$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/819F7A60CF8B11EDAE77B351C4F9AE02.roa File: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (raw, json) Hash identifier: bqrc3GnqSlvctr34CSmLH7pQRmgRC/6jwFegK+dWq/4= Subject key identifier: 8A:53:47:7D:1D:08:C6:DD:7F:54:2E:2D:78:D3:F1:66:BE:4E:08:E6 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 025B Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/819F7A60CF8B11EDAE77B351C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:57:07 +0000 ROA not before: Sun 09 Nov 2025 00:47:20 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63834 IP address blocks: 103.40.208.0/22 maxlen: 22 103.40.208.0/24 maxlen: 24 103.40.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Nov 9 00:47:20 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a437a3-0882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:34:fd:dc:20:fd:da:f5:db:cb:a1:40:0f: c9:77:59:67:6f:7e:89:46:f5:a0:83:41:80:2b:f7: 58:a2:a7:32:f3:a8:56:aa:c3:b4:3c:ea:05:d9:a3: a2:b2:9f:95:33:c2:91:bd:43:27:1b:5e:53:99:62: 71:05:44:e5:c9:00:59:9c:f1:1e:57:15:4b:59:33: 10:91:2d:d7:f1:db:bd:7f:47:2d:a7:f1:88:60:9d: 9a:a9:4e:83:6b:2a:26:6a:d8:f6:9e:aa:f3:6a:39: ea:84:3d:0a:47:ba:1a:39:68:3a:c0:52:bb:63:36: fd:d2:5f:4d:0f:2f:48:bc:c6:7e:1f:40:0b:bb:ee: 68:5c:10:00:89:bb:2f:14:50:a6:0d:b2:b6:e5:70: 11:38:4b:39:8c:99:25:c3:3d:0b:b7:2b:66:99:9b: 9a:d4:04:63:f4:b4:c5:90:9b:d0:a9:f2:bd:e2:00: b2:2e:57:0a:61:e7:42:c5:7a:82:59:a8:8d:c2:18: a6:74:d2:b0:1c:eb:26:89:ad:7f:67:83:c9:2f:e0: 00:a1:01:ed:71:60:65:85:4f:da:b9:6e:07:a9:37: 49:6d:3b:45:34:6a:c0:9f:6e:b1:4f:f6:84:3e:2c: b5:6f:cb:a8:d6:b4:18:ca:94:f5:cd:72:3a:ec:24: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:47:7D:1D:08:C6:DD:7F:54:2E:2D:78:D3:F1:66:BE:4E:08:E6 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/819F7A60CF8B11EDAE77B351C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.40.208.0/22 Signature Algorithm: sha256WithRSAEncryption 77:66:c3:30:cd:87:60:82:3a:b0:10:a4:cb:2d:85:49:de:f5: ef:8e:ba:a7:b6:a3:c9:05:35:11:0b:a4:59:e5:64:aa:e5:01: 00:82:4d:41:d3:55:5d:01:7c:cb:30:d1:fd:1f:80:4b:0a:51: 0f:5d:d7:a8:d3:f1:80:cb:96:71:5a:ee:48:e2:1c:ae:4f:c3: d4:1b:6a:a4:1e:53:d5:85:0e:60:15:6c:34:0b:03:ae:34:40: 4b:40:2a:eb:0a:d3:7e:d6:ce:eb:de:fa:2e:da:92:d8:cc:d2: 1d:25:ae:29:6b:35:ce:92:fc:83:49:3b:bc:26:f7:2d:0d:85: 7f:4d:3a:7f:dc:5b:36:99:71:7f:b7:96:88:a5:9f:35:d4:c4: 60:4e:db:66:1f:a5:35:ec:4f:25:89:7d:30:39:bf:04:81:7d: 24:8e:88:4b:a5:f9:d3:33:64:af:90:ed:69:90:f3:6f:fb:30: 71:ee:c0:01:d3:d1:54:86:8c:2e:d9:24:bb:23:84:bb:04:57: 9d:c8:0d:98:9c:20:bc:39:44:3d:66:82:c7:12:35:60:60:bb: 59:f1:03:43:9e:ad:ad:ce:21:77:9d:8b:a8:cb:92:dd:07:df: 3d:6d:32:60:87:a5:89:d8:59:c1:7d:8b:62:24:c8:0f:2c:c6: a6:d1:7d:87 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUxMTA5MDA0NzIwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzdhMy0wODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9U0/dwg/dr128uhQA/Jd1lnb36JRvWgg0GAK/dYoqcy86hWqsO0POoF2aOi sp+VM8KRvUMnG15TmWJxBUTlyQBZnPEeVxVLWTMQkS3X8du9f0ctp/GIYJ2aqU6D ayomatj2nqrzajnqhD0KR7oaOWg6wFK7Yzb90l9NDy9IvMZ+H0ALu+5oXBAAibsv FFCmDbK25XAROEs5jJklwz0LtytmmZua1ARj9LTFkJvQqfK94gCyLlcKYedCxXqC WaiNwhimdNKwHOsmia1/Z4PJL+AAoQHtcWBlhU/auW4HqTdJbTtFNGrAn26xT/aE Piy1b8uo1rQYypT1zXI67CSJOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIpTR30d CMbdf1QuLXjT8Wa+TgjmMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTlCM0UvREFCMUMzQTY4Q0ZCMTFFRDkyRTI1QjYxQzRGOUFFMDIvODE5RjdBNjBD RjhCMTFFREFFNzdCMzUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZyjQMA0GCSqGSIb3DQEBCwUAA4IBAQB3ZsMwzYdggjqwEKTLLYVJ 3vXvjrqntqPJBTURC6RZ5WSq5QEAgk1B01VdAXzLMNH9H4BLClEPXdeo0/GAy5Zx Wu5I4hyuT8PUG2qkHlPVhQ5gFWw0CwOuNEBLQCrrCtN+1s7r3vou2pLYzNIdJa4p azXOkvyDSTu8JvctDYV/TTp/3Fs2mXF/t5aIpZ811MRgTttmH6U17E8liX0wOb8E gX0kjohLpfnTM2SvkO1pkPNv+zBx7sAB09FUhowu2SS7I4S7BFedyA2YnCC8OUQ9 ZoLHEjVgYLtZ8QNDnq2tziF3nYuoy5LdB989bTJgh6WJ2FnBfYtiJMgPLMam0X2H -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:06 2026 by rpki-client