$ rpki-client -vvf rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa File: E6F3687CBCE711EAACD6466CC4F9AE02.roa (raw, json) Hash identifier: AJajG2Lmw5CKAEEdhqoEdtkkiOQieReMgo4pezqlWDM= Subject key identifier: 3F:52:AB:48:0C:2A:68:08:7A:3B:56:8D:3E:2F:6F:A5:5C:88:6F:11 Certificate issuer: /CN=A91B289C/serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Certificate serial: 092B Authority key identifier: DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:52:15 +0000 ROA not before: Mon 02 Jun 2025 21:06:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 139056 IP address blocks: 103.139.16.0/23 maxlen: 24 2400:ffa0::/32 maxlen: 32 2400:ffa0::/34 maxlen: 34 2400:ffa0::/36 maxlen: 36 2400:ffa0:1000::/36 maxlen: 36 2400:ffa0:2000::/36 maxlen: 36 2400:ffa0:3000::/36 maxlen: 36 2400:ffa0:4000::/34 maxlen: 34 2400:ffa0:4000::/36 maxlen: 36 2400:ffa0:5000::/36 maxlen: 36 2400:ffa0:6000::/36 maxlen: 36 2400:ffa0:7000::/36 maxlen: 36 2400:ffa0:8000::/34 maxlen: 34 2400:ffa0:8000::/36 maxlen: 36 2400:ffa0:9000::/36 maxlen: 36 2400:ffa0:a000::/36 maxlen: 36 2400:ffa0:b000::/36 maxlen: 36 2400:ffa0:c000::/34 maxlen: 34 2400:ffa0:c000::/36 maxlen: 36 2400:ffa0:d000::/36 maxlen: 36 2400:ffa0:e000::/36 maxlen: 36 2400:ffa0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2347 (0x92b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B289C, serialNumber=DB72C8BAF1DAF693981852EE032230305EC80910 Validity Not Before: Jun 2 21:06:40 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4286f-82a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:92:bd:ae:6b:33:6a:be:90:99:01:40:f4:eb: 5a:24:cf:7e:4a:a8:25:59:fc:1f:09:71:df:0e:87: 41:63:ec:b9:33:0c:62:65:a6:08:ca:58:42:9a:21: a5:11:06:b0:52:1b:c9:05:e0:42:e2:60:42:2c:4b: b8:c0:1b:3e:6b:36:63:9f:64:61:57:4a:56:cf:62: 68:82:ad:0d:2f:4d:2b:3f:00:ed:60:d9:57:00:d6: 66:b4:66:3f:a2:ea:87:22:9a:08:33:6e:16:7f:68: 73:64:20:cc:82:aa:d2:e1:38:40:c5:d9:35:94:d9: 88:f2:d8:6f:fc:79:b2:b7:9a:ab:1a:46:0f:ca:50: 76:19:08:0c:4f:57:b2:cc:09:d9:f2:ab:2d:3b:50: 9a:fa:95:07:f5:ae:94:e4:57:f9:a6:4a:49:04:a3: 0f:62:91:f8:5e:a3:2f:f6:6a:47:10:72:05:57:d7: a1:52:93:13:1e:6a:3b:c6:34:22:1c:02:27:8c:4f: 3c:44:b4:4f:cf:22:03:03:21:b4:ad:fa:c1:a5:9a: 3b:7b:3c:01:03:38:8a:04:d6:c8:2f:c7:42:95:7e: 31:a0:b1:2d:68:1f:05:6d:9c:8f:24:54:1b:93:3b: dd:6a:f1:58:ec:25:20:51:94:6c:d6:d9:ab:53:77: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:52:AB:48:0C:2A:68:08:7A:3B:56:8D:3E:2F:6F:A5:5C:88:6F:11 X509v3 Authority Key Identifier: keyid:DB:72:C8:BA:F1:DA:F6:93:98:18:52:EE:03:22:30:30:5E:C8:09:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/23LIuvHa9pOYGFLuAyIwMF7ICRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23LIuvHa9pOYGFLuAyIwMF7ICRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B289C/3AB1E2DCBCE711EABE972C6CC4F9AE02/E6F3687CBCE711EAACD6466CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.16.0/23 IPv6: 2400:ffa0::/32 Signature Algorithm: sha256WithRSAEncryption 25:1a:3c:9b:ac:82:a6:83:f7:bb:4f:63:e0:04:34:8f:ae:91: 2e:99:26:c8:32:65:86:3e:f2:b6:1c:22:e2:b4:76:e1:f9:d9: 6b:c9:26:7c:14:10:b7:3c:92:79:0a:c1:bd:41:8e:f1:51:5c: 09:bd:93:07:38:b4:e2:81:5f:c6:29:7b:ee:76:f2:62:4c:05: 9c:42:a9:db:c6:ae:e2:68:bb:b1:19:84:48:65:4c:f5:96:75: 2b:e7:80:a6:6d:5f:12:f2:33:b1:da:0a:e7:01:83:c0:ca:c6: 52:78:11:f8:7c:e4:7a:ba:b0:5f:0e:74:c0:3c:3f:6c:9f:60: 5e:f8:ff:6e:77:37:20:2e:17:4e:6b:1d:c0:b9:d0:c8:31:8e: a0:07:40:45:42:3b:ae:57:9f:26:ef:2a:94:5a:70:32:d8:f2: ab:28:86:99:7c:8f:69:0e:db:51:3a:a6:1a:ef:f0:21:ab:b3: c5:17:24:e7:22:ff:7b:87:fb:16:34:39:74:3f:e7:5e:9b:ee: e6:de:8a:5a:9f:45:65:ae:d3:4c:a6:a1:20:4b:55:40:1c:a7: 3f:cb:e7:7f:94:94:57:1a:62:c7:48:2e:69:3a:8d:90:23:40: e7:4e:08:a7:41:d1:cb:2e:a4:39:4c:d6:30:b7:c5:47:ff:20: a1:1c:3c:cc -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI4OUMxMTAvBgNVBAUTKERCNzJDOEJBRjFEQUY2OTM5ODE4NTJFRTAzMjIzMDMw NUVDODA5MTAwHhcNMjUwNjAyMjEwNjQwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjg2Zi04MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpK9rmszar6QmQFA9OtaJM9+SqglWfwfCXHfDodBY+y5MwxiZaYIylhCmiGl EQawUhvJBeBC4mBCLEu4wBs+azZjn2RhV0pWz2Jogq0NL00rPwDtYNlXANZmtGY/ ouqHIpoIM24Wf2hzZCDMgqrS4ThAxdk1lNmI8thv/Hmyt5qrGkYPylB2GQgMT1ey zAnZ8qstO1Ca+pUH9a6U5Ff5pkpJBKMPYpH4XqMv9mpHEHIFV9ehUpMTHmo7xjQi HAInjE88RLRPzyIDAyG0rfrBpZo7ezwBAziKBNbIL8dClX4xoLEtaB8FbZyPJFQb kzvdavFY7CUgUZRs1tmrU3cS/QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFD9Sq0gM KmgIejtWjT4vb6VciG8RMB8GA1UdIwQYMBaAFNtyyLrx2vaTmBhS7gMiMDBeyAkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjg5Qy8zQUIxRTJEQ0JD RTcxMUVBQkU5NzJDNkNDNEY5QUUwMi8yM0xJdXZIYTlwT1lHRkx1QXlJd01GN0lD UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzTEl1dkhhOXBPWUdGTHVBeUl3TUY3SUNSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjI4OUMvM0FCMUUyRENCQ0U3MTFFQUJFOTcyQzZDQzRGOUFFMDIvRTZGMzY4N0NC Q0U3MTFFQUFDRDY0NjZDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4sQMA0EAgACMAcDBQAkAP+gMA0GCSqGSIb3DQEBCwUAA4IBAQAl GjybrIKmg/e7T2PgBDSPrpEumSbIMmWGPvK2HCLitHbh+dlrySZ8FBC3PJJ5CsG9 QY7xUVwJvZMHOLTigV/GKXvudvJiTAWcQqnbxq7iaLuxGYRIZUz1lnUr54CmbV8S 8jOx2grnAYPAysZSeBH4fOR6urBfDnTAPD9sn2Be+P9udzcgLhdOax3AudDIMY6g B0BFQjuuV58m7yqUWnAy2PKrKIaZfI9pDttROqYa7/Ahq7PFFyTnIv97h/sWNDl0 P+dem+7m3opan0VlrtNMpqEgS1VAHKc/y+d/lJRXGmLHSC5pOo2QI0DnTginQdHL LqQ5TNYwt8VH/yChHDzM -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:54 2026 by rpki-client