$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/4DD0C31C0E2011F0A0825648C4F9AE02.roa File: 4DD0C31C0E2011F0A0825648C4F9AE02.roa (raw, json) Hash identifier: MxBYlMzK+lNIUkC7iVXHSE4n6c6P5pDFjfMp16RrT6c= Subject key identifier: 43:D0:9F:A5:13:2B:DA:EA:53:8D:5D:2F:C8:A9:34:D7:D6:C1:23:4C Certificate issuer: /CN=A91AA28B/serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Certificate serial: 0DEC Authority key identifier: 6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/4DD0C31C0E2011F0A0825648C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:38:09 +0000 ROA not before: Mon 21 Apr 2025 18:14:54 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 58682 IP address blocks: 103.204.208.0/22 maxlen: 22 103.204.208.0/24 maxlen: 24 103.204.209.0/24 maxlen: 24 103.204.210.0/24 maxlen: 24 103.204.211.0/24 maxlen: 24 202.181.16.0/24 maxlen: 24 202.181.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3564 (0xdec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA28B, serialNumber=6FC2EDF0C51152A3BEC1149A1BDB2EDB293C9D95 Validity Not Before: Apr 21 18:14:54 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69a42521-9c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:9f:19:73:19:71:83:99:28:db:32:77:ae: 10:9d:92:ed:ef:cb:04:12:dd:8b:e8:48:c4:78:bb: 9d:c8:75:14:5b:85:f8:15:6e:06:19:ec:3a:43:77: 2b:f1:e4:d1:d7:6b:62:b9:cd:ad:5a:71:c4:88:bb: 47:aa:fe:65:40:54:3b:e6:a9:bc:16:76:3d:e9:d9: d2:52:18:37:71:f4:52:5e:31:37:6a:81:be:51:88: 40:20:c6:fa:55:84:71:df:7c:a5:4b:aa:75:c5:73: 96:ab:1d:69:0b:49:fb:4f:65:7d:54:d8:61:3f:43: 54:61:5b:0e:34:fc:aa:5b:81:3f:1a:67:30:12:34: b3:e0:bd:4e:2c:ac:e9:57:38:c3:48:1d:e2:55:41: 2b:e8:66:be:e7:70:06:ec:95:f0:f2:3e:b9:4f:a2: a7:76:e1:d7:12:53:7c:70:fe:fc:43:d7:e3:b1:b9: 17:66:bc:ec:6c:6d:de:a2:db:3b:66:fc:d5:d9:78: cb:e9:ef:be:cf:c2:93:42:54:f3:4c:75:93:21:c6: ad:16:83:38:a7:3f:e3:ad:77:f7:3a:1b:d9:12:b1: a1:02:67:05:3f:ad:53:26:b9:1d:e3:87:1f:6e:45: d8:35:b0:1c:c6:c5:3b:5f:89:8d:e4:df:59:ac:84: f7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D0:9F:A5:13:2B:DA:EA:53:8D:5D:2F:C8:A9:34:D7:D6:C1:23:4C X509v3 Authority Key Identifier: keyid:6F:C2:ED:F0:C5:11:52:A3:BE:C1:14:9A:1B:DB:2E:DB:29:3C:9D:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/b8Lt8MURUqO-wRSaG9su2yk8nZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8Lt8MURUqO-wRSaG9su2yk8nZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA28B/1E0264AADBC811E9BEA91051C4F9AE02/4DD0C31C0E2011F0A0825648C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.208.0/22 202.181.16.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:df:4b:be:81:03:c0:f4:02:2e:d3:29:75:b1:ad:2f:39:54: 77:59:4d:e7:0a:9b:f6:58:ca:bf:99:d8:45:95:bc:44:70:70: fc:50:78:a8:dc:92:2a:8b:24:0c:21:a8:c9:98:89:4e:ff:9c: 6f:4d:d9:c8:13:39:c5:a1:f2:8d:9f:5e:0c:ff:b2:b4:3c:26: 79:ec:57:52:7d:d5:d2:ae:d0:d2:08:90:93:74:cc:1d:dc:53: 72:21:63:1d:f0:c0:e4:ae:61:ce:10:c6:42:aa:8d:15:a1:3e: d0:44:00:5d:ed:98:18:db:d4:91:2e:10:c5:fe:76:cc:0f:8f: 8a:bd:d4:5f:d8:db:23:3e:6e:9e:27:c5:b5:ca:bb:69:74:a5: 10:71:0d:0d:cb:44:85:b0:74:89:75:26:19:a5:7c:25:41:7c: 39:a1:2b:af:77:6f:d9:cc:ca:f7:33:76:1a:ef:5a:c5:96:6a: 62:a5:82:6c:f1:9d:a1:bb:5e:5c:bd:97:62:96:73:e5:c2:58: 2b:c3:20:89:29:d8:b1:25:af:a7:29:15:b1:d0:0a:bf:f2:bb: 8b:5a:ed:78:96:14:37:ee:0a:61:ec:65:85:a3:22:f2:3d:b2: b1:2a:21:69:5e:0b:d2:1e:a6:3c:16:a9:10:91:a0:93:13:ad: ce:4f:d3:ab -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEyOEIxMTAvBgNVBAUTKDZGQzJFREYwQzUxMTUyQTNCRUMxMTQ5QTFCREIyRURC MjkzQzlEOTUwHhcNMjUwNDIxMTgxNDU0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjUyMS05YzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzefGXMZcYOZKNsyd64QnZLt78sEEt2L6EjEeLudyHUUW4X4FW4GGew6Q3cr 8eTR12tiuc2tWnHEiLtHqv5lQFQ75qm8FnY96dnSUhg3cfRSXjE3aoG+UYhAIMb6 VYRx33ylS6p1xXOWqx1pC0n7T2V9VNhhP0NUYVsONPyqW4E/GmcwEjSz4L1OLKzp VzjDSB3iVUEr6Ga+53AG7JXw8j65T6KnduHXElN8cP78Q9fjsbkXZrzsbG3eots7 ZvzV2XjL6e++z8KTQlTzTHWTIcatFoM4pz/jrXf3OhvZErGhAmcFP61TJrkd44cf bkXYNbAcxsU7X4mN5N9ZrIT3FQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEPQn6UT K9rqU41dL8ipNNfWwSNMMB8GA1UdIwQYMBaAFG/C7fDFEVKjvsEUmhvbLtspPJ2V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTI4Qi8xRTAyNjRBQURC QzgxMUU5QkVBOTEwNTFDNEY5QUUwMi9iOEx0OE1VUlVxTy13UlNhRzlzdTJ5azhu WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4THQ4TVVSVXFPLXdSU2FHOXN1MnlrOG5aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUEyOEIvMUUwMjY0QUFEQkM4MTFFOUJFQTkxMDUxQzRGOUFFMDIvNEREMEMzMUMw RTIwMTFGMEEwODI1NjQ4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ8zQAwQByrUQMA0GCSqGSIb3DQEBCwUAA4IBAQB730u+gQPA9AIu 0yl1sa0vOVR3WU3nCpv2WMq/mdhFlbxEcHD8UHio3JIqiyQMIajJmIlO/5xvTdnI EznFofKNn14M/7K0PCZ57FdSfdXSrtDSCJCTdMwd3FNyIWMd8MDkrmHOEMZCqo0V oT7QRABd7ZgY29SRLhDF/nbMD4+KvdRf2NsjPm6eJ8W1yrtpdKUQcQ0Ny0SFsHSJ dSYZpXwlQXw5oSuvd2/ZzMr3M3Ya71rFlmpipYJs8Z2hu15cvZdilnPlwlgrwyCJ KdixJa+nKRWx0Aq/8ruLWu14lhQ37gph7GWFoyLyPbKxKiFpXgvSHqY8FqkQkaCT E63OT9Or -----END CERTIFICATE-----Generated at Mon Mar 2 11:01:46 2026 by rpki-client