$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa File: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (raw, json) Hash identifier: 2eup2m0aHXQJQWm9cIyVkI2HXtK+Dw0dwIa6EDDGEm8= Subject key identifier: 6A:3B:1F:2D:97:03:8E:6F:B0:5D:FF:C9:17:EB:E2:21:04:4B:2E:4F Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 08A0 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:55:29 +0000 ROA not before: Wed 02 Jul 2025 21:30:09 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140924 IP address blocks: 103.152.78.0/24 maxlen: 24 2001:df3:ff80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Jul 2 21:30:09 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42930-dcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:56:1f:60:7c:94:13:da:0d:43:cd:6f:5d: a0:13:63:98:a7:2e:0c:c9:4b:fe:18:e8:5a:60:92: 9a:c8:e8:c8:26:0b:ee:b6:7b:5f:f0:b4:d7:e0:69: 71:a7:b9:3d:a1:7d:72:cd:89:02:48:55:9e:73:a8: 94:62:40:8d:c4:ec:bc:aa:1d:da:83:50:f7:05:37: a3:64:77:ac:11:46:01:c5:6c:2a:9a:51:ae:5f:8b: b0:c8:e2:61:94:e7:6e:b9:0b:75:36:d6:1a:22:1a: 3d:4b:85:cd:86:80:7c:ad:45:c8:d0:ca:78:8a:41: 5d:75:8f:c3:15:b3:cf:ef:e6:f9:27:74:24:1f:1a: f8:2c:7d:eb:8d:d1:f4:b4:9c:a4:23:ed:18:08:70: fe:66:14:f8:3b:1d:1b:be:2b:e1:34:10:e8:f5:36: 1d:5a:60:56:02:9d:20:f5:9f:da:ba:f6:3a:6a:08: aa:65:c4:77:5b:62:39:e6:78:c1:6f:2d:27:30:0b: b8:04:83:71:62:05:27:29:78:9f:8e:c6:5b:23:5c: 50:72:db:ab:66:5f:2f:66:fe:77:d0:4e:f6:17:b9: 5c:52:bc:2d:a4:5e:af:58:9d:23:e6:e2:24:46:75: b6:73:e0:28:50:fd:b6:72:4d:8e:bc:34:83:f1:aa: 9d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3B:1F:2D:97:03:8E:6F:B0:5D:FF:C9:17:EB:E2:21:04:4B:2E:4F X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/B3C41A60DD1B11EAAC9A0915C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.78.0/24 IPv6: 2001:df3:ff80::/48 Signature Algorithm: sha256WithRSAEncryption b7:e4:f5:6b:8f:59:e5:72:6e:bc:2d:a6:1f:98:bc:a2:ea:93: b6:4b:75:dc:d4:26:5d:03:19:07:65:dd:15:10:4d:a1:75:99: 4b:3e:1b:d3:14:7b:20:2d:b5:6a:97:75:7a:54:c4:7f:9f:00: ba:f3:c5:55:1d:b1:a7:66:0c:54:a4:59:47:78:c1:d9:74:fd: 19:b0:e4:e4:79:2d:01:7d:a0:27:87:3d:20:ed:e1:93:53:c9: e3:03:ec:e1:96:8b:20:11:23:46:33:21:9e:54:b3:f6:06:54: 56:fa:9e:6c:c9:bd:27:c1:d0:69:33:3f:ec:b8:ee:cb:6b:c7: 02:23:a7:55:62:2c:4f:ff:d0:05:73:40:0a:34:97:40:fb:ef: 87:07:48:f1:c9:a0:ae:ee:f4:42:d5:87:18:cb:f9:e2:d4:64: 3c:56:46:cd:5a:00:69:a6:ea:af:d4:57:1d:3c:17:0d:8e:8c: c1:af:0b:c7:60:eb:42:8d:8c:98:c4:ef:8d:dc:7f:7f:c1:22: c0:6b:bb:a4:60:cd:74:9c:e4:71:60:58:36:e5:5d:10:8c:78: 6f:04:96:5e:6a:98:7a:11:42:28:b5:6f:18:cd:76:75:d8:f4: 9a:cc:7a:da:26:b7:e2:21:88:a6:a3:1c:53:17:9d:31:29:9b: 70:9b:a9:d9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwNzAyMjEzMDA5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjkzMC1kY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7dWH2B8lBPaDUPNb12gE2OYpy4MyUv+GOhaYJKayOjIJgvutntf8LTX4Glx p7k9oX1yzYkCSFWec6iUYkCNxOy8qh3ag1D3BTejZHesEUYBxWwqmlGuX4uwyOJh lOduuQt1NtYaIho9S4XNhoB8rUXI0Mp4ikFddY/DFbPP7+b5J3QkHxr4LH3rjdH0 tJykI+0YCHD+ZhT4Ox0bvivhNBDo9TYdWmBWAp0g9Z/auvY6agiqZcR3W2I55njB by0nMAu4BINxYgUnKXifjsZbI1xQcturZl8vZv530E72F7lcUrwtpF6vWJ0j5uIk RnW2c+AoUP22ck2OvDSD8aqd6QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGo7Hy2X A45vsF3/yRfr4iEESy5PMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1NDMvNTdFRjlGNkNERDFBMTFFQThBNDM5RjEzQzRGOUFFMDIvQjNDNDFBNjBE RDFCMTFFQUFDOUEwOTE1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5hOMA8EAgACMAkDBwAgAQ3z/4AwDQYJKoZIhvcNAQELBQADggEB ALfk9WuPWeVybrwtph+YvKLqk7ZLddzUJl0DGQdl3RUQTaF1mUs+G9MUeyAttWqX dXpUxH+fALrzxVUdsadmDFSkWUd4wdl0/Rmw5OR5LQF9oCeHPSDt4ZNTyeMD7OGW iyARI0YzIZ5Us/YGVFb6nmzJvSfB0GkzP+y47strxwIjp1ViLE//0AVzQAo0l0D7 74cHSPHJoK7u9ELVhxjL+eLUZDxWRs1aAGmm6q/UVx08Fw2OjMGvC8dg60KNjJjE 743cf3/BIsBru6RgzXSc5HFgWDblXRCMeG8Ell5qmHoRQii1bxjNdnXY9JrMetom t+IhiKajHFMXnTEpm3Cbqdk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:42 2026 by rpki-client