$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/9B31D1A6345C11F1B54BE2329F833773.roa File: 9B31D1A6345C11F1B54BE2329F833773.roa (raw, json) Hash identifier: O65ZieU0flTwQCli9NuypBP6hkJ+OicNVNagDUX/Pqo= Subject key identifier: 98:E5:35:72:EE:E8:18:81:BE:36:CA:5A:BB:FB:23:1E:AC:E7:25:86 Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 06DA Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/9B31D1A6345C11F1B54BE2329F833773.roa Signing time: Thu 09 Apr 2026 21:42:06 +0000 ROA not before: Thu 09 Apr 2026 21:42:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 35916 IP address blocks: 103.7.136.0/22 maxlen: 24 103.11.76.0/22 maxlen: 24 103.232.92.0/22 maxlen: 24 103.233.74.0/23 maxlen: 24 113.20.0.0/20 maxlen: 24 117.55.224.0/20 maxlen: 24 163.47.40.0/22 maxlen: 24 163.47.132.0/22 maxlen: 24 182.255.80.0/20 maxlen: 24 202.93.4.0/23 maxlen: 24 203.24.88.0/23 maxlen: 24 203.31.198.0/23 maxlen: 24 203.88.112.0/21 maxlen: 24 203.88.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1754 (0x6da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Apr 9 21:42:06 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69d81d2d-7cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:a9:ef:8d:ec:a1:6f:33:1c:e7:49:e3:02: c6:cf:e6:c0:53:03:5f:3b:7b:7b:2f:3b:04:d7:90: 43:2f:b1:9c:2b:3f:7d:fb:f5:35:4e:bb:b0:61:fb: 08:c7:8f:b8:7e:f2:e9:59:93:a6:d6:13:90:b8:99: 2a:4a:02:88:62:2a:37:82:cc:e9:46:7d:6d:50:a2: 6d:65:7e:7d:20:a6:ae:13:25:20:f8:59:34:2f:c0: e2:e7:f3:c5:11:55:47:29:32:67:0d:ae:1d:b5:6d: f8:23:3b:3c:e4:90:e6:79:b6:ef:08:7f:7d:41:34: ba:ae:4f:e9:dc:d6:c5:a6:1c:97:de:ce:3b:d4:7e: 5a:6e:7d:bb:f2:28:96:23:65:36:d1:cb:ea:2b:7e: dc:d1:2c:34:34:bc:4d:75:f3:6f:5b:e1:a9:ed:dc: a6:95:4d:7f:1b:50:ac:78:40:87:b2:35:15:9c:38: 44:38:5e:cd:b2:f4:3e:b4:4e:42:ca:3e:56:83:10: ff:d9:b8:35:75:8b:7e:50:d9:c1:4e:2c:48:87:8a: 1e:a5:ed:41:7d:fb:8d:f1:c2:5d:45:b1:01:4e:ad: b4:91:ec:5a:b1:51:75:5e:6d:c7:0c:2b:64:ec:b9: f0:5d:02:43:c4:8d:30:d3:23:14:79:34:ee:98:74: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E5:35:72:EE:E8:18:81:BE:36:CA:5A:BB:FB:23:1E:AC:E7:25:86 X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/9B31D1A6345C11F1B54BE2329F833773.roa sbgp-ipAddrBlock: critical IPv4: 103.7.136.0/22 103.11.76.0/22 103.232.92.0/22 103.233.74.0/23 113.20.0.0/20 117.55.224.0/20 163.47.40.0/22 163.47.132.0/22 182.255.80.0/20 202.93.4.0/23 203.24.88.0/23 203.31.198.0/23 203.88.112.0/20 Signature Algorithm: sha256WithRSAEncryption 00:b3:a8:6a:e5:c9:94:a5:7d:65:10:92:52:2b:4d:f6:fe:8e: 18:70:ac:56:b4:cd:df:57:bc:fc:68:39:c6:8e:ca:85:cc:d2: e7:8a:6a:e6:ca:04:e2:0a:b7:4c:b6:07:42:57:d5:f5:5d:e9: bf:7a:3f:9a:31:cc:d7:0f:11:85:2c:37:b8:3d:dc:5a:27:9f: f0:90:6b:c3:6c:09:0e:d5:18:79:07:34:cc:5b:a0:c3:ce:39: 53:27:e8:f8:1b:56:e1:6d:90:14:f2:bb:e3:58:a9:5a:db:36: 79:26:0a:55:fb:12:44:bf:85:cf:2f:07:a5:29:a0:92:6a:a2: 37:79:d0:a3:65:e1:b5:f7:a6:f0:eb:66:9a:a7:81:3f:85:8a: 4f:88:33:07:53:4d:5f:44:54:5e:03:d4:90:7f:48:1a:11:5f: 1a:e8:4f:aa:b9:8d:59:b1:58:cb:4d:5d:8c:99:23:b4:bb:70: 17:ce:6d:5d:88:93:7a:10:2a:ff:a9:e1:b8:3e:70:61:fc:ae: 89:94:1c:21:d4:77:49:ca:9c:78:57:dd:03:9e:45:a9:b1:90: 51:6e:c0:74:66:cb:96:b1:a1:4d:f8:67:ae:b2:8c:8d:03:07: d8:a8:10:9c:cb:a0:aa:60:76:33:3a:e6:13:d0:59:b8:24:13: 6e:3a:4b:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjYwNDA5MjE0MjA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ4MWQyZC03Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zep743soW8zHOdJ4wLGz+bAUwNfO3t7LzsE15BDL7GcKz99+/U1TruwYfsI x4+4fvLpWZOm1hOQuJkqSgKIYio3gszpRn1tUKJtZX59IKauEyUg+Fk0L8Di5/PF EVVHKTJnDa4dtW34Izs85JDmebbvCH99QTS6rk/p3NbFphyX3s471H5abn278iiW I2U20cvqK37c0Sw0NLxNdfNvW+Gp7dymlU1/G1CseECHsjUVnDhEOF7NsvQ+tE5C yj5WgxD/2bg1dYt+UNnBTixIh4oepe1BffuN8cJdRbEBTq20kexasVF1Xm3HDCtk 7LnwXQJDxI0w0yMUeTTumHRCgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjlNXLu 6BiBvjbKWrv7Ix6s5yWGMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvOUIzMUQxQTYz NDVDMTFGMUI1NEJFMjMyOUY4MzM3NzMucm9hMGcGCCsGAQUFBwEHAQH/BFgwVjBU BAIAATBOAwQCZweIAwQCZwtMAwQCZ+hcAwQBZ+lKAwQEcRQAAwQEdTfgAwQCoy8o AwQCoy+EAwQEtv9QAwQByl0EAwQByxhYAwQByx/GAwQEy1hwMA0GCSqGSIb3DQEB CwUAA4IBAQAAs6hq5cmUpX1lEJJSK032/o4YcKxWtM3fV7z8aDnGjsqFzNLnimrm ygTiCrdMtgdCV9X1Xem/ej+aMczXDxGFLDe4PdxaJ5/wkGvDbAkO1Rh5BzTMW6DD zjlTJ+j4G1bhbZAU8rvjWKla2zZ5JgpV+xJEv4XPLwelKaCSaqI3edCjZeG196bw 62aap4E/hYpPiDMHU01fRFReA9SQf0gaEV8a6E+quY1ZsVjLTV2MmSO0u3AXzm1d iJN6ECr/qeG4PnBh/K6JlBwh1HdJypx4V90DnkWpsZBRbsB0ZsuWsaFN+GeusoyN AwfYqBCcy6CqYHYzOuYT0Fm4JBNuOkt/ -----END CERTIFICATE-----Generated at Fri Apr 17 14:20:45 2026 by rpki-client