$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/BB46A670849811F08EA6E444C4F9AE02.roa File: BB46A670849811F08EA6E444C4F9AE02.roa (raw, json) Hash identifier: gZhASpUdS2kKZkIDGyUcYVa0JbfP6X8oZEBvcGxjMeM= Subject key identifier: 1E:5A:4A:4F:57:AE:E9:2B:63:35:3C:D4:9B:CD:63:56:B1:D0:01:B1 Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C22 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/BB46A670849811F08EA6E444C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:48:33 +0000 ROA not before: Tue 02 Dec 2025 18:50:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 40605 IP address blocks: 103.244.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Dec 2 18:50:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48a01-a169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:19:c3:24:a4:e6:00:6f:a7:69:a9:f0:b9: 1d:d3:1b:9e:b7:c1:7f:98:86:3d:db:73:19:70:2c: 21:8c:aa:36:d0:c8:9f:c4:13:a0:47:fc:69:c7:0a: b2:18:48:9b:34:c7:6f:99:59:21:32:b3:f2:34:90: e5:60:1d:fd:3d:89:32:37:31:74:85:d2:81:e8:7d: be:f8:24:05:d2:53:9e:ca:02:21:0c:14:c3:87:60: 1d:bb:02:bb:c0:bd:17:d8:80:3c:af:df:f8:5d:94: 00:2f:18:5e:0a:67:6d:24:51:88:64:31:bb:dd:fb: 1f:a7:23:47:d1:8b:39:93:20:94:e0:58:71:8e:65: aa:35:1d:73:be:71:24:79:a5:0d:64:67:e8:95:21: 25:95:4a:89:2f:2e:94:56:e7:fa:a2:ba:0f:77:79: 6f:f4:20:d7:da:2a:60:f8:d7:88:b1:1f:a9:ee:44: 1e:a2:8e:2e:50:7d:82:b7:e8:84:c1:cf:33:0b:c3: 41:86:70:12:6f:36:e4:f9:f0:b1:af:96:75:26:d5: 46:7a:60:08:f1:14:d7:91:17:6c:ee:29:1f:ef:a7: 4c:e5:45:96:91:57:32:fd:f9:11:90:86:e9:60:f2: e4:4d:ee:ca:d9:de:e2:5c:f1:f4:bc:dc:37:4d:d1: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5A:4A:4F:57:AE:E9:2B:63:35:3C:D4:9B:CD:63:56:B1:D0:01:B1 X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/BB46A670849811F08EA6E444C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.244.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:47:d0:58:81:27:76:fc:62:14:35:99:e5:f5:2f:2a:63:bc: 8d:a8:65:6f:9b:7a:27:27:30:03:20:79:18:4e:5d:0b:03:fd: 4e:9c:bf:c4:67:bd:fa:15:20:8b:7c:05:16:a7:ad:06:d3:48: b6:a4:0c:e8:6c:af:8b:d1:a3:a7:8b:7a:81:b0:74:ff:3d:eb: 22:9c:d4:b9:4d:b9:99:b1:1b:c0:0f:79:30:16:47:8f:74:47: fa:6c:0b:ce:77:0d:d6:70:3f:3d:71:12:95:5c:f9:8e:fb:55: db:d9:a5:84:65:bf:04:57:8b:c5:05:0f:22:ef:2d:b3:97:6f: c2:eb:ab:0f:11:b5:d9:36:9f:26:98:0a:42:2c:1f:1c:fb:2d: b7:ff:84:af:1f:15:d6:22:9e:34:20:1e:0c:43:77:b5:51:cc: ed:1a:0a:9d:f9:b8:42:17:c3:7c:f9:4f:0f:67:24:c6:04:b1: 40:60:ea:9a:61:ee:fb:d6:28:cc:37:69:64:58:97:91:4a:81: 91:cb:8c:8b:01:e7:4a:ba:50:fc:f1:d0:72:7c:b1:a4:d4:c8: b0:3f:a2:00:77:2f:30:27:ba:91:45:a3:2d:69:e6:7f:f4:1c: f0:15:d7:ef:0b:ea:de:55:a2:6b:5b:a9:90:cc:7a:2c:1d:12: 7f:d0:06:77 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUxMjAyMTg1MDM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGEwMS1hMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodQZwySk5gBvp2mp8Lkd0xuet8F/mIY923MZcCwhjKo20MifxBOgR/xpxwqy GEibNMdvmVkhMrPyNJDlYB39PYkyNzF0hdKB6H2++CQF0lOeygIhDBTDh2AduwK7 wL0X2IA8r9/4XZQALxheCmdtJFGIZDG73fsfpyNH0Ys5kyCU4FhxjmWqNR1zvnEk eaUNZGfolSEllUqJLy6UVuf6oroPd3lv9CDX2ipg+NeIsR+p7kQeoo4uUH2Ct+iE wc8zC8NBhnASbzbk+fCxr5Z1JtVGemAI8RTXkRds7ikf76dM5UWWkVcy/fkRkIbp YPLkTe7K2d7iXPH0vNw3TdEicQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB5aSk9X rukrYzU81JvNY1ax0AGxMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvQkI0NkE2NzA4 NDk4MTFGMDhFQTZFNDQ0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ/TdMA0GCSqGSIb3DQEBCwUAA4IBAQAaR9BYgSd2/GIUNZnl9S8q Y7yNqGVvm3onJzADIHkYTl0LA/1OnL/EZ736FSCLfAUWp60G00i2pAzobK+L0aOn i3qBsHT/PesinNS5TbmZsRvAD3kwFkePdEf6bAvOdw3WcD89cRKVXPmO+1Xb2aWE Zb8EV4vFBQ8i7y2zl2/C66sPEbXZNp8mmApCLB8c+y23/4SvHxXWIp40IB4MQ3e1 UcztGgqd+bhCF8N8+U8PZyTGBLFAYOqaYe771ijMN2lkWJeRSoGRy4yLAedKulD8 8dByfLGk1MiwP6IAdy8wJ7qRRaMtaeZ/9BzwFdfvC+reVaJrW6mQzHosHRJ/0AZ3 -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:02 2026 by rpki-client