$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa File: 4EEEF95AEA4311EE86C1DD73C4F9AE02.roa (raw, json) Hash identifier: lfjq0mjRyBjOjeULyMBRcEJ9mBJ8RaIftGnavOAVlTo= Subject key identifier: 33:9E:D2:98:B7:1E:B0:6E:63:03:8C:3E:AB:B5:30:C8:B4:54:B5:46 Certificate issuer: /CN=A91ACF30/serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Certificate serial: 088B Authority key identifier: D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:22:11 +0000 ROA not before: Tue 08 Jul 2025 21:32:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 132837 IP address blocks: 103.248.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2187 (0x88b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACF30, serialNumber=D3267AF9FB969089C3C12AFEBFD0FDE9BD867581 Validity Not Before: Jul 8 21:32:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42f73-ab61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:45:9c:b9:27:74:cb:0a:28:39:c2:a8:72: 53:86:cf:d0:d5:ae:a4:0d:4a:4d:b8:fe:3a:fc:44: c4:5c:fb:78:1c:0e:0f:e5:42:b0:ab:8a:8b:8a:0d: 72:7a:2e:b2:db:5a:87:9f:2f:af:e5:a0:7c:05:88: 61:6b:26:fa:32:af:5b:57:ae:18:84:30:bc:cf:5f: 1c:75:9e:e9:80:13:a0:85:25:e1:37:2b:0e:44:7d: 16:7b:09:4a:79:78:69:4c:73:9a:c5:86:b5:65:05: f7:82:2c:60:59:27:34:40:f2:9f:6f:92:3b:73:20: af:ba:16:9f:0a:8a:06:4f:57:75:c4:c3:81:fb:59: 74:8d:31:d4:d8:95:6f:41:a3:3c:50:92:5f:df:c9: 23:f9:02:fc:8a:66:59:38:db:6f:3c:f0:66:18:08: a0:66:78:a1:2a:f5:af:96:f0:7a:06:f7:60:72:8d: 4d:98:a5:3a:f8:3c:9b:ba:b4:35:df:e5:68:d3:8f: 4f:38:50:3f:40:8a:2b:62:5b:6a:45:fa:1b:e0:95: c0:02:80:73:a1:b4:e4:e2:62:85:d6:6b:27:7d:30: ef:61:93:f5:09:96:c5:83:65:91:e6:71:b4:15:11: 43:83:ba:26:81:04:59:60:25:96:38:a1:a7:85:a2: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9E:D2:98:B7:1E:B0:6E:63:03:8C:3E:AB:B5:30:C8:B4:54:B5:46 X509v3 Authority Key Identifier: keyid:D3:26:7A:F9:FB:96:90:89:C3:C1:2A:FE:BF:D0:FD:E9:BD:86:75:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/0yZ6-fuWkInDwSr-v9D96b2GdYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0yZ6-fuWkInDwSr-v9D96b2GdYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACF30/3B912F12F18211EAA537970AC4F9AE02/4EEEF95AEA4311EE86C1DD73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.248.108.0/22 Signature Algorithm: sha256WithRSAEncryption 31:79:a7:3b:0f:4c:1c:c9:c9:0e:06:6a:7a:0a:9d:c3:90:7a: ed:db:84:d1:11:65:0d:3c:e8:fb:7a:95:b4:b6:f1:5e:c2:a1: 8f:be:fd:03:7f:23:05:ad:bf:23:3b:3e:32:be:72:f1:e9:64: d3:b0:25:af:f8:97:49:fc:c9:21:ff:5c:81:34:35:95:e5:a8: 6c:b7:6e:dd:0f:ce:87:17:c7:59:a0:1a:e8:2f:62:a3:a4:91: 52:38:b0:2b:4b:54:b9:d9:66:5c:59:bc:04:c6:ea:2f:d8:70: 0a:4f:4e:be:cd:09:fa:f8:a9:89:b8:2c:e9:8b:50:95:25:d2: 12:a5:1d:6b:a2:c4:37:9a:97:37:9f:c1:27:c8:49:74:ac:d8: 31:a0:1c:a2:c1:84:aa:64:5c:c1:56:86:58:a5:77:f8:fc:5c: 83:23:cc:cc:39:1f:c6:14:ac:6e:fb:f0:b1:bc:d7:ab:c0:09: 93:c7:e3:40:89:35:3a:7b:26:d5:74:ca:1f:6a:5a:18:20:8b: 3c:bb:85:c3:8d:59:4a:89:ac:38:d8:6b:cc:83:01:c1:5a:db: 6e:e6:f6:78:81:29:b1:dd:a2:ed:20:3f:cc:10:1a:ee:1e:62: 9f:2a:74:d8:ca:6a:28:ff:cd:52:c3:75:29:b5:36:48:f6:52: 19:29:ae:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGMzAxMTAvBgNVBAUTKEQzMjY3QUY5RkI5NjkwODlDM0MxMkFGRUJGRDBGREU5 QkQ4Njc1ODEwHhcNMjUwNzA4MjEzMjExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmY3My1hYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxpFnLkndMsKKDnCqHJThs/Q1a6kDUpNuP46/ETEXPt4HA4P5UKwq4qLig1y ei6y21qHny+v5aB8BYhhayb6Mq9bV64YhDC8z18cdZ7pgBOghSXhNysORH0WewlK eXhpTHOaxYa1ZQX3gixgWSc0QPKfb5I7cyCvuhafCooGT1d1xMOB+1l0jTHU2JVv QaM8UJJf38kj+QL8imZZONtvPPBmGAigZnihKvWvlvB6Bvdgco1NmKU6+DyburQ1 3+Vo049POFA/QIorYltqRfob4JXAAoBzobTk4mKF1msnfTDvYZP1CZbFg2WR5nG0 FRFDg7omgQRZYCWWOKGnhaISpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDOe0pi3 HrBuYwOMPqu1MMi0VLVGMB8GA1UdIwQYMBaAFNMmevn7lpCJw8Eq/r/Q/em9hnWB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0YzMC8zQjkxMkYxMkYx ODIxMUVBQTUzNzk3MEFDNEY5QUUwMi8weVo2LWZ1V2tJbkR3U3ItdjlEOTZiMkdk WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB5WjYtZnVXa0luRHdTci12OUQ5NmIyR2RZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNGMzAvM0I5MTJGMTJGMTgyMTFFQUE1Mzc5NzBBQzRGOUFFMDIvNEVFRUY5NUFF QTQzMTFFRTg2QzFERDczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/hsMA0GCSqGSIb3DQEBCwUAA4IBAQAxeac7D0wcyckOBmp6Cp3D kHrt24TREWUNPOj7epW0tvFewqGPvv0DfyMFrb8jOz4yvnLx6WTTsCWv+JdJ/Mkh /1yBNDWV5ahst27dD86HF8dZoBroL2KjpJFSOLArS1S52WZcWbwExuov2HAKT06+ zQn6+KmJuCzpi1CVJdISpR1rosQ3mpc3n8EnyEl0rNgxoByiwYSqZFzBVoZYpXf4 /FyDI8zMOR/GFKxu+/CxvNerwAmTx+NAiTU6eybVdMofaloYIIs8u4XDjVlKiaw4 2GvMgwHBWttu5vZ4gSmx3aLtID/MEBruHmKfKnTYymoo/81Sw3UptTZI9lIZKa5U -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:22 2026 by rpki-client