$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/A216EC4E3C7911F0B25C0585C4F9AE02.roa File: A216EC4E3C7911F0B25C0585C4F9AE02.roa (raw, json) Hash identifier: PzMKVF5RWKMCBBz+uMcp/BJxucoQAleKAMkhu2SsbNI= Subject key identifier: 1B:A0:84:2A:BB:FC:2C:77:86:DE:A3:C8:1A:6F:15:F3:4A:E5:F8:EB Certificate issuer: /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Certificate serial: 028F Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/A216EC4E3C7911F0B25C0585C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:10:28 +0000 ROA not before: Mon 03 Nov 2025 02:17:24 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 34985 IP address blocks: 103.96.0.0/24 maxlen: 24 103.96.2.0/24 maxlen: 24 103.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D Validity Not Before: Nov 3 02:17:24 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48114-c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:e6:2a:d6:b7:37:7e:7c:81:86:9c:06:f3: 5d:ef:cf:5f:bc:9a:af:52:fa:cd:e5:9f:1e:b2:09: 90:25:a9:20:46:62:b2:22:4c:bd:ab:c6:84:7f:06: 4b:54:83:ad:01:f8:5e:77:21:dc:09:3b:0b:8e:b0: d0:79:39:95:d7:eb:af:b3:87:a1:d3:40:5a:be:b4: 7e:90:f7:6a:b0:ee:ea:2c:58:05:71:2d:3a:f2:78: d9:5b:15:ab:4e:c5:d2:51:b7:91:05:a7:f7:8c:3c: 8d:53:e5:90:16:a1:2d:93:96:f0:db:a7:9b:23:06: dc:16:6d:6f:63:fd:5b:ee:e3:8b:e7:62:a4:ea:a2: 00:7c:bd:14:d2:0d:dd:5c:cc:dd:a8:18:b9:8a:43: 9d:34:30:4d:73:3b:0c:8e:6d:cc:d5:dc:2a:ce:c1: 2e:3a:cc:81:72:cc:8c:34:c8:c1:c8:40:67:3a:08: 3a:2a:d2:a9:a4:ba:b2:2f:97:7d:a7:cd:d1:a7:4d: 0d:ea:a0:1f:28:bd:79:7c:e2:69:f5:80:9c:71:2a: f6:ca:41:37:5b:70:a7:98:98:24:66:e5:96:fe:75: b2:9a:a4:f6:e7:88:fd:3f:32:6a:ef:0a:1f:5f:72: 35:45:e1:2a:26:ab:c2:57:1b:c5:87:9b:3d:46:2a: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A0:84:2A:BB:FC:2C:77:86:DE:A3:C8:1A:6F:15:F3:4A:E5:F8:EB X509v3 Authority Key Identifier: keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/A216EC4E3C7911F0B25C0585C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.96.0.0/24 103.96.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:9f:79:e3:d4:c2:49:92:86:52:3e:b7:3b:87:3e:72:69:51: 78:2e:fc:9e:e1:be:bc:18:ca:8f:50:e5:5c:fb:a6:de:a1:f2: 7b:e3:e1:b9:38:25:9f:00:bc:05:b0:cb:d6:64:c0:e7:29:e3: e7:7c:3a:ec:cd:5f:87:2a:e4:c1:c6:c4:dd:c6:4c:52:88:c5: 4e:4c:d8:63:31:63:67:28:2b:74:49:ef:55:a9:19:52:07:b0: d6:1d:16:ee:8d:5a:e3:af:68:12:cb:0b:26:76:bc:96:07:c7: fe:b3:92:de:b0:92:7a:da:fa:97:e7:46:5a:8c:44:d2:d3:32: 02:4f:60:e8:fb:66:2f:52:f3:55:69:4c:7b:ed:02:c7:df:49: 5a:3c:dd:45:f2:75:59:64:c3:ae:63:15:c5:1d:e8:7c:3e:6d: 7c:77:13:d1:7e:a8:e4:de:68:6a:bb:89:28:3e:92:87:4a:45: 90:00:02:49:f2:ee:06:00:d2:df:bb:c8:21:4e:67:a3:9d:7e: 1f:36:50:1e:15:87:49:fe:d0:fe:8c:e4:8e:84:8a:a6:aa:51: 87:ba:52:23:83:bf:6d:a3:d3:65:44:f4:9a:18:af:55:63:be: b7:dc:f3:8e:20:70:76:c6:ee:98:d0:db:9e:e4:78:2a:0f:fe: 0c:59:ee:d9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDZCNTNGODBGOEU4ODFCMzczMTk3MjY2M0JBMTg5N0I3 NEE5MkQ0NEQwHhcNMjUxMTAzMDIxNzI0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODExNC1jNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaDmKta3N358gYacBvNd789fvJqvUvrN5Z8esgmQJakgRmKyIky9q8aEfwZL VIOtAfhedyHcCTsLjrDQeTmV1+uvs4eh00BavrR+kPdqsO7qLFgFcS068njZWxWr TsXSUbeRBaf3jDyNU+WQFqEtk5bw26ebIwbcFm1vY/1b7uOL52Kk6qIAfL0U0g3d XMzdqBi5ikOdNDBNczsMjm3M1dwqzsEuOsyBcsyMNMjByEBnOgg6KtKppLqyL5d9 p83Rp00N6qAfKL15fOJp9YCccSr2ykE3W3CnmJgkZuWW/nWymqT254j9PzJq7wof X3I1ReEqJqvCVxvFh5s9RioL3wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBughCq7 /Cx3ht6jyBpvFfNK5fjrMB8GA1UdIwQYMBaAFGtT+A+OiBs3MZcmY7oYl7dKktRN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy81RkEzNkUzNDg5 MjMxMUVEQkNBMjk2MTNDNEY5QUUwMi9hMVA0RDQ2SUd6Y3hseVpqdWhpWHQwcVMx RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExUDRENDZJR3pjeGx5Wmp1aGlYdDBxUzFFMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNUZBMzZFMzQ4OTIzMTFFREJDQTI5NjEzQzRGOUFFMDIvQTIxNkVDNEUz Qzc5MTFGMEIyNUMwNTg1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ2AAAwQBZ2ACMA0GCSqGSIb3DQEBCwUAA4IBAQCfn3nj1MJJkoZS Prc7hz5yaVF4Lvye4b68GMqPUOVc+6beofJ74+G5OCWfALwFsMvWZMDnKePnfDrs zV+HKuTBxsTdxkxSiMVOTNhjMWNnKCt0Se9VqRlSB7DWHRbujVrjr2gSywsmdryW B8f+s5LesJJ62vqX50ZajETS0zICT2Do+2YvUvNVaUx77QLH30laPN1F8nVZZMOu YxXFHeh8Pm18dxPRfqjk3mhqu4koPpKHSkWQAAJJ8u4GANLfu8ghTmejnX4fNlAe FYdJ/tD+jOSOhIqmqlGHulIjg79to9NlRPSaGK9VY7633POOIHB2xu6Y0Nue5Hgq D/4MWe7Z -----END CERTIFICATE-----Generated at Tue Mar 3 01:59:08 2026 by rpki-client