$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa File: E3272FE036B911E99F4D9A5CC4F9AE02.roa (raw, json) Hash identifier: nGZHOo02zqocOQQTpOHHhjFk6Qcj9ucaWzj0iMpauxQ= Subject key identifier: 2C:8E:1E:1C:0F:AB:DC:24:3A:0A:8C:D4:61:3C:22:03:DB:F5:39:71 Certificate issuer: /CN=A91EA944/serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Certificate serial: 10F3 Authority key identifier: 3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:19:00 +0000 ROA not before: Mon 09 Jun 2025 11:28:36 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132129 IP address blocks: 103.134.192.0/22 maxlen: 22 103.134.192.0/24 maxlen: 24 103.134.193.0/24 maxlen: 24 103.134.194.0/24 maxlen: 24 103.134.195.0/24 maxlen: 24 2404:69c0::/32 maxlen: 32 2404:69c0::/33 maxlen: 33 2404:69c0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4339 (0x10f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA944, serialNumber=3B8D3B5184FF5B481B5B0E59B0B229CC06D6091E Validity Not Before: Jun 9 11:28:36 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a40484-8c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:28:40:d6:75:3f:6a:95:73:61:53:17:f0: 60:ab:ce:1b:1c:00:1e:76:2a:b2:6a:61:81:14:0b: a9:86:01:60:7a:ca:27:30:88:f0:5a:38:92:57:3f: e1:11:9a:fa:c8:6d:3f:b1:53:f7:1d:d3:07:60:23: b1:eb:96:0f:53:fe:ad:0c:d7:d0:3d:62:83:85:b8: 92:5e:51:1e:b9:9a:b0:d5:ca:56:d9:3b:67:6a:b0: 87:44:15:7f:cd:d0:91:67:a3:5f:69:24:57:5a:d9: 34:b1:41:70:03:bf:7b:73:bd:a8:96:6d:68:0b:8a: e3:ab:ea:0e:c4:d4:6f:da:7e:6c:d5:e9:6e:86:00: 67:fb:54:dc:c9:67:d2:45:7d:ab:75:27:24:47:c3: 8c:2c:af:d6:6a:1b:b7:2b:46:fc:fa:7a:35:48:1f: be:f3:8b:90:96:4e:4b:a0:36:f6:74:73:2d:4e:57: d9:8a:2e:fb:85:cf:2c:60:93:1e:f5:77:94:a4:7d: 6c:9d:9d:01:86:e5:d1:40:24:ed:18:07:20:88:5d: 5b:ff:75:89:09:ff:06:f7:78:e5:fa:e5:1e:b8:af: 0d:0f:f9:7d:df:1b:b2:9f:dd:8b:96:3b:28:97:99: 81:10:da:54:79:16:82:8a:a7:7b:8d:f8:b0:33:2e: a5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:1E:1C:0F:AB:DC:24:3A:0A:8C:D4:61:3C:22:03:DB:F5:39:71 X509v3 Authority Key Identifier: keyid:3B:8D:3B:51:84:FF:5B:48:1B:5B:0E:59:B0:B2:29:CC:06:D6:09:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/O407UYT_W0gbWw5ZsLIpzAbWCR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O407UYT_W0gbWw5ZsLIpzAbWCR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA944/796C9D7436B911E9984B765CC4F9AE02/E3272FE036B911E99F4D9A5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.192.0/22 IPv6: 2404:69c0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:e9:e0:3f:83:a2:36:f9:de:83:c7:29:0d:e3:8f:bc:a6:02: 8c:75:e2:d1:0b:19:67:29:75:9a:45:e8:6d:25:f9:9b:d1:74: 3f:7f:0d:1e:63:f4:fd:fc:33:4b:85:8a:43:6f:56:4e:40:9e: e1:c1:ae:c1:f1:30:6e:35:f8:37:3f:e4:98:5e:6a:44:a3:45: a0:fc:2c:10:73:5a:b9:ee:fb:5b:7b:47:a9:6b:3f:b0:97:10: 8f:97:80:a6:68:6d:6e:88:fc:43:80:2e:37:e3:ad:77:7a:c7: d4:64:6f:73:71:c1:c6:3a:51:bf:1f:14:39:9d:2d:fc:56:34: 86:a2:3f:38:b4:c2:ee:a6:4e:61:b9:35:46:54:5a:3e:42:14: b5:17:a7:46:83:75:29:89:ed:60:b0:17:6c:2a:f3:cf:89:1d: a4:d5:c7:9f:47:91:66:db:c2:fb:3b:23:98:b5:d9:19:9b:fb: 6d:a0:ba:ea:40:34:cf:98:e1:b0:bb:c6:02:6e:80:41:90:36: 9a:f7:d8:66:59:9e:72:60:d9:85:5b:80:1e:f4:3e:49:30:c3: 55:e0:94:f2:7e:02:9b:37:b8:50:b4:40:1d:7e:78:dc:68:08: 07:11:e3:0c:07:44:c1:ce:f8:8e:37:5c:47:9b:0f:f1:7a:8d: c5:f0:c0:8c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICEPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NDQxMTAvBgNVBAUTKDNCOEQzQjUxODRGRjVCNDgxQjVCMEU1OUIwQjIyOUND MDZENjA5MUUwHhcNMjUwNjA5MTEyODM2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDQ4NC04Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zEoQNZ1P2qVc2FTF/Bgq84bHAAediqyamGBFAuphgFgesonMIjwWjiSVz/h EZr6yG0/sVP3HdMHYCOx65YPU/6tDNfQPWKDhbiSXlEeuZqw1cpW2TtnarCHRBV/ zdCRZ6NfaSRXWtk0sUFwA797c72olm1oC4rjq+oOxNRv2n5s1eluhgBn+1TcyWfS RX2rdSckR8OMLK/Wahu3K0b8+no1SB++84uQlk5LoDb2dHMtTlfZii77hc8sYJMe 9XeUpH1snZ0BhuXRQCTtGAcgiF1b/3WJCf8G93jl+uUeuK8ND/l93xuyn92Lljso l5mBENpUeRaCiqd7jfiwMy6lmQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCyOHhwP q9wkOgqM1GE8IgPb9TlxMB8GA1UdIwQYMBaAFDuNO1GE/1tIG1sOWbCyKcwG1gke MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk0NC83OTZDOUQ3NDM2 QjkxMUU5OTg0Qjc2NUNDNEY5QUUwMi9PNDA3VVlUX1cwZ2JXdzVac0xJcHpBYldD UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL080MDdVWVRfVzBnYld3NVpzTElwekFiV0NSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NDQvNzk2QzlENzQzNkI5MTFFOTk4NEI3NjVDQzRGOUFFMDIvRTMyNzJGRTAz NkI5MTFFOTlGNEQ5QTVDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4bAMA0EAgACMAcDBQAkBGnAMA0GCSqGSIb3DQEBCwUAA4IBAQBK 6eA/g6I2+d6DxykN44+8pgKMdeLRCxlnKXWaRehtJfmb0XQ/fw0eY/T9/DNLhYpD b1ZOQJ7hwa7B8TBuNfg3P+SYXmpEo0Wg/CwQc1q57vtbe0epaz+wlxCPl4CmaG1u iPxDgC434613esfUZG9zccHGOlG/HxQ5nS38VjSGoj84tMLupk5huTVGVFo+QhS1 F6dGg3Upie1gsBdsKvPPiR2k1cefR5Fm28L7OyOYtdkZm/ttoLrqQDTPmOGwu8YC boBBkDaa99hmWZ5yYNmFW4Ae9D5JMMNV4JTyfgKbN7hQtEAdfnjcaAgHEeMMB0TB zviON1xHmw/xeo3F8MCM -----END CERTIFICATE-----Generated at Thu Mar 26 21:33:51 2026 by rpki-client