNEMuS9OI66037yHgSYKdv0WfznjptOT+t5eK+c9sYUhaQKgAJr3zlU e3xVVPhdhsMKgAgefjzWILDCJW6Tbm7e8TmMGw0WgVM4wVxg0vS95yenbhkbsONC TiMHNgjY/kZFl60tfJDHFB3hTOqS8TSqLDrezuaTSPUMGhnkh1/HVQwoXe3E9eb5 AQluej8gwNq6R3GeL/p1b4Vg4QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAINwqnY /UuiKxSJIJwtfdeGsJV6MB8GA1UdIwQYMBaAFDA03vBNmgPuIomJJOMSZMAd4AMD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODFBNS9DMTU4NDNCNENB MDcxMUVEOEY5RTJBNzBDNEY5QUUwMi9NRFRlOEUyYUEtNGlpWWtrNHhKa3dCM2dB d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EVGU4RTJhQS00aWlZa2s0eEprd0IzZ0F3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgxQTUvQzE1ODQzQjRDQTA3MTFFRDhGOUUyQTcwQzRGOUFFMDIvN0JENUExRkND QTBCMTFFRDhCNDE0Rjc1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ+7DMA8EAgACMAkDBwAgAQ3zQwAwDQYJKoZIhvcNAQELBQADggEB ACVSPYQnHf30MI8fZBS/IVSfTW4NCTy7e71brxnxw9d89rBJcmQmWViatjbgnd/L l4HgEXsqIWWXeVeWAQjYkXGl3B68bDOACIqm3N8WiT2BQHuGrnEPoiKWcggrDaCq nL20FEgermE1aU1nXbYqFm6YhORnAwWvqnY1LiXkFUry0WCrUc7XXOUPLUC7LuiH 0SRzhtFD2dwrPRkWKhnJz8+v6ewMj0eXUF5TU2WpsS0MuSDhaKZeGGmOsX2adLoH 3n4Wy74K6uCwr5HTCWv04f5g3pcyb/3B+zE73KGgH0EmnJn/oQViLfPiUslys9Fe +BH81nypQcMYplr8Dc+8wyE= -----END CERTIFICATE-----Generated at Sat Mar 28 14:50:54 2026 by rpki-client