$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/31D56A8E06C711EF9A0E1D0AC4F9AE02.roa File: 31D56A8E06C711EF9A0E1D0AC4F9AE02.roa (raw, json) Hash identifier: 2Lzx/G2fSpGrGjExrZZ3r9OFOxUEm3cHovV2rhteE/0= Subject key identifier: D6:01:B8:F4:A3:55:38:3E:B1:7A:C9:FB:26:1A:50:72:EA:F0:95:5D Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 36EA Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/31D56A8E06C711EF9A0E1D0AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:43:51 +0000 ROA not before: Fri 12 Dec 2025 14:30:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 140607 IP address blocks: 103.207.85.0/24 maxlen: 24 116.90.118.0/24 maxlen: 24 116.90.121.0/24 maxlen: 24 116.90.122.0/24 maxlen: 24 202.142.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14058 (0x36ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Dec 12 14:30:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a488e7-c6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cc:1d:0e:f3:e1:07:6d:c9:5e:1b:fb:c4:42: ce:49:e5:0b:7a:dd:c9:1a:10:ff:a1:f3:16:4a:0d: 17:e5:1b:95:6e:0b:ab:03:c0:c6:8c:23:81:37:05: 02:0f:8c:96:59:9a:f6:0d:46:bf:b4:bc:49:05:27: ec:6d:fc:02:d8:bd:9d:0a:2e:5b:17:a4:33:75:45: aa:3d:e3:d8:0b:62:54:90:45:66:18:67:cb:55:41: 50:34:75:aa:4d:b7:2a:3b:7d:c1:eb:18:01:39:ec: 6a:22:0c:0e:7e:51:e5:43:8d:92:63:1b:88:8b:db: f5:e8:2f:53:ae:29:a6:cf:e9:7c:e7:49:65:fb:0f: 3a:13:f6:f7:77:f5:ce:17:af:7f:59:93:a7:bc:6b: eb:bb:e6:23:e1:dc:26:e8:e2:fd:36:7b:3d:c7:5e: 87:73:8d:2c:5a:47:44:b6:25:3c:09:e9:7d:84:86: 12:72:96:c2:45:3d:1a:77:3e:2f:4a:27:b8:f0:98: b9:47:ae:f4:6d:60:1a:a4:8e:0c:7d:90:d5:dd:d1: 00:60:99:6c:0d:d7:b8:f3:54:fa:a5:f4:db:6b:4b: f8:cb:e7:84:59:d5:12:e8:d5:70:e1:7a:bf:d4:95: ae:fe:bf:0d:bd:a3:81:e3:19:96:80:b2:dc:d9:ce: d4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:B8:F4:A3:55:38:3E:B1:7A:C9:FB:26:1A:50:72:EA:F0:95:5D X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/31D56A8E06C711EF9A0E1D0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.207.85.0/24 116.90.118.0/24 116.90.121.0-116.90.122.255 202.142.151.0/24 Signature Algorithm: sha256WithRSAEncryption 19:68:52:ca:cd:25:57:9f:6c:86:9f:02:62:0c:43:11:cf:02: 0e:14:9d:77:98:7b:22:92:e4:c1:2d:5d:dd:0e:6b:18:3c:ab: 53:62:3a:ef:18:01:b7:c9:d0:25:e1:9a:bf:a7:fd:26:9c:78: 2d:8e:0b:4d:30:5e:d4:82:fa:3b:01:92:7d:7a:af:20:08:fa: 6e:b9:36:d3:75:e5:f2:db:bf:15:f3:20:f2:4b:8c:1e:5e:b5: 24:8a:8d:ea:ce:80:81:ed:97:be:55:b7:08:b4:b2:5b:81:d6: 93:df:68:61:c2:29:74:cc:4a:e1:f6:61:a5:8e:ad:37:10:66: e2:ba:85:82:c8:ec:38:0a:5d:59:59:bf:9a:2e:c7:c9:6c:52: c6:5a:0d:b2:8f:b2:75:9b:35:76:82:19:18:3d:e8:ca:a2:d5: 65:59:64:5e:ca:ca:a0:64:72:60:6e:6b:23:cd:aa:8b:65:06: 23:ff:8f:b6:f7:c7:b0:0a:cc:9e:67:4d:1b:a2:ce:b7:e6:cf: 5d:0a:5d:2a:ec:7d:8f:7b:9f:9a:0b:0f:33:6e:d1:e1:ae:dc: 46:1d:28:2e:5a:a5:95:93:ed:d4:26:07:19:56:19:84:8e:23: 94:e8:56:88:27:a2:bb:2d:8a:7b:54:88:68:e1:62:f8:be:4f: 5a:dc:cf:dd -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICNuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjUxMjEyMTQzMDM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODhlNy1jNmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMwdDvPhB23JXhv7xELOSeULet3JGhD/ofMWSg0X5RuVbgurA8DGjCOBNwUC D4yWWZr2DUa/tLxJBSfsbfwC2L2dCi5bF6QzdUWqPePYC2JUkEVmGGfLVUFQNHWq TbcqO33B6xgBOexqIgwOflHlQ42SYxuIi9v16C9Trimmz+l850ll+w86E/b3d/XO F69/WZOnvGvru+Yj4dwm6OL9Nns9x16Hc40sWkdEtiU8Cel9hIYScpbCRT0adz4v Sie48Ji5R670bWAapI4MfZDV3dEAYJlsDde481T6pfTba0v4y+eEWdUS6NVw4Xq/ 1JWu/r8NvaOB4xmWgLLc2c7UxQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFNYBuPSj VTg+sXrJ+yYaUHLq8JVdMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvMzFENTZBOEUw NkM3MTFFRjlBMEUxRDBBQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQAZ89VAwQAdFp2MAwDBAB0WnkDBAB0WnoDBADKjpcwDQYJKoZIhvcN AQELBQADggEBABloUsrNJVefbIafAmIMQxHPAg4UnXeYeyKS5MEtXd0Oaxg8q1Ni Ou8YAbfJ0CXhmr+n/SaceC2OC00wXtSC+jsBkn16ryAI+m65NtN15fLbvxXzIPJL jB5etSSKjerOgIHtl75Vtwi0sluB1pPfaGHCKXTMSuH2YaWOrTcQZuK6hYLI7DgK XVlZv5oux8lsUsZaDbKPsnWbNXaCGRg96Mqi1WVZZF7KyqBkcmBuayPNqotlBiP/ j7b3x7AKzJ5nTRuizrfmz10KXSrsfY97n5oLDzNu0eGu3EYdKC5apZWT7dQmBxlW GYSOI5ToVognorstintUiGjhYvi+T1rcz90= -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:08 2026 by rpki-client