$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/8BDE35DAADB511EEA223FA64C4F9AE02.roa File: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (raw, json) Hash identifier: 8IJddaauAbPRZ+tJveuySl440+OqP5ny57SJigufBM8= Subject key identifier: 40:FC:E3:9F:20:AD:24:F3:36:53:56:BA:F8:1A:5B:3A:C8:1F:F5:0B Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 0196 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/8BDE35DAADB511EEA223FA64C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:41:19 +0000 ROA not before: Sat 03 May 2025 04:41:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135396 IP address blocks: 103.217.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: May 3 04:41:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3df8e-89bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1a:5f:84:95:e0:4a:74:cc:86:8e:06:20:3b: 5a:79:b0:25:a7:a8:ba:9f:6f:dc:35:69:ea:b0:12: e2:34:85:3f:4b:71:e2:79:e3:03:3c:a2:c0:66:a5: 9c:a3:fe:5c:87:c5:84:d4:6b:b0:ee:38:8c:c8:ea: 16:9a:a6:24:1f:82:9d:6f:ed:99:07:2b:0f:85:9d: 3d:8c:9e:00:ab:24:26:eb:e4:23:9f:fa:47:6b:6b: 1f:2a:19:f7:68:7b:be:54:a3:76:1c:20:8a:f1:b1: eb:65:2e:73:82:17:23:2f:36:50:80:e2:5c:08:f7: 68:fb:e5:4c:51:6e:35:20:1d:46:0b:48:b7:d7:74: d0:52:68:6d:fd:44:04:5f:50:2e:d3:e1:46:af:fd: d6:a5:76:fe:23:14:bc:ec:15:38:4e:39:d1:bb:a9: 22:52:6b:21:66:23:ce:fc:f2:2d:d6:b5:6b:63:ed: c9:6e:d5:ba:72:fc:ff:8d:0d:58:30:6c:fe:50:8c: 18:3d:41:1a:98:14:4b:52:1c:ff:04:08:ad:b7:09: 71:ab:c5:60:58:e2:f3:76:7e:c3:cf:2e:26:fe:6a: 6f:84:48:1d:2d:04:3f:31:7c:c6:f5:64:94:82:36: 12:5c:e2:d2:b1:78:40:48:74:29:36:0f:12:73:76: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FC:E3:9F:20:AD:24:F3:36:53:56:BA:F8:1A:5B:3A:C8:1F:F5:0B X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/8BDE35DAADB511EEA223FA64C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.217.74.0/23 Signature Algorithm: sha256WithRSAEncryption ac:e0:5c:19:cc:20:d4:6a:1f:13:ea:d6:d3:7f:41:a2:14:3e: 7f:04:f9:1d:95:10:3b:c4:52:7b:f9:64:9a:84:06:2b:2c:c8: a9:29:99:23:13:05:6a:b8:2b:99:22:d1:9d:64:61:31:0e:29: 09:7d:d7:2b:ab:f8:2f:6e:ba:53:a7:e8:f9:de:b5:9e:66:17: cf:f6:48:cd:7f:ce:22:03:fa:78:f6:f0:ca:23:29:65:db:ac: 98:39:e8:3d:00:3c:eb:cd:bd:13:24:02:19:34:61:2a:00:4c: 97:d8:18:eb:6b:83:14:90:d1:bd:d7:03:4e:53:23:87:ca:48: 11:82:a1:dd:8b:e6:08:aa:89:87:a7:13:b5:d5:1b:62:23:44: 23:bb:2c:a3:7b:3b:e5:6d:61:e0:dc:a4:84:71:77:c0:ac:15: 7b:33:6b:95:d4:d8:dd:6b:fb:0b:7b:da:12:50:28:5d:7d:28: 3e:4d:32:01:44:89:e9:1f:95:f0:47:7d:06:2b:82:ef:99:f0: 83:1a:15:41:d1:4b:21:a1:aa:cc:1d:d7:2b:14:d3:15:2d:63: 47:dc:70:b5:86:59:cc:b9:bf:96:e9:05:04:94:eb:f0:45:50: 50:62:45:3b:9c:ed:86:e4:e1:0b:e5:9e:f0:91:97:0d:a3:c4: 6f:4a:4a:96 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjUwNTAzMDQ0MTI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGY4ZS04OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hpfhJXgSnTMho4GIDtaebAlp6i6n2/cNWnqsBLiNIU/S3HieeMDPKLAZqWc o/5ch8WE1Guw7jiMyOoWmqYkH4Kdb+2ZBysPhZ09jJ4AqyQm6+Qjn/pHa2sfKhn3 aHu+VKN2HCCK8bHrZS5zghcjLzZQgOJcCPdo++VMUW41IB1GC0i313TQUmht/UQE X1Au0+FGr/3WpXb+IxS87BU4TjnRu6kiUmshZiPO/PIt1rVrY+3JbtW6cvz/jQ1Y MGz+UIwYPUEamBRLUhz/BAittwlxq8VgWOLzdn7Dzy4m/mpvhEgdLQQ/MXzG9WSU gjYSXOLSsXhASHQpNg8Sc3bCBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFED8458g rSTzNlNWuvgaWzrIH/ULMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY4RUMvRTA1N0UyQjBBREI0MTFFRUJFQTdFNTYzQzRGOUFFMDIvOEJERTM1REFB REI1MTFFRUEyMjNGQTY0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ9lKMA0GCSqGSIb3DQEBCwUAA4IBAQCs4FwZzCDUah8T6tbTf0Gi FD5/BPkdlRA7xFJ7+WSahAYrLMipKZkjEwVquCuZItGdZGExDikJfdcrq/gvbrpT p+j53rWeZhfP9kjNf84iA/p49vDKIyll26yYOeg9ADzrzb0TJAIZNGEqAEyX2Bjr a4MUkNG91wNOUyOHykgRgqHdi+YIqomHpxO11RtiI0QjuyyjezvlbWHg3KSEcXfA rBV7M2uV1Njda/sLe9oSUChdfSg+TTIBRInpH5XwR30GK4LvmfCDGhVB0UshoarM HdcrFNMVLWNH3HC1hlnMub+W6QUElOvwRVBQYkU7nO2G5OEL5Z7wkZcNo8RvSkqW -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:23 2026 by rpki-client