$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa File: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (raw, json) Hash identifier: dGkZlvZrZzzmUrpdcX6PjNjrHOBIi+bf0tGrQjJ9ueg= Subject key identifier: D3:E5:C0:23:78:45:B5:22:EC:A9:BE:32:AE:5B:1C:C2:2A:0B:4A:FF Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0BE9 Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:22:27 +0000 ROA not before: Thu 22 Jan 2026 11:14:02 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 23532 IP address blocks: 103.245.233.0/24 maxlen: 24 103.245.234.0/24 maxlen: 24 103.245.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3049 (0xbe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Jan 22 11:14:02 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a483e2-22c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:14:15:52:62:83:14:06:5d:c9:20:24:93: 23:53:c3:88:2d:c3:2c:1a:f4:8f:13:94:30:85:b9: 80:94:ef:26:81:9a:fc:e1:14:f1:52:f8:1e:79:ab: ad:11:fc:36:5c:94:4d:fd:88:46:71:59:26:19:d7: f4:ed:9d:a6:7e:84:b7:0f:69:b7:b3:98:b4:87:4f: 62:ec:af:d4:9f:b8:a0:60:51:89:9d:69:f2:31:92: 4f:20:4a:65:56:c0:a8:09:f9:6b:5a:5d:4f:50:b6: 7b:3d:02:ca:22:b8:5e:92:96:82:9a:72:87:f4:c1: 23:85:f1:e3:0c:86:3e:d7:7f:7b:01:09:5f:ff:1b: af:70:29:b2:2d:da:a7:98:ae:ab:56:f9:46:2d:ff: 43:aa:09:f7:cf:7c:05:83:23:39:56:02:88:ae:00: da:2d:c0:64:68:17:11:28:6b:0c:9a:3b:2c:32:62: 0d:ea:df:c6:e9:9b:95:1c:39:9d:13:d3:39:a7:53: 30:fb:6c:2d:63:44:d7:82:33:58:ab:be:ae:c6:5f: 16:aa:91:41:fd:d5:6e:27:fa:6d:4b:39:16:97:f9: b1:47:5c:c0:55:9f:45:da:96:f3:05:75:9e:d1:86: bb:9b:0e:d8:4d:6c:cf:64:f8:f3:27:03:06:b7:1e: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E5:C0:23:78:45:B5:22:EC:A9:BE:32:AE:5B:1C:C2:2A:0B:4A:FF X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/84210E0A9AAB11F0AFE54B2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.233.0-103.245.235.255 Signature Algorithm: sha256WithRSAEncryption 3d:d8:5b:45:9a:6c:26:24:e4:4a:e1:7c:c9:9f:91:ea:87:e1: 55:0d:be:e7:b3:aa:f4:f4:f5:e9:7c:d9:59:bc:a9:ac:5c:64: ed:e0:c7:b2:87:cc:fe:5d:1e:30:ad:6a:aa:5e:d3:9e:35:55: ab:69:58:e2:37:19:bf:4d:0e:a0:e9:97:9a:45:a7:69:6e:7d: 4c:36:98:a2:6d:3f:1d:e1:06:21:e6:0c:5a:35:77:5a:e7:d8: 19:ca:ce:4c:37:99:02:5d:d3:52:74:28:d0:c2:f0:3f:3e:0a: 9d:3d:32:ee:c5:7d:33:7d:c2:cf:06:89:07:87:a4:f4:85:e8: fe:ce:0e:31:c3:23:61:37:5b:0a:4f:92:7d:ff:bf:2f:24:ff: 8f:fb:e2:d1:4a:4d:2f:3d:f1:a6:5f:ff:6a:33:96:ca:b3:af: bc:34:34:ab:d1:cf:1b:cf:cc:d4:01:2f:ff:34:74:e4:cd:58: 58:96:25:b9:ca:20:75:b9:10:ee:84:bd:33:3e:de:95:59:09: 24:ea:30:b5:6a:09:53:c6:5a:13:b2:9c:7a:29:08:25:10:8f: c9:1b:3c:5b:68:c6:b6:bb:a0:de:22:72:e1:69:43:19:d8:22: 2b:0f:e7:1d:a3:51:a8:17:b3:6f:10:e2:2a:25:68:3d:5a:b5: 73:02:8c:88 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICC+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjYwMTIyMTExNDAyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODNlMi0yMmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu14UFVJigxQGXckgJJMjU8OILcMsGvSPE5QwhbmAlO8mgZr84RTxUvgeeaut Efw2XJRN/YhGcVkmGdf07Z2mfoS3D2m3s5i0h09i7K/Un7igYFGJnWnyMZJPIEpl VsCoCflrWl1PULZ7PQLKIrhekpaCmnKH9MEjhfHjDIY+1397AQlf/xuvcCmyLdqn mK6rVvlGLf9Dqgn3z3wFgyM5VgKIrgDaLcBkaBcRKGsMmjssMmIN6t/G6ZuVHDmd E9M5p1Mw+2wtY0TXgjNYq76uxl8WqpFB/dVuJ/ptSzkWl/mxR1zAVZ9F2pbzBXWe 0Ya7mw7YTWzPZPjzJwMGtx7qkQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFNPlwCN4 RbUi7Km+Mq5bHMIqC0r/MB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTIzNTkvRkMyOThERUE0MTcwMTFFQTk4REU2NTZBQzRGOUFFMDIvODQyMTBFMEE5 QUFCMTFGMEFGRTU0QjJBQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBABn9ekDBAJn9egwDQYJKoZIhvcNAQELBQADggEBAD3YW0WabCYk 5ErhfMmfkeqH4VUNvuezqvT09el82Vm8qaxcZO3gx7KHzP5dHjCtaqpe0541Vatp WOI3Gb9NDqDpl5pFp2lufUw2mKJtPx3hBiHmDFo1d1rn2BnKzkw3mQJd01J0KNDC 8D8+Cp09Mu7FfTN9ws8GiQeHpPSF6P7ODjHDI2E3WwpPkn3/vy8k/4/74tFKTS89 8aZf/2ozlsqzr7w0NKvRzxvPzNQBL/80dOTNWFiWJbnKIHW5EO6EvTM+3pVZCSTq MLVqCVPGWhOynHopCCUQj8kbPFtoxra7oN4icuFpQxnYIisP5x2jUagXs28Q4iol aD1atXMCjIg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:57 2026 by rpki-client