$ rpki-client -vvf rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa File: 0963FDF0C35711EC9F5ADC3DC4F9AE02.roa (raw, json) Hash identifier: M1O0TrYvAUms1ssHPRAoRq4bhn4VdK0pL3BB4ocE2jg= Subject key identifier: A2:9D:7B:D1:9E:0B:89:6B:18:02:93:41:94:BA:B2:A4:4B:97:08:AC Certificate issuer: /CN=A91717D1/serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Certificate serial: 0F78 Authority key identifier: DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:48:42 +0000 ROA not before: Wed 16 Jul 2025 17:56:43 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135413 IP address blocks: 103.139.8.0/23 maxlen: 23 103.139.8.0/24 maxlen: 24 2001:df0:6180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3960 (0xf78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717D1, serialNumber=DC187FC8416CE5B347BAF221A3613A3B47828E88 Validity Not Before: Jul 16 17:56:43 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a443ba-0bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:a9:a0:fd:bf:f0:c7:35:39:d8:ac:6e:9e: c6:84:99:d4:48:88:4e:0a:32:d8:8e:98:38:e9:ef: dc:98:10:4b:96:0a:dc:11:c7:fa:6d:68:18:6e:d3: c2:30:19:cf:ca:2a:01:27:54:05:c5:75:af:10:49: 5c:d4:53:cb:cb:c4:89:10:a6:33:50:44:9f:23:a6: b5:8c:9c:16:d0:4c:01:78:fe:f8:73:5e:11:33:25: 65:c8:f3:1a:b1:08:82:39:95:11:61:99:2a:a8:17: 11:0d:2a:55:44:4f:95:60:ce:89:ee:1e:1c:f7:70: 54:dc:97:29:31:ae:ee:31:a3:20:76:54:90:5c:48: 63:02:27:1f:ab:ee:c3:77:25:6c:76:de:9c:6c:fe: 4f:71:35:c1:76:27:07:2f:46:24:82:b0:dc:82:c5: bf:37:90:fd:f1:60:7b:7e:1d:56:5e:be:c9:25:c9: ad:e2:04:cf:39:1b:fa:f9:67:fc:d3:34:09:9e:3b: 21:a3:a0:b8:e6:a5:8a:cd:e4:15:84:2e:06:2d:0c: 0d:87:28:ff:1a:56:2f:dd:34:d6:7b:44:43:88:81: 71:27:ca:35:e7:7e:c8:a8:50:7e:bc:5c:88:7c:59: 85:26:82:7d:b3:ab:e3:c7:de:d4:0c:31:65:c5:13: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:9D:7B:D1:9E:0B:89:6B:18:02:93:41:94:BA:B2:A4:4B:97:08:AC X509v3 Authority Key Identifier: keyid:DC:18:7F:C8:41:6C:E5:B3:47:BA:F2:21:A3:61:3A:3B:47:82:8E:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/3Bh_yEFs5bNHuvIho2E6O0eCjog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Bh_yEFs5bNHuvIho2E6O0eCjog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717D1/9A9B48A282A311E99E582384C4F9AE02/0963FDF0C35711EC9F5ADC3DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.8.0/23 IPv6: 2001:df0:6180::/48 Signature Algorithm: sha256WithRSAEncryption 53:08:fe:47:0b:9c:b6:37:5b:27:3f:73:9c:01:de:dd:f3:49: a1:1d:ba:74:65:63:50:0d:dd:68:f5:30:63:39:53:81:27:40: 61:68:03:1a:00:b4:4b:ea:71:4d:8b:7e:11:09:b8:fa:de:1d: 3b:77:00:c7:8d:f2:5d:02:f4:37:27:67:e4:48:9f:91:af:68: 68:02:d6:c2:a5:93:e6:0c:6c:8d:d3:f3:16:14:f3:48:bb:cd: d4:54:b1:06:a8:b3:38:f3:17:e7:92:08:36:cb:b7:60:ac:81: b6:26:83:87:d2:2b:34:bf:f4:77:79:e4:ab:e4:1a:b7:b4:9f: 18:31:d4:2e:7e:ab:28:6d:89:fa:b3:0c:c7:05:a7:1d:e3:31: 80:40:fa:ef:15:94:4e:07:1f:73:10:7d:b0:04:4d:01:12:38: 42:ed:93:27:5c:90:1e:a5:b9:f5:a0:1f:b1:77:18:c3:9e:28: 7e:ca:c1:d2:50:2b:50:58:fd:07:5d:60:0a:6f:5c:d7:18:1e: 79:80:1a:aa:6d:61:ba:cd:71:f1:68:f4:30:5d:c0:7a:86:a6: 25:47:0a:b3:33:e4:1c:fa:81:f5:3e:12:d2:c7:5c:e2:11:c2: 2a:c3:29:3a:51:9a:65:65:a8:e6:1d:af:29:94:68:8b:e4:4a: 8f:a0:0e:34 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICD3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3RDExMTAvBgNVBAUTKERDMTg3RkM4NDE2Q0U1QjM0N0JBRjIyMUEzNjEzQTNC NDc4MjhFODgwHhcNMjUwNzE2MTc1NjQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDNiYS0wYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueapoP2/8Mc1Odisbp7GhJnUSIhOCjLYjpg46e/cmBBLlgrcEcf6bWgYbtPC MBnPyioBJ1QFxXWvEElc1FPLy8SJEKYzUESfI6a1jJwW0EwBeP74c14RMyVlyPMa sQiCOZURYZkqqBcRDSpVRE+VYM6J7h4c93BU3JcpMa7uMaMgdlSQXEhjAicfq+7D dyVsdt6cbP5PcTXBdicHL0YkgrDcgsW/N5D98WB7fh1WXr7JJcmt4gTPORv6+Wf8 0zQJnjsho6C45qWKzeQVhC4GLQwNhyj/GlYv3TTWe0RDiIFxJ8o1537IqFB+vFyI fFmFJoJ9s6vjx97UDDFlxRNm6wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKKde9Ge C4lrGAKTQZS6sqRLlwisMB8GA1UdIwQYMBaAFNwYf8hBbOWzR7ryIaNhOjtHgo6I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdEMS85QTlCNDhBMjgy QTMxMUU5OUU1ODIzODRDNEY5QUUwMi8zQmhfeUVGczViTkh1dklobzJFNk8wZUNq b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNCaF95RUZzNWJOSHV2SWhvMkU2TzBlQ2pvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE3RDEvOUE5QjQ4QTI4MkEzMTFFOTlFNTgyMzg0QzRGOUFFMDIvMDk2M0ZERjBD MzU3MTFFQzlGNUFEQzNEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4sIMA8EAgACMAkDBwAgAQ3wYYAwDQYJKoZIhvcNAQELBQADggEB AFMI/kcLnLY3Wyc/c5wB3t3zSaEdunRlY1AN3Wj1MGM5U4EnQGFoAxoAtEvqcU2L fhEJuPreHTt3AMeN8l0C9DcnZ+RIn5GvaGgC1sKlk+YMbI3T8xYU80i7zdRUsQao szjzF+eSCDbLt2CsgbYmg4fSKzS/9Hd55KvkGre0nxgx1C5+qyhtifqzDMcFpx3j MYBA+u8VlE4HH3MQfbAETQESOELtkydckB6lufWgH7F3GMOeKH7KwdJQK1BY/Qdd YApvXNcYHnmAGqptYbrNcfFo9DBdwHqGpiVHCrMz5Bz6gfU+EtLHXOIRwirDKTpR mmVlqOYdrymUaIvkSo+gDjQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:52 2026 by rpki-client