$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa File: AB9480A6BB6811E69E8D1212C4F9AE02.roa (raw, json) Hash identifier: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o= Subject key identifier: FA:85:9E:4A:F6:D7:8F:3E:8A:F9:24:C4:01:02:3F:83:14:B9:94:CE Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1DA5 Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:41:04 +0000 ROA not before: Sat 20 Sep 2025 16:34:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132148 IP address blocks: 103.70.249.0/24 maxlen: 24 103.81.113.0/24 maxlen: 24 103.81.114.0/24 maxlen: 24 103.81.115.0/24 maxlen: 24 2001:df3:ce00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7589 (0x1da5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Sep 20 16:34:30 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a441f0-4ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:36:66:d5:69:5a:70:03:86:45:62:4e:e6:81: 2b:e2:95:73:29:5a:21:7d:b7:73:41:ed:c6:52:19: 91:f9:02:51:5b:13:56:7e:32:83:a4:33:ce:25:1d: 4b:ec:1e:9c:74:26:04:3c:21:1b:98:08:dd:67:14: e6:a9:3d:51:d5:a5:9e:22:ba:42:a3:4d:5b:0d:0f: ef:46:88:6e:4b:cc:9b:68:f7:bc:89:3e:f0:2d:ef: 65:d0:9a:ac:fa:6b:cd:58:b7:47:ad:99:2e:f6:f6: 2d:b3:f2:d6:12:57:5b:3c:c1:a8:2e:82:31:71:c6: 7d:c8:7f:15:df:fc:bf:4e:e4:30:94:13:c2:36:7a: 39:eb:0a:ef:87:ae:dc:fa:bd:61:93:29:2a:3a:03: 9b:2c:0b:0b:35:02:ef:4e:f9:ce:2f:9e:1e:66:7b: 05:cd:da:7a:39:a3:5c:59:88:1f:bf:dd:88:32:51: 22:f7:d2:e4:1b:51:f1:dd:6c:de:5b:ea:d9:a2:32: 64:3e:f4:82:9e:04:c6:bd:78:0b:b0:59:6b:b1:ea: fa:29:09:bf:23:29:d9:f1:32:1b:e4:ac:fd:88:67: 79:33:b2:1a:99:bd:e9:5e:2c:b9:73:3e:c8:69:e2: bb:ba:63:cb:f6:6d:2e:a7:fe:70:f7:6a:08:b7:64: e9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:9E:4A:F6:D7:8F:3E:8A:F9:24:C4:01:02:3F:83:14:B9:94:CE X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/AB9480A6BB6811E69E8D1212C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.249.0/24 103.81.113.0-103.81.115.255 IPv6: 2001:df3:ce00::/48 Signature Algorithm: sha256WithRSAEncryption 74:c9:71:8b:4a:5b:a4:64:b9:c9:e6:eb:05:89:30:33:5a:21: 35:96:e1:28:d8:45:ac:d1:0c:f2:1b:b6:2d:12:4d:fa:4b:7f: 15:94:1c:3d:1e:35:82:50:b3:d8:8b:80:3f:18:31:52:c7:88: 11:08:fb:da:8d:ba:88:96:c5:5d:a4:07:3c:4a:96:bb:ac:4c: 62:0a:96:d2:8d:08:99:2a:50:eb:ff:43:10:1c:2b:01:ff:d3: 32:4a:09:0e:69:21:3b:2f:9c:b3:9f:05:f6:4d:06:e4:68:5e: 78:1c:90:9d:02:78:e5:12:2b:c2:83:15:12:86:7d:1e:75:92: 72:26:0a:75:49:80:47:f3:40:fd:1a:5d:11:41:e2:84:d6:18: 3a:1a:62:cd:bb:25:db:a3:fa:89:fd:f5:7b:3b:e0:be:60:cc: 7e:a6:08:c4:fd:02:2c:e3:35:be:da:af:4b:6d:a3:dc:12:66: 85:07:c8:9f:d8:a3:c2:93:5f:5b:e8:79:5a:8c:c9:81:b2:96: 36:31:6c:c9:29:96:c7:d0:df:2a:c9:c2:d0:9d:5e:2b:6d:25: b7:a9:a9:0e:42:d7:e0:9b:db:78:49:81:41:c6:c5:49:b3:2e: 06:6f:b0:0f:81:3d:ff:99:5e:3b:31:8a:ca:49:5f:c0:8f:0b: 7f:27:bf:33 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgICHaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjUwOTIwMTYzNDMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDFmMC00YWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zZm1WlacAOGRWJO5oEr4pVzKVohfbdzQe3GUhmR+QJRWxNWfjKDpDPOJR1L 7B6cdCYEPCEbmAjdZxTmqT1R1aWeIrpCo01bDQ/vRohuS8ybaPe8iT7wLe9l0Jqs +mvNWLdHrZku9vYts/LWEldbPMGoLoIxccZ9yH8V3/y/TuQwlBPCNno56wrvh67c +r1hkykqOgObLAsLNQLvTvnOL54eZnsFzdp6OaNcWYgfv92IMlEi99LkG1Hx3Wze W+rZojJkPvSCngTGvXgLsFlrser6KQm/IynZ8TIb5Kz9iGd5M7Iamb3pXiy5cz7I aeK7umPL9m0up/5w92oIt2TpWwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPqFnkr2 148+ivkkxAECP4MUuZTOMB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJENUIvMTcwMkZDM0VCQjY3MTFFNkFFMjQwNDBGQzRGOUFFMDIvQUI5NDgwQTZC QjY4MTFFNjlFOEQxMjEyQzRGOUFFMDIucm9hMD4GCCsGAQUFBwEHAQH/BC8wLTAa BAIAATAUAwQAZ0b5MAwDBABnUXEDBAJnUXAwDwQCAAIwCQMHACABDfPOADANBgkq hkiG9w0BAQsFAAOCAQEAdMlxi0pbpGS5yebrBYkwM1ohNZbhKNhFrNEM8hu2LRJN +kt/FZQcPR41glCz2IuAPxgxUseIEQj72o26iJbFXaQHPEqWu6xMYgqW0o0ImSpQ 6/9DEBwrAf/TMkoJDmkhOy+cs58F9k0G5GheeByQnQJ45RIrwoMVEoZ9HnWSciYK dUmAR/NA/RpdEUHihNYYOhpizbsl26P6if31ezvgvmDMfqYIxP0CLOM1vtqvS22j 3BJmhQfIn9ijwpNfW+h5WozJgbKWNjFsySmWx9DfKsnC0J1eK20lt6mpDkLX4Jvb eEmBQcbFSbMuBm+wD4E9/5leOzGKyklfwI8Lfye/Mw== -----END CERTIFICATE-----Generated at Mon Mar 2 14:31:47 2026 by rpki-client