$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa File: CE1A524210DD11EDBC7EA35FC4F9AE02.roa (raw, json) Hash identifier: /vT4MYU/3jKkJcjNaNb1mfWNyyHR7KkpU4ZY/TkRULE= Subject key identifier: 28:6F:37:93:4F:52:DD:57:5C:57:83:E5:4D:0A:3F:FF:9C:79:86:C6 Certificate issuer: /CN=A91FA8E8/serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Certificate serial: 0312 Authority key identifier: 8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:27:35 +0000 ROA not before: Sun 07 Sep 2025 02:08:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150129 IP address blocks: 103.154.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA8E8, serialNumber=8DA19FCE0EFAE022BBA8F8E0C1237BEDBEBE3EF3 Validity Not Before: Sep 7 02:08:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44cd7-4744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:27:d5:49:d6:01:91:00:65:d9:39:9a:9a: be:aa:89:21:56:ca:e9:0f:4a:f9:5e:7c:83:d9:77: 10:26:76:45:56:31:e6:de:2d:0d:9a:9e:81:11:d5: f9:b0:58:05:4a:0b:39:a2:c2:88:bf:9e:5e:c3:40: 35:bf:8a:72:ca:83:c8:81:08:d5:8c:f3:1c:68:38: e1:48:1c:7c:cf:87:0e:60:02:97:41:a0:2d:ba:65: 6f:8d:f0:24:fa:d2:a3:77:91:65:d2:63:1a:c0:22: 50:4b:58:2d:57:3a:c3:c0:cd:90:12:8f:8d:f7:37: ba:01:28:fb:59:df:d4:24:d7:fa:c4:8c:5e:00:46: 56:6f:5f:57:c7:2a:bb:e3:07:f8:65:33:f2:a4:b4: 38:e2:da:29:85:85:6c:aa:70:35:dc:45:78:3e:9f: 1b:c2:e3:6e:46:17:88:33:41:c4:9c:61:cd:2b:4d: 78:ac:8d:ab:7e:54:05:dc:0d:fe:3b:4b:8a:39:9d: e8:69:e9:b1:c6:10:b6:82:84:7b:33:b5:a9:5e:2c: f6:9e:1e:d3:ae:29:9e:f6:3c:6c:87:ae:66:04:b7: c1:30:08:38:1e:f3:21:ae:16:51:e3:bd:3b:5e:f1: 71:71:8c:5f:4d:42:bd:59:73:01:d0:24:fd:98:87: d9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6F:37:93:4F:52:DD:57:5C:57:83:E5:4D:0A:3F:FF:9C:79:86:C6 X509v3 Authority Key Identifier: keyid:8D:A1:9F:CE:0E:FA:E0:22:BB:A8:F8:E0:C1:23:7B:ED:BE:BE:3E:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/jaGfzg764CK7qPjgwSN77b6-PvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jaGfzg764CK7qPjgwSN77b6-PvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA8E8/9039783010D911ED80B80D29C4F9AE02/CE1A524210DD11EDBC7EA35FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.154.64.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:b0:e4:61:a2:12:a5:62:61:a1:39:e8:5a:df:d6:c3:2f:b6: 7d:28:a4:ab:3c:15:c1:f7:e1:81:bc:30:51:18:fe:fb:91:6c: d0:97:cc:5f:5e:bc:12:c4:5f:59:5a:b2:4c:48:5e:86:c0:cc: 84:0c:4b:e0:b8:7c:59:c4:b4:aa:ee:84:1f:01:7d:53:b9:3b: ec:7c:4a:3e:de:fb:a2:37:af:59:36:5e:b7:7b:78:6d:1f:c5: ef:19:8e:78:54:db:c8:65:50:df:cd:b3:a2:0c:83:9b:1a:81: 9f:e9:ab:b7:16:b4:82:92:2a:79:ee:a1:73:10:3f:6a:09:d3: d4:53:ba:2f:64:9d:cf:5f:a6:14:ed:a5:a4:c4:80:5e:5f:5d: 5b:5d:7e:99:1d:09:28:18:f7:de:2a:7a:36:21:37:91:2c:2b: d8:19:7e:88:1e:39:b5:d4:a5:4a:bb:4a:f5:01:b9:a5:6c:77: c6:78:46:52:d6:de:15:eb:59:d8:ac:2a:cc:1e:b8:16:96:2b: 43:80:54:08:65:85:0f:3d:86:df:ca:ff:05:dc:29:5d:99:60: ac:8a:89:ff:2a:c5:d5:78:63:f5:91:ce:ef:e2:f1:6e:45:5f: 41:37:d8:11:74:81:00:7e:33:7e:5e:3a:52:d4:6f:79:56:a0: 56:89:ca:6b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE4RTgxMTAvBgNVBAUTKDhEQTE5RkNFMEVGQUUwMjJCQkE4RjhFMEMxMjM3QkVE QkVCRTNFRjMwHhcNMjUwOTA3MDIwODExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGNkNy00NzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3Un1UnWAZEAZdk5mpq+qokhVsrpD0r5XnyD2XcQJnZFVjHm3i0Nmp6BEdX5 sFgFSgs5osKIv55ew0A1v4pyyoPIgQjVjPMcaDjhSBx8z4cOYAKXQaAtumVvjfAk +tKjd5Fl0mMawCJQS1gtVzrDwM2QEo+N9ze6ASj7Wd/UJNf6xIxeAEZWb19Xxyq7 4wf4ZTPypLQ44tophYVsqnA13EV4Pp8bwuNuRheIM0HEnGHNK014rI2rflQF3A3+ O0uKOZ3oaemxxhC2goR7M7WpXiz2nh7Trime9jxsh65mBLfBMAg4HvMhrhZR4707 XvFxcYxfTUK9WXMB0CT9mIfZHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFChvN5NP Ut1XXFeD5U0KP/+ceYbGMB8GA1UdIwQYMBaAFI2hn84O+uAiu6j44MEje+2+vj7z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQThFOC85MDM5NzgzMDEw RDkxMUVEODBCODBEMjlDNEY5QUUwMi9qYUdmemc3NjRDSzdxUGpnd1NONzdiNi1Q dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2phR2Z6Zzc2NENLN3FQamd3U043N2I2LVB2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE4RTgvOTAzOTc4MzAxMEQ5MTFFRDgwQjgwRDI5QzRGOUFFMDIvQ0UxQTUyNDIx MEREMTFFREJDN0VBMzVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5pAMA0GCSqGSIb3DQEBCwUAA4IBAQCNsORhohKlYmGhOeha39bD L7Z9KKSrPBXB9+GBvDBRGP77kWzQl8xfXrwSxF9ZWrJMSF6GwMyEDEvguHxZxLSq 7oQfAX1TuTvsfEo+3vuiN69ZNl63e3htH8XvGY54VNvIZVDfzbOiDIObGoGf6au3 FrSCkip57qFzED9qCdPUU7ovZJ3PX6YU7aWkxIBeX11bXX6ZHQkoGPfeKno2ITeR LCvYGX6IHjm11KVKu0r1AbmlbHfGeEZS1t4V61nYrCrMHrgWlitDgFQIZYUPPYbf yv8F3CldmWCsion/KsXVeGP1kc7v4vFuRV9BN9gRdIEAfjN+XjpS1G95VqBWicpr -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:46 2026 by rpki-client