$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/884C5FB8E60411EFBF5A7957C4F9AE02.roa File: 884C5FB8E60411EFBF5A7957C4F9AE02.roa (raw, json) Hash identifier: oZ5Fktk/X7IkMniZfmOwOSIMZJUooUAA4uRqYhgv5JA= Subject key identifier: BF:30:30:B4:7E:C8:5A:DA:3D:18:E0:E9:61:64:72:BB:CB:B0:AA:6B Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0CD6 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/884C5FB8E60411EFBF5A7957C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:21:58 +0000 ROA not before: Wed 08 Oct 2025 18:48:36 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139013 IP address blocks: 103.100.232.0/22 maxlen: 22 103.100.232.0/23 maxlen: 23 103.100.232.0/24 maxlen: 24 103.100.234.0/23 maxlen: 23 103.100.234.0/24 maxlen: 24 103.100.235.0/24 maxlen: 24 2404:cec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 18:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Oct 8 18:48:36 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a475b6-b479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:12:48:b4:91:64:35:7c:3d:b8:34:29:93: 97:ac:ab:f7:3c:5d:8b:4b:c5:cd:fc:fb:0c:77:94: a2:a1:64:a9:fd:a9:d2:b0:ba:8a:c2:13:36:30:ac: cf:85:87:d7:0f:71:36:15:a4:82:b1:52:82:33:c1: ca:fd:57:22:ca:8a:28:ca:cc:ed:9c:8b:f4:53:8a: 41:25:61:65:dd:97:6d:b0:ee:32:3f:03:86:06:f1: 23:ff:28:29:d8:2c:c9:ad:f0:33:2a:74:1b:af:5c: 8f:77:88:5c:60:ac:b5:83:bb:2d:45:a8:b5:53:82: f9:7a:07:af:ea:c7:f7:db:9c:8d:c4:53:69:2a:2a: 95:9e:14:6b:bf:c1:1b:34:85:02:20:6a:f2:02:6e: 28:4f:a5:04:fb:66:e2:6e:21:09:ca:93:32:4d:73: 34:b7:d8:33:3e:55:9d:01:c4:72:7b:b8:1e:c9:d1: ea:29:46:16:4c:e4:5e:b2:9c:10:91:0a:83:51:5d: e6:96:96:34:76:66:9c:6d:3f:32:f4:63:14:12:2e: 07:09:e0:09:48:2d:08:90:30:54:1b:b0:67:44:b2: 65:ef:fc:8d:48:f7:33:49:a7:db:83:03:3b:d5:0d: 07:4f:e4:28:9c:b3:a6:17:f9:be:74:91:46:4d:7a: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:30:30:B4:7E:C8:5A:DA:3D:18:E0:E9:61:64:72:BB:CB:B0:AA:6B X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/884C5FB8E60411EFBF5A7957C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.100.232.0/22 IPv6: 2404:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:3c:05:d8:0b:26:db:a0:35:32:5e:bf:57:c3:b7:95:63:9f: c6:03:c0:a1:27:19:68:74:97:b2:bc:4a:40:85:6f:6b:ec:41: fc:60:44:3c:b6:de:48:4f:80:bb:f0:8b:cb:af:75:c8:08:46: a1:fc:b0:0a:d7:d2:c0:28:39:8a:be:5e:03:fe:2e:cf:84:df: 0a:25:6d:3f:6e:e9:8e:e4:3a:41:ed:79:c0:15:21:5d:29:62: fc:cf:2c:b4:76:b9:bf:1c:b1:5d:8d:c9:f2:f9:ee:f0:c8:82: 8a:5d:00:64:a1:17:44:2b:b1:7d:64:6e:c9:47:61:fc:c7:e7: 4e:77:76:a8:3f:ba:58:98:60:c8:6f:9e:b1:71:6e:a7:74:b6: 3e:69:3d:32:a2:44:6c:0a:58:50:3d:64:5d:ef:08:ab:b3:fb: b6:b9:d6:1c:aa:8b:09:78:70:02:ca:2c:e5:72:99:33:74:ef: ed:f2:e7:ca:91:f8:e1:cd:f0:55:2b:fa:c1:e0:0f:74:44:65: 1f:3c:ea:cf:02:aa:b4:fd:d3:7b:f6:9a:c2:af:a5:3a:84:d4: 04:94:a4:95:a1:a7:9f:f6:7f:96:52:6e:14:b6:9e:28:d9:e3: fb:e6:3b:7f:80:40:ff:a2:bb:9d:41:12:e8:6b:6c:d2:0e:ca: a8:af:77:ae -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUxMDA4MTg0ODM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzViNi1iNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxsSSLSRZDV8Pbg0KZOXrKv3PF2LS8XN/PsMd5SioWSp/anSsLqKwhM2MKzP hYfXD3E2FaSCsVKCM8HK/VciyoooysztnIv0U4pBJWFl3ZdtsO4yPwOGBvEj/ygp 2CzJrfAzKnQbr1yPd4hcYKy1g7stRai1U4L5egev6sf325yNxFNpKiqVnhRrv8Eb NIUCIGryAm4oT6UE+2bibiEJypMyTXM0t9gzPlWdAcRye7geydHqKUYWTORespwQ kQqDUV3mlpY0dmacbT8y9GMUEi4HCeAJSC0IkDBUG7BnRLJl7/yNSPczSafbgwM7 1Q0HT+QonLOmF/m+dJFGTXpW/wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFL8wMLR+ yFraPRjg6WFkcrvLsKprMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvODg0QzVGQjhF NjA0MTFFRkJGNUE3OTU3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2ToMA0EAgACMAcDBQAkBM7AMA0GCSqGSIb3DQEBCwUAA4IBAQCL PAXYCybboDUyXr9Xw7eVY5/GA8ChJxlodJeyvEpAhW9r7EH8YEQ8tt5IT4C78IvL r3XICEah/LAK19LAKDmKvl4D/i7PhN8KJW0/bumO5DpB7XnAFSFdKWL8zyy0drm/ HLFdjcny+e7wyIKKXQBkoRdEK7F9ZG7JR2H8x+dOd3aoP7pYmGDIb56xcW6ndLY+ aT0yokRsClhQPWRd7wirs/u2udYcqosJeHACyizlcpkzdO/t8ufKkfjhzfBVK/rB 4A90RGUfPOrPAqq0/dN79prCr6U6hNQElKSVoaef9n+WUm4Utp4o2eP75jt/gED/ orudQRLoa2zSDsqor3eu -----END CERTIFICATE-----Generated at Tue Mar 3 00:42:14 2026 by rpki-client