$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/02F1850E45A611EA81CD145AC4F9AE02.roa File: 02F1850E45A611EA81CD145AC4F9AE02.roa (raw, json) Hash identifier: Xbw7WiHhcCBz0XR3p/8uG8mYkaVvHlya0CN2TyJVfiE= Subject key identifier: 54:3B:1F:61:B9:5B:13:C2:D2:E6:47:D6:E4:4E:68:6C:B1:07:D0:D0 Certificate issuer: /CN=A91AEE4B/serialNumber=B77283C533113A391E31D94527186ACF8399A25F Certificate serial: 0B98 Authority key identifier: B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/02F1850E45A611EA81CD145AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:45:29 +0000 ROA not before: Thu 14 Aug 2025 19:59:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 134601 IP address blocks: 103.120.220.0/22 maxlen: 22 103.120.220.0/24 maxlen: 24 103.120.221.0/24 maxlen: 24 103.120.222.0/24 maxlen: 24 103.120.223.0/24 maxlen: 24 2404:ef40::/32 maxlen: 32 2404:ef40:220::/48 maxlen: 48 2404:ef40:221::/48 maxlen: 48 2404:ef40:222::/48 maxlen: 48 2404:ef40:223::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEE4B, serialNumber=B77283C533113A391E31D94527186ACF8399A25F Validity Not Before: Aug 14 19:59:29 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a426d9-6717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:4d:c4:f4:0c:4a:c1:a8:cb:88:c4:1e:da: ce:f1:05:49:bd:0d:56:28:da:3c:88:05:a7:7d:bb: 7a:3d:41:b0:da:77:8c:9d:6d:2f:88:73:fd:02:cb: 26:7d:d5:ba:db:36:43:62:db:06:45:b5:3c:98:00: 7a:a0:10:f2:84:0e:df:50:35:c5:e4:cc:16:1c:6a: 40:ab:ad:b7:57:0a:38:81:c8:d2:c8:45:66:56:8d: 9b:71:54:8b:7b:af:ae:95:10:81:32:91:3c:d1:7e: 31:9e:d5:5f:1c:08:ec:46:a7:22:d8:c5:7f:4a:6e: 03:55:e1:d9:b1:5e:50:7d:d4:08:36:38:fb:fe:3f: f4:cc:6c:34:55:ba:4b:2f:f7:ea:d4:b7:92:14:fa: ec:a7:e5:9d:cf:9f:27:7a:e5:13:5f:2c:ca:86:c5: 1a:be:5a:21:79:3f:c8:2e:95:68:1c:4d:a7:5e:9c: fe:da:d9:3f:f4:e1:2c:b3:a2:5f:78:39:f6:c4:57: 58:d4:6c:b9:91:d2:83:db:78:46:56:2a:3a:50:c7: 47:ea:36:ac:f1:93:0a:ce:37:9f:00:18:58:08:4a: 39:fb:b5:3b:7c:f9:6f:78:e5:45:69:b2:a8:ed:e1: f7:7a:23:73:05:4d:e3:bd:21:47:3e:f3:d1:3e:93: df:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:1F:61:B9:5B:13:C2:D2:E6:47:D6:E4:4E:68:6C:B1:07:D0:D0 X509v3 Authority Key Identifier: keyid:B7:72:83:C5:33:11:3A:39:1E:31:D9:45:27:18:6A:CF:83:99:A2:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/t3KDxTMROjkeMdlFJxhqz4OZol8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KDxTMROjkeMdlFJxhqz4OZol8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE4B/63DFF80245A411EA942E0957C4F9AE02/02F1850E45A611EA81CD145AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.120.220.0/22 IPv6: 2404:ef40::/32 Signature Algorithm: sha256WithRSAEncryption a8:c6:a1:0b:ed:5a:87:d0:2e:c9:33:b3:ce:6f:29:11:d0:da: c4:33:9f:7c:cd:3d:2a:7a:b4:62:9b:1a:c4:51:b8:7c:d4:39: 65:10:8f:a1:eb:21:e1:2b:2e:98:6d:fd:91:e0:ef:7a:bc:a0: db:9b:81:a1:7f:5c:ae:f1:df:d7:7b:51:82:7a:1a:d2:21:80: 84:df:b7:5e:4d:61:18:9b:c2:6d:12:c8:c3:79:78:57:50:3c: 96:e7:5e:ac:a8:ec:f8:f8:71:b2:6d:13:b7:f1:42:5d:0c:0d: f8:75:99:c1:f7:87:f6:5d:d1:7f:06:c5:36:8e:66:10:9a:e8: 81:9f:c6:c5:ce:6a:f3:fc:ce:31:5d:c4:d0:28:7c:ae:f7:f3: 5f:64:e1:dd:a4:c9:e0:d3:4a:ba:40:2e:49:78:a0:ea:0d:9a: 8a:05:e3:de:81:3d:32:e7:60:2d:f8:47:2b:a1:7e:e1:76:d6: ad:65:98:f1:6b:75:db:01:dd:c9:99:ae:3d:38:b1:eb:ee:6d: 17:76:cb:d1:f2:1d:24:52:55:96:fc:e0:a9:5e:ed:2f:42:23: 00:34:e3:1b:6b:c5:20:96:7e:82:4a:f5:0b:be:ec:67:14:fe: e9:1a:dd:5a:b6:17:88:d3:fb:bb:98:09:69:c6:b6:74:93:92: ec:fb:e1:92 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVFNEIxMTAvBgNVBAUTKEI3NzI4M0M1MzMxMTNBMzkxRTMxRDk0NTI3MTg2QUNG ODM5OUEyNUYwHhcNMjUwODE0MTk1OTI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjZkOS02NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yJNxPQMSsGoy4jEHtrO8QVJvQ1WKNo8iAWnfbt6PUGw2neMnW0viHP9Assm fdW62zZDYtsGRbU8mAB6oBDyhA7fUDXF5MwWHGpAq623Vwo4gcjSyEVmVo2bcVSL e6+ulRCBMpE80X4xntVfHAjsRqci2MV/Sm4DVeHZsV5QfdQINjj7/j/0zGw0VbpL L/fq1LeSFPrsp+Wdz58neuUTXyzKhsUavloheT/ILpVoHE2nXpz+2tk/9OEss6Jf eDn2xFdY1Gy5kdKD23hGVio6UMdH6jas8ZMKzjefABhYCEo5+7U7fPlveOVFabKo 7eH3eiNzBU3jvSFHPvPRPpPfDQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFQ7H2G5 WxPC0uZH1uROaGyxB9DQMB8GA1UdIwQYMBaAFLdyg8UzETo5HjHZRScYas+DmaJf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0Qi82M0RGRjgwMjQ1 QTQxMUVBOTQyRTA5NTdDNEY5QUUwMi90M0tEeFRNUk9qa2VNZGxGSnhocXo0T1pv bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QzS0R4VE1ST2prZU1kbEZKeGhxejRPWm9sOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUVFNEIvNjNERkY4MDI0NUE0MTFFQTk0MkUwOTU3QzRGOUFFMDIvMDJGMTg1MEU0 NUE2MTFFQTgxQ0QxNDVBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3jcMA0EAgACMAcDBQAkBO9AMA0GCSqGSIb3DQEBCwUAA4IBAQCo xqEL7VqH0C7JM7PObykR0NrEM598zT0qerRimxrEUbh81DllEI+h6yHhKy6Ybf2R 4O96vKDbm4Ghf1yu8d/Xe1GCehrSIYCE37deTWEYm8JtEsjDeXhXUDyW516sqOz4 +HGybRO38UJdDA34dZnB94f2XdF/BsU2jmYQmuiBn8bFzmrz/M4xXcTQKHyu9/Nf ZOHdpMng00q6QC5JeKDqDZqKBePegT0y52At+EcroX7hdtatZZjxa3XbAd3Jma49 OLHr7m0XdsvR8h0kUlWW/OCpXu0vQiMANOMba8Ugln6CSvULvuxnFP7pGt1atheI 0/u7mAlpxrZ0k5Ls++GS -----END CERTIFICATE-----Generated at Mon Mar 2 13:19:27 2026 by rpki-client