$ rpki-client -vvf rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa File: C981BB3CF36A11E983B1D764C4F9AE02.roa (raw, json) Hash identifier: qcCtaMG3+No90shDmbUp/tU8ruNeRWwZsRG7YBEd9j0= Subject key identifier: 53:31:6E:AC:7D:D1:49:59:E6:29:E0:FD:A6:D0:FC:7A:FD:46:33:F4 Certificate issuer: /CN=A91473F8/serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Certificate serial: 0D48 Authority key identifier: 0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:38:41 +0000 ROA not before: Fri 28 Mar 2025 18:29:32 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 63526 IP address blocks: 103.112.52.0/22 maxlen: 22 103.112.52.0/23 maxlen: 23 103.112.52.0/24 maxlen: 24 103.112.53.0/24 maxlen: 24 103.112.54.0/23 maxlen: 23 103.112.54.0/24 maxlen: 24 103.112.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3400 (0xd48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91473F8, serialNumber=0BF2B5944C3A2CCAB6C1D12BC36A5AF3C2DCF77F Validity Not Before: Mar 28 18:29:32 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a42541-b59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:3d:91:87:4e:77:74:d0:f0:ce:3a:2f:65: 35:27:e8:96:1c:41:44:ce:76:9a:2e:e0:b4:5c:fb: 29:2d:dd:b1:ab:bb:4b:e8:09:12:dd:db:a6:b0:cf: b8:b0:6a:29:c1:c5:75:b7:83:25:d7:63:2e:9c:52: 38:52:cb:74:4e:3f:36:1f:ed:9b:a5:c1:20:04:dd: 49:9a:85:75:3a:21:2c:5b:2f:4b:97:ae:dc:a9:ad: c9:99:99:a0:55:01:d7:14:69:af:74:60:22:b2:c6: bd:35:31:5b:27:3d:16:26:1a:32:17:cd:13:54:43: 37:5f:e9:96:63:b4:15:4e:22:e5:a6:08:0b:32:81: 9f:e2:0c:5c:48:18:50:87:51:75:48:fa:b7:94:d1: ba:26:65:ee:8d:21:8b:9b:c5:01:c0:8e:6f:97:24: a9:04:b0:c4:6c:6a:c0:69:ca:2f:01:e0:b1:32:d0: 46:d9:d6:13:6c:17:05:3d:4f:35:57:1d:17:3d:22: d0:9d:d3:37:34:b6:ea:4e:d8:0d:23:82:c0:f3:6e: ed:e3:7a:20:9d:86:48:06:f0:69:ad:d8:7c:c0:6d: 6d:7b:26:4c:fd:70:cc:bd:9b:1d:c4:fd:a6:5a:2b: 6f:2f:b1:af:38:90:65:2c:4c:47:c4:fd:bb:1a:63: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:31:6E:AC:7D:D1:49:59:E6:29:E0:FD:A6:D0:FC:7A:FD:46:33:F4 X509v3 Authority Key Identifier: keyid:0B:F2:B5:94:4C:3A:2C:CA:B6:C1:D1:2B:C3:6A:5A:F3:C2:DC:F7:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C_K1lEw6LMq2wdErw2pa88Lc938.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C_K1lEw6LMq2wdErw2pa88Lc938.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91473F8/4B456C88F36911E99C67A061C4F9AE02/C981BB3CF36A11E983B1D764C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.52.0/22 Signature Algorithm: sha256WithRSAEncryption 50:65:44:fa:7b:04:d6:8a:be:e0:7f:76:fb:51:1c:65:1f:bc: 72:24:2b:dd:0b:c5:23:96:cc:fc:70:cd:3d:2e:43:6f:80:f2: 19:49:0f:2b:7c:8e:f7:ee:0a:99:2d:bc:b4:76:5a:00:84:e8: 37:06:7f:55:4d:ee:61:f6:ff:e4:b0:fb:9a:d2:17:5f:4c:bd: 6b:74:6c:24:ea:3f:4e:88:59:22:96:76:7a:42:61:8f:09:a6: a5:6a:2e:a4:de:91:b1:04:ba:7a:58:f4:bf:6b:91:f4:0e:47: 09:b9:18:35:e4:59:74:0b:1e:e2:19:ef:ff:a6:ea:48:dd:78: 74:74:5f:4b:f7:c1:19:97:ec:3a:03:43:4e:64:f9:d9:05:cb: 24:02:38:9f:5e:5e:a4:c0:65:47:6b:c1:c9:42:b2:ad:7f:f4: 7c:31:4e:0a:a7:be:31:75:fb:14:ea:08:6b:93:16:21:9a:d4: a1:e1:05:bd:19:70:a3:f3:76:9c:9a:52:e2:78:2d:ec:55:61: 7d:00:21:9c:cc:52:77:6b:6c:d5:46:96:e2:88:26:3f:f9:eb: 7d:59:a7:5e:e2:32:cf:9c:c1:8d:3a:05:6c:5c:d0:6e:63:dc: 29:40:fe:32:fe:44:4e:9b:b8:cf:e0:91:ff:57:7d:55:ee:06: 37:5a:59:bc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDczRjgxMTAvBgNVBAUTKDBCRjJCNTk0NEMzQTJDQ0FCNkMxRDEyQkMzNkE1QUYz QzJEQ0Y3N0YwHhcNMjUwMzI4MTgyOTMyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU0MS1iNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6g9kYdOd3TQ8M46L2U1J+iWHEFEznaaLuC0XPspLd2xq7tL6AkS3dumsM+4 sGopwcV1t4Ml12MunFI4Ust0Tj82H+2bpcEgBN1JmoV1OiEsWy9Ll67cqa3JmZmg VQHXFGmvdGAissa9NTFbJz0WJhoyF80TVEM3X+mWY7QVTiLlpggLMoGf4gxcSBhQ h1F1SPq3lNG6JmXujSGLm8UBwI5vlySpBLDEbGrAacovAeCxMtBG2dYTbBcFPU81 Vx0XPSLQndM3NLbqTtgNI4LA827t43ognYZIBvBprdh8wG1teyZM/XDMvZsdxP2m WitvL7GvOJBlLExHxP27GmOulwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFMxbqx9 0UlZ5ing/abQ/Hr9RjP0MB8GA1UdIwQYMBaAFAvytZRMOizKtsHRK8NqWvPC3Pd/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzNGOC80QjQ1NkM4OEYz NjkxMUU5OUM2N0EwNjFDNEY5QUUwMi9DX0sxbEV3NkxNcTJ3ZEVydzJwYTg4TGM5 MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NfSzFsRXc2TE1xMndkRXJ3MnBhODhMYzkzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDczRjgvNEI0NTZDODhGMzY5MTFFOTlDNjdBMDYxQzRGOUFFMDIvQzk4MUJCM0NG MzZBMTFFOTgzQjFENzY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3A0MA0GCSqGSIb3DQEBCwUAA4IBAQBQZUT6ewTWir7gf3b7URxl H7xyJCvdC8Ujlsz8cM09LkNvgPIZSQ8rfI737gqZLby0dloAhOg3Bn9VTe5h9v/k sPua0hdfTL1rdGwk6j9OiFkilnZ6QmGPCaalai6k3pGxBLp6WPS/a5H0DkcJuRg1 5Fl0Cx7iGe//pupI3Xh0dF9L98EZl+w6A0NOZPnZBcskAjifXl6kwGVHa8HJQrKt f/R8MU4Kp74xdfsU6ghrkxYhmtSh4QW9GXCj83acmlLieC3sVWF9ACGczFJ3a2zV RpbiiCY/+et9Wade4jLPnMGNOgVsXNBuY9wpQP4y/kROm7jP4JH/V31V7gY3Wlm8 -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:40 2026 by rpki-client