$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/59675AB20A4011F0AC302962C4F9AE02.roa File: 59675AB20A4011F0AC302962C4F9AE02.roa (raw, json) Hash identifier: 2Iz+yAVxYx71x7F/RxujD049uCoDIu8QgELmnr4mv9g= Subject key identifier: E7:CC:1C:11:21:66:95:CB:A5:24:8C:08:9C:F9:F1:FD:22:44:2F:C7 Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 0A02 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/59675AB20A4011F0AC302962C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:49:34 +0000 ROA not before: Fri 04 Jul 2025 21:01:15 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132896 IP address blocks: 103.56.151.0/24 maxlen: 24 103.115.224.0/24 maxlen: 24 103.115.225.0/24 maxlen: 24 103.115.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2562 (0xa02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Jul 4 21:01:15 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a427cd-ab3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:ee:7c:5a:5c:d7:61:21:99:b3:5a:56:8f: b8:ec:3d:3e:65:5a:38:a5:9e:c8:66:26:68:22:aa: bf:87:fb:d6:ed:04:bf:db:e8:24:c8:3f:1b:07:7b: 68:92:45:06:d9:da:5c:ba:66:4c:d8:d7:72:bf:ca: 16:3e:af:73:0e:99:43:b6:35:46:80:96:c0:7d:d2: ef:9f:a5:6b:e2:30:09:ca:0e:ed:c5:f1:9d:88:db: 7c:2b:ed:01:7f:aa:f1:eb:46:fb:46:97:c7:0e:a8: 51:6e:6e:0c:4c:2f:86:ac:d6:ca:8f:4f:69:69:d6: d4:2e:33:d1:41:08:4d:75:a7:f1:73:94:68:5b:10: a2:24:2c:2f:f3:e7:2c:ca:af:b1:5b:55:3a:d8:a0: 9f:b5:a0:6d:d7:af:12:aa:76:48:7d:a2:03:c3:39: 0c:03:c2:db:eb:69:49:59:8a:c7:2f:68:d4:ca:9b: bb:27:64:fb:42:3e:12:d6:8b:6b:eb:37:e5:7b:55: 30:21:12:c9:cb:1e:08:ba:b6:6d:3c:74:3f:b3:73: 93:dc:ae:f1:12:38:60:fa:1b:63:3f:53:ee:7e:ba: f9:6e:75:9a:4c:9a:ae:45:b4:c7:7f:92:9e:61:b8: 95:25:c8:1f:bb:81:be:ba:29:e6:6a:3a:a9:67:a3: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CC:1C:11:21:66:95:CB:A5:24:8C:08:9C:F9:F1:FD:22:44:2F:C7 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/59675AB20A4011F0AC302962C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.56.151.0/24 103.115.224.0-103.115.226.255 Signature Algorithm: sha256WithRSAEncryption 49:19:6d:2f:76:11:5a:8a:af:83:9d:c8:40:be:71:d4:36:00: 1d:86:f6:c6:cf:60:03:3a:f3:e8:c4:f9:74:d7:c6:1a:c6:56: 5f:82:d0:27:42:cb:ef:63:d2:cb:28:d9:02:28:47:5a:e9:f2: 7d:08:c7:69:76:f5:64:74:5d:41:e9:1a:70:a8:58:84:5f:aa: 97:7c:5a:5e:46:fa:64:87:9c:b0:da:b9:62:8d:03:1e:21:0d: 16:c2:3f:81:c5:e5:a6:93:78:09:db:5a:77:d5:ea:9e:a7:d5: 4e:c3:af:e6:ec:2a:20:59:c2:c1:31:69:dc:09:96:2a:df:e5: 48:72:b8:df:d0:1c:db:8d:08:18:38:c2:88:e0:f5:eb:4b:6d: d5:14:1f:0a:a1:8b:88:1b:3a:ea:40:52:ce:35:6e:96:0b:b2: 54:9c:5c:5b:9f:9b:30:54:a3:34:05:c6:1f:9d:05:ee:19:12: c9:c4:a3:64:cd:e9:dc:d9:3f:4b:a8:db:9f:41:2d:05:ed:61: e0:bc:20:61:2f:be:a1:69:28:b3:e6:f5:85:e7:61:38:89:3e: 9c:8c:16:60:bf:17:fd:42:09:d3:b2:3e:0c:2d:68:c5:19:b6: 6c:cf:94:31:0b:fa:67:64:4a:9a:74:44:c0:92:84:b7:85:7d: bb:66:5d:22 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICCgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjUwNzA0MjEwMTE1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjdjZC1hYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvfufFpc12EhmbNaVo+47D0+ZVo4pZ7IZiZoIqq/h/vW7QS/2+gkyD8bB3to kkUG2dpcumZM2Ndyv8oWPq9zDplDtjVGgJbAfdLvn6Vr4jAJyg7txfGdiNt8K+0B f6rx60b7RpfHDqhRbm4MTC+GrNbKj09padbULjPRQQhNdafxc5RoWxCiJCwv8+cs yq+xW1U62KCftaBt168SqnZIfaIDwzkMA8Lb62lJWYrHL2jUypu7J2T7Qj4S1otr 6zfle1UwIRLJyx4IurZtPHQ/s3OT3K7xEjhg+htjP1Pufrr5bnWaTJquRbTHf5Ke YbiVJcgfu4G+uinmajqpZ6OCCwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFOfMHBEh ZpXLpSSMCJz58f0iRC/HMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIxRjYvMEYxNDAxNTA5NEM5MTFFQUIxREI2MjdDQzRGOUFFMDIvNTk2NzVBQjIw QTQwMTFGMEFDMzAyOTYyQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAZziXMAwDBAVnc+ADBABnc+IwDQYJKoZIhvcNAQELBQADggEBAEkZ bS92EVqKr4OdyEC+cdQ2AB2G9sbPYAM68+jE+XTXxhrGVl+C0CdCy+9j0sso2QIo R1rp8n0Ix2l29WR0XUHpGnCoWIRfqpd8Wl5G+mSHnLDauWKNAx4hDRbCP4HF5aaT eAnbWnfV6p6n1U7Dr+bsKiBZwsExadwJlirf5UhyuN/QHNuNCBg4wojg9etLbdUU Hwqhi4gbOupAUs41bpYLslScXFufmzBUozQFxh+dBe4ZEsnEo2TN6dzZP0uo259B LQXtYeC8IGEvvqFpKLPm9YXnYTiJPpyMFmC/F/1CCdOyPgwtaMUZtmzPlDEL+mdk Spp0RMCShLeFfbtmXSI= -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:18 2026 by rpki-client