$ rpki-client -vvf rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/B21D3C5AE21311E8B9660E3EC4F9AE02.roa File: B21D3C5AE21311E8B9660E3EC4F9AE02.roa (raw, json) Hash identifier: 83YZzYxEIIXyh0cYGM9jrxbckZK92FPWPHsnsvXXSF4= Subject key identifier: CF:CD:26:45:DB:EE:03:2C:A2:F1:D8:3E:64:B2:0B:45:A5:90:CF:DC Certificate issuer: /CN=A91362A0/serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Certificate serial: 1CEC Authority key identifier: 83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/B21D3C5AE21311E8B9660E3EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:33:27 +0000 ROA not before: Sat 24 Jan 2026 17:33:12 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136525 IP address blocks: 103.11.0.0/22 maxlen: 22 103.11.0.0/24 maxlen: 24 103.11.1.0/24 maxlen: 24 103.11.2.0/24 maxlen: 24 103.11.3.0/24 maxlen: 24 203.212.28.0/22 maxlen: 22 203.212.28.0/24 maxlen: 24 203.212.29.0/24 maxlen: 24 203.212.30.0/24 maxlen: 24 203.212.31.0/24 maxlen: 24 2400:9fc0::/32 maxlen: 32 2400:9fc0:1::/48 maxlen: 48 2400:9fc0:2::/48 maxlen: 48 2400:9fc0:3::/48 maxlen: 48 2400:9fc0:4::/48 maxlen: 48 2400:9fc0:5::/48 maxlen: 48 2400:9fc0:6::/48 maxlen: 48 2400:9fc0:7::/48 maxlen: 48 2400:9fc0:8::/48 maxlen: 48 2400:9fc0:9::/48 maxlen: 48 2400:9fc0:10::/48 maxlen: 48 2400:9fc0:11::/48 maxlen: 48 2400:9fc0:99::/48 maxlen: 48 2400:9fc0:192::/48 maxlen: 48 2400:9fc0:1031::/48 maxlen: 48 2400:9fc0:1033::/48 maxlen: 48 2400:9fc0:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7404 (0x1cec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362A0, serialNumber=832005DC45D8C132A885155C431D33319ACF6D8D Validity Not Before: Jan 24 17:33:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47867-58fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:1e:30:3e:bb:66:e1:0a:a1:d4:be:6d:b7: 15:6f:eb:f0:f0:18:af:f9:dc:9f:67:68:03:41:88: 98:43:c3:c2:00:dd:45:88:80:c6:e5:ae:42:4f:79: 40:ea:96:24:d9:a6:62:5c:14:b6:ff:41:4c:a5:e1: fe:7d:c3:a8:ef:3c:90:57:ad:ef:fe:78:ed:88:34: c8:8c:50:c1:0f:ed:0d:79:f2:73:9d:9f:3f:41:64: e4:02:d7:9b:59:8a:9c:b4:17:87:0a:0e:97:27:4f: 36:d2:c7:79:7a:be:2b:28:e7:b1:54:a1:6e:2a:d7: fd:54:de:81:a2:8b:a7:a3:e3:ff:4b:5a:4d:18:88: 27:86:fe:0a:a0:10:9c:c7:50:34:ec:de:4b:97:0d: 1a:23:55:3d:be:24:09:bf:df:39:e9:f7:61:65:9a: 2e:40:93:d1:5b:0a:eb:32:d6:ee:de:83:09:83:0a: a9:56:60:0f:5e:0c:39:25:7a:c2:ac:48:f8:10:4c: 11:4e:20:ab:7e:ea:b8:1d:b3:bc:33:6c:d8:6b:45: 41:a1:b3:54:52:d0:a4:df:74:dc:a1:6a:0c:74:6b: 48:e3:2e:f3:d6:94:c1:9b:1b:c7:6b:9a:07:d3:c1: b6:03:e7:29:d1:0f:a4:52:8c:11:a0:a4:99:bb:e5: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CD:26:45:DB:EE:03:2C:A2:F1:D8:3E:64:B2:0B:45:A5:90:CF:DC X509v3 Authority Key Identifier: keyid:83:20:05:DC:45:D8:C1:32:A8:85:15:5C:43:1D:33:31:9A:CF:6D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/gyAF3EXYwTKohRVcQx0zMZrPbY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gyAF3EXYwTKohRVcQx0zMZrPbY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362A0/8032CBF0E3A111E6BF3B0068C4F9AE02/B21D3C5AE21311E8B9660E3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.11.0.0/22 203.212.28.0/22 IPv6: 2400:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption 84:39:30:09:77:c6:c5:42:37:ee:80:d4:0c:6e:50:28:af:f6: e4:7e:58:97:df:63:6d:1f:bd:33:89:9f:c8:5c:31:37:8c:aa: 99:01:65:a3:86:37:78:ce:44:e9:44:1a:7f:27:1e:04:2e:32: 20:8f:fb:43:4d:fc:40:56:06:5a:fd:c7:b8:f7:2f:63:bb:33: 07:4c:f1:dd:26:53:b9:83:1e:14:53:dd:02:65:ea:d4:e3:81: d3:a2:89:a3:1f:81:f8:bf:13:57:ca:f2:f8:bb:c4:8b:28:d7: b1:8e:d5:89:9f:85:ae:46:11:1f:70:d8:e5:39:80:12:8f:e7: 95:63:18:fe:ab:78:dc:ea:6d:1f:b9:81:0c:f7:a2:d7:aa:7e: 82:12:8b:1c:76:20:de:bb:28:12:de:4e:b5:03:9c:05:a7:e8: 48:39:6d:87:02:a3:09:ee:8f:03:d6:4a:af:70:d7:a7:da:c9: a5:19:24:ff:5b:47:70:35:bb:16:71:8b:cb:60:f3:73:48:16: b4:60:f1:7e:c3:7b:47:4d:fd:6b:3e:89:ee:5c:1e:8e:d7:5e: e9:e3:9e:21:72:77:a3:ee:3e:7c:cc:a0:92:fe:78:4a:65:db: 91:c7:d4:86:e8:ad:ea:b0:f9:fa:8b:11:f3:ef:cb:d7:ee:87: 36:48:29:4c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICHOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYyQTAxMTAvBgNVBAUTKDgzMjAwNURDNDVEOEMxMzJBODg1MTU1QzQzMUQzMzMx OUFDRjZEOEQwHhcNMjYwMTI0MTczMzEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg2Ny01OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC8eMD67ZuEKodS+bbcVb+vw8Biv+dyfZ2gDQYiYQ8PCAN1FiIDG5a5CT3lA 6pYk2aZiXBS2/0FMpeH+fcOo7zyQV63v/njtiDTIjFDBD+0NefJznZ8/QWTkAteb WYqctBeHCg6XJ0820sd5er4rKOexVKFuKtf9VN6Boouno+P/S1pNGIgnhv4KoBCc x1A07N5Llw0aI1U9viQJv9856fdhZZouQJPRWwrrMtbu3oMJgwqpVmAPXgw5JXrC rEj4EEwRTiCrfuq4HbO8M2zYa0VBobNUUtCk33TcoWoMdGtI4y7z1pTBmxvHa5oH 08G2A+cp0Q+kUowRoKSZu+WjswIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFM/NJkXb 7gMsovHYPmSyC0WlkM/cMB8GA1UdIwQYMBaAFIMgBdxF2MEyqIUVXEMdMzGaz22N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjJBMC84MDMyQ0JGMEUz QTExMUU2QkYzQjAwNjhDNEY5QUUwMi9neUFGM0VYWXdUS29oUlZjUXgwek1aclBi WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d5QUYzRVhZd1RLb2hSVmNReDB6TVpyUGJZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzYyQTAvODAzMkNCRjBFM0ExMTFFNkJGM0IwMDY4QzRGOUFFMDIvQjIxRDNDNUFF MjEzMTFFOEI5NjYwRTNFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZwsAAwQCy9QcMA0EAgACMAcDBQAkAJ/AMA0GCSqGSIb3DQEBCwUA A4IBAQCEOTAJd8bFQjfugNQMblAor/bkfliX32NtH70ziZ/IXDE3jKqZAWWjhjd4 zkTpRBp/Jx4ELjIgj/tDTfxAVgZa/ce49y9juzMHTPHdJlO5gx4UU90CZerU44HT oomjH4H4vxNXyvL4u8SLKNexjtWJn4WuRhEfcNjlOYASj+eVYxj+q3jc6m0fuYEM 96LXqn6CEoscdiDeuygS3k61A5wFp+hIOW2HAqMJ7o8D1kqvcNen2smlGST/W0dw NbsWcYvLYPNzSBa0YPF+w3tHTf1rPonuXB6O117p454hcnej7j58zKCS/nhKZduR x9SG6K3qsPn6ixHz78vX7oc2SClM -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:40 2026 by rpki-client