$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa File: A9286C0E6D4411E7AF539270C4F9AE02.roa (raw, json) Hash identifier: 6XEd0uCxQtA9wBbV+Q7/BBTxLNihLCwNHh1QPcQVifo= Subject key identifier: E4:A7:BA:F5:41:2E:37:99:03:C0:92:85:68:CF:D2:12:EF:45:46:1D Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1AE2 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:55:11 +0000 ROA not before: Tue 08 Jul 2025 16:54:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 15580 IP address blocks: 103.233.172.0/24 maxlen: 24 103.233.173.0/24 maxlen: 24 103.233.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6882 (0x1ae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 8 16:54:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4615f-33c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:83:6a:26:06:ae:ff:6c:b3:6e:34:d0:df: a3:21:8c:68:24:1f:ee:75:f9:4c:ef:39:ed:de:1f: 0b:fc:dc:ae:d2:97:51:9d:b9:4c:83:90:d4:f2:29: 70:ab:d7:82:15:d5:3a:d0:3e:68:86:cd:e3:a6:4a: 57:eb:71:ba:96:9b:7c:0b:8b:75:8e:e6:59:c4:79: 4d:04:da:5e:c9:97:8d:51:f0:a4:fe:24:11:50:87: a1:5a:71:ad:52:21:88:af:82:df:83:10:5c:cc:68: 7b:a8:da:b8:e2:f5:38:29:5a:1c:ad:e6:c9:bb:c8: e7:bc:23:0a:ce:25:49:88:be:61:44:af:2c:e2:f5: 9b:f1:f0:59:01:ad:6b:4f:ae:2d:4d:70:cd:64:fb: ac:a7:44:84:4e:6c:46:07:87:da:e7:41:f5:5e:84: d3:b7:14:66:ed:64:6b:b1:bf:f4:c2:3b:64:de:a3: 96:8d:61:c4:eb:8c:50:da:24:d2:35:62:3a:8b:81: a9:22:42:e6:13:33:aa:cc:be:79:18:da:2f:7a:53: 50:4f:88:f3:17:d4:24:14:6f:9d:6b:57:85:b7:7e: ab:93:05:14:9c:52:cc:a5:07:9d:ac:7a:a4:8f:c2: f0:ad:4b:40:fc:36:15:7d:f9:08:0d:6e:ac:5a:8c: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A7:BA:F5:41:2E:37:99:03:C0:92:85:68:CF:D2:12:EF:45:46:1D X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/A9286C0E6D4411E7AF539270C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.233.172.0/22 Signature Algorithm: sha256WithRSAEncryption bf:c7:d6:4a:6b:a8:1c:d1:28:7e:99:cb:17:eb:5c:20:bf:46: df:eb:be:d7:17:a0:e6:57:bb:46:90:92:00:4c:ed:21:c2:22: 1e:0e:61:64:b8:ef:6a:fd:28:b1:3c:c8:a8:09:4f:e8:63:43: 31:7a:5a:04:b3:b5:bc:74:27:4f:b2:da:58:67:e2:55:13:bf: e3:f9:9e:46:ba:7b:bb:32:58:e5:ee:01:43:6f:3a:57:44:0c: 89:f8:17:7d:8b:ef:a4:b7:7e:c5:86:5c:85:57:ac:48:30:99: 80:ef:43:fc:9c:37:61:f5:93:2e:d9:cf:e9:46:44:aa:db:29: 7b:9b:a1:ae:4e:70:14:cf:fb:cc:25:fe:df:c0:f9:bd:4a:ee: d2:66:39:2b:ec:e6:74:a5:09:e6:e5:fc:35:18:f0:84:fc:68: f2:5d:a1:67:b5:9e:5e:0e:0e:cb:c1:79:8e:53:09:5b:37:ce: 4f:68:23:4f:78:79:ec:1c:dd:f1:75:09:87:31:ba:ec:71:6b: 55:b3:1e:0f:36:82:19:89:e3:a5:81:54:4e:0e:a8:31:7c:0a: 0a:a3:8a:48:02:c9:1d:ad:3e:8c:49:e6:8e:65:f7:b8:ca:9f: 72:b5:97:94:45:1c:e5:a0:cc:9a:d8:57:ba:54:23:ba:1a:3d: 27:71:1f:fa -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjUwNzA4MTY1NDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjE1Zi0zM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlq6DaiYGrv9ss2400N+jIYxoJB/udflM7znt3h8L/Nyu0pdRnblMg5DU8ilw q9eCFdU60D5ohs3jpkpX63G6lpt8C4t1juZZxHlNBNpeyZeNUfCk/iQRUIehWnGt UiGIr4LfgxBczGh7qNq44vU4KVocrebJu8jnvCMKziVJiL5hRK8s4vWb8fBZAa1r T64tTXDNZPusp0SETmxGB4fa50H1XoTTtxRm7WRrsb/0wjtk3qOWjWHE64xQ2iTS NWI6i4GpIkLmEzOqzL55GNovelNQT4jzF9QkFG+da1eFt36rkwUUnFLMpQedrHqk j8LwrUtA/DYVffkIDW6sWowknwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOSnuvVB LjeZA8CShWjP0hLvRUYdMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjUzQTUvMjU4MEE4RDY0QjY1MTFFN0I0NjlDMDdBQzRGOUFFMDIvQTkyODZDMEU2 RDQ0MTFFN0FGNTM5MjcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ+msMA0GCSqGSIb3DQEBCwUAA4IBAQC/x9ZKa6gc0Sh+mcsX61wg v0bf677XF6DmV7tGkJIATO0hwiIeDmFkuO9q/SixPMioCU/oY0MxeloEs7W8dCdP stpYZ+JVE7/j+Z5Gunu7Mljl7gFDbzpXRAyJ+Bd9i++kt37FhlyFV6xIMJmA70P8 nDdh9ZMu2c/pRkSq2yl7m6GuTnAUz/vMJf7fwPm9Su7SZjkr7OZ0pQnm5fw1GPCE /GjyXaFntZ5eDg7LwXmOUwlbN85PaCNPeHnsHN3xdQmHMbrscWtVsx4PNoIZieOl gVRODqgxfAoKo4pIAskdrT6MSeaOZfe4yp9ytZeURRzloMya2Fe6VCO6Gj0ncR/6 -----END CERTIFICATE-----Generated at Mon Mar 2 13:32:37 2026 by rpki-client