$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/220DBB66054011EA90A20C7EC4F9AE02.roa File: 220DBB66054011EA90A20C7EC4F9AE02.roa (raw, json) Hash identifier: yHmDa4+sZL/pjlW06ii7KVBbPXMP7FrwSa8y+N4oSFo= Subject key identifier: 1B:F1:1C:0D:E3:15:4D:B2:6F:35:E2:C9:91:73:03:16:74:63:B7:A1 Certificate issuer: /CN=A91A5744/serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Certificate serial: 0CD5 Authority key identifier: AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/220DBB66054011EA90A20C7EC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:52:54 +0000 ROA not before: Mon 24 Nov 2025 18:08:19 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138489 IP address blocks: 103.126.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5744, serialNumber=AA41CA81D23EF58861932AAD12B31690DBCF1003 Validity Not Before: Nov 24 18:08:19 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a444b6-3b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:90:00:a9:b6:4c:4c:f3:7c:02:8f:e0:37: 60:a5:ad:a3:92:00:6b:de:8e:c3:d3:8f:67:a7:d1: c9:08:0d:d0:5d:4c:43:3b:54:78:b7:ba:dc:e0:07: 13:fe:1a:39:81:e9:99:a4:34:78:ba:74:d5:07:41: 6c:8b:c8:0e:d9:dd:e2:3e:a0:b5:95:74:ce:ed:53: 9a:fc:05:98:25:3b:80:26:6e:0c:c9:b1:c3:46:ad: 83:73:30:e3:c4:a9:0a:48:86:73:4a:3c:91:5b:e7: 2d:9a:62:2a:ba:2d:07:47:29:5f:3b:76:3c:71:de: 36:91:56:d0:d4:9f:ee:0b:6b:ee:13:1d:a1:d0:91: 72:4f:26:ac:31:c7:03:db:76:f9:f2:ae:a6:d6:84: 0a:9e:75:a0:66:d6:cc:e3:4d:5a:12:0a:06:fa:1b: 74:73:ba:b3:40:b1:57:98:9e:e8:17:58:63:40:31: 10:ba:71:4e:88:2b:a7:2d:61:de:83:ce:dd:d3:95: 4e:87:09:72:8f:86:61:5e:3a:76:30:1f:d0:f8:04: bf:81:9d:65:b3:dc:84:72:41:d2:8f:b5:4d:19:f1: c6:0c:8a:24:6f:ff:1d:2b:69:2b:96:78:fb:73:b3: 3f:6c:43:aa:92:55:68:41:17:a7:f5:13:03:6b:b4: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:1C:0D:E3:15:4D:B2:6F:35:E2:C9:91:73:03:16:74:63:B7:A1 X509v3 Authority Key Identifier: keyid:AA:41:CA:81:D2:3E:F5:88:61:93:2A:AD:12:B3:16:90:DB:CF:10:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/qkHKgdI-9YhhkyqtErMWkNvPEAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkHKgdI-9YhhkyqtErMWkNvPEAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5744/397F6CD4052E11EA9D314145C4F9AE02/220DBB66054011EA90A20C7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.126.108.0/22 Signature Algorithm: sha256WithRSAEncryption 02:39:ef:9d:34:55:e9:80:2f:89:af:a8:7e:a1:c4:38:e8:d4: 7f:73:67:27:6c:a6:e1:f2:7b:8a:39:9f:3c:2c:9d:0a:b9:33: 26:ad:76:a1:44:a2:bf:ba:2b:a9:3b:51:e6:82:d9:d9:30:bb: 37:b8:3a:99:c0:46:7a:44:b2:a4:82:fe:8e:8a:ed:2e:78:70: 91:4e:0b:31:a3:a3:f8:47:c8:eb:03:95:dc:79:d2:8e:51:ff: 0c:d0:39:ce:c7:ff:8b:1d:de:de:06:f5:35:9a:90:4e:3b:ea: 8c:5d:2d:f1:98:cb:b7:92:b7:72:58:a1:33:5b:3d:3b:79:fe: 0c:01:ff:31:be:2c:86:67:99:1e:bf:d8:7e:7b:d8:50:09:78: b8:79:c6:b9:39:35:91:be:c8:4b:5e:57:44:fc:79:d8:cc:89: b7:9d:a0:5e:30:5e:46:28:4b:27:25:f1:92:a9:6a:9d:0d:ab: 6e:35:e9:fe:3d:33:03:4c:52:54:7c:52:4b:66:01:08:83:29: 73:c5:5c:2e:b2:2b:5d:a1:78:14:b6:ea:7b:4b:0b:72:d1:15: d3:09:7b:0e:87:79:c2:88:3b:b5:ad:0e:28:41:dc:75:e0:94: 42:20:07:47:1b:50:7b:6b:c9:58:9b:92:bc:7d:28:46:c9:90: 01:41:bb:f5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3NDQxMTAvBgNVBAUTKEFBNDFDQTgxRDIzRUY1ODg2MTkzMkFBRDEyQjMxNjkw REJDRjEwMDMwHhcNMjUxMTI0MTgwODE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDRiNi0zYjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwleQAKm2TEzzfAKP4Ddgpa2jkgBr3o7D049np9HJCA3QXUxDO1R4t7rc4AcT /ho5gemZpDR4unTVB0Fsi8gO2d3iPqC1lXTO7VOa/AWYJTuAJm4MybHDRq2DczDj xKkKSIZzSjyRW+ctmmIqui0HRylfO3Y8cd42kVbQ1J/uC2vuEx2h0JFyTyasMccD 23b58q6m1oQKnnWgZtbM401aEgoG+ht0c7qzQLFXmJ7oF1hjQDEQunFOiCunLWHe g87d05VOhwlyj4ZhXjp2MB/Q+AS/gZ1ls9yEckHSj7VNGfHGDIokb/8dK2krlnj7 c7M/bEOqklVoQRen9RMDa7QQAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBvxHA3j FU2ybzXiyZFzAxZ0Y7ehMB8GA1UdIwQYMBaAFKpByoHSPvWIYZMqrRKzFpDbzxAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTc0NC8zOTdGNkNENDA1 MkUxMUVBOUQzMTQxNDVDNEY5QUUwMi9xa0hLZ2RJLTlZaGhreXF0RXJNV2tOdlBF QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FrSEtnZEktOVloaGt5cXRFck1Xa052UEVBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU3NDQvMzk3RjZDRDQwNTJFMTFFQTlEMzE0MTQ1QzRGOUFFMDIvMjIwREJCNjYw NTQwMTFFQTkwQTIwQzdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ35sMA0GCSqGSIb3DQEBCwUAA4IBAQACOe+dNFXpgC+Jr6h+ocQ4 6NR/c2cnbKbh8nuKOZ88LJ0KuTMmrXahRKK/uiupO1HmgtnZMLs3uDqZwEZ6RLKk gv6Oiu0ueHCRTgsxo6P4R8jrA5XcedKOUf8M0DnOx/+LHd7eBvU1mpBOO+qMXS3x mMu3krdyWKEzWz07ef4MAf8xviyGZ5kev9h+e9hQCXi4eca5OTWRvshLXldE/HnY zIm3naBeMF5GKEsnJfGSqWqdDatuNen+PTMDTFJUfFJLZgEIgylzxVwusitdoXgU tup7Swty0RXTCXsOh3nCiDu1rQ4oQdx14JRCIAdHG1B7a8lYm5K8fShGyZABQbv1 -----END CERTIFICATE-----Generated at Mon Mar 2 23:39:34 2026 by rpki-client