$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/EE7FBFECF5DA11EAA1976953C4F9AE02.roa File: EE7FBFECF5DA11EAA1976953C4F9AE02.roa (raw, json) Hash identifier: iPjKL2ZgrtC9Tvx6I57sdrTIecoMgsexB7eAngqUnWA= Subject key identifier: 73:FB:3D:3E:60:0A:A8:23:59:45:82:DC:C1:39:0F:C9:45:12:A4:61 Certificate issuer: /CN=A91E82C4/serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Certificate serial: 0871 Authority key identifier: 4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/EE7FBFECF5DA11EAA1976953C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:56:15 +0000 ROA not before: Tue 08 Apr 2025 21:01:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136442 IP address blocks: 103.88.48.0/22 maxlen: 22 103.88.48.0/24 maxlen: 24 103.88.49.0/24 maxlen: 24 103.88.50.0/24 maxlen: 24 103.88.51.0/24 maxlen: 24 203.96.240.0/22 maxlen: 22 203.96.240.0/24 maxlen: 24 203.96.241.0/24 maxlen: 24 203.96.242.0/24 maxlen: 24 203.96.243.0/24 maxlen: 24 2400:de40::/32 maxlen: 32 2400:de40::/48 maxlen: 48 2400:de40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E82C4, serialNumber=4EABD6E05CA0E4A6A815F9B64694B3CF892AF8F4 Validity Not Before: Apr 8 21:01:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4295f-8e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:47:4b:ba:5c:65:4e:7c:d7:9d:27:e4:16:e1: 85:3f:68:f9:92:e3:41:27:dc:b6:3d:11:61:e7:e2: be:7e:9a:cd:03:33:e6:f6:22:dd:23:1b:67:9a:3b: 07:a3:4e:0d:ad:d6:bf:e9:18:c2:73:c7:53:85:b6: 97:b6:a4:c7:26:3d:09:f0:16:72:1a:f4:60:dd:5f: 0c:c0:80:cc:a2:a8:25:cc:c9:89:5b:fc:86:6b:57: 95:d0:2c:80:e3:22:24:e2:d6:ee:6a:cc:81:97:03: 4f:bc:93:b4:d3:3a:01:05:69:d9:f6:95:04:0d:0d: 10:38:fc:c5:bd:57:14:b1:5b:4b:54:78:83:d6:11: 78:cf:20:82:53:19:e2:d3:a0:95:b0:74:f1:b8:6f: 9f:df:a3:67:6c:5b:32:e8:a2:30:76:c5:02:20:1a: eb:cb:a4:c7:f4:c2:79:4a:0e:c9:ef:23:d0:c9:3e: cc:85:a6:0e:6c:81:d5:a9:db:5e:e4:16:0c:6b:e5: d0:b2:45:82:a5:09:ca:22:3c:52:d6:aa:6a:e6:c2: 54:7c:a8:b2:30:be:03:6c:14:f3:59:43:13:58:ee: f9:58:58:f4:15:e7:ba:8e:5c:0b:fb:1c:cd:22:39: cd:ff:da:c2:96:fd:91:e8:b8:64:c4:81:bd:38:6d: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FB:3D:3E:60:0A:A8:23:59:45:82:DC:C1:39:0F:C9:45:12:A4:61 X509v3 Authority Key Identifier: keyid:4E:AB:D6:E0:5C:A0:E4:A6:A8:15:F9:B6:46:94:B3:CF:89:2A:F8:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TqvW4Fyg5KaoFfm2RpSzz4kq-PQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82C4/81F0D54CF5D911EAAEF69D51C4F9AE02/EE7FBFECF5DA11EAA1976953C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.48.0/22 203.96.240.0/22 IPv6: 2400:de40::/32 Signature Algorithm: sha256WithRSAEncryption c1:08:01:19:ef:94:a6:e9:73:37:8b:ef:ac:31:8e:3e:26:a2: 03:3e:bb:bf:9b:4b:cc:8c:42:34:2c:0f:45:ce:c6:af:0f:76: f8:88:9e:ac:e3:70:66:00:9e:87:90:fa:bc:15:60:07:d1:68: 63:8c:7e:9d:14:a8:e8:86:3c:37:9c:94:47:f1:17:1c:3c:93: 29:3c:95:35:79:07:1c:8d:d1:3d:15:46:e7:80:9a:19:14:38: dc:4a:64:02:41:75:1d:a7:0e:4b:43:3e:7e:4b:d8:5b:65:4d: 14:48:4a:6e:8e:a3:9a:b5:99:d4:c5:61:84:6e:7c:d1:88:57: 19:9f:0f:2f:1a:6d:4a:bd:53:28:f6:69:d4:81:97:a4:86:98: 99:97:44:85:99:90:f1:22:b4:2d:db:73:79:cb:93:5b:3c:ec: a2:db:c6:29:79:9a:80:8b:ab:2f:32:b7:7c:31:97:1a:83:42: 57:44:ac:1b:15:19:8c:aa:b9:07:2f:4e:de:69:ae:ee:3a:74: 29:ee:4e:07:3b:d6:29:fc:81:d3:4c:d4:e8:d7:ee:0f:c2:3f: e2:f1:dc:a5:97:7e:76:08:7e:ae:a5:f6:5b:fc:e5:fa:d0:80: 3e:51:fc:30:01:54:e4:c9:3a:52:e2:e3:cc:97:13:53:4f:e3: da:82:5a:7f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgyQzQxMTAvBgNVBAUTKDRFQUJENkUwNUNBMEU0QTZBODE1RjlCNjQ2OTRCM0NG ODkyQUY4RjQwHhcNMjUwNDA4MjEwMTE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjk1Zi04ZTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkdLulxlTnzXnSfkFuGFP2j5kuNBJ9y2PRFh5+K+fprNAzPm9iLdIxtnmjsH o04Nrda/6RjCc8dThbaXtqTHJj0J8BZyGvRg3V8MwIDMoqglzMmJW/yGa1eV0CyA 4yIk4tbuasyBlwNPvJO00zoBBWnZ9pUEDQ0QOPzFvVcUsVtLVHiD1hF4zyCCUxni 06CVsHTxuG+f36NnbFsy6KIwdsUCIBrry6TH9MJ5Sg7J7yPQyT7MhaYObIHVqdte 5BYMa+XQskWCpQnKIjxS1qpq5sJUfKiyML4DbBTzWUMTWO75WFj0Fee6jlwL+xzN IjnN/9rClv2R6LhkxIG9OG3KcwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFHP7PT5g CqgjWUWC3ME5D8lFEqRhMB8GA1UdIwQYMBaAFE6r1uBcoOSmqBX5tkaUs8+JKvj0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODJDNC84MUYwRDU0Q0Y1 RDkxMUVBQUVGNjlENTFDNEY5QUUwMi9UcXZXNEZ5ZzVLYW9GZm0yUnBTeno0a3Et UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Rxdlc0RnlnNUthb0ZmbTJScFN6ejRrcS1QUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgyQzQvODFGMEQ1NENGNUQ5MTFFQUFFRjY5RDUxQzRGOUFFMDIvRUU3RkJGRUNG NURBMTFFQUExOTc2OTUzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ1gwAwQCy2DwMA0EAgACMAcDBQAkAN5AMA0GCSqGSIb3DQEBCwUA A4IBAQDBCAEZ75Sm6XM3i++sMY4+JqIDPru/m0vMjEI0LA9FzsavD3b4iJ6s43Bm AJ6HkPq8FWAH0WhjjH6dFKjohjw3nJRH8RccPJMpPJU1eQccjdE9FUbngJoZFDjc SmQCQXUdpw5LQz5+S9hbZU0USEpujqOatZnUxWGEbnzRiFcZnw8vGm1KvVMo9mnU gZekhpiZl0SFmZDxIrQt23N5y5NbPOyi28YpeZqAi6svMrd8MZcag0JXRKwbFRmM qrkHL07eaa7uOnQp7k4HO9Yp/IHTTNTo1+4Pwj/i8dyll352CH6upfZb/OX60IA+ UfwwAVTkyTpS4uPMlxNTT+Paglp/ -----END CERTIFICATE-----Generated at Thu Mar 26 09:56:18 2026 by rpki-client