$ rpki-client -vvf rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/72D9F434AD2411E98D9E935AC4F9AE02.roa File: 72D9F434AD2411E98D9E935AC4F9AE02.roa (raw, json) Hash identifier: IEnqgZAlKovuD6MzCecMuoV1aCeVk9H0qwnKaqYXSEE= Subject key identifier: 46:37:3A:F3:17:99:66:C5:58:C3:6C:13:AD:BF:ED:1E:92:91:D6:35 Certificate issuer: /CN=A91523C5/serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Certificate serial: 0EA5 Authority key identifier: 24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/72D9F434AD2411E98D9E935AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:38:33 +0000 ROA not before: Tue 30 Dec 2025 18:14:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137404 IP address blocks: 103.107.80.0/22 maxlen: 22 103.107.80.0/24 maxlen: 24 103.107.81.0/24 maxlen: 24 103.107.82.0/24 maxlen: 24 103.107.83.0/24 maxlen: 24 2402:4f40::/32 maxlen: 32 2402:4f40:1000::/36 maxlen: 36 2402:4f40:2000::/36 maxlen: 36 2402:4f40:3000::/36 maxlen: 36 2402:4f40:4000::/36 maxlen: 36 2402:4f40:5000::/36 maxlen: 36 2402:4f40:6000::/36 maxlen: 36 2402:4f40:7000::/36 maxlen: 36 2402:4f40:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3749 (0xea5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91523C5, serialNumber=243D92437CE230503E548EFD293C2A6381B5C426 Validity Not Before: Dec 30 18:14:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44f69-fc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9e:7d:58:02:a1:8e:81:d1:1f:12:eb:7b:79: d6:7c:13:ac:25:8e:29:7d:d2:f7:9b:2f:ef:10:7d: d4:a7:a9:6c:b8:a6:4a:e0:03:ae:cd:78:d0:57:56: bb:2d:c1:7b:dc:77:1f:8c:ba:de:62:3a:b9:36:eb: f7:9e:29:fc:0d:43:f1:f9:2a:6f:fe:cd:de:d1:59: fb:f5:da:49:c6:b1:0f:12:9d:87:e8:c0:aa:6c:bc: ff:70:c3:8a:04:b8:a1:58:f0:78:7c:5a:ee:89:63: a0:d5:4c:09:6a:7f:c2:f9:8e:30:b9:a2:ca:ac:aa: 46:66:2d:45:44:df:b7:d7:62:f9:3d:8f:4a:0b:5a: 04:de:71:57:69:6d:3d:96:28:eb:5d:70:2e:50:11: 4f:10:e8:66:cd:91:da:4a:f3:35:db:fe:17:7e:f7: 68:ec:ee:4b:6f:13:6d:51:77:fb:cb:ba:79:e0:4e: 47:49:e0:a3:a9:27:8d:c3:b0:eb:90:1a:78:93:82: 60:dd:fa:ab:da:1d:82:4a:45:6d:1f:e1:a5:bd:34: 27:3a:84:b2:0e:8c:f5:20:1a:a7:54:ad:b1:80:b9: 3c:4f:df:ae:4a:f6:69:04:c9:c5:45:c1:bc:4c:55: 5e:76:3e:07:35:a3:27:a5:d8:31:b0:30:d6:56:a6: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:37:3A:F3:17:99:66:C5:58:C3:6C:13:AD:BF:ED:1E:92:91:D6:35 X509v3 Authority Key Identifier: keyid:24:3D:92:43:7C:E2:30:50:3E:54:8E:FD:29:3C:2A:63:81:B5:C4:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/JD2SQ3ziMFA-VI79KTwqY4G1xCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JD2SQ3ziMFA-VI79KTwqY4G1xCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91523C5/0366D7AEACE111E9BFA56423C4F9AE02/72D9F434AD2411E98D9E935AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.107.80.0/22 IPv6: 2402:4f40::/32 Signature Algorithm: sha256WithRSAEncryption 1e:96:3e:45:87:d6:77:4c:b8:34:be:c7:d8:11:c6:cf:e5:f4: cd:6a:e3:cb:42:57:9b:0a:14:1d:33:ab:c6:fb:3c:dc:37:12: c8:ef:83:c3:82:28:65:ec:eb:71:d3:76:bc:7c:45:79:a5:b2: fc:20:20:e3:1d:b9:25:df:6c:fa:4e:60:25:06:cf:d2:07:d1: 55:c3:a9:1c:ac:0b:a2:98:36:88:e3:60:92:1a:85:48:62:2f: d2:20:fc:c3:2e:12:7a:6f:5b:b8:aa:33:c8:cd:52:3f:5e:6a: d7:84:de:61:af:f5:7d:13:71:1a:7b:bc:fa:65:82:2f:f2:7e: 3b:8d:98:51:ce:d2:a5:d7:0f:31:8a:04:c0:92:eb:14:a8:fc: 27:dc:73:2e:e5:09:87:22:4b:32:b5:19:a3:bd:2e:65:51:b0: 4e:7d:36:14:d4:c8:a1:d0:91:b2:07:14:ab:77:42:6c:2a:f0: 8c:7f:d9:84:a6:9a:54:c3:09:40:4a:df:e7:b2:4e:6e:ff:8d: 9f:fc:f4:ef:07:90:b7:df:ba:5c:9b:c3:d8:6b:bb:06:dd:22: 40:f2:bd:a4:82:35:d4:89:ed:d1:ed:4d:c0:4a:af:a2:b6:39: 7a:ce:4c:2e:81:93:2c:da:9f:00:0e:53:8b:2a:1c:02:94:72: ff:d2:e3:8e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTIzQzUxMTAvBgNVBAUTKDI0M0Q5MjQzN0NFMjMwNTAzRTU0OEVGRDI5M0MyQTYz ODFCNUM0MjYwHhcNMjUxMjMwMTgxNDQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGY2OS1mYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup59WAKhjoHRHxLre3nWfBOsJY4pfdL3my/vEH3Up6lsuKZK4AOuzXjQV1a7 LcF73HcfjLreYjq5Nuv3nin8DUPx+Spv/s3e0Vn79dpJxrEPEp2H6MCqbLz/cMOK BLihWPB4fFruiWOg1UwJan/C+Y4wuaLKrKpGZi1FRN+312L5PY9KC1oE3nFXaW09 lijrXXAuUBFPEOhmzZHaSvM12/4Xfvdo7O5LbxNtUXf7y7p54E5HSeCjqSeNw7Dr kBp4k4Jg3fqr2h2CSkVtH+GlvTQnOoSyDoz1IBqnVK2xgLk8T9+uSvZpBMnFRcG8 TFVedj4HNaMnpdgxsDDWVqZtRwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEY3OvMX mWbFWMNsE62/7R6SkdY1MB8GA1UdIwQYMBaAFCQ9kkN84jBQPlSO/Sk8KmOBtcQm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjNDNS8wMzY2RDdBRUFD RTExMUU5QkZBNTY0MjNDNEY5QUUwMi9KRDJTUTN6aU1GQS1WSTc5S1R3cVk0RzF4 Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pEMlNRM3ppTUZBLVZJNzlLVHdxWTRHMXhDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTIzQzUvMDM2NkQ3QUVBQ0UxMTFFOUJGQTU2NDIzQzRGOUFFMDIvNzJEOUY0MzRB RDI0MTFFOThEOUU5MzVBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2tQMA0EAgACMAcDBQAkAk9AMA0GCSqGSIb3DQEBCwUAA4IBAQAe lj5Fh9Z3TLg0vsfYEcbP5fTNauPLQlebChQdM6vG+zzcNxLI74PDgihl7Otx03a8 fEV5pbL8ICDjHbkl32z6TmAlBs/SB9FVw6kcrAuimDaI42CSGoVIYi/SIPzDLhJ6 b1u4qjPIzVI/XmrXhN5hr/V9E3Eae7z6ZYIv8n47jZhRztKl1w8xigTAkusUqPwn 3HMu5QmHIksytRmjvS5lUbBOfTYU1Mih0JGyBxSrd0JsKvCMf9mEpppUwwlASt/n sk5u/42f/PTvB5C337pcm8PYa7sG3SJA8r2kgjXUie3R7U3ASq+itjl6zkwugZMs 2p8ADlOLKhwClHL/0uOO -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:35 2026 by rpki-client