$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/DCF1073E26B211E9B0DD0155C4F9AE02.roa File: DCF1073E26B211E9B0DD0155C4F9AE02.roa (raw, json) Hash identifier: fDbYr0EVY0HHpg82DdAQ+a/vYfR5r/kAjpAM5PF5EpE= Subject key identifier: 16:A0:AD:C5:2D:52:B0:77:67:94:75:37:90:64:27:CD:66:74:6E:D9 Certificate issuer: /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C Certificate serial: 1761 Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/DCF1073E26B211E9B0DD0155C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:49:53 +0000 ROA not before: Thu 26 Feb 2026 17:14:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17804 IP address blocks: 103.26.103.0/24 maxlen: 24 103.82.56.0/22 maxlen: 22 103.228.101.0/24 maxlen: 24 2400:81c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5985 (0x1761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C Validity Not Before: Feb 26 17:14:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47c41-a6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:96:54:6e:54:1e:3c:3a:45:eb:97:b4:2b: ee:b0:f8:49:e0:d1:2e:6d:22:fa:89:cb:2e:db:93: 01:e1:79:7a:c6:b4:8f:84:75:d1:89:61:dc:39:f2: 83:ec:72:65:f2:07:95:d4:7e:33:32:de:02:0a:d0: a3:8c:d7:60:e5:3a:39:db:82:ac:ea:2a:cc:30:f2: 3a:13:d4:f1:bd:97:f1:66:ab:99:b1:57:ce:27:d8: 18:18:a8:f5:a8:af:d2:2a:d3:f0:50:87:f7:7a:3b: a6:68:58:43:c2:a1:8f:80:fa:b4:9a:13:58:c1:2d: 67:62:61:35:e9:67:74:2e:de:14:36:34:42:76:30: 46:2f:3b:17:4f:2c:11:09:cb:85:7c:90:42:ca:2d: 3a:11:eb:e8:35:2c:4e:df:b4:ab:aa:b3:10:b1:d2: f4:46:91:37:ab:06:12:f2:7c:0e:0a:24:84:83:29: c5:63:54:3d:38:54:ae:c1:ae:b4:a1:12:af:38:2d: ea:65:51:c9:d8:f6:90:c9:b2:8b:6a:f9:95:3b:d1: 85:2a:c6:13:63:73:de:51:dc:43:97:c7:0e:3f:50: 40:6e:45:44:f0:fe:8b:8e:a4:c1:e8:33:9e:d8:26: df:8e:d7:2a:f9:0b:ee:ad:82:b8:33:15:3f:bf:47: dc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A0:AD:C5:2D:52:B0:77:67:94:75:37:90:64:27:CD:66:74:6E:D9 X509v3 Authority Key Identifier: keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/DCF1073E26B211E9B0DD0155C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.26.103.0/24 103.82.56.0/22 103.228.101.0/24 IPv6: 2400:81c0::/32 Signature Algorithm: sha256WithRSAEncryption 21:9b:54:4c:2c:00:ee:1b:d2:88:68:f2:86:b9:94:f6:f4:aa: 0b:10:91:df:d6:31:0d:2c:7e:e8:ad:dd:cb:c1:2b:4d:4a:45: e8:b0:9d:61:1b:25:2d:c9:b4:67:4e:38:f3:37:bf:f0:d4:e5: 8a:50:7c:49:71:89:df:05:9d:5f:ab:e6:4c:fb:6d:c2:a9:91: 27:ff:c6:97:bc:66:65:20:d2:4b:39:53:f5:20:eb:09:bf:3a: 0d:00:92:57:77:91:78:47:41:c6:20:81:35:11:1e:ba:97:0f: 16:07:9d:b5:8b:64:1d:2d:c7:36:64:08:18:87:91:a6:49:a4: b4:37:a6:f8:d5:c9:51:4a:ee:df:fa:20:5f:da:da:7c:f3:f0: 53:77:95:46:d4:8b:fb:b5:93:1e:8d:4b:32:57:4f:e0:30:53: 95:6f:3c:c3:e0:c8:a7:11:cd:8b:46:93:4d:2c:83:d7:eb:b6: 56:6f:0c:ae:93:f6:7f:93:a8:7e:81:be:07:e5:6a:1a:78:78: 3f:e3:19:6c:c6:93:15:1d:a4:ca:d0:2f:ee:e6:17:f9:c0:91: de:91:11:90:d5:fc:1a:a0:1a:6f:e5:1a:bd:d5:6a:69:dc:5f: 27:ec:1e:28:15:72:89:ba:20:11:78:dd:0a:1b:aa:e1:2c:70: 6b:b3:8d:11 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICF2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKERBRTc1MDhEMTFFNDcyMjhEQTFGRTAwMzI1OTdCQkQy OUY3NTg5MEMwHhcNMjYwMjI2MTcxNDE0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2M0MS1hNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2p+WVG5UHjw6ReuXtCvusPhJ4NEubSL6icsu25MB4Xl6xrSPhHXRiWHcOfKD 7HJl8geV1H4zMt4CCtCjjNdg5To524Ks6irMMPI6E9TxvZfxZquZsVfOJ9gYGKj1 qK/SKtPwUIf3ejumaFhDwqGPgPq0mhNYwS1nYmE16Wd0Lt4UNjRCdjBGLzsXTywR CcuFfJBCyi06EevoNSxO37SrqrMQsdL0RpE3qwYS8nwOCiSEgynFY1Q9OFSuwa60 oRKvOC3qZVHJ2PaQybKLavmVO9GFKsYTY3PeUdxDl8cOP1BAbkVE8P6LjqTB6DOe 2Cbfjtcq+QvurYK4MxU/v0fcEQIDAQABo4ICezCCAncwHQYDVR0OBBYEFBagrcUt UrB3Z5R1N5BkJ81mdG7ZMB8GA1UdIwQYMBaAFNrnUI0R5HIo2h/gAyWXu9KfdYkM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC80NjI4QkVDNDAw RDgxMUU4OTA2MTA2MzdDNEY5QUUwMi8ydWRRalJIa2NpamFILUFESlplNzBwOTFp UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1ZFFqUkhrY2lqYUgtQURKWmU3MHA5MWlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTEyREQvNDYyOEJFQzQwMEQ4MTFFODkwNjEwNjM3QzRGOUFFMDIvRENGMTA3M0Uy NkIyMTFFOUIwREQwMTU1QzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZxpnAwQCZ1I4AwQAZ+RlMA0EAgACMAcDBQAkAIHAMA0GCSqGSIb3 DQEBCwUAA4IBAQAhm1RMLADuG9KIaPKGuZT29KoLEJHf1jENLH7ord3LwStNSkXo sJ1hGyUtybRnTjjzN7/w1OWKUHxJcYnfBZ1fq+ZM+23CqZEn/8aXvGZlINJLOVP1 IOsJvzoNAJJXd5F4R0HGIIE1ER66lw8WB521i2QdLcc2ZAgYh5GmSaS0N6b41clR Su7f+iBf2tp88/BTd5VG1Iv7tZMejUsyV0/gMFOVbzzD4MinEc2LRpNNLIPX67ZW bwyuk/Z/k6h+gb4H5WoaeHg/4xlsxpMVHaTK0C/u5hf5wJHekRGQ1fwaoBpv5Rq9 1Wpp3F8n7B4oFXKJuiAReN0KG6rhLHBrs40R -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:29 2026 by rpki-client