$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa File: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (raw, json) Hash identifier: 1nZH0VcodtK/FnKKicILMfl6ZyKBWO9cjV15mc+ELuE= Subject key identifier: 7C:DF:11:9A:34:20:7F:8B:0C:31:53:86:02:67:06:BF:A5:DB:3A:35 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 0210 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:30:16 +0000 ROA not before: Fri 23 May 2025 03:32:00 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151214 IP address blocks: 103.133.246.0/23 maxlen: 23 103.133.246.0/24 maxlen: 24 103.133.247.0/24 maxlen: 24 2001:df2:62c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: May 23 03:32:00 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3eb08-de5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:91:f7:51:07:9a:bd:10:35:a7:a5:31:6c: 02:53:06:65:ad:8e:5d:6c:48:b9:7a:7d:87:c8:b9: ef:64:1a:a9:2d:f9:46:8d:09:f7:b3:2d:b7:d0:7d: 53:c8:58:30:f1:7b:b9:8b:5c:f6:69:ad:d0:60:e1: 61:44:43:64:b9:09:c7:0d:76:00:1e:c5:d0:48:4d: 80:1b:b9:a0:dc:44:ce:58:75:b9:ae:b0:f5:4a:09: d2:a1:c4:6a:99:c9:cd:d0:ff:de:68:0b:83:dc:48: cb:63:6f:c5:30:97:f4:42:c3:7d:3b:e8:43:5e:fb: 27:5a:f5:e0:09:d3:8e:c8:64:71:c6:42:e2:2f:f7: 80:3d:c3:c0:2f:5f:0c:fe:5f:9c:5e:f6:88:18:a7: 51:97:a2:dc:e9:0b:4d:55:ab:25:4b:4f:6b:ef:78: 55:5c:ab:70:50:10:5a:6b:ee:b0:1c:c1:6c:f4:09: 58:d3:82:fb:08:84:cb:ff:1d:13:7d:16:ae:df:9a: ac:23:eb:e5:63:54:b5:69:ea:9d:ba:c1:79:1b:99: 1d:3f:04:72:b3:46:8c:0d:c7:97:b3:1d:95:5b:95: 5f:76:38:10:ed:db:91:2f:31:f2:1d:0b:2d:67:2a: 64:c0:cf:d6:eb:c4:ff:e0:ad:2f:03:77:6b:4e:8f: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DF:11:9A:34:20:7F:8B:0C:31:53:86:02:67:06:BF:A5:DB:3A:35 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/0A195CD4EDCE11ED994B437AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.133.246.0/23 IPv6: 2001:df2:62c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:ab:50:98:bc:62:7f:07:5c:0b:21:b7:a3:05:06:c5:69:6a: 47:ea:50:47:ed:a8:d5:47:ac:31:d1:45:ad:49:da:52:46:c7: c5:d8:d3:c7:b6:ad:11:96:9d:23:1e:00:f8:d9:84:ed:0d:b4: 2f:0d:3a:d8:46:92:0a:38:d4:0b:0c:32:dd:ba:01:51:2f:42: 53:f9:3c:31:4d:24:ef:d1:2b:07:5e:e2:db:d5:23:0c:28:9d: d8:7c:c0:65:42:dd:81:4b:7d:7b:b9:8b:80:1b:e8:c4:b6:2c: 23:df:81:47:e7:9e:5f:ae:3b:59:bc:54:b0:29:2d:5b:ca:e8: eb:4b:e8:39:32:2b:b9:cd:53:f8:86:d7:2e:4f:96:bb:99:b8: c7:e1:16:8b:4a:3e:8a:be:6c:21:cf:42:d1:1b:f1:09:9a:6a: 5a:d0:46:86:16:30:83:fd:30:3d:06:12:32:d2:c6:7f:9c:bb: 70:2b:a0:89:f9:a9:17:95:7e:42:a8:45:21:1d:20:73:11:f8: c3:4c:ca:d5:46:07:c1:62:37:cb:01:07:64:18:1c:0d:69:e2: 71:e6:c1:7a:db:af:66:97:3d:b2:b9:77:f9:eb:c3:18:0b:e9: e4:04:dd:5d:09:70:d8:e2:93:bb:02:4b:46:f5:ed:98:4e:42: 32:b0:0f:60 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUwNTIzMDMzMjAwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWIwOC1kZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo8yR91EHmr0QNaelMWwCUwZlrY5dbEi5en2HyLnvZBqpLflGjQn3sy230H1T yFgw8Xu5i1z2aa3QYOFhRENkuQnHDXYAHsXQSE2AG7mg3ETOWHW5rrD1SgnSocRq mcnN0P/eaAuD3EjLY2/FMJf0QsN9O+hDXvsnWvXgCdOOyGRxxkLiL/eAPcPAL18M /l+cXvaIGKdRl6Lc6QtNVaslS09r73hVXKtwUBBaa+6wHMFs9AlY04L7CITL/x0T fRau35qsI+vlY1S1aeqdusF5G5kdPwRys0aMDceXsx2VW5VfdjgQ7duRLzHyHQst ZypkwM/W68T/4K0vA3drTo/OswIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHzfEZo0 IH+LDDFThgJnBr+l2zo1MB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjkxMDEvNzcyODg4MjJFREM5MTFFREE3MzAxRjdGQzRGOUFFMDIvMEExOTVDRDRF RENFMTFFRDk5NEI0MzdBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4X2MA8EAgACMAkDBwAgAQ3yYsAwDQYJKoZIhvcNAQELBQADggEB ADCrUJi8Yn8HXAsht6MFBsVpakfqUEftqNVHrDHRRa1J2lJGx8XY08e2rRGWnSMe APjZhO0NtC8NOthGkgo41AsMMt26AVEvQlP5PDFNJO/RKwde4tvVIwwondh8wGVC 3YFLfXu5i4Ab6MS2LCPfgUfnnl+uO1m8VLApLVvK6OtL6DkyK7nNU/iG1y5PlruZ uMfhFotKPoq+bCHPQtEb8QmaalrQRoYWMIP9MD0GEjLSxn+cu3AroIn5qReVfkKo RSEdIHMR+MNMytVGB8FiN8sBB2QYHA1p4nHmwXrbr2aXPbK5d/nrwxgL6eQE3V0J cNjik7sCS0b17ZhOQjKwD2A= -----END CERTIFICATE-----Generated at Mon Mar 2 07:26:34 2026 by rpki-client