$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa File: B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa (raw, json) Hash identifier: 7RR7Eg0wKm27NUGXm8j0ljoSWx4fgcR/0JinjGBY2bk= Subject key identifier: 5E:82:E7:43:DD:F6:A1:8D:17:A6:E6:9F:F0:97:75:AE:04:E1:D1:0A Certificate issuer: /CN=A91B6CE4/serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Certificate serial: 135C Authority key identifier: 25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:33:34 +0000 ROA not before: Mon 28 Jul 2025 17:26:23 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 131247 IP address blocks: 103.68.116.0/22 maxlen: 22 103.68.116.0/23 maxlen: 23 103.68.116.0/24 maxlen: 24 103.68.117.0/24 maxlen: 24 103.68.118.0/23 maxlen: 23 103.68.118.0/24 maxlen: 24 103.68.119.0/24 maxlen: 24 103.230.208.0/22 maxlen: 22 103.230.208.0/23 maxlen: 23 103.230.208.0/24 maxlen: 24 103.230.209.0/24 maxlen: 24 103.230.210.0/23 maxlen: 23 103.230.210.0/24 maxlen: 24 103.230.211.0/24 maxlen: 24 2403:6ec0::/32 maxlen: 32 2403:6ec0:8000::/43 maxlen: 43 2403:6ec0:8020::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4956 (0x135c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6CE4, serialNumber=2529C803CB38E751E3696AB7962D823145FCD659 Validity Not Before: Jul 28 17:26:23 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4240e-7181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:e1:52:44:ed:be:e0:0b:9a:9b:e8:93:90: e1:a5:9a:74:ee:eb:53:f1:f9:d5:c4:42:3c:50:40: c3:3c:2f:53:b0:5f:b6:7a:75:c1:aa:d4:f8:fb:da: 1d:cb:cd:28:f3:60:91:72:0f:7f:17:51:0f:0e:c4: 7b:94:89:fb:58:67:b7:de:55:3f:61:83:ce:1f:39: 4b:fb:ab:1c:b6:ff:6a:6d:1e:9d:05:62:43:be:2d: 70:4c:d2:fb:fe:01:30:61:e4:31:df:d2:63:1d:de: 81:41:11:a3:ab:93:df:a5:62:59:b1:e2:a2:a3:81: 69:9f:03:b8:95:f5:b1:9c:bd:b5:fa:b8:14:ee:2b: e8:55:a8:5b:12:9e:b9:bd:12:be:e5:b8:be:a7:a0: 4c:0c:d3:56:0e:d9:83:d1:2b:76:cd:75:e4:fc:9c: 75:fb:81:64:41:48:e4:f8:b5:91:2a:27:90:bb:7d: 7b:aa:1d:19:54:d6:d8:40:1a:f6:56:41:84:0c:33: f3:e5:b2:07:84:ba:c3:48:9c:52:ed:34:cf:dc:dd: 2a:09:2b:14:3d:ed:bb:11:91:0d:ad:46:77:db:16: 06:48:0e:43:34:1c:a0:e5:aa:82:a8:ac:69:5e:3d: 97:03:42:3f:25:22:18:9f:0f:09:43:10:ce:c5:8b: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:82:E7:43:DD:F6:A1:8D:17:A6:E6:9F:F0:97:75:AE:04:E1:D1:0A X509v3 Authority Key Identifier: keyid:25:29:C8:03:CB:38:E7:51:E3:69:6A:B7:96:2D:82:31:45:FC:D6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/JSnIA8s451HjaWq3li2CMUX81lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSnIA8s451HjaWq3li2CMUX81lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6CE4/08ED1788BFC011E8A6A8554BC4F9AE02/B3D4AEB8BFC011E8A7F4204CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.116.0/22 103.230.208.0/22 IPv6: 2403:6ec0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:d0:7b:c8:73:3e:f9:9c:d1:b6:c5:71:29:9d:68:b7:8c:df: 70:20:b6:71:2e:e1:45:d4:71:ca:21:a3:2e:bc:85:db:83:8a: 91:7e:da:b6:98:cc:4c:6a:ce:a5:8e:45:c7:fa:6b:96:83:9d: 63:7b:16:4f:de:e7:f5:06:53:54:74:27:fd:f5:4c:37:59:9c: 18:d9:3d:bb:21:33:ef:4e:9f:77:be:bb:c1:e2:81:c7:89:46: 4a:31:c0:7f:e6:2a:3f:0f:3b:dc:0a:05:a8:9b:c7:9f:12:a5: 4a:44:d8:60:c1:8d:28:d9:0a:62:09:2c:d9:fc:dd:5c:1a:39: df:27:8d:f5:8f:27:2a:f0:0e:d6:64:67:0e:24:44:28:b7:98: b5:3f:c5:bd:bf:16:de:76:1d:3a:e5:61:28:6b:3e:48:c2:8d: c6:94:0d:6f:e5:35:51:44:0d:a9:c3:67:7b:f6:cf:61:12:f8: e3:96:c8:81:6e:ea:b8:4f:99:ce:a9:f8:62:ef:e9:93:80:ba: 04:b1:30:df:a8:a4:79:f7:e5:b2:c2:95:0c:2b:f4:3e:48:12: bc:2d:ca:62:43:d1:12:c2:44:c1:40:5a:78:ba:dd:95:1c:5d: 9c:73:47:51:0b:c3:8c:84:5c:43:70:a1:98:1c:42:d9:4e:98: c4:24:34:55 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDRTQxMTAvBgNVBAUTKDI1MjlDODAzQ0IzOEU3NTFFMzY5NkFCNzk2MkQ4MjMx NDVGQ0Q2NTkwHhcNMjUwNzI4MTcyNjIzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjQwZS03MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbjhUkTtvuALmpvok5DhpZp07utT8fnVxEI8UEDDPC9TsF+2enXBqtT4+9od y80o82CRcg9/F1EPDsR7lIn7WGe33lU/YYPOHzlL+6sctv9qbR6dBWJDvi1wTNL7 /gEwYeQx39JjHd6BQRGjq5PfpWJZseKio4FpnwO4lfWxnL21+rgU7ivoVahbEp65 vRK+5bi+p6BMDNNWDtmD0St2zXXk/Jx1+4FkQUjk+LWRKieQu317qh0ZVNbYQBr2 VkGEDDPz5bIHhLrDSJxS7TTP3N0qCSsUPe27EZENrUZ32xYGSA5DNByg5aqCqKxp Xj2XA0I/JSIYnw8JQxDOxYsC3QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFF6C50Pd 9qGNF6bmn/CXda4E4dEKMB8GA1UdIwQYMBaAFCUpyAPLOOdR42lqt5YtgjFF/NZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkNFNC8wOEVEMTc4OEJG QzAxMUU4QTZBODU1NEJDNEY5QUUwMi9KU25JQThzNDUxSGphV3EzbGkyQ01VWDgx bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTbklBOHM0NTFIamFXcTNsaTJDTVVYODFsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZDRTQvMDhFRDE3ODhCRkMwMTFFOEE2QTg1NTRCQzRGOUFFMDIvQjNENEFFQjhC RkMwMTFFOEE3RjQyMDRDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ0R0AwQCZ+bQMA0EAgACMAcDBQAkA27AMA0GCSqGSIb3DQEBCwUA A4IBAQAK0HvIcz75nNG2xXEpnWi3jN9wILZxLuFF1HHKIaMuvIXbg4qRftq2mMxM as6ljkXH+muWg51jexZP3uf1BlNUdCf99Uw3WZwY2T27ITPvTp93vrvB4oHHiUZK McB/5io/DzvcCgWom8efEqVKRNhgwY0o2QpiCSzZ/N1cGjnfJ431jycq8A7WZGcO JEQot5i1P8W9vxbedh065WEoaz5Iwo3GlA1v5TVRRA2pw2d79s9hEvjjlsiBbuq4 T5nOqfhi7+mTgLoEsTDfqKR59+WywpUMK/Q+SBK8LcpiQ9ESwkTBQFp4ut2VHF2c c0dRC8OMhFxDcKGYHELZTpjEJDRV -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:37 2026 by rpki-client