$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/D9470BFE7DC811ECB84BD174C4F9AE02.roa File: D9470BFE7DC811ECB84BD174C4F9AE02.roa (raw, json) Hash identifier: mv8SkF1WEmPfxfUOYkEgTcu3fJnOUzVytUPnzBIsTmQ= Subject key identifier: 2A:74:9C:C3:2E:B2:D1:84:0A:F9:60:52:1A:2A:5D:93:E9:6A:DA:C3 Certificate issuer: /CN=A91B8265/serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Certificate serial: 048A Authority key identifier: 8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/D9470BFE7DC811ECB84BD174C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:49:04 +0000 ROA not before: Thu 01 Jan 2026 00:20:11 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137040 IP address blocks: 103.102.221.0/24 maxlen: 24 103.133.75.0/24 maxlen: 24 103.133.82.0/23 maxlen: 23 103.133.82.0/24 maxlen: 24 103.133.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8265, serialNumber=8F11C47E2FEA199C2727C86B4990F3BFAE820162 Validity Not Before: Jan 1 00:20:11 2026 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a45ff0-10cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:e2:51:fc:6e:a3:15:eb:70:b6:0a:1e:e8: 1f:7d:f7:f5:6a:5a:c1:cd:93:bf:b7:b9:9d:51:d7: fd:c2:d6:a8:e4:7e:e5:87:5d:94:60:01:ba:ea:3f: ef:2c:d0:e2:ab:f9:84:cd:a0:11:63:8e:f6:f3:a1: fa:d9:7d:f4:51:38:ca:9a:92:04:ce:fd:a5:7c:da: e4:9e:1c:f5:40:13:9c:19:60:82:ad:2a:2d:c6:1c: 9f:43:cf:f9:0c:97:ee:b8:06:8c:be:ba:bb:55:12: 8e:31:6b:b0:f5:ce:8f:ed:40:d1:17:c6:ab:8e:72: d0:f8:c6:9d:c7:5e:59:f5:3d:98:9f:22:64:e7:b9: 0d:0b:a2:fa:0f:c4:d8:d2:90:d9:ee:d8:fd:1c:e9: 44:aa:31:17:b9:5c:89:ad:88:58:21:0c:9b:e9:dc: f0:a2:78:c3:09:42:40:ef:7a:1a:5e:b3:46:c2:6e: d3:f7:43:81:91:74:ec:fb:41:80:65:3b:06:c9:f7: 85:4e:86:0c:64:5c:cc:1b:bb:07:88:cd:d1:9c:76: 11:92:45:2e:1a:bd:a6:97:74:23:ed:fd:5b:bb:ae: 37:97:5c:27:38:71:a0:41:cf:7a:b4:ac:c3:34:c2: 7d:9b:cc:75:7d:e0:c0:b7:1c:3f:98:e8:d4:30:fb: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:74:9C:C3:2E:B2:D1:84:0A:F9:60:52:1A:2A:5D:93:E9:6A:DA:C3 X509v3 Authority Key Identifier: keyid:8F:11:C4:7E:2F:EA:19:9C:27:27:C8:6B:49:90:F3:BF:AE:82:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/jxHEfi_qGZwnJ8hrSZDzv66CAWI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jxHEfi_qGZwnJ8hrSZDzv66CAWI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8265/4CD5FE0E7DC411ECA9C4431DC4F9AE02/D9470BFE7DC811ECB84BD174C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.102.221.0/24 103.133.75.0/24 103.133.82.0/23 Signature Algorithm: sha256WithRSAEncryption 34:36:e8:21:03:11:8f:8a:d5:6a:4b:8c:29:5b:3f:34:ae:7c: 62:c5:4c:47:e7:b3:fe:3a:cd:59:41:81:b7:2b:34:07:55:12: 97:78:c7:9f:e5:a7:d0:ab:51:73:45:db:84:60:63:fb:4e:f4: 3d:14:97:14:6a:ef:2f:f3:23:5a:1b:5d:29:a1:49:92:03:16: a6:10:9a:4b:6c:3b:1f:78:6a:09:ec:85:2b:62:d2:eb:39:79: 0a:ac:68:40:ce:6c:ca:ab:0a:6d:8d:95:b5:3b:28:e8:34:4a: 3b:62:95:b6:da:44:a8:99:df:c4:c9:1b:00:80:0d:ed:0c:93: 26:83:bb:3f:08:46:cb:9a:6e:e7:8b:19:dc:82:87:fc:e7:4b: e5:79:6b:51:17:73:69:e8:80:d8:e1:1b:60:c0:a3:01:a9:24: 22:80:4e:9a:9e:31:bc:c7:28:ef:bb:db:96:bf:c1:ba:11:c9: e1:d8:e8:02:09:0e:64:8d:95:c2:21:a3:9e:24:07:01:e6:8c: c6:25:5b:86:bb:ec:3d:18:30:d4:a4:f1:0a:49:7c:79:84:f9: c6:a3:38:d5:e0:67:fb:5b:f0:aa:07:0b:de:2f:e9:42:65:e0: 02:cc:dc:d8:c5:ff:67:2d:b0:04:c9:02:6e:cb:f7:e1:8f:45: 2c:8f:d2:f0 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyNjUxMTAvBgNVBAUTKDhGMTFDNDdFMkZFQTE5OUMyNzI3Qzg2QjQ5OTBGM0JG QUU4MjAxNjIwHhcNMjYwMTAxMDAyMDExWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWZmMC0xMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDbiUfxuoxXrcLYKHugffff1alrBzZO/t7mdUdf9wtao5H7lh12UYAG66j/v LNDiq/mEzaARY47286H62X30UTjKmpIEzv2lfNrknhz1QBOcGWCCrSotxhyfQ8/5 DJfuuAaMvrq7VRKOMWuw9c6P7UDRF8arjnLQ+Madx15Z9T2YnyJk57kNC6L6D8TY 0pDZ7tj9HOlEqjEXuVyJrYhYIQyb6dzwonjDCUJA73oaXrNGwm7T90OBkXTs+0GA ZTsGyfeFToYMZFzMG7sHiM3RnHYRkkUuGr2ml3Qj7f1bu643l1wnOHGgQc96tKzD NMJ9m8x1feDAtxw/mOjUMPuTswIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCp0nMMu stGECvlgUhoqXZPpatrDMB8GA1UdIwQYMBaAFI8RxH4v6hmcJyfIa0mQ87+uggFi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI2NS80Q0Q1RkUwRTdE QzQxMUVDQTlDNDQzMURDNEY5QUUwMi9qeEhFZmlfcUdad25KOGhyU1pEenY2NkNB V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2p4SEVmaV9xR1p3bko4aHJTWkR6djY2Q0FXSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgyNjUvNENENUZFMEU3REM0MTFFQ0E5QzQ0MzFEQzRGOUFFMDIvRDk0NzBCRkU3 REM4MTFFQ0I4NEJEMTc0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ2bdAwQAZ4VLAwQBZ4VSMA0GCSqGSIb3DQEBCwUAA4IBAQA0Nugh AxGPitVqS4wpWz80rnxixUxH57P+Os1ZQYG3KzQHVRKXeMef5afQq1FzRduEYGP7 TvQ9FJcUau8v8yNaG10poUmSAxamEJpLbDsfeGoJ7IUrYtLrOXkKrGhAzmzKqwpt jZW1OyjoNEo7YpW22kSomd/EyRsAgA3tDJMmg7s/CEbLmm7nixncgof850vleWtR F3Np6IDY4RtgwKMBqSQigE6anjG8xyjvu9uWv8G6Ecnh2OgCCQ5kjZXCIaOeJAcB 5ozGJVuGu+w9GDDUpPEKSXx5hPnGozjV4Gf7W/CqBwveL+lCZeACzNzYxf9nLbAE yQJuy/fhj0Usj9Lw -----END CERTIFICATE-----Generated at Mon Mar 2 06:37:17 2026 by rpki-client