$ rpki-client -vvf rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/3B501252140811EDBF3D2F27C4F9AE02.roa File: 3B501252140811EDBF3D2F27C4F9AE02.roa (raw, json) Hash identifier: IaCEDFgWsu0fOu5wbRu+aiuKfmRdek8u7/fO0bD+YLE= Subject key identifier: A5:92:C0:04:97:8B:24:1B:7E:3B:8D:60:EC:BE:69:E4:18:07:16:4A Certificate issuer: /CN=A91644A4/serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9 Certificate serial: 0332 Authority key identifier: 8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/3B501252140811EDBF3D2F27C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:52:58 +0000 ROA not before: Tue 03 Feb 2026 01:20:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 17158 IP address blocks: 103.109.128.0/24 maxlen: 24 103.109.129.0/24 maxlen: 24 103.109.130.0/24 maxlen: 24 103.109.131.0/24 maxlen: 24 203.22.186.0/24 maxlen: 24 203.23.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 818 (0x332) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91644A4, serialNumber=8FC661A19332AE864BC87900744DA337F9A700A9 Validity Not Before: Feb 3 01:20:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a436aa-8f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:22:d5:3d:0d:c0:9d:3a:06:55:22:8f:b6:77: 2a:91:8c:47:7c:46:1d:95:bd:21:a0:2c:f0:38:87: 3f:59:97:39:61:4a:1e:f0:32:bc:d7:20:f9:77:e2: 93:1c:e1:71:dd:2b:89:40:0b:bd:45:43:1d:e6:74: 8a:e4:f4:2a:3e:43:c2:85:3f:1e:aa:e6:a2:c6:97: 2d:69:e1:f9:cb:c9:59:1c:00:a8:79:dd:e5:24:5f: 94:04:de:9a:bc:4b:30:81:a6:41:26:e5:54:ed:82: d6:fa:77:8e:73:6c:87:e3:f6:41:39:ce:97:b3:7b: dc:be:b7:dd:46:f1:e0:d0:94:78:c2:e6:88:a5:e9: af:50:2b:cf:dd:1c:44:78:18:ec:cc:6c:d7:27:d0: f2:d8:be:6d:32:fd:cd:63:af:24:e7:47:a1:2f:59: ba:e1:d1:8b:82:ad:24:24:84:0a:e3:de:df:c7:96: 00:01:66:48:ea:6f:24:69:9f:39:96:bc:e1:a7:13: 44:27:e5:dd:e3:37:2a:63:48:39:17:24:e3:8b:ab: 56:04:47:8d:4c:1f:38:6b:a4:97:e6:98:98:c2:30: 48:20:0b:ff:d9:1a:05:3c:99:46:3d:b6:9a:2d:83: 29:54:de:32:4f:ab:4c:01:f4:cc:5e:e3:14:c6:54: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:92:C0:04:97:8B:24:1B:7E:3B:8D:60:EC:BE:69:E4:18:07:16:4A X509v3 Authority Key Identifier: keyid:8F:C6:61:A1:93:32:AE:86:4B:C8:79:00:74:4D:A3:37:F9:A7:00:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/j8ZhoZMyroZLyHkAdE2jN_mnAKk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j8ZhoZMyroZLyHkAdE2jN_mnAKk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91644A4/2D23A4CC020711ED81DF0168C4F9AE02/3B501252140811EDBF3D2F27C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.109.128.0/22 203.22.186.0/24 203.23.127.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e9:87:18:b5:16:73:89:a3:88:d8:82:60:86:5b:63:c5:24: 68:4b:92:db:c8:4f:49:15:2f:15:5c:c2:fa:0d:d9:87:30:0e: 9a:a3:61:0f:8c:b6:18:f4:30:2b:4f:13:63:88:e7:6d:14:37: 4d:98:4b:05:fd:33:d4:9f:5e:5a:4b:f9:9f:1e:72:f9:0a:73: 0b:50:45:e6:02:0b:82:2f:8d:c8:9d:cc:b4:bb:2d:f9:70:d9: d2:8c:c3:c0:f8:2f:17:a7:21:e1:5e:17:6f:2e:c8:8d:d4:ff: 0c:07:99:c1:a8:25:01:7d:73:58:86:2c:3d:e2:c8:35:6d:e0: a7:68:dc:be:95:45:ba:37:52:8a:93:aa:70:bd:02:ad:08:da: 66:c2:05:e8:b3:c2:69:e4:c3:48:31:70:69:00:62:90:cb:1b: 91:51:0e:36:ee:08:7a:57:f7:ee:9c:43:a2:81:1b:9e:4e:85: 54:ed:2d:f2:21:f3:78:8f:e3:52:12:56:3c:02:4b:d3:7f:f7: 8b:c4:f7:78:42:de:63:46:02:0e:49:cf:51:52:86:ef:00:4a: 3b:a6:b9:24:8d:87:d1:f1:7d:93:eb:c1:25:45:6a:e9:e6:63: c6:7d:c0:b6:47:2f:85:8d:c7:d8:bb:95:5e:8e:60:98:2f:d2: c3:67:b8:38 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ0QTQxMTAvBgNVBAUTKDhGQzY2MUExOTMzMkFFODY0QkM4NzkwMDc0NERBMzM3 RjlBNzAwQTkwHhcNMjYwMjAzMDEyMDQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzZhYS04ZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiLVPQ3AnToGVSKPtncqkYxHfEYdlb0hoCzwOIc/WZc5YUoe8DK81yD5d+KT HOFx3SuJQAu9RUMd5nSK5PQqPkPChT8equaixpctaeH5y8lZHACoed3lJF+UBN6a vEswgaZBJuVU7YLW+neOc2yH4/ZBOc6Xs3vcvrfdRvHg0JR4wuaIpemvUCvP3RxE eBjszGzXJ9Dy2L5tMv3NY68k50ehL1m64dGLgq0kJIQK497fx5YAAWZI6m8kaZ85 lrzhpxNEJ+Xd4zcqY0g5FyTji6tWBEeNTB84a6SX5piYwjBIIAv/2RoFPJlGPbaa LYMpVN4yT6tMAfTMXuMUxlQ1EwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKWSwASX iyQbfjuNYOy+aeQYBxZKMB8GA1UdIwQYMBaAFI/GYaGTMq6GS8h5AHRNozf5pwCp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDRBNC8yRDIzQTRDQzAy MDcxMUVEODFERjAxNjhDNEY5QUUwMi9qOFpob1pNeXJvWkx5SGtBZEUyak5fbW5B S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o4WmhvWk15cm9aTHlIa0FkRTJqTl9tbkFLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQ0QTQvMkQyM0E0Q0MwMjA3MTFFRDgxREYwMTY4QzRGOUFFMDIvM0I1MDEyNTIx NDA4MTFFREJGM0QyRjI3QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ22AAwQAyxa6AwQAyxd/MA0GCSqGSIb3DQEBCwUAA4IBAQB76YcY tRZziaOI2IJghltjxSRoS5LbyE9JFS8VXML6DdmHMA6ao2EPjLYY9DArTxNjiOdt FDdNmEsF/TPUn15aS/mfHnL5CnMLUEXmAguCL43Incy0uy35cNnSjMPA+C8XpyHh XhdvLsiN1P8MB5nBqCUBfXNYhiw94sg1beCnaNy+lUW6N1KKk6pwvQKtCNpmwgXo s8Jp5MNIMXBpAGKQyxuRUQ427gh6V/funEOigRueToVU7S3yIfN4j+NSElY8AkvT f/eLxPd4Qt5jRgIOSc9RUobvAEo7prkkjYfR8X2T68ElRWrp5mPGfcC2Ry+FjcfY u5VejmCYL9LDZ7g4 -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:56 2026 by rpki-client