$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/2FFDFB74A5F111EC89780C38C4F9AE02.roa File: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (raw, json) Hash identifier: Nm/gYuWqGgipqywq7Xrzu19TEq+o34UqvUGP90ZngeQ= Subject key identifier: FA:CA:89:AB:02:57:D1:97:71:48:FA:9E:03:0F:43:0D:3F:84:E6:13 Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Certificate serial: 0417 Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/2FFDFB74A5F111EC89780C38C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:56:13 +0000 ROA not before: Mon 03 Mar 2025 02:55:22 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141737 IP address blocks: 103.182.212.0/23 maxlen: 23 103.182.212.0/24 maxlen: 24 103.182.213.0/24 maxlen: 24 2001:df0:7fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1047 (0x417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Validity Not Before: Mar 3 02:55:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3ff2d-68c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b9:8b:e8:f4:16:61:f0:f4:71:be:54:44:55: a5:be:ef:48:43:e5:ee:7b:a6:3e:23:99:79:6d:63: e2:bc:69:e6:7c:f7:f8:a2:7d:6e:68:1d:14:d9:8d: bd:c8:c8:32:56:c9:ba:ad:50:10:43:06:e4:8e:0d: 20:85:b5:94:2e:98:de:ab:d9:c1:42:28:e0:a5:90: 7d:2e:59:28:3d:27:99:d2:ff:63:c7:bd:bf:54:b9: 61:eb:88:4b:5f:58:ad:f4:4c:0d:b1:6c:c2:92:93: 49:30:10:9e:1a:7a:43:0d:86:17:67:96:e3:8e:c3: ea:2b:49:31:66:16:b6:fa:ba:0d:77:5a:c1:92:69: 2f:8d:52:fb:6a:33:cc:81:90:45:b0:33:77:bf:39: de:20:05:e6:2e:5c:a4:c6:df:50:e2:a5:ea:83:60: ed:c8:ea:83:42:e1:1d:2c:53:52:13:50:fa:11:70: 50:c2:30:a9:bf:be:ad:b0:d2:5b:1d:46:9f:32:07: fe:5b:f2:2c:85:c0:8b:a4:b2:7d:24:35:51:1c:cf: 95:78:1c:95:b6:3c:36:3f:e1:ce:e2:6a:c8:a6:00: b0:de:75:d3:71:62:19:09:1c:79:f7:3a:01:57:d7: 29:5d:ee:a4:7c:b1:f6:86:e3:cf:2c:43:f1:ab:81: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CA:89:AB:02:57:D1:97:71:48:FA:9E:03:0F:43:0D:3F:84:E6:13 X509v3 Authority Key Identifier: keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/2FFDFB74A5F111EC89780C38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.182.212.0/23 IPv6: 2001:df0:7fc0::/48 Signature Algorithm: sha256WithRSAEncryption 31:7b:1a:b6:55:08:41:c3:57:db:a4:f1:25:c4:bb:6b:34:8a: bd:0e:2f:fb:e2:29:e5:e6:5d:31:17:5c:f7:55:f7:44:ac:ee: 35:7a:60:2c:b0:f1:2b:c4:8c:6a:89:09:ef:76:e1:7a:a3:fe: 99:5c:59:75:ad:fa:22:e6:64:42:e3:4e:66:b8:b1:31:2e:c8: 84:08:e2:9c:0b:f0:c8:d3:f4:69:8c:28:83:2b:45:76:30:bf: 3a:99:fb:78:69:5c:e7:c7:95:30:d1:76:4a:3f:82:3e:52:00: e5:ce:1b:cd:07:01:92:6e:96:20:1f:11:e0:39:6b:6f:cc:fe: 18:28:75:fa:77:bc:94:9c:3a:37:bb:a3:c7:c8:98:0d:63:bd: 10:68:94:1a:8c:00:82:bf:89:88:57:84:d5:c8:44:6d:81:36: dc:a3:ef:8d:0f:ca:9e:df:de:72:61:26:c6:ca:45:64:d9:dc: 05:1a:71:d1:42:38:19:ac:e3:a8:5e:31:67:3e:e9:06:42:b2: 3c:7d:a5:5b:91:a0:89:a5:da:ec:3a:c4:e6:95:cb:4f:36:4f: 1f:cd:a3:1c:d0:a2:64:27:49:ef:8f:2c:38:e3:1f:f6:68:0f: cd:81:5a:e5:a2:f0:9c:28:c1:2e:64:d0:df:7e:cf:7b:8e:18: 7b:b0:87:c6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEQzExMTAvBgNVBAUTKEUxNDRDQ0Y0MURBMTA1QUY2Q0Q0NUJDM0Y4ODY2MjM0 RDM4RjdDNzUwHhcNMjUwMzAzMDI1NTIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmYyZC02OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbmL6PQWYfD0cb5URFWlvu9IQ+Xue6Y+I5l5bWPivGnmfPf4on1uaB0U2Y29 yMgyVsm6rVAQQwbkjg0ghbWULpjeq9nBQijgpZB9LlkoPSeZ0v9jx72/VLlh64hL X1it9EwNsWzCkpNJMBCeGnpDDYYXZ5bjjsPqK0kxZha2+roNd1rBkmkvjVL7ajPM gZBFsDN3vzneIAXmLlykxt9Q4qXqg2DtyOqDQuEdLFNSE1D6EXBQwjCpv76tsNJb HUafMgf+W/IshcCLpLJ9JDVRHM+VeByVtjw2P+HO4mrIpgCw3nXTcWIZCRx59zoB V9cpXe6kfLH2huPPLEPxq4HASwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPrKiasC V9GXcUj6ngMPQw0/hOYTMB8GA1UdIwQYMBaAFOFEzPQdoQWvbNRbw/iGYjTTj3x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0RDMS81MEM2MDI3QUE1 MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJhOXMxRnZELUlaaU5OT1Bm SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVVE05QjJoQmE5czFGdkQtSVppTk5PUGZIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEQzEvNTBDNjAyN0FBNTA2MTFFQzgyQTI0MzdEQzRGOUFFMDIvMkZGREZCNzRB NUYxMTFFQzg5NzgwQzM4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7bUMA8EAgACMAkDBwAgAQ3wf8AwDQYJKoZIhvcNAQELBQADggEB ADF7GrZVCEHDV9uk8SXEu2s0ir0OL/viKeXmXTEXXPdV90Ss7jV6YCyw8SvEjGqJ Ce924Xqj/plcWXWt+iLmZELjTma4sTEuyIQI4pwL8MjT9GmMKIMrRXYwvzqZ+3hp XOfHlTDRdko/gj5SAOXOG80HAZJuliAfEeA5a2/M/hgodfp3vJScOje7o8fImA1j vRBolBqMAIK/iYhXhNXIRG2BNtyj740Pyp7f3nJhJsbKRWTZ3AUacdFCOBms46he MWc+6QZCsjx9pVuRoIml2uw6xOaVy082Tx/NoxzQomQnSe+PLDjjH/ZoD82BWuWi 8JwowS5k0N9+z3uOGHuwh8Y= -----END CERTIFICATE-----Generated at Mon Mar 2 07:25:52 2026 by rpki-client