$ rpki-client -vvf rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/D3378C20171D11EAAA15E818C4F9AE02.roa File: D3378C20171D11EAAA15E818C4F9AE02.roa (raw, json) Hash identifier: w6iMyuMBfPO7xrnEz0eJziDro4IN8ribezF+ecPYmqI= Subject key identifier: 30:F0:3B:F0:0D:DA:9B:66:0F:0B:B0:29:CE:44:10:87:9C:95:0E:D9 Certificate issuer: /CN=A91816BD/serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Certificate serial: 1022 Authority key identifier: C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/D3378C20171D11EAAA15E818C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:19:58 +0000 ROA not before: Tue 08 Apr 2025 17:56:28 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135300 IP address blocks: 103.116.12.0/24 maxlen: 24 103.133.242.0/23 maxlen: 23 103.133.242.0/24 maxlen: 24 103.133.243.0/24 maxlen: 24 103.213.30.0/24 maxlen: 24 117.55.248.0/22 maxlen: 22 117.55.248.0/23 maxlen: 23 117.55.248.0/24 maxlen: 24 117.55.249.0/24 maxlen: 24 117.55.250.0/23 maxlen: 23 117.55.250.0/24 maxlen: 24 117.55.251.0/24 maxlen: 24 117.55.252.0/23 maxlen: 23 117.55.252.0/24 maxlen: 24 117.55.253.0/24 maxlen: 24 2001:df1:7e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4130 (0x1022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91816BD, serialNumber=C24C51BDB02B7136C0F25AF195B37037997B17E8 Validity Not Before: Apr 8 17:56:28 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a404be-93c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:f0:c2:fd:3f:5e:4d:dd:1b:04:e3:2a:49: 6f:95:bb:06:47:70:70:f3:22:7a:24:1b:ba:a9:be: 4b:0d:c4:96:b1:26:83:e0:e9:82:50:96:7e:ec:09: f4:ef:af:13:0b:58:65:8f:c6:cf:20:27:ab:84:86: 1c:a6:a9:6b:18:fa:a9:06:b5:d2:e2:56:d3:2d:13: c9:2a:56:0e:db:74:ad:42:0d:5e:ef:8d:ca:26:7a: e3:9c:63:87:8e:7a:93:b9:90:2b:c6:12:05:de:0d: ad:25:03:a7:78:a0:80:4e:bf:53:63:47:c0:15:ae: cb:88:c9:d7:f7:e5:44:8c:ab:66:15:e5:6e:b9:0c: 16:2c:08:81:a2:08:37:3a:ea:d7:da:28:a7:27:ed: 5a:ee:98:f3:96:03:3d:54:0a:f3:16:4e:86:fb:53: b5:27:ed:2b:f2:f5:ed:29:d3:c8:2c:f5:14:4b:83: 24:ba:7e:6b:cb:d6:08:b3:dd:3f:e6:b6:fa:ae:31: f3:c2:0c:73:97:1f:60:8b:18:28:e7:d9:1e:a8:52: 86:6e:be:e3:08:81:b5:24:4a:21:76:e9:73:50:f8: 8b:1a:fe:6b:5f:fc:71:3a:5d:03:b7:95:aa:3a:bb: 9d:7d:24:6f:cb:63:62:95:cd:5d:c4:e2:5a:a7:0f: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F0:3B:F0:0D:DA:9B:66:0F:0B:B0:29:CE:44:10:87:9C:95:0E:D9 X509v3 Authority Key Identifier: keyid:C2:4C:51:BD:B0:2B:71:36:C0:F2:5A:F1:95:B3:70:37:99:7B:17:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/wkxRvbArcTbA8lrxlbNwN5l7F-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wkxRvbArcTbA8lrxlbNwN5l7F-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91816BD/98A5DF9C658111E9AA83335DC4F9AE02/D3378C20171D11EAAA15E818C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.116.12.0/24 103.133.242.0/23 103.213.30.0/24 117.55.248.0-117.55.253.255 IPv6: 2001:df1:7e00::/48 Signature Algorithm: sha256WithRSAEncryption 73:b3:06:58:28:c3:83:65:f8:84:68:3c:61:1c:77:a9:91:49: 7f:cc:06:88:c7:2b:f4:36:19:63:71:46:5f:95:e0:3c:9a:bb: 59:08:5f:a2:40:f7:86:71:74:a2:1f:0a:bd:d2:75:4e:9d:41: f7:57:c1:d2:0f:fd:10:5b:0b:d4:43:4c:e7:0f:fe:3f:5c:a4: 24:2b:90:e5:93:90:6e:c0:29:d0:ca:67:ad:a9:77:77:c8:6d: b7:c6:f6:28:08:f8:a0:cf:88:85:da:0a:89:9f:5e:49:bf:51: ab:97:71:66:0f:92:bc:c9:01:b2:3a:7d:f6:06:fd:4f:f5:b7: 1e:8d:4f:b8:8a:db:bf:da:bb:76:97:65:6e:69:d3:0b:cf:4f: 0f:63:77:fc:3c:6d:86:3c:b8:c0:de:17:33:9d:db:41:75:2c: c5:52:35:04:24:39:af:c8:81:a9:cb:86:87:5a:b8:52:6c:e6: 77:b9:ce:c0:ae:3d:5b:c8:7f:91:b5:e8:06:5e:e9:8e:3c:3e: c3:87:ae:e3:7b:60:d4:37:f4:ab:f9:e1:77:28:89:51:7d:a8: de:be:31:07:8c:f8:7f:10:d5:75:da:f3:35:66:ef:20:74:e7: 23:5b:bb:3b:f7:e1:32:8b:8a:c9:b7:52:e2:38:e4:1e:f9:8d: ea:0e:19:f8 -----BEGIN CERTIFICATE----- MIIFZzCCBE+gAwIBAgICECIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE2QkQxMTAvBgNVBAUTKEMyNEM1MUJEQjAyQjcxMzZDMEYyNUFGMTk1QjM3MDM3 OTk3QjE3RTgwHhcNMjUwNDA4MTc1NjI4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDRiZS05M2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumHwwv0/Xk3dGwTjKklvlbsGR3Bw8yJ6JBu6qb5LDcSWsSaD4OmCUJZ+7An0 768TC1hlj8bPICerhIYcpqlrGPqpBrXS4lbTLRPJKlYO23StQg1e743KJnrjnGOH jnqTuZArxhIF3g2tJQOneKCATr9TY0fAFa7LiMnX9+VEjKtmFeVuuQwWLAiBogg3 OurX2iinJ+1a7pjzlgM9VArzFk6G+1O1J+0r8vXtKdPILPUUS4Mkun5ry9YIs90/ 5rb6rjHzwgxzlx9gixgo59keqFKGbr7jCIG1JEohdulzUPiLGv5rX/xxOl0Dt5Wq OrudfSRvy2Nilc1dxOJapw+o9wIDAQABo4ICizCCAocwHQYDVR0OBBYEFDDwO/AN 2ptmDwuwKc5EEIeclQ7ZMB8GA1UdIwQYMBaAFMJMUb2wK3E2wPJa8ZWzcDeZexfo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTZCRC85OEE1REY5QzY1 ODExMUU5QUE4MzMzNURDNEY5QUUwMi93a3hSdmJBcmNUYkE4bHJ4bGJOd041bDdG LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dreFJ2YkFyY1RiQThscnhsYk53TjVsN0YtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE2QkQvOThBNURGOUM2NTgxMTFFOUFBODMzMzVEQzRGOUFFMDIvRDMzNzhDMjAx NzFEMTFFQUFBMTVFODE4QzRGOUFFMDIucm9hMEoGCCsGAQUFBwEHAQH/BDswOTAm BAIAATAgAwQAZ3QMAwQBZ4XyAwQAZ9UeMAwDBAN1N/gDBAF1N/wwDwQCAAIwCQMH ACABDfF+ADANBgkqhkiG9w0BAQsFAAOCAQEAc7MGWCjDg2X4hGg8YRx3qZFJf8wG iMcr9DYZY3FGX5XgPJq7WQhfokD3hnF0oh8KvdJ1Tp1B91fB0g/9EFsL1ENM5w/+ P1ykJCuQ5ZOQbsAp0Mpnral3d8htt8b2KAj4oM+IhdoKiZ9eSb9Rq5dxZg+SvMkB sjp99gb9T/W3Ho1PuIrbv9q7dpdlbmnTC89PD2N3/Dxthjy4wN4XM53bQXUsxVI1 BCQ5r8iBqcuGh1q4Umzmd7nOwK49W8h/kbXoBl7pjjw+w4eu43tg1Df0q/nhdyiJ UX2o3r4xB4z4fxDVddrzNWbvIHTnI1u7O/fhMouKybdS4jjkHvmN6g4Z+A== -----END CERTIFICATE-----Generated at Mon Mar 2 06:21:42 2026 by rpki-client