$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa File: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (raw, json) Hash identifier: +7Lf6kxVJqd3BCYCOdcg2bt/oX1o6nqQAFJ3/VpyaiE= Subject key identifier: 78:C1:02:00:3A:A3:93:AD:E7:09:5A:C5:37:6C:36:BD:77:FE:94:82 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0BBA Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:44:31 +0000 ROA not before: Fri 18 Apr 2025 19:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134204 IP address blocks: 103.211.28.0/22 maxlen: 22 103.211.28.0/24 maxlen: 24 103.211.29.0/24 maxlen: 24 103.211.30.0/24 maxlen: 24 103.211.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3002 (0xbba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Apr 18 19:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4269f-48b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:15:a6:db:fc:6b:75:e5:5b:05:dc:56:8c:41: 0e:8b:b9:9f:43:24:b9:94:8d:b3:11:58:e1:b0:4f: 61:21:19:7a:e8:ff:b7:02:6c:b1:58:94:fe:60:ab: 9e:e7:f3:09:49:dd:e1:16:b3:16:5f:dd:25:ec:c8: 0d:e8:f9:4d:6b:72:fc:96:37:fd:82:a4:26:45:5a: 9e:8e:46:fa:31:dd:61:58:8d:40:63:a3:c4:74:5e: aa:f7:c9:2e:6d:e4:3c:99:93:d7:c2:bc:c1:e7:33: 84:b0:6c:bc:d8:18:90:1a:09:24:6b:6a:91:ef:65: 72:6d:89:dc:ca:cf:cd:1c:22:d1:0c:70:aa:80:da: 61:28:c9:a8:3d:42:29:13:a2:8a:fc:d8:67:95:42: 7c:85:51:54:3e:ad:26:fb:03:f2:86:4a:6b:31:c9: d4:5b:c3:ad:aa:fe:87:9f:f4:f7:2d:79:87:00:14: b6:cd:fb:97:24:ed:46:f9:2e:17:f6:fa:af:e4:2c: 43:8f:7c:47:1a:5d:79:fa:95:e9:b4:af:b9:2e:8a: c8:c5:55:07:82:72:17:f1:31:c9:d3:78:d8:06:a1: 7a:f0:3a:82:dc:a3:2c:16:fd:27:73:8d:2f:16:54: 3f:9b:a6:08:a1:14:cc:b2:65:6b:3e:43:98:04:11: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C1:02:00:3A:A3:93:AD:E7:09:5A:C5:37:6C:36:BD:77:FE:94:82 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/8B37D2C40D2511EFA2E4D985C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.211.28.0/22 Signature Algorithm: sha256WithRSAEncryption 10:f2:ab:a6:35:35:b4:97:b8:74:79:64:a7:f3:86:89:44:fc: e9:9d:28:d1:b8:ac:ba:2a:c7:de:ce:48:09:69:8d:a9:fa:1c: 90:30:bb:a6:3d:9e:16:40:e4:0b:86:48:7d:a5:ab:f3:53:39: 5a:e5:e0:f8:97:4b:cd:30:e7:36:37:d3:3e:f0:1d:1f:8f:9b: e5:0b:5a:fa:5b:bc:b9:39:45:de:4d:4d:a3:8c:3a:73:47:41: d8:53:c6:69:55:4c:ae:9d:f7:b4:4b:39:19:1f:ee:bd:2c:aa: 16:3d:13:c9:10:41:7b:1e:1a:a8:b4:27:02:5c:53:26:aa:6e: 8a:56:df:15:71:4d:c3:08:c9:88:20:d2:63:3e:67:cd:6d:6f: 50:29:8e:a5:17:a5:3d:cc:a9:90:11:f9:01:38:f7:44:94:9b: 9c:8e:4c:02:27:6f:e5:72:06:90:b0:e8:b2:92:9b:f9:ed:1b: 08:a0:93:7e:24:58:bf:28:cb:09:18:f9:fa:c6:0b:02:4d:06: 15:73:bb:19:a5:f2:a5:22:77:45:6a:11:85:97:5e:3f:a9:79: d7:7b:71:03:f4:58:5b:68:71:82:c8:c8:37:a2:23:6b:13:c0: 20:26:37:6f:46:1c:e8:5a:c3:25:fd:ec:b5:bb:97:26:ce:b6: eb:40:0c:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjUwNDE4MTk0MTI5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjY5Zi00OGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hWm2/xrdeVbBdxWjEEOi7mfQyS5lI2zEVjhsE9hIRl66P+3AmyxWJT+YKue 5/MJSd3hFrMWX90l7MgN6PlNa3L8ljf9gqQmRVqejkb6Md1hWI1AY6PEdF6q98ku beQ8mZPXwrzB5zOEsGy82BiQGgkka2qR72VybYncys/NHCLRDHCqgNphKMmoPUIp E6KK/NhnlUJ8hVFUPq0m+wPyhkprMcnUW8Otqv6Hn/T3LXmHABS2zfuXJO1G+S4X 9vqv5CxDj3xHGl15+pXptK+5LorIxVUHgnIX8THJ03jYBqF68DqC3KMsFv0nc40v FlQ/m6YIoRTMsmVrPkOYBBFVRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHjBAgA6 o5Ot5wlaxTdsNr13/pSCMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA2RjIvOEI4QzRERDIzRjQ3MTFFQThFNURBODdDQzRGOUFFMDIvOEIzN0QyQzQw RDI1MTFFRkEyRTREOTg1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ9McMA0GCSqGSIb3DQEBCwUAA4IBAQAQ8qumNTW0l7h0eWSn84aJ RPzpnSjRuKy6KsfezkgJaY2p+hyQMLumPZ4WQOQLhkh9pavzUzla5eD4l0vNMOc2 N9M+8B0fj5vlC1r6W7y5OUXeTU2jjDpzR0HYU8ZpVUyunfe0SzkZH+69LKoWPRPJ EEF7HhqotCcCXFMmqm6KVt8VcU3DCMmIINJjPmfNbW9QKY6lF6U9zKmQEfkBOPdE lJucjkwCJ2/lcgaQsOiykpv57RsIoJN+JFi/KMsJGPn6xgsCTQYVc7sZpfKlIndF ahGFl14/qXnXe3ED9FhbaHGCyMg3oiNrE8AgJjdvRhzoWsMl/ey1u5cmzrbrQAxU -----END CERTIFICATE-----Generated at Mon Mar 2 07:42:13 2026 by rpki-client