$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa File: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (raw, json) Hash identifier: bW2bcUmqAZfAczNZIh/ATSzOFXV9c+cWlAh6l8i340A= Subject key identifier: B3:E0:BB:B9:3C:CB:19:1E:70:0F:21:DA:47:25:89:12:99:E9:A5:85 Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Certificate serial: 028C Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:24:48 +0000 ROA not before: Wed 09 Apr 2025 02:07:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132229 IP address blocks: 103.7.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A Validity Not Before: Apr 9 02:07:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3e9c0-5e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:7d:14:c1:47:41:27:ce:10:f4:5a:ee:7a: b1:be:8a:c1:4a:32:56:f3:70:c2:85:36:5d:5e:61: a1:0b:9c:bd:aa:7d:f4:eb:d2:7a:09:58:04:46:08: 81:c1:47:0d:7e:85:8c:3f:5e:18:19:0a:b6:b2:db: aa:df:f4:13:63:f4:21:76:3c:76:dc:98:23:87:d2: db:4c:38:9e:2a:e0:20:af:a5:be:a9:04:4f:26:5a: 16:a3:14:eb:ca:f0:37:11:ba:2a:2a:6b:52:c9:64: 47:19:a1:45:12:08:35:2f:10:52:21:8e:d8:ef:2f: 81:9d:98:47:52:0b:e3:19:ef:83:07:68:8a:96:d0: 7a:9f:4d:4c:8e:a0:73:bb:1f:34:4c:86:5a:28:5a: d5:32:4b:b5:f1:81:59:ee:e3:48:72:5a:9a:c1:7f: 5c:ac:26:8d:fd:ab:26:f1:24:47:72:77:99:13:f2: c9:91:3c:c8:31:1a:de:e4:31:ce:e0:63:5d:4c:e0: d1:0b:67:2e:bf:26:c6:c4:92:90:43:4b:09:f0:48: 13:9f:93:ef:b0:e3:80:8b:c0:65:60:75:e8:84:a0: 50:07:b4:3d:22:64:76:8f:a4:3e:e7:ca:ab:cc:81: 5b:04:cc:06:65:5c:74:29:dd:7e:03:b8:22:20:bb: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E0:BB:B9:3C:CB:19:1E:70:0F:21:DA:47:25:89:12:99:E9:A5:85 X509v3 Authority Key Identifier: keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/88DA4EC83E3511ED8B05E85AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.7.224.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:fe:0b:6a:cc:c0:e7:fa:a6:88:f7:a7:1e:3c:0f:db:fd:13: 63:95:52:f7:95:6f:ad:99:39:24:90:13:71:3d:3b:45:86:d4: ac:fb:be:c2:98:76:7e:be:39:15:8b:27:3b:c8:f5:c7:67:00: 72:ab:77:4d:e4:4f:bc:32:ce:1b:32:0b:35:d7:ee:79:31:ee: a7:12:45:b9:67:ec:1e:f7:8a:62:f9:1a:9b:43:37:f4:af:8a: c0:6d:92:97:8b:d3:1d:5a:b7:2e:f7:8e:ae:d0:e8:30:11:8d: 07:af:80:e0:3c:21:63:61:93:1e:4b:fa:13:27:b9:48:eb:d9: 5b:4b:2a:31:b7:dd:08:df:11:e2:6b:bb:cc:ad:e3:13:59:d7: 68:8f:e0:32:d9:b9:a8:c5:32:82:cb:b1:7e:b3:15:34:85:17: 4c:b4:08:b0:e1:85:de:22:1c:b5:29:96:f4:25:03:08:85:02: a6:7a:08:65:02:f2:d0:5f:2a:26:b5:e1:fe:9d:8b:52:86:2e: e2:2e:5c:39:da:d4:90:5d:45:e6:9f:3a:e3:c1:80:02:9f:07: fb:ee:f6:07:fc:e9:35:21:e3:7c:0c:20:a0:18:10:d3:09:1e: b6:a3:0a:64:85:2f:21:16:85:60:6f:62:0e:a4:0b:50:c3:5b: af:15:56:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0 MEZCNzIyOUEwHhcNMjUwNDA5MDIwNzQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTljMC01ZTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZR9FMFHQSfOEPRa7nqxvorBSjJW83DChTZdXmGhC5y9qn3069J6CVgERgiB wUcNfoWMP14YGQq2stuq3/QTY/Qhdjx23Jgjh9LbTDieKuAgr6W+qQRPJloWoxTr yvA3EboqKmtSyWRHGaFFEgg1LxBSIY7Y7y+BnZhHUgvjGe+DB2iKltB6n01MjqBz ux80TIZaKFrVMku18YFZ7uNIclqawX9crCaN/asm8SRHcneZE/LJkTzIMRre5DHO 4GNdTODRC2cuvybGxJKQQ0sJ8EgTn5PvsOOAi8BlYHXohKBQB7Q9ImR2j6Q+58qr zIFbBMwGZVx0Kd1+A7giILvn9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLPgu7k8 yxkecA8h2kcliRKZ6aWFMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJDNUEvMEFFRjBGRDgzRTMyMTFFRDhERDdFMDZBQzRGOUFFMDIvODhEQTRFQzgz RTM1MTFFRDhCMDVFODVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZwfgMA0GCSqGSIb3DQEBCwUAA4IBAQAs/gtqzMDn+qaI96cePA/b /RNjlVL3lW+tmTkkkBNxPTtFhtSs+77CmHZ+vjkViyc7yPXHZwByq3dN5E+8Ms4b Mgs11+55Me6nEkW5Z+we94pi+RqbQzf0r4rAbZKXi9MdWrcu946u0OgwEY0Hr4Dg PCFjYZMeS/oTJ7lI69lbSyoxt90I3xHia7vMreMTWddoj+Ay2bmoxTKCy7F+sxU0 hRdMtAiw4YXeIhy1KZb0JQMIhQKmeghlAvLQXyomteH+nYtShi7iLlw52tSQXUXm nzrjwYACnwf77vYH/Ok1IeN8DCCgGBDTCR62owpkhS8hFoVgb2IOpAtQw1uvFVZG -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:39 2026 by rpki-client