$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/3EF3C6EEF8B511EAAD434755C4F9AE02.roa File: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (raw, json) Hash identifier: Ffz0/550gPeWO1uoSNPGxqvr0nsdzbXHysPRag2LkXo= Subject key identifier: FE:E6:35:09:83:47:18:4F:39:19:A2:23:88:7F:BF:1B:D4:24:BF:11 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0D35 Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/3EF3C6EEF8B511EAAD434755C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:38:51 +0000 ROA not before: Sun 31 Aug 2025 18:38:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138163 IP address blocks: 103.121.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3381 (0xd35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Aug 31 18:38:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4254b-b4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7d:bd:cf:7d:e7:fe:91:ab:6c:80:5c:04:6d: e6:1c:58:72:b7:87:87:93:2e:a0:44:f6:f1:54:e7: b6:5e:25:89:15:f3:14:74:3a:f5:d0:85:3a:57:8a: c4:f2:53:3c:b8:ce:3f:f8:ad:ae:4b:2f:5d:09:36: 38:e6:0f:2d:b8:60:4d:56:53:c7:25:6c:5c:1b:cb: 23:16:51:31:ba:3d:3d:a5:a0:8d:28:0c:cf:b6:e5: 4f:62:2b:31:d2:3b:e5:42:24:60:3d:3d:2e:a4:56: 56:96:53:40:9a:47:8e:e7:1a:27:ef:31:95:86:2e: e6:64:ba:a7:4b:d6:43:50:2b:c0:4e:98:36:d2:b3: 9f:e7:38:52:78:3e:c7:9a:5a:f5:6f:c1:10:ae:e3: e6:e3:40:37:5d:be:96:84:67:19:83:91:d1:2b:6e: 6b:5d:80:be:e3:66:7c:90:cb:48:b6:04:c4:4e:0c: c4:52:70:6b:f2:3b:0a:34:61:b3:92:4e:04:59:f6: 8d:e6:c0:50:5e:c1:51:3e:ed:34:35:a5:96:e9:89: bb:b3:39:15:cd:e1:92:4b:bf:63:7b:a9:53:ad:43: 40:33:d4:db:95:46:74:6b:e6:ab:0b:de:37:c9:72: f7:bb:98:d3:88:42:f2:2c:f2:0e:31:3b:22:13:95: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E6:35:09:83:47:18:4F:39:19:A2:23:88:7F:BF:1B:D4:24:BF:11 X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/3EF3C6EEF8B511EAAD434755C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.121.194.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:f1:2c:af:b4:12:3a:28:72:19:34:d5:88:31:31:98:06:3b: a1:25:aa:fa:1a:bd:37:2b:8f:9b:51:31:22:52:34:2c:10:af: e7:84:f4:7e:c7:9f:dc:f5:9f:71:74:0e:fe:b6:ad:5f:92:2f: d7:a2:0b:96:4a:dd:41:92:47:a0:5c:d4:dd:eb:97:fe:a5:00: 24:2c:3e:3a:7c:d4:93:53:f9:de:60:86:c0:7b:52:e5:97:f5: ed:0a:22:28:dc:04:bb:2b:b3:b7:36:a4:c7:31:8d:df:28:ae: 92:8b:64:f7:ce:f6:84:5c:62:39:21:6a:d7:f3:98:86:31:f9: 9a:30:41:ae:32:12:fb:33:a4:0e:06:e5:c9:e1:3a:cb:1d:6a: e4:ea:0c:05:44:c7:e1:74:93:b2:70:2e:83:03:86:27:24:bc: 59:7e:7f:82:78:71:31:9b:05:e1:a9:fe:73:6a:13:27:5a:40: 01:13:8c:87:a8:b9:11:ca:99:2f:64:59:33:3f:99:28:4b:96: 06:8a:6b:5e:d8:a1:80:fc:d8:64:10:4f:d7:38:2c:a6:11:db: 02:0d:63:e1:94:8b:af:d2:f0:71:b9:32:8a:e3:1e:9d:13:70: 1e:cf:23:c4:8c:73:b0:67:87:2c:84:88:18:98:f7:24:05:d7: a1:69:42:f5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUwODMxMTgzODAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU0Yi1iNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3H29z33n/pGrbIBcBG3mHFhyt4eHky6gRPbxVOe2XiWJFfMUdDr10IU6V4rE 8lM8uM4/+K2uSy9dCTY45g8tuGBNVlPHJWxcG8sjFlExuj09paCNKAzPtuVPYisx 0jvlQiRgPT0upFZWllNAmkeO5xon7zGVhi7mZLqnS9ZDUCvATpg20rOf5zhSeD7H mlr1b8EQruPm40A3Xb6WhGcZg5HRK25rXYC+42Z8kMtItgTETgzEUnBr8jsKNGGz kk4EWfaN5sBQXsFRPu00NaWW6Ym7szkVzeGSS79je6lTrUNAM9TblUZ0a+arC943 yXL3u5jTiELyLPIOMTsiE5Uv+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP7mNQmD RxhPORmiI4h/vxvUJL8RMB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgwRjkvNDk3NzNBRDBGNEE0MTFFOThDQzc1RTM3QzRGOUFFMDIvM0VGM0M2RUVG OEI1MTFFQUFENDM0NzU1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ3nCMA0GCSqGSIb3DQEBCwUAA4IBAQBq8SyvtBI6KHIZNNWIMTGY BjuhJar6Gr03K4+bUTEiUjQsEK/nhPR+x5/c9Z9xdA7+tq1fki/XoguWSt1Bkkeg XNTd65f+pQAkLD46fNSTU/neYIbAe1Lll/XtCiIo3AS7K7O3NqTHMY3fKK6Si2T3 zvaEXGI5IWrX85iGMfmaMEGuMhL7M6QOBuXJ4TrLHWrk6gwFRMfhdJOycC6DA4Yn JLxZfn+CeHExmwXhqf5zahMnWkABE4yHqLkRypkvZFkzP5koS5YGimte2KGA/Nhk EE/XOCymEdsCDWPhlIuv0vBxuTKK4x6dE3AezyPEjHOwZ4cshIgYmPckBdehaUL1 -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:44 2026 by rpki-client