$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/7A0359125C0E11ECA36CBF0FC4F9AE02.roa File: 7A0359125C0E11ECA36CBF0FC4F9AE02.roa (raw, json) Hash identifier: XSNUZ0r/o28q/R/sUwKxLrt1L1Gim57J92y6DiX5k8o= Subject key identifier: 0C:87:E9:8C:3B:90:A8:4C:A1:53:21:92:86:F9:7A:90:87:D0:1E:EE Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0CD5 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/7A0359125C0E11ECA36CBF0FC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:21:57 +0000 ROA not before: Wed 08 Oct 2025 18:48:35 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134806 IP address blocks: 103.100.234.0/23 maxlen: 23 103.100.234.0/24 maxlen: 24 103.100.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Oct 8 18:48:35 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a475b5-3d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:d7:3d:37:25:d3:b1:01:2b:9d:77:b2:37: ee:60:a9:a2:45:fd:91:dd:e7:44:08:e2:a5:9b:3f: 28:65:86:ab:e8:f2:5a:02:7b:10:d4:73:bd:25:31: b9:d8:50:c6:11:63:62:35:02:a8:5f:b2:a6:f0:57: a8:6b:d9:e9:23:6d:46:23:b7:7c:5b:31:34:7f:b9: 46:9f:1e:ab:17:99:c7:2e:83:c7:dc:45:3b:01:a3: 04:5a:d9:09:b2:15:18:55:5a:e0:e4:67:1d:78:87: d3:14:c3:0a:74:36:ec:3a:cc:01:5a:e8:30:8f:80: f7:69:1f:6d:91:1a:39:58:9b:9a:f3:7c:e8:78:f0: 18:b2:41:bf:00:fc:30:1c:15:02:10:bc:a0:eb:3c: 01:b5:c5:b7:cf:46:06:b9:70:39:17:bb:7d:33:60: 99:fc:b2:b7:6c:62:e4:5d:05:4b:97:6d:01:0c:4b: c9:3d:ae:53:1c:f9:70:72:c9:a5:20:3a:42:b6:e2: 75:44:86:2a:88:2b:bc:2a:fc:45:86:63:bb:3c:68: 9b:66:5e:29:43:21:2d:7e:b4:f3:35:a1:46:e8:af: 8a:40:ff:80:7d:33:7b:c7:f5:89:ce:e1:0f:c8:d7: 87:ed:07:7d:01:28:ed:9d:f6:b2:bc:68:03:14:6f: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:87:E9:8C:3B:90:A8:4C:A1:53:21:92:86:F9:7A:90:87:D0:1E:EE X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/7A0359125C0E11ECA36CBF0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.100.234.0/23 Signature Algorithm: sha256WithRSAEncryption aa:62:14:18:8a:71:8a:83:b0:96:a5:30:2f:23:53:2c:7c:73: 76:ba:86:16:46:e5:34:55:82:b7:70:46:7c:7b:3e:ae:77:63: 6e:f2:8e:cf:62:73:3b:2a:5d:62:92:2a:ee:55:1e:25:fe:1d: 1f:1e:df:a4:24:19:b8:1f:db:d2:3c:a6:c9:a5:9d:db:85:2c: 98:94:e2:63:c1:1c:78:52:64:12:e1:52:5b:42:a8:32:89:2e: e6:30:82:a2:7c:f3:ce:b5:07:13:ac:b4:43:d0:6f:ea:e6:75: 7a:02:af:77:af:ed:73:69:ac:37:37:e7:37:1c:fc:ee:c8:1b: ff:01:2e:49:9a:07:13:42:ef:5e:54:6c:a0:fb:50:3b:29:88: ee:6b:69:5e:1a:85:9f:bd:e8:cd:aa:c5:7d:84:6e:0e:b4:8b: b9:34:9d:3e:ea:ea:33:ab:3c:4a:20:b2:f4:55:6f:62:bb:40: 63:16:95:c6:c4:8d:da:88:63:8b:44:82:29:1b:d8:96:ca:ee: 87:65:bb:2c:ad:b6:91:6e:ad:64:c2:68:18:d5:64:1b:ad:4a: e5:14:99:74:31:fb:0f:4f:f9:cd:63:52:7c:26:51:f1:ff:71: d0:b1:08:7a:cd:44:f5:28:00:c3:3c:5d:a7:1f:29:6e:6d:58: bb:8c:1a:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUxMDA4MTg0ODM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzViNS0zZDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziLXPTcl07EBK513sjfuYKmiRf2R3edECOKlmz8oZYar6PJaAnsQ1HO9JTG5 2FDGEWNiNQKoX7Km8Feoa9npI21GI7d8WzE0f7lGnx6rF5nHLoPH3EU7AaMEWtkJ shUYVVrg5GcdeIfTFMMKdDbsOswBWugwj4D3aR9tkRo5WJua83zoePAYskG/APww HBUCELyg6zwBtcW3z0YGuXA5F7t9M2CZ/LK3bGLkXQVLl20BDEvJPa5THPlwcsml IDpCtuJ1RIYqiCu8KvxFhmO7PGibZl4pQyEtfrTzNaFG6K+KQP+AfTN7x/WJzuEP yNeH7Qd9ASjtnfayvGgDFG+jRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAyH6Yw7 kKhMoVMhkob5epCH0B7uMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvN0EwMzU5MTI1 QzBFMTFFQ0EzNkNCRjBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ2TqMA0GCSqGSIb3DQEBCwUAA4IBAQCqYhQYinGKg7CWpTAvI1Ms fHN2uoYWRuU0VYK3cEZ8ez6ud2Nu8o7PYnM7Kl1ikiruVR4l/h0fHt+kJBm4H9vS PKbJpZ3bhSyYlOJjwRx4UmQS4VJbQqgyiS7mMIKifPPOtQcTrLRD0G/q5nV6Aq93 r+1zaaw3N+c3HPzuyBv/AS5JmgcTQu9eVGyg+1A7KYjua2leGoWfvejNqsV9hG4O tIu5NJ0+6uozqzxKILL0VW9iu0BjFpXGxI3aiGOLRIIpG9iWyu6HZbssrbaRbq1k wmgY1WQbrUrlFJl0MfsPT/nNY1J8JlHx/3HQsQh6zUT1KADDPF2nHylubVi7jBpp -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:14 2026 by rpki-client