$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa File: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (raw, json) Hash identifier: woJiUlfh+5rrMBDG7PnsvNBeiKjiLhLTkpDWmy2sy4w= Subject key identifier: 81:C3:A8:AB:30:BA:B3:23:64:99:9F:0E:1A:FA:58:11:01:D8:66:58 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 04A9 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:37:05 +0000 ROA not before: Thu 04 Dec 2025 23:35:40 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 205960 IP address blocks: 103.91.217.0/24 maxlen: 24 103.99.208.0/23 maxlen: 23 103.99.208.0/24 maxlen: 24 103.99.209.0/24 maxlen: 24 103.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Dec 4 23:35:40 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47941-5e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:9f:f5:a7:5d:71:0c:34:f7:7f:97:53:5a: ee:d4:38:f5:f7:01:2b:5a:fc:da:d2:c1:1b:28:27: 91:e6:8e:8d:44:dd:d0:e0:0c:9c:b5:50:83:3c:86: 41:d6:b2:88:34:18:93:54:8b:7e:cf:a6:f9:c1:15: 7c:3e:59:2d:e7:a8:82:ca:6e:21:20:6c:f2:09:a0: 4e:c1:fc:e0:63:a8:2e:bb:b9:2b:0d:3c:6b:e8:42: 38:74:5c:49:0d:bc:2c:ee:9e:a7:d1:56:4a:fc:15: 11:bf:54:0f:69:47:3c:2f:e8:5b:db:53:fc:8c:73: f8:92:2a:7d:65:71:9f:12:04:0e:96:4e:48:27:f7: 0f:68:8c:b3:34:74:6f:fc:2f:e1:4a:86:94:07:75: ba:ff:c6:7c:5d:81:f5:d5:aa:cf:b5:0f:06:36:d5: 8c:28:6b:d6:07:a6:e0:8d:73:29:8a:dd:a1:57:ef: 46:a9:c8:f2:7a:bf:ce:32:ce:ca:49:2f:1e:ac:1f: 97:96:64:1f:9b:59:76:2e:c6:6e:e3:f0:89:04:ee: 23:1f:69:38:b2:d8:43:46:b4:4f:e9:9f:55:01:f4: 6e:98:81:97:51:93:fb:77:71:fa:06:d2:9f:3c:78: 70:2a:22:6f:1c:ce:ae:5b:f0:a5:da:d8:51:2c:8b: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:C3:A8:AB:30:BA:B3:23:64:99:9F:0E:1A:FA:58:11:01:D8:66:58 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/8AEE4940EAB511ECBBDE3C50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.217.0/24 103.99.208.0-103.99.210.255 Signature Algorithm: sha256WithRSAEncryption 33:9d:32:9a:04:41:90:b2:cc:9a:62:a9:2e:2d:6b:ae:6e:a7: db:1d:f8:3c:61:2e:05:b1:f4:f7:a0:67:2c:a4:b2:4c:22:2a: a5:f6:29:f6:b7:9c:7d:4c:bc:f2:40:f1:78:2a:a6:69:1b:95: 8d:74:5f:c6:e6:32:0d:07:cb:5a:62:79:5a:4c:6b:d0:e1:32: 1e:5c:fb:22:b8:03:ea:db:a2:1c:59:5e:4d:06:08:9b:f0:8a: f4:84:94:48:5a:5a:c5:5c:b0:66:46:dd:75:a4:de:84:97:cb: e5:36:27:c1:80:b4:87:5b:8a:9a:51:e6:0d:fa:cb:9d:9b:9e: 7d:70:9d:a9:fe:90:c4:e9:8f:3b:29:73:da:d4:d2:a1:98:6d: 5e:88:5b:08:de:75:41:ca:be:62:eb:67:98:5f:c5:5f:54:f1: 6d:f2:d2:7e:89:c9:67:c7:27:1f:51:35:00:f5:e1:f9:17:78: 5a:89:0d:0d:88:38:17:23:1f:7c:95:9a:07:a2:e7:27:08:e2: 43:7a:96:19:49:b8:7a:92:8d:cf:f3:79:80:5f:5e:16:3f:b1: c7:85:7f:20:1e:11:da:ad:37:f3:b8:d2:48:2e:37:6d:1f:a0: 89:6c:5e:50:46:17:4c:54:13:6a:2e:bf:b9:b4:cd:c3:2e:d6: a5:57:55:a9 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUxMjA0MjMzNTQwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzk0MS01ZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0Gf9addcQw093+XU1ru1Dj19wErWvza0sEbKCeR5o6NRN3Q4AyctVCDPIZB 1rKINBiTVIt+z6b5wRV8Plkt56iCym4hIGzyCaBOwfzgY6guu7krDTxr6EI4dFxJ Dbws7p6n0VZK/BURv1QPaUc8L+hb21P8jHP4kip9ZXGfEgQOlk5IJ/cPaIyzNHRv /C/hSoaUB3W6/8Z8XYH11arPtQ8GNtWMKGvWB6bgjXMpit2hV+9Gqcjyer/OMs7K SS8erB+XlmQfm1l2LsZu4/CJBO4jH2k4sthDRrRP6Z9VAfRumIGXUZP7d3H6BtKf PHhwKiJvHM6uW/Cl2thRLIvHywIDAQABo4ICbjCCAmowHQYDVR0OBBYEFIHDqKsw urMjZJmfDhr6WBEB2GZYMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvOEFFRTQ5NDBF QUI1MTFFQ0JCREUzQzUwQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAZ1vZMAwDBARnY9ADBABnY9IwDQYJKoZIhvcNAQELBQADggEBADOd MpoEQZCyzJpiqS4ta65up9sd+DxhLgWx9PegZyykskwiKqX2Kfa3nH1MvPJA8Xgq pmkblY10X8bmMg0Hy1pieVpMa9DhMh5c+yK4A+rbohxZXk0GCJvwivSElEhaWsVc sGZG3XWk3oSXy+U2J8GAtIdbippR5g36y52bnn1wnan+kMTpjzspc9rU0qGYbV6I WwjedUHKvmLrZ5hfxV9U8W3y0n6JyWfHJx9RNQD14fkXeFqJDQ2IOBcjH3yVmgei 5ycI4kN6lhlJuHqSjc/zeYBfXhY/sceFfyAeEdqtN/O40kguN20foIlsXlBGF0xU E2ouv7m0zcMu1qVXVak= -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:21 2026 by rpki-client