$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa File: D8EA816A3EEE11EF98924D60C4F9AE02.roa (raw, json) Hash identifier: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew= Subject key identifier: 51:8E:58:71:1F:01:76:A5:93:B2:E6:0F:39:27:23:B6:2E:D3:F5:A3 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A86 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:21:04 +0000 ROA not before: Tue 13 Jan 2026 11:03:26 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 139879 IP address blocks: 103.74.20.0/24 maxlen: 24 103.74.21.0/24 maxlen: 24 103.74.22.0/24 maxlen: 24 103.74.23.0/24 maxlen: 24 103.235.76.0/24 maxlen: 24 103.235.77.0/24 maxlen: 24 103.235.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2694 (0xa86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jan 13 11:03:26 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a48390-53ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:ef:5c:31:3e:b9:a4:04:c4:b7:db:d1:5d: 9c:78:6b:e8:45:fb:0b:21:94:56:80:91:0b:fe:60: f5:05:73:b2:03:be:34:c7:e4:84:3a:9a:d4:6d:98: 21:46:f5:ce:97:fa:5d:c8:6b:70:f8:51:d2:d8:a1: 19:dd:58:da:14:e3:fe:14:e5:5d:ec:23:5a:e6:43: 9f:74:68:5e:58:79:35:62:c7:8e:2f:a0:ba:f0:b4: 60:5a:b5:85:74:93:26:34:d7:de:93:81:ce:91:c3: 8a:5e:3a:27:1e:d9:c3:7f:86:6d:d2:9c:54:45:cc: 8a:42:69:53:d4:d3:dc:ea:b6:80:d4:06:ee:e2:67: 7d:2b:ed:34:43:9e:e5:71:bb:9c:e5:2d:a8:83:b9: 90:c2:7d:7a:f8:eb:69:09:3c:68:dc:08:e4:bd:bf: a5:2d:2e:2d:61:2b:b1:36:4f:c3:14:e7:f7:43:cd: 9f:b8:6c:a1:eb:15:e5:61:33:4e:6f:16:5d:28:d0: 0c:ed:41:76:66:41:77:68:6a:c6:50:ea:2d:17:b7: 59:4a:23:bf:01:f7:d3:c1:0c:f7:80:ef:92:0d:f3: c3:f1:6b:68:68:28:15:c2:7e:d6:64:74:bc:1d:77: a8:45:ae:e3:e3:b7:b6:c7:92:f6:7f:7f:ee:74:01: 03:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8E:58:71:1F:01:76:A5:93:B2:E6:0F:39:27:23:B6:2E:D3:F5:A3 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/D8EA816A3EEE11EF98924D60C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.74.20.0/22 103.235.76.0/23 103.235.79.0/24 Signature Algorithm: sha256WithRSAEncryption 56:3e:b5:d8:ec:74:33:cb:01:aa:0d:47:24:cd:25:e0:ff:db: d1:85:ae:90:5e:b8:be:13:f9:f6:b8:2a:79:93:17:1b:2b:41: fd:35:0c:cc:1d:4d:d4:a2:24:3a:64:8f:de:05:f9:eb:d9:7f: 01:11:e2:bd:9f:3e:f6:ef:78:b1:27:d4:d2:19:11:ce:dd:ad: 94:c9:53:ca:4f:12:19:69:b3:4f:d3:e9:1a:2c:fa:67:ac:60: 3c:e3:18:43:29:06:87:c3:04:b8:75:f1:15:cb:ac:9c:fa:86: 31:95:c7:5c:b0:99:af:7a:94:fc:99:00:d7:79:dc:9f:ed:e3: 26:e5:02:3a:25:17:86:c3:3c:1d:cd:a6:9b:de:56:7c:37:c6: 09:88:96:21:1c:59:e7:72:8c:73:79:44:e0:60:6b:57:c0:db: 3b:08:4a:0c:16:33:b2:87:dc:2f:ea:5e:d5:73:59:7c:12:91: e1:38:3b:26:61:53:09:c5:ba:b2:a6:d0:14:f6:cc:91:9c:82: d0:a6:63:69:b6:28:54:c5:aa:8d:cc:a3:45:54:ba:f2:32:20: e9:a1:8b:cc:ac:71:83:48:23:1c:71:d9:bf:dc:53:e5:c6:e3: af:ef:91:6f:c7:16:b8:29:62:61:73:3b:69:0c:ef:8d:2e:1d: 73:dd:34:f9 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwMTEzMTEwMzI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODM5MC01M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4jvXDE+uaQExLfb0V2ceGvoRfsLIZRWgJEL/mD1BXOyA740x+SEOprUbZgh RvXOl/pdyGtw+FHS2KEZ3VjaFOP+FOVd7CNa5kOfdGheWHk1YseOL6C68LRgWrWF dJMmNNfek4HOkcOKXjonHtnDf4Zt0pxURcyKQmlT1NPc6raA1Abu4md9K+00Q57l cbuc5S2og7mQwn16+OtpCTxo3Ajkvb+lLS4tYSuxNk/DFOf3Q82fuGyh6xXlYTNO bxZdKNAM7UF2ZkF3aGrGUOotF7dZSiO/AffTwQz3gO+SDfPD8WtoaCgVwn7WZHS8 HXeoRa7j47e2x5L2f3/udAEDlwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFGOWHEf AXalk7LmDzknI7Yu0/WjMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY5NDMvQjcxODExNjg4RDUxMTFFQUI4QjI2Mzg0QzRGOUFFMDIvRDhFQTgxNkEz RUVFMTFFRjk4OTI0RDYwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ0oUAwQBZ+tMAwQAZ+tPMA0GCSqGSIb3DQEBCwUAA4IBAQBWPrXY 7HQzywGqDUckzSXg/9vRha6QXri+E/n2uCp5kxcbK0H9NQzMHU3UoiQ6ZI/eBfnr 2X8BEeK9nz7273ixJ9TSGRHO3a2UyVPKTxIZabNP0+kaLPpnrGA84xhDKQaHwwS4 dfEVy6yc+oYxlcdcsJmvepT8mQDXedyf7eMm5QI6JReGwzwdzaab3lZ8N8YJiJYh HFnncoxzeUTgYGtXwNs7CEoMFjOyh9wv6l7Vc1l8EpHhODsmYVMJxbqyptAU9syR nILQpmNptihUxaqNzKNFVLryMiDpoYvMrHGDSCMccdm/3FPlxuOv75Fvxxa4KWJh cztpDO+NLh1z3TT5 -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:27 2026 by rpki-client