$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/DD1FEE48C77311EEA5076E2CC4F9AE02.roa File: DD1FEE48C77311EEA5076E2CC4F9AE02.roa (raw, json) Hash identifier: /c+Xc/pq6gS3lH+dpF5Op6yyoSbbMrofTbdHTbTMtyY= Subject key identifier: 42:5D:7F:BE:BE:92:FB:55:55:BF:64:48:23:73:2F:E1:07:53:57:F2 Certificate issuer: /CN=A91AE69C/serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Certificate serial: 0300 Authority key identifier: 18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/DD1FEE48C77311EEA5076E2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:06:18 +0000 ROA not before: Thu 07 Aug 2025 02:38:22 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 141987 IP address blocks: 103.191.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 768 (0x300) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE69C, serialNumber=186153CB988838A3A6D48CF0423C5B46230059E8 Validity Not Before: Aug 7 02:38:22 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4018a-2b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:70:07:dd:15:dd:28:04:39:99:ef:e6:07:6f: 8f:c3:bf:af:27:72:c3:62:bb:17:24:f3:69:b7:8d: f0:f9:4c:98:8c:ca:58:ec:d7:65:fe:e0:9b:e9:59: 7a:a9:01:1f:98:26:af:ce:f5:d5:1f:7a:75:fc:03: 11:bb:a9:5b:0b:de:52:d6:2d:9d:4f:00:9f:b7:46: 25:bd:87:87:fc:cc:04:70:10:b8:19:e6:6b:10:de: cb:4c:85:f7:01:91:6c:1e:e8:45:c3:a9:bc:5b:b6: 6f:b6:6d:5c:3e:08:57:13:6e:aa:51:05:a4:7c:6b: 0e:b3:85:4f:80:2b:16:a5:23:67:5e:7b:cb:84:7f: 50:8b:76:0b:eb:f2:72:c2:f6:90:51:82:a7:64:6a: 03:a3:f4:ff:d4:9d:f4:6e:b3:d3:d6:00:73:16:df: 86:e7:7e:f8:28:a7:ff:0b:b5:36:d4:e9:30:0b:07: 1d:83:e5:15:82:69:86:ef:f0:d5:63:1d:f5:78:4b: 2e:5c:ed:d6:fa:e2:71:2c:d9:3a:10:1f:61:a2:2d: a2:59:e6:44:dd:0c:ea:42:19:3b:40:2d:15:a5:24: f0:a6:f0:a8:87:c4:a6:fa:57:98:2b:10:d2:25:e8: d6:82:ee:78:dc:a2:f1:8b:e6:d2:9d:1c:ad:6a:1e: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5D:7F:BE:BE:92:FB:55:55:BF:64:48:23:73:2F:E1:07:53:57:F2 X509v3 Authority Key Identifier: keyid:18:61:53:CB:98:88:38:A3:A6:D4:8C:F0:42:3C:5B:46:23:00:59:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/GGFTy5iIOKOm1IzwQjxbRiMAWeg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GGFTy5iIOKOm1IzwQjxbRiMAWeg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE69C/9EB07998127A11ED902DFE27C4F9AE02/DD1FEE48C77311EEA5076E2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.191.74.0/23 Signature Algorithm: sha256WithRSAEncryption 76:fe:f0:55:8f:a9:72:03:bd:da:e2:eb:fd:1a:d0:81:46:fe: 58:41:f4:ce:f4:a2:e8:a4:17:f2:ee:2c:1f:bd:b9:65:91:26: 44:83:7c:7a:16:87:66:34:06:ad:c4:78:de:79:71:55:f4:15: 8c:ef:8a:6c:92:a9:8c:a0:6f:cb:38:04:35:d8:cb:3d:e2:0f: c4:4d:d6:91:91:4f:27:88:66:0f:73:da:c4:0b:d3:c1:01:83: 7c:b2:57:6f:d9:11:70:13:0c:1d:45:b8:e6:93:3b:6c:b1:3c: 3c:2d:2d:77:4a:57:d4:05:ec:4e:2c:e3:35:70:8e:a0:55:b4: 34:77:fb:71:7d:ae:90:1a:d7:76:a7:91:1a:cd:45:b3:d1:a5: ca:45:92:ea:db:6a:f8:8a:56:31:54:01:35:54:f9:a1:d9:d8: f4:83:da:cd:41:86:43:08:c2:92:d2:90:04:43:51:82:e8:b0: a6:8b:37:9d:cf:34:05:0e:fe:66:d9:16:21:8a:bf:77:de:f6: 90:f1:62:f0:57:46:db:26:c4:ff:f6:4c:22:2b:23:ed:31:01: 88:2e:24:06:e8:0c:a0:22:8d:fb:9a:13:9d:f2:3a:17:56:33: b4:4b:5b:82:3f:e2:47:c7:27:af:1b:4b:fe:16:8d:2e:98:75: fc:15:2c:00 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU2OUMxMTAvBgNVBAUTKDE4NjE1M0NCOTg4ODM4QTNBNkQ0OENGMDQyM0M1QjQ2 MjMwMDU5RTgwHhcNMjUwODA3MDIzODIyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDE4YS0yYjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA03AH3RXdKAQ5me/mB2+Pw7+vJ3LDYrsXJPNpt43w+UyYjMpY7Ndl/uCb6Vl6 qQEfmCavzvXVH3p1/AMRu6lbC95S1i2dTwCft0YlvYeH/MwEcBC4GeZrEN7LTIX3 AZFsHuhFw6m8W7Zvtm1cPghXE26qUQWkfGsOs4VPgCsWpSNnXnvLhH9Qi3YL6/Jy wvaQUYKnZGoDo/T/1J30brPT1gBzFt+G5374KKf/C7U21OkwCwcdg+UVgmmG7/DV Yx31eEsuXO3W+uJxLNk6EB9hoi2iWeZE3QzqQhk7QC0VpSTwpvCoh8Sm+leYKxDS JejWgu543KLxi+bSnRytah48OQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEJdf76+ kvtVVb9kSCNzL+EHU1fyMB8GA1UdIwQYMBaAFBhhU8uYiDijptSM8EI8W0YjAFno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTY5Qy85RUIwNzk5ODEy N0ExMUVEOTAyREZFMjdDNEY5QUUwMi9HR0ZUeTVpSU9LT20xSXp3UWp4YlJpTUFX ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dHRlR5NWlJT0tPbTFJendRanhiUmlNQVdlZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUU2OUMvOUVCMDc5OTgxMjdBMTFFRDkwMkRGRTI3QzRGOUFFMDIvREQxRkVFNDhD NzczMTFFRUE1MDc2RTJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ79KMA0GCSqGSIb3DQEBCwUAA4IBAQB2/vBVj6lyA73a4uv9GtCB Rv5YQfTO9KLopBfy7iwfvbllkSZEg3x6FodmNAatxHjeeXFV9BWM74pskqmMoG/L OAQ12Ms94g/ETdaRkU8niGYPc9rEC9PBAYN8sldv2RFwEwwdRbjmkztssTw8LS13 SlfUBexOLOM1cI6gVbQ0d/txfa6QGtd2p5EazUWz0aXKRZLq22r4ilYxVAE1VPmh 2dj0g9rNQYZDCMKS0pAEQ1GC6LCmizedzzQFDv5m2RYhir933vaQ8WLwV0bbJsT/ 9kwiKyPtMQGILiQG6AygIo37mhOd8joXVjO0S1uCP+JHxyevG0v+Fo0umHX8FSwA -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:15 2026 by rpki-client