$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa File: DF1E2FEA97D611EB8BEF8223C4F9AE02.roa (raw, json) Hash identifier: Q/z2xPgEev/jp2CYBsFY4fwnHwuGTUM4Sob54bGfHrU= Subject key identifier: FA:72:75:45:98:2B:C1:32:BB:BE:D3:A7:70:31:DE:2F:62:03:A5:91 Certificate issuer: /CN=A91A45E0/serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Certificate serial: 0CD4 Authority key identifier: 6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:21:56 +0000 ROA not before: Wed 08 Oct 2025 18:48:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133547 IP address blocks: 103.100.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A45E0, serialNumber=6B0CB59503DA895FF94269D7A9BC20261704DCE9 Validity Not Before: Oct 8 18:48:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a475b4-b38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:1b:6a:ea:3f:b3:41:6c:32:1d:b2:ce:46: d9:dc:c3:44:2c:97:73:b7:d0:62:4f:68:5c:a4:82: c9:6e:7b:a6:24:7a:1a:20:86:11:59:8b:f3:30:b8: 9d:99:04:d5:68:5e:5c:80:f9:2b:ee:b1:4a:ce:59: 0d:0d:49:a6:59:df:b2:16:6b:5d:2f:0d:84:83:78: 1d:b3:cc:cd:0c:f2:85:27:11:42:bc:58:d8:cc:19: 3f:8b:f2:98:aa:5e:2b:82:bc:ff:1b:84:f8:b1:59: 8a:94:a2:cc:d9:dd:ad:26:03:cc:7d:f7:5a:34:6d: 8f:ef:3d:dd:c3:97:f2:cf:9c:68:3c:10:eb:4d:6b: 69:90:e5:c7:c2:04:15:8e:87:d3:85:2d:c2:8d:1e: c5:e1:56:0a:af:23:02:0d:1d:48:27:a4:b4:f3:fe: 0f:ee:8d:d7:c6:4f:01:f9:b9:3d:bb:44:f2:3b:f8: ed:92:a4:2b:3a:fe:93:87:4b:ca:c6:16:c9:45:f0: 36:18:24:83:58:2c:20:a2:45:d7:7a:9a:d4:a6:5c: 9b:c4:c3:ee:61:e6:e5:2c:57:f5:a9:c8:9a:d2:5b: 1d:d7:41:aa:00:0b:49:a7:35:f0:c9:4a:ab:0b:3a: 2e:cf:9c:bf:20:54:18:93:26:bf:73:67:d0:be:34: 7e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:72:75:45:98:2B:C1:32:BB:BE:D3:A7:70:31:DE:2F:62:03:A5:91 X509v3 Authority Key Identifier: keyid:6B:0C:B5:95:03:DA:89:5F:F9:42:69:D7:A9:BC:20:26:17:04:DC:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/awy1lQPaiV_5QmnXqbwgJhcE3Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/awy1lQPaiV_5QmnXqbwgJhcE3Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45E0/23BF2F26113E11EA88E87876C4F9AE02/DF1E2FEA97D611EB8BEF8223C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.100.235.0/24 Signature Algorithm: sha256WithRSAEncryption 93:e8:fa:5f:0e:21:86:4c:6d:9c:ec:27:45:a3:c8:64:35:2c: 79:a2:42:95:cb:de:c7:53:44:32:09:f6:63:cb:f8:d1:cd:94: 28:38:24:d2:f3:76:cd:ff:a6:84:ab:41:4b:49:50:47:2a:4f: dc:55:7d:8e:ed:19:40:bf:f9:2b:76:57:69:a9:55:44:e6:bd: db:00:b3:2a:ce:d6:f8:af:17:f3:15:25:e9:ad:d5:f5:11:d5: a2:96:9d:0d:bc:fe:a7:bd:0d:e6:27:ce:a3:86:ab:48:69:98: 7b:a7:bf:56:f1:1f:10:8e:84:61:84:44:89:c0:1a:1e:98:9f: e7:6d:b1:9f:57:ab:9a:32:35:eb:e2:dc:c0:d3:ef:72:3e:63: 77:08:56:15:7e:19:19:e8:97:14:af:46:93:1d:d8:88:f7:52: 50:59:c7:99:b7:57:dd:fc:bd:14:4b:78:10:eb:63:f5:ea:0d: 6e:58:60:a8:ab:be:c5:eb:c6:4b:b6:a3:3b:b8:89:c9:9c:9b: bc:98:7a:8a:a6:af:e3:3a:fe:60:ae:2f:d3:e8:1a:84:20:22: 8e:be:77:18:b3:7a:62:f6:b5:6b:6d:6e:93:96:08:b5:9e:ff: db:35:b5:d8:fc:f0:07:a9:df:97:b1:cf:b9:2c:68:21:21:a4: 10:78:c5:ed -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1RTAxMTAvBgNVBAUTKDZCMENCNTk1MDNEQTg5NUZGOTQyNjlEN0E5QkMyMDI2 MTcwNERDRTkwHhcNMjUxMDA4MTg0ODM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzViNC1iMzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkY4bauo/s0FsMh2yzkbZ3MNELJdzt9BiT2hcpILJbnumJHoaIIYRWYvzMLid mQTVaF5cgPkr7rFKzlkNDUmmWd+yFmtdLw2Eg3gds8zNDPKFJxFCvFjYzBk/i/KY ql4rgrz/G4T4sVmKlKLM2d2tJgPMffdaNG2P7z3dw5fyz5xoPBDrTWtpkOXHwgQV jofThS3CjR7F4VYKryMCDR1IJ6S08/4P7o3Xxk8B+bk9u0TyO/jtkqQrOv6Th0vK xhbJRfA2GCSDWCwgokXXeprUplybxMPuYeblLFf1qcia0lsd10GqAAtJpzXwyUqr Czouz5y/IFQYkya/c2fQvjR+uQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPpydUWY K8Eyu77Tp3Ax3i9iA6WRMB8GA1UdIwQYMBaAFGsMtZUD2olf+UJp16m8ICYXBNzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDVFMC8yM0JGMkYyNjEx M0UxMUVBODhFODc4NzZDNEY5QUUwMi9hd3kxbFFQYWlWXzVRbW5YcWJ3Z0poY0Uz T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F3eTFsUVBhaVZfNVFtblhxYndnSmhjRTNPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ1RTAvMjNCRjJGMjYxMTNFMTFFQTg4RTg3ODc2QzRGOUFFMDIvREYxRTJGRUE5 N0Q2MTFFQjhCRUY4MjIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2TrMA0GCSqGSIb3DQEBCwUAA4IBAQCT6PpfDiGGTG2c7CdFo8hk NSx5okKVy97HU0QyCfZjy/jRzZQoOCTS83bN/6aEq0FLSVBHKk/cVX2O7RlAv/kr dldpqVVE5r3bALMqztb4rxfzFSXprdX1EdWilp0NvP6nvQ3mJ86jhqtIaZh7p79W 8R8QjoRhhESJwBoemJ/nbbGfV6uaMjXr4tzA0+9yPmN3CFYVfhkZ6JcUr0aTHdiI 91JQWceZt1fd/L0US3gQ62P16g1uWGCoq77F68ZLtqM7uInJnJu8mHqKpq/jOv5g ri/T6BqEICKOvncYs3pi9rVrbW6Tlgi1nv/bNbXY/PAHqd+Xsc+5LGghIaQQeMXt -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:33 2026 by rpki-client