$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/0985425A1DB511F1A030A5CB3F3D8C67.roa File: 0985425A1DB511F1A030A5CB3F3D8C67.roa (raw, json) Hash identifier: jL1weeYdf5UVgi3H8dQWMroRrXWySaPVDw+CBr3Q+X4= Subject key identifier: D5:91:2E:79:CD:6B:A5:12:4A:BA:8D:65:E1:C2:90:1B:39:18:0D:32 Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 08 Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/0985425A1DB511F1A030A5CB3F3D8C67.roa Signing time: Thu 12 Mar 2026 01:46:03 +0000 ROA not before: Thu 12 Mar 2026 01:46:03 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 5065 IP address blocks: 103.27.244.0/24 maxlen: 24 103.27.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Mar 12 01:46:03 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69b21adb-a92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:23:8b:2e:29:13:bb:21:4c:40:8b:c7:85: dd:a5:71:27:b0:25:5a:c5:29:8f:b5:da:df:da:e0: 50:36:21:66:f7:f4:99:a5:0c:f1:68:ee:e8:2d:d6: 70:84:64:27:eb:9a:e5:57:b4:26:39:1e:ec:9b:99: a9:86:9d:e0:6e:20:e3:00:98:a2:de:b3:f6:9d:7b: 77:69:ed:36:bd:7b:d1:c4:80:2e:db:20:84:07:4c: cf:bc:a8:f3:91:81:eb:35:5b:e1:5c:17:39:68:b5: ed:84:30:8a:a4:33:fa:6d:46:84:07:f6:93:ee:59: 33:41:01:39:de:d3:43:38:a9:b8:7e:d7:39:b4:04: 7d:7f:b6:a8:c1:f5:3a:7c:a4:65:b4:4d:bf:b1:ed: 1e:a0:a8:23:32:ab:cf:3c:7e:8b:a9:d5:96:f8:fa: e5:ac:e1:85:bc:3f:c7:af:9a:82:51:e1:db:34:36: 12:77:e9:78:81:85:36:6b:ef:13:30:dd:80:57:40: 95:b3:bc:b1:c3:e4:c4:70:28:39:97:e8:25:25:a8: 01:91:9a:f1:78:17:dd:2b:41:54:13:d6:f2:a1:06: ef:c6:10:f7:5d:13:e1:21:55:70:a7:1a:65:a5:c9: d3:5e:c6:47:35:f3:8c:8d:02:b9:e5:56:ac:08:8c: a1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:91:2E:79:CD:6B:A5:12:4A:BA:8D:65:E1:C2:90:1B:39:18:0D:32 X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/0985425A1DB511F1A030A5CB3F3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.27.244.0/23 Signature Algorithm: sha256WithRSAEncryption 09:39:af:e2:3d:bd:82:de:66:37:69:73:56:7c:c7:a6:7a:f4: 19:1c:10:86:11:66:02:e4:1e:86:33:1a:53:39:4b:30:5c:74: 50:3e:3a:39:d3:9e:53:37:2c:de:fb:eb:46:3b:34:13:3d:25: 9b:44:11:84:0c:b9:e9:52:44:c7:68:c6:1d:b9:cf:90:07:eb: bb:0b:f1:da:65:f0:6c:9b:3d:1d:43:00:80:fb:08:54:9f:5f: 97:e6:bd:4b:a1:51:5c:43:ca:5d:c1:cd:d9:f0:68:dd:b4:7c: f4:34:db:df:1b:6b:77:8e:f4:a1:ca:2c:76:68:c5:b4:a2:e1: 6e:c4:dc:90:ef:aa:9e:d5:65:57:d3:9b:78:7a:c5:c5:82:3c: 24:0e:66:5a:83:85:1d:ec:47:2a:5a:93:82:55:8d:83:32:25: 56:80:58:cd:d8:aa:9a:2c:8c:62:e3:df:d0:14:55:d5:94:3f: 58:85:7c:f8:af:ef:b2:5e:7d:dc:00:e4:6d:80:97:38:d4:95: 60:81:5f:ee:a3:f9:d5:fb:aa:26:96:54:50:87:f7:d0:04:2d: 8a:51:e3:b3:f0:ea:50:cb:b6:84:79:ca:2d:42:49:5a:06:25: aa:60:22:9b:13:d7:ad:31:22:41:20:dd:64:36:db:c0:2f:01: 86:9b:af:05 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjAzMTIwMTQ2MDNaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjIxYWRiLWE5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM2COLLikTuyFMQIvHhd2lcSewJVrFKY+12t/a4FA2IWb39JmlDPFo7ugt1nCE ZCfrmuVXtCY5HuybmamGneBuIOMAmKLes/ade3dp7Ta9e9HEgC7bIIQHTM+8qPOR ges1W+FcFzlote2EMIqkM/ptRoQH9pPuWTNBATne00M4qbh+1zm0BH1/tqjB9Tp8 pGW0Tb+x7R6gqCMyq888foup1Zb4+uWs4YW8P8evmoJR4ds0NhJ36XiBhTZr7xMw 3YBXQJWzvLHD5MRwKDmX6CUlqAGRmvF4F90rQVQT1vKhBu/GEPddE+EhVXCnGmWl ydNexkc184yNArnlVqwIjKEjAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU1ZEuec1r pRJKuo1l4cKQGzkYDTIwHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjY0Mi83Q0Y4QTA4MjFEQjExMUYxQkMxQzZENTIzRTNEOEM2Ny8wOTg1NDI1QTFE QjUxMUYxQTAzMEE1Q0IzRjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnG/QwDQYJKoZIhvcNAQELBQADggEBAAk5r+I9vYLeZjdpc1Z8x6Z6 9BkcEIYRZgLkHoYzGlM5SzBcdFA+OjnTnlM3LN7760Y7NBM9JZtEEYQMuelSRMdo xh25z5AH67sL8dpl8GybPR1DAID7CFSfX5fmvUuhUVxDyl3BzdnwaN20fPQ0298b a3eO9KHKLHZoxbSi4W7E3JDvqp7VZVfTm3h6xcWCPCQOZlqDhR3sRypak4JVjYMy JVaAWM3YqposjGLj39AUVdWUP1iFfPiv77JefdwA5G2AlzjUlWCBX+6j+dX7qiaW VFCH99AELYpR47Pw6lDLtoR5yi1CSVoGJapgIpsT160xIkEg3WQ228AvAYabrwU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:47:56 2026 by rpki-client