$ rpki-client -vvf rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/2157C3E011C211EA93417583C4F9AE02.roa File: 2157C3E011C211EA93417583C4F9AE02.roa (raw, json) Hash identifier: yqBrYS+OQh89LeyuxvtAswEE9eX5g7RnQPP/zPqycgQ= Subject key identifier: C3:77:82:F1:5B:3A:06:BD:6A:D0:17:B3:C7:DA:F3:3B:03:23:21:A3 Certificate issuer: /CN=A91A56E7/serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Certificate serial: 0C95 Authority key identifier: 34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/2157C3E011C211EA93417583C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:41:59 +0000 ROA not before: Thu 26 Jun 2025 18:42:44 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139197 IP address blocks: 103.139.164.0/23 maxlen: 23 103.139.164.0/24 maxlen: 24 103.139.165.0/24 maxlen: 24 2001:df0:8580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A56E7, serialNumber=347636F0E98AF824826B1BCF96F3C776D812F55B Validity Not Before: Jun 26 18:42:44 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42607-4cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:59:1a:96:12:31:76:b0:e8:24:e1:8f:2f: 45:2e:93:cb:9d:ac:48:6a:5d:19:05:4f:88:3b:db: 92:f7:8c:54:b7:db:3f:49:a7:87:dc:6e:9a:ee:bb: 0d:8b:d4:da:c3:a6:90:5f:46:35:32:cc:38:d3:f3: 06:42:81:c6:95:c6:5c:25:2e:2f:c8:92:83:1a:c1: c8:9f:aa:e8:89:d4:b8:33:7f:1b:b3:44:13:ca:d0: a8:14:d1:67:54:f5:26:25:81:8a:06:99:d4:85:ce: 17:50:77:36:3f:28:2b:21:f6:0d:9d:dd:3d:e7:ff: 41:b0:f2:29:a5:d4:b8:5d:47:9f:29:00:d4:ba:7c: d8:b2:2c:4d:bb:73:2b:06:5c:65:be:75:1c:7b:ce: ef:c0:5a:2a:80:92:04:ee:b6:d1:45:73:45:26:b3: 1e:e8:3a:36:fc:42:9f:ee:16:4f:7e:db:a9:9d:1b: 6d:fc:ef:5b:88:71:7a:20:ec:86:16:ee:50:48:ec: c0:4d:11:48:2f:4e:41:e6:7d:bc:9a:74:1a:79:c1: 56:e6:fb:e2:dc:16:90:f7:51:76:ce:38:cb:5b:a1: a6:5d:2a:3c:82:8c:43:fc:b4:8c:e0:6f:55:18:0d: 3a:21:9d:ff:40:2d:da:21:21:d7:07:34:3f:4a:27: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:77:82:F1:5B:3A:06:BD:6A:D0:17:B3:C7:DA:F3:3B:03:23:21:A3 X509v3 Authority Key Identifier: keyid:34:76:36:F0:E9:8A:F8:24:82:6B:1B:CF:96:F3:C7:76:D8:12:F5:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/NHY28OmK-CSCaxvPlvPHdtgS9Vs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHY28OmK-CSCaxvPlvPHdtgS9Vs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A56E7/7860F8BA11C111EA858EE682C4F9AE02/2157C3E011C211EA93417583C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.164.0/23 IPv6: 2001:df0:8580::/48 Signature Algorithm: sha256WithRSAEncryption 6e:75:af:3c:88:64:f2:4f:22:8f:29:43:e8:af:ea:42:87:be: ca:4f:e7:c4:41:22:e5:77:fa:d4:b8:c1:4c:59:6a:06:e5:46: 8f:ff:5f:f8:71:b7:41:3c:e4:83:98:24:0f:db:04:7a:7f:f1: 6b:57:ce:d1:7e:03:5e:89:df:09:f4:b8:b9:f4:30:37:c8:cc: e1:a8:ec:b5:1d:a6:db:dc:68:6b:4c:03:78:ba:e1:05:11:8a: 0a:1a:9a:b9:f2:e5:dd:6a:55:05:48:72:4b:7d:e8:94:27:92: 44:ce:46:e4:9b:d6:18:78:00:02:97:df:a7:80:22:6d:66:c0: fe:a7:cd:04:bc:de:0b:e0:1f:f7:b2:93:69:5a:2a:e7:b0:5b: e4:3f:5c:90:85:60:a6:ad:69:6f:42:60:6b:d0:aa:e5:2f:9b: 6b:62:42:47:79:b4:64:12:e0:c5:e8:2a:ac:a9:03:dc:2c:41: 56:9f:27:6f:9b:6e:ee:b9:03:b4:0d:b7:a3:18:f8:b3:a7:f1: 78:5d:39:b6:63:dd:87:78:5d:44:85:af:ea:a2:fe:6f:a9:b9: a8:7d:d0:dd:51:a6:e7:de:a5:5b:3e:6e:03:c4:31:6a:01:39: 9b:49:65:8e:58:b6:a1:cb:d1:86:85:55:f8:67:4e:a8:e1:eb: 5a:1e:a1:cf -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2RTcxMTAvBgNVBAUTKDM0NzYzNkYwRTk4QUY4MjQ4MjZCMUJDRjk2RjNDNzc2 RDgxMkY1NUIwHhcNMjUwNjI2MTg0MjQ0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjYwNy00Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuclZGpYSMXaw6CThjy9FLpPLnaxIal0ZBU+IO9uS94xUt9s/SaeH3G6a7rsN i9Taw6aQX0Y1Msw40/MGQoHGlcZcJS4vyJKDGsHIn6roidS4M38bs0QTytCoFNFn VPUmJYGKBpnUhc4XUHc2PygrIfYNnd095/9BsPIppdS4XUefKQDUunzYsixNu3Mr BlxlvnUce87vwFoqgJIE7rbRRXNFJrMe6Do2/EKf7hZPftupnRtt/O9biHF6IOyG Fu5QSOzATRFIL05B5n28mnQaecFW5vvi3BaQ91F2zjjLW6GmXSo8goxD/LSM4G9V GA06IZ3/QC3aISHXBzQ/SicJtQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMN3gvFb Oga9atAXs8fa8zsDIyGjMB8GA1UdIwQYMBaAFDR2NvDpivgkgmsbz5bzx3bYEvVb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTZFNy83ODYwRjhCQTEx QzExMUVBODU4RUU2ODJDNEY5QUUwMi9OSFkyOE9tSy1DU0NheHZQbHZQSGR0Z1M5 VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05IWTI4T21LLUNTQ2F4dlBsdlBIZHRnUzlWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2RTcvNzg2MEY4QkExMUMxMTFFQTg1OEVFNjgyQzRGOUFFMDIvMjE1N0MzRTAx MUMyMTFFQTkzNDE3NTgzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4ukMA8EAgACMAkDBwAgAQ3whYAwDQYJKoZIhvcNAQELBQADggEB AG51rzyIZPJPIo8pQ+iv6kKHvspP58RBIuV3+tS4wUxZagblRo//X/hxt0E85IOY JA/bBHp/8WtXztF+A16J3wn0uLn0MDfIzOGo7LUdptvcaGtMA3i64QURigoamrny 5d1qVQVIckt96JQnkkTORuSb1hh4AAKX36eAIm1mwP6nzQS83gvgH/eyk2laKuew W+Q/XJCFYKataW9CYGvQquUvm2tiQkd5tGQS4MXoKqypA9wsQVafJ2+bbu65A7QN t6MY+LOn8XhdObZj3Yd4XUSFr+qi/m+puah90N1RpufepVs+bgPEMWoBOZtJZY5Y tqHL0YaFVfhnTqjh61oeoc8= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:10 2026 by rpki-client