$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/D9BD904224B611EBAE734152C4F9AE02.roa File: D9BD904224B611EBAE734152C4F9AE02.roa (raw, json) Hash identifier: 4sy5bo4x5IejnxnpTcgGrJIpJDDeVrJ7W1QqzKsRoZ4= Subject key identifier: E0:51:20:0A:08:1C:ED:68:EF:35:1D:A0:44:7F:6D:6A:25:52:4E:E4 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 07FA Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/D9BD904224B611EBAE734152C4F9AE02.roa Signing time: Fri 20 Mar 2026 21:27:59 +0000 ROA not before: Fri 20 Mar 2026 21:27:59 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138621 IP address blocks: 103.134.254.0/23 maxlen: 23 103.134.254.0/24 maxlen: 24 103.134.255.0/24 maxlen: 24 2001:df7:db00::/48 maxlen: 48 2401:abe0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:05:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Mar 20 21:27:59 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69bdbbdf-1fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:84:b3:4b:3d:37:e7:1d:e4:23:02:13:bf:b5: 05:5f:da:e2:35:02:99:58:0c:7b:a1:a8:ac:4f:0c: 8f:12:a6:04:90:05:83:44:1b:32:32:85:d7:8b:18: bf:11:ed:79:1d:b3:bd:dc:43:4f:1f:8d:28:c7:41: c5:d1:c5:a8:d3:f1:ff:b7:28:43:95:3e:d4:13:16: 6d:5a:e2:29:d5:d1:70:f0:a6:75:24:1b:72:e3:e9: dd:d6:be:c3:72:eb:a0:1e:99:7d:19:86:85:37:11: 02:d4:7d:6a:c8:48:82:9b:a6:14:2a:b3:08:82:28: 93:3f:c8:21:1d:75:a5:9b:ca:f3:a7:9e:47:f1:01: d2:9c:95:22:bd:44:2a:fa:37:81:29:54:0c:bd:7c: f5:0a:a5:14:28:4c:b0:09:53:c7:0b:36:25:f5:67: 15:d9:d9:25:a4:b8:0e:a1:5c:eb:37:28:14:cd:4d: 47:8e:6b:cc:2a:c5:d9:dc:a6:53:0d:4a:ac:a5:59: 3e:bc:12:39:cd:5f:02:c1:74:00:4a:67:f3:84:c1: b4:59:e8:b2:27:2a:29:f5:7d:59:56:9b:c4:1f:db: 13:04:b2:f2:5a:1d:51:1a:1c:68:13:f8:bc:a6:f6: 8c:af:d7:3d:92:b7:12:9b:86:61:c8:8b:78:2a:f8: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:51:20:0A:08:1C:ED:68:EF:35:1D:A0:44:7F:6D:6A:25:52:4E:E4 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/D9BD904224B611EBAE734152C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.254.0/23 IPv6: 2001:df7:db00::/48 2401:abe0::/32 Signature Algorithm: sha256WithRSAEncryption 3a:73:79:f8:69:ce:38:5a:38:28:0f:f5:bf:70:ea:3c:6a:4d: 5e:4c:4e:87:d2:dc:17:34:e0:ae:7f:85:45:4b:60:c4:a0:7f: 9e:65:61:b1:1e:b8:af:00:a2:ff:bc:49:b8:20:cf:04:90:1e: 5e:0f:e1:69:ee:5f:9d:79:e5:4d:66:76:13:a2:26:96:d0:f0: a3:8e:ca:3e:ff:05:3c:09:78:18:1b:e1:63:9d:83:94:38:ad: 91:d5:fa:b0:bd:8e:0b:c4:dd:e6:b2:e4:21:60:ff:d4:8a:e1: 56:85:c6:a4:f2:ae:1c:e0:62:36:da:c9:77:bc:b3:df:5a:e2: 2a:ae:3f:22:6b:44:35:08:e6:00:fa:04:d2:94:77:0d:77:c5: aa:a9:fe:33:f5:8f:7a:41:b9:90:cf:bb:64:93:1e:c6:a3:4e: fb:5e:7d:d1:ab:d4:51:df:a7:b8:f6:09:b8:f7:cb:66:e2:12: 62:9b:0b:8c:1b:bd:67:2b:43:85:f0:17:70:1c:19:83:a6:4c: e6:40:b3:a4:5f:9c:7e:00:37:2b:58:d4:43:47:1e:e6:30:03: e0:25:c0:8b:75:76:d1:5f:35:d6:62:2a:13:06:4b:af:a5:28: fa:37:d6:8d:85:97:88:14:65:56:30:f7:ed:89:f1:03:60:16: 0c:4d:7a:7d -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjYwMzIwMjEyNzU5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJkYmJkZi0xZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6YSzSz035x3kIwITv7UFX9riNQKZWAx7oaisTwyPEqYEkAWDRBsyMoXXixi/ Ee15HbO93ENPH40ox0HF0cWo0/H/tyhDlT7UExZtWuIp1dFw8KZ1JBty4+nd1r7D cuugHpl9GYaFNxEC1H1qyEiCm6YUKrMIgiiTP8ghHXWlm8rzp55H8QHSnJUivUQq +jeBKVQMvXz1CqUUKEywCVPHCzYl9WcV2dklpLgOoVzrNygUzU1HjmvMKsXZ3KZT DUqspVk+vBI5zV8CwXQASmfzhMG0WeiyJyop9X1ZVpvEH9sTBLLyWh1RGhxoE/i8 pvaMr9c9krcSm4ZhyIt4KvhHeQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFOBRIAoI HO1o7zUdoER/bWolUk7kMB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkREMkMvNDhDRTUxNjIyNEI1MTFFQkEyODc4RjUwQzRGOUFFMDIvRDlCRDkwNDIy NEI2MTFFQkFFNzM0MTUyQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ4b+MBYEAgACMBADBwAgAQ332wADBQAkAavgMA0GCSqGSIb3DQEB CwUAA4IBAQA6c3n4ac44WjgoD/W/cOo8ak1eTE6H0twXNOCuf4VFS2DEoH+eZWGx HrivAKL/vEm4IM8EkB5eD+Fp7l+deeVNZnYToiaW0PCjjso+/wU8CXgYG+FjnYOU OK2R1fqwvY4LxN3msuQhYP/UiuFWhcak8q4c4GI22sl3vLPfWuIqrj8ia0Q1COYA +gTSlHcNd8Wqqf4z9Y96QbmQz7tkkx7Go077Xn3Rq9RR36e49gm498tm4hJimwuM G71nK0OF8BdwHBmDpkzmQLOkX5x+ADcrWNRDRx7mMAPgJcCLdXbRXzXWYioTBkuv pSj6N9aNhZeIFGVWMPftifEDYBYMTXp9 -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:18 2026 by rpki-client