$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/7A7A6AC6234311EA90D15227C4F9AE02.roa File: 7A7A6AC6234311EA90D15227C4F9AE02.roa (raw, json) Hash identifier: pOUuDNhh+S+06YvmHHO2sLszLURz3ht9lYFbPAGfK8E= Subject key identifier: 92:33:75:60:C8:7F:34:D9:C2:8E:33:EF:36:17:9E:92:AF:FB:C1:4C Certificate issuer: /CN=A91F9B3A/serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Certificate serial: 177D Authority key identifier: 9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/7A7A6AC6234311EA90D15227C4F9AE02.roa Signing time: Sat 14 Mar 2026 17:20:25 +0000 ROA not before: Sat 14 Mar 2026 17:20:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136168 IP address blocks: 103.82.232.0/24 maxlen: 24 103.96.230.0/23 maxlen: 24 103.96.232.0/24 maxlen: 24 123.253.228.0/22 maxlen: 24 2401:8340::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6013 (0x177d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B3A, serialNumber=9E15BCB9E33AEDEDAC680AC8C9816E115905CA2C Validity Not Before: Mar 14 17:20:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69b598d9-5cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ca:ef:d9:64:1a:a6:b4:55:75:1e:7d:ba:81: db:e7:eb:18:96:6f:07:cc:6b:be:c4:f3:5a:3b:0e: dc:eb:72:73:81:f3:ac:e7:28:2f:c7:bb:77:9d:2a: 14:71:c2:14:7c:ab:41:4b:cf:35:e8:72:1a:88:c6: 9b:bd:39:d5:f1:46:7d:b8:51:4f:7e:28:97:d8:31: fb:6a:d3:0c:5e:38:a4:bb:56:14:7b:8a:3c:c8:05: e1:b2:14:07:31:fe:db:6b:14:f9:43:a4:6b:6b:ee: 6d:ec:e7:8b:9c:e3:f4:f5:fc:81:94:f9:57:ae:e6: bb:fc:1f:11:9c:ce:c9:a0:7c:c8:f2:dd:5d:03:96: 93:31:1c:96:c5:2c:c4:35:7a:58:53:47:36:83:81: a2:96:6d:1b:c6:7d:61:cc:0b:1d:49:8e:bc:92:87: cc:41:78:88:7f:92:59:1f:c8:d7:dd:57:21:eb:02: 61:6d:24:cc:71:11:fe:62:1c:76:93:2f:1f:4c:ff: 5d:43:a2:69:c7:e9:77:97:c7:89:18:4a:70:59:89: 38:1f:27:d0:d6:9f:64:3b:06:17:7d:05:b2:8a:ad: 78:68:e9:e4:bb:93:d1:4a:4d:0f:7f:fd:b8:19:a8: 26:59:d3:d0:fb:08:26:6b:76:df:5a:02:63:fe:07: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:33:75:60:C8:7F:34:D9:C2:8E:33:EF:36:17:9E:92:AF:FB:C1:4C X509v3 Authority Key Identifier: keyid:9E:15:BC:B9:E3:3A:ED:ED:AC:68:0A:C8:C9:81:6E:11:59:05:CA:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/nhW8ueM67e2saArIyYFuEVkFyiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhW8ueM67e2saArIyYFuEVkFyiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B3A/7DEAE734F3A311E7B5D09C71C4F9AE02/7A7A6AC6234311EA90D15227C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.82.232.0/24 103.96.230.0-103.96.232.255 123.253.228.0/22 IPv6: 2401:8340::/32 Signature Algorithm: sha256WithRSAEncryption af:f4:8c:a3:92:d8:60:66:e5:2a:b4:38:0e:3f:87:7f:65:ad: e4:68:b2:c1:a1:4d:fc:23:23:91:b2:a0:4d:f2:9b:09:0b:9c: 6f:67:ea:71:9a:91:68:a5:d2:f0:32:a1:20:77:73:60:6d:be: 4a:3e:62:6a:71:35:c7:7a:4e:ee:2c:15:b0:f8:72:fe:9d:62: 63:45:af:cb:6e:af:90:a9:84:e9:8f:39:90:82:16:ad:80:93: 62:ea:64:a0:9f:9e:fe:1c:01:6b:d3:08:e6:59:fa:2b:61:56: 94:33:97:7a:fe:5e:2e:6b:b2:40:b2:d4:0c:ce:64:59:bd:c7: 64:5d:8b:b4:a9:9b:d3:df:3a:a8:9d:6b:5e:31:62:33:54:44: 43:37:5f:1c:a4:d0:f3:5d:2b:d3:49:cb:2f:9d:16:7e:f1:04: 83:29:7a:2e:32:24:75:36:cf:15:76:02:1e:c0:76:5e:5d:fe: b7:ea:1f:f2:c0:4e:90:34:e1:7a:9e:9d:91:24:f2:b9:ad:d8: e1:73:c0:34:44:69:f2:cb:be:2d:b5:75:29:56:38:1f:3f:c1: 3b:eb:5b:54:9b:ce:41:76:1e:bb:50:c1:5e:17:73:64:63:df: 15:7d:be:fc:4b:73:7b:53:3d:81:c2:11:50:5c:69:57:fa:f9: 95:5d:b7:60 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICF30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCM0ExMTAvBgNVBAUTKDlFMTVCQ0I5RTMzQUVERURBQzY4MEFDOEM5ODE2RTEx NTkwNUNBMkMwHhcNMjYwMzE0MTcyMDI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1OThkOS01Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1crv2WQaprRVdR59uoHb5+sYlm8HzGu+xPNaOw7c63JzgfOs5ygvx7t3nSoU ccIUfKtBS8816HIaiMabvTnV8UZ9uFFPfiiX2DH7atMMXjiku1YUe4o8yAXhshQH Mf7baxT5Q6Rra+5t7OeLnOP09fyBlPlXrua7/B8RnM7JoHzI8t1dA5aTMRyWxSzE NXpYU0c2g4Gilm0bxn1hzAsdSY68kofMQXiIf5JZH8jX3Vch6wJhbSTMcRH+Yhx2 ky8fTP9dQ6Jpx+l3l8eJGEpwWYk4HyfQ1p9kOwYXfQWyiq14aOnku5PRSk0Pf/24 GagmWdPQ+wgma3bfWgJj/gceCwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFJIzdWDI fzTZwo4z7zYXnpKv+8FMMB8GA1UdIwQYMBaAFJ4VvLnjOu3trGgKyMmBbhFZBcos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUIzQS83REVBRTczNEYz QTMxMUU3QjVEMDlDNzFDNEY5QUUwMi9uaFc4dWVNNjdlMnNhQXJJeVlGdUVWa0Z5 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25oVzh1ZU02N2Uyc2FBckl5WUZ1RVZrRnlpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlCM0EvN0RFQUU3MzRGM0EzMTFFN0I1RDA5QzcxQzRGOUFFMDIvN0E3QTZBQzYy MzQzMTFFQTkwRDE1MjI3QzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAg BAIAATAaAwQAZ1LoMAwDBAFnYOYDBABnYOgDBAJ7/eQwDQQCAAIwBwMFACQBg0Aw DQYJKoZIhvcNAQELBQADggEBAK/0jKOS2GBm5Sq0OA4/h39lreRossGhTfwjI5Gy oE3ymwkLnG9n6nGakWil0vAyoSB3c2Btvko+YmpxNcd6Tu4sFbD4cv6dYmNFr8tu r5CphOmPOZCCFq2Ak2LqZKCfnv4cAWvTCOZZ+ithVpQzl3r+Xi5rskCy1AzOZFm9 x2Rdi7Spm9PfOqida14xYjNUREM3Xxyk0PNdK9NJyy+dFn7xBIMpei4yJHU2zxV2 Ah7Adl5d/rfqH/LATpA04XqenZEk8rmt2OFzwDREafLLvi21dSlWOB8/wTvrW1Sb zkF2HrtQwV4Xc2Rj3xV9vvxLc3tTPYHCEVBcaVf6+ZVdt2A= -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:47 2026 by rpki-client