$ rpki-client -vvf rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa File: 2CA96408FD8811EF9404CD48C4F9AE02.roa (raw, json) Hash identifier: PnwNaR1SVFoENtFPjMJaNKhHPBGjaXUnT//OihOuasU= Subject key identifier: F5:62:BF:DF:CE:A8:9F:89:BD:FA:0D:09:84:51:69:B1:EA:76:E3:40 Certificate issuer: /CN=A91F54CD/serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Certificate serial: BB Authority key identifier: E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:31:55 +0000 ROA not before: Mon 10 Mar 2025 08:21:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153681 IP address blocks: 163.223.60.0/23 maxlen: 24 2001:df5:3440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 06:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F54CD, serialNumber=E163F0FE54F179AF4C6C097098FEFBE2D4385B19 Validity Not Before: Mar 10 08:21:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5914b-4c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:22:c4:45:b1:70:cf:2a:2d:8d:e8:ff:4c: 4b:70:90:fd:69:0a:af:04:f4:08:f6:96:2e:24:45: 03:f2:14:3a:b9:3c:da:79:06:df:cc:17:aa:e7:a1: a2:d3:91:95:02:9b:bb:42:a0:b7:99:f6:70:ad:62: 59:94:ac:aa:43:47:81:14:f9:77:b0:15:fa:dc:d6: 73:8a:b6:5d:07:ab:c8:17:f1:a0:f6:c5:a2:61:51: 34:67:e8:d0:6f:0e:d9:51:a1:39:a1:23:88:03:48: 11:69:d6:d8:44:6d:04:2d:ac:f6:04:dd:60:2b:e0: c7:dc:91:91:12:2e:81:99:5e:8e:04:49:8f:c4:ad: e3:83:f7:c9:eb:04:df:4e:11:b9:95:67:20:de:7d: 97:bd:64:12:27:c1:8c:ca:42:2f:a6:91:ca:74:b2: 76:8a:12:2d:33:e8:fb:d5:18:8d:1a:6b:d1:d7:5c: 58:06:e5:ca:0c:dc:1d:76:b3:33:a4:b1:78:d7:70: 8e:d1:0d:5b:51:70:aa:43:1f:a5:37:76:1e:2e:a4: e9:2c:4b:bd:06:9c:89:2c:d2:ee:89:d9:19:87:f9: b2:bf:ca:f8:58:09:c4:6f:be:c7:42:7a:4f:0f:61: ca:69:ad:f7:49:53:47:d7:63:d7:58:32:81:3e:a6: dc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:62:BF:DF:CE:A8:9F:89:BD:FA:0D:09:84:51:69:B1:EA:76:E3:40 X509v3 Authority Key Identifier: keyid:E1:63:F0:FE:54:F1:79:AF:4C:6C:09:70:98:FE:FB:E2:D4:38:5B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/4WPw_lTxea9MbAlwmP774tQ4Wxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4WPw_lTxea9MbAlwmP774tQ4Wxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F54CD/D2E2CA7CFD8711EFB6624A28C4F9AE02/2CA96408FD8811EF9404CD48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.223.60.0/23 IPv6: 2001:df5:3440::/48 Signature Algorithm: sha256WithRSAEncryption 34:ab:03:cc:55:bf:83:8a:37:d0:45:f2:18:e8:84:87:22:c9: d4:cc:2b:15:7a:7f:a2:2e:da:29:e6:4c:5e:af:80:06:b6:06: 1e:e2:a8:a0:9b:e1:c4:20:ee:1c:34:f5:a1:5f:19:54:bd:96: 4a:68:c1:80:3c:6c:f6:9f:84:e1:76:08:d8:15:aa:c4:4e:41: c1:4e:21:b5:09:46:70:a7:27:8e:57:b9:0d:59:87:1c:dd:cf: d9:b3:5c:75:d6:9c:f2:32:dc:14:a3:31:54:b3:55:2f:9f:9e: 9b:8e:8b:8c:22:fb:28:2f:0f:48:e4:28:95:59:07:6f:1b:63: 36:76:06:35:7f:ad:aa:46:5d:07:71:1d:35:41:30:9e:d3:33: 7d:1d:fb:63:42:f8:c1:53:94:dc:b0:eb:58:3c:fe:a1:ea:55: 0a:51:db:ad:38:db:68:5b:62:54:58:29:32:67:0e:22:6d:30: 83:e2:f7:44:fa:59:35:99:19:b7:db:61:ed:c4:d4:b4:ad:ec: 35:1b:af:1d:ef:91:33:e0:22:43:87:af:e1:a1:43:b1:ab:8b: ca:20:cf:03:42:ee:af:93:d1:68:21:b4:81:e8:3b:6b:5d:b7: ec:51:e0:99:9f:b7:2d:2a:a6:d7:59:af:b6:97:d2:51:b1:3a: 06:fd:bb:5f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU0Q0QxMTAvBgNVBAUTKEUxNjNGMEZFNTRGMTc5QUY0QzZDMDk3MDk4RkVGQkUy RDQzODVCMTkwHhcNMjUwMzEwMDgyMTA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTE0Yi00YzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+EixEWxcM8qLY3o/0xLcJD9aQqvBPQI9pYuJEUD8hQ6uTzaeQbfzBeq56Gi 05GVApu7QqC3mfZwrWJZlKyqQ0eBFPl3sBX63NZzirZdB6vIF/Gg9sWiYVE0Z+jQ bw7ZUaE5oSOIA0gRadbYRG0ELaz2BN1gK+DH3JGREi6BmV6OBEmPxK3jg/fJ6wTf ThG5lWcg3n2XvWQSJ8GMykIvppHKdLJ2ihItM+j71RiNGmvR11xYBuXKDNwddrMz pLF413CO0Q1bUXCqQx+lN3YeLqTpLEu9BpyJLNLuidkZh/myv8r4WAnEb77HQnpP D2HKaa33SVNH12PXWDKBPqbcmQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPViv9/O qJ+JvfoNCYRRabHqduNAMB8GA1UdIwQYMBaAFOFj8P5U8XmvTGwJcJj+++LUOFsZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTRDRC9EMkUyQ0E3Q0ZE ODcxMUVGQjY2MjRBMjhDNEY5QUUwMi80V1B3X2xUeGVhOU1iQWx3bVA3NzR0UTRX eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRXUHdfbFR4ZWE5TWJBbHdtUDc3NHRRNFd4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU0Q0QvRDJFMkNBN0NGRDg3MTFFRkI2NjI0QTI4QzRGOUFFMDIvMkNBOTY0MDhG RDg4MTFFRjk0MDRDRDQ4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBo988MA8EAgACMAkDBwAgAQ31NEAwDQYJKoZIhvcNAQELBQADggEB ADSrA8xVv4OKN9BF8hjohIciydTMKxV6f6Iu2inmTF6vgAa2Bh7iqKCb4cQg7hw0 9aFfGVS9lkpowYA8bPafhOF2CNgVqsROQcFOIbUJRnCnJ45XuQ1Zhxzdz9mzXHXW nPIy3BSjMVSzVS+fnpuOi4wi+ygvD0jkKJVZB28bYzZ2BjV/rapGXQdxHTVBMJ7T M30d+2NC+MFTlNyw61g8/qHqVQpR260422hbYlRYKTJnDiJtMIPi90T6WTWZGbfb Ye3E1LSt7DUbrx3vkTPgIkOHr+GhQ7Gri8ogzwNC7q+T0WghtIHoO2tdt+xR4Jmf ty0qptdZr7aX0lGxOgb9u18= -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:51 2026 by rpki-client