$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa File: E50E6E14B63411EDB4416786C4F9AE02.roa (raw, json) Hash identifier: KYaSzwf1L2QkO+jOOMTkJ2kvbpBzCO+jKOwM50VbrBw= Subject key identifier: BB:9C:BE:75:27:75:59:0E:06:05:05:DC:0D:DD:85:DF:52:05:65:BD Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 225B Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa Signing time: Wed 04 Mar 2026 16:19:41 +0000 ROA not before: Wed 04 Mar 2026 16:19:41 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 38330 IP address blocks: 103.232.252.0/22 maxlen: 22 125.214.80.0/21 maxlen: 21 203.83.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8795 (0x225b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Mar 4 16:19:41 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a85b9d-01c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:93:bf:ee:a9:09:2b:cc:f2:2e:db:d7:a6: 3f:a4:af:28:c1:95:81:2a:0a:8f:2d:62:6a:1c:8e: 48:78:d9:7d:84:4f:80:94:83:1e:83:ee:df:53:35: 32:7e:99:66:f5:6b:44:77:ad:e6:c4:77:b5:f3:44: 75:6c:1e:69:c6:db:f0:03:be:39:06:91:5d:8b:47: f2:8a:b5:07:de:3e:58:80:be:b6:d7:d0:3e:1c:c6: fe:ad:a7:15:31:67:a0:b2:26:54:4b:3a:4f:0f:37: 2c:a8:9d:cc:05:5a:8c:77:08:68:1e:e9:07:37:fc: c7:37:17:4d:5d:bc:b7:8c:35:a3:60:80:2c:5b:32: e6:4b:16:86:a9:06:dc:ef:f4:01:4b:d6:f5:c0:cc: 6d:34:ef:a5:ae:d1:d0:ad:be:83:61:ac:f1:06:dd: 87:62:9e:72:a1:57:2d:14:82:da:58:e1:d9:17:f7: ee:24:c6:e6:7b:e9:43:d4:0d:d8:a5:f3:b1:f0:6c: c7:b7:e8:f2:96:48:5d:45:1e:91:8a:b3:31:e2:6a: db:40:f5:b3:96:58:18:07:af:f7:be:b4:db:10:2e: 65:8d:b6:36:b3:24:4f:96:14:c5:03:b5:3f:37:b6: 8f:3d:d5:c1:21:40:85:df:6a:6a:4a:94:11:4d:ec: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9C:BE:75:27:75:59:0E:06:05:05:DC:0D:DD:85:DF:52:05:65:BD X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.232.252.0/22 125.214.80.0/21 203.83.4.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:61:d8:1d:13:55:6d:24:55:08:de:15:1f:3b:5a:1e:a9:eb: 01:ab:ef:c9:44:70:70:57:c0:88:90:73:ae:57:cf:16:b4:52: ab:cf:ec:07:9c:6b:85:c8:54:63:83:e2:24:5a:bf:43:41:17: bc:25:be:d6:26:54:78:76:fd:f3:24:c4:64:74:e2:f6:17:34: 40:ef:5b:71:79:cb:bd:68:61:4a:e3:05:99:da:f1:c4:19:6f: b0:8e:c6:fb:00:d1:15:d7:5b:29:06:e0:b9:b5:a2:b7:2a:85: de:88:6d:ed:8e:c9:b2:c9:eb:bd:af:98:76:b1:ff:b7:85:3f: 98:e1:ed:79:dc:50:25:c6:72:f2:9d:d9:c7:f7:e1:ce:93:cc: 16:4d:62:7d:e6:0d:df:d3:a3:f3:a1:5b:5a:cf:9c:ce:c2:14: 01:83:e0:46:5b:1c:b8:e3:91:17:a1:0c:e6:17:14:3d:45:2f: 46:e6:a2:33:d3:26:3a:64:81:7e:35:dc:3b:14:f7:2f:94:a0: 25:a1:ee:22:7d:cd:37:92:3b:43:02:5c:e6:48:88:3e:a4:f5: 63:73:73:c2:44:cc:a5:f5:ab:7d:25:c4:7c:38:16:91:88:c5: 7e:63:00:ec:2b:5d:a8:d1:d0:8b:72:87:4b:6d:bd:b9:b6:35: 98:5b:ac:43 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICIlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYwMzA0MTYxOTQxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4NWI5ZC0wMWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4KTv+6pCSvM8i7b16Y/pK8owZWBKgqPLWJqHI5IeNl9hE+AlIMeg+7fUzUy fplm9WtEd63mxHe180R1bB5pxtvwA745BpFdi0fyirUH3j5YgL6219A+HMb+racV MWegsiZUSzpPDzcsqJ3MBVqMdwhoHukHN/zHNxdNXby3jDWjYIAsWzLmSxaGqQbc 7/QBS9b1wMxtNO+lrtHQrb6DYazxBt2HYp5yoVctFILaWOHZF/fuJMbme+lD1A3Y pfOx8GzHt+jylkhdRR6RirMx4mrbQPWzllgYB6/3vrTbEC5ljbY2syRPlhTFA7U/ N7aPPdXBIUCF32pqSpQRTeyHOwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFLucvnUn dVkOBgUF3A3dhd9SBWW9MB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvRTUwRTZFMTRC NjM0MTFFREI0NDE2Nzg2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ+j8AwQDfdZQAwQCy1MEMA0GCSqGSIb3DQEBCwUAA4IBAQB6Ydgd E1VtJFUI3hUfO1oeqesBq+/JRHBwV8CIkHOuV88WtFKrz+wHnGuFyFRjg+IkWr9D QRe8Jb7WJlR4dv3zJMRkdOL2FzRA71txecu9aGFK4wWZ2vHEGW+wjsb7ANEV11sp BuC5taK3KoXeiG3tjsmyyeu9r5h2sf+3hT+Y4e153FAlxnLyndnH9+HOk8wWTWJ9 5g3f06PzoVtaz5zOwhQBg+BGWxy445EXoQzmFxQ9RS9G5qIz0yY6ZIF+Ndw7FPcv lKAloe4ifc03kjtDAlzmSIg+pPVjc3PCRMyl9at9JcR8OBaRiMV+YwDsK12o0dCL codLbb25tjWYW6xD -----END CERTIFICATE-----Generated at Thu Mar 26 16:05:23 2026 by rpki-client