$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa File: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (raw, json) Hash identifier: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg= Subject key identifier: F1:4D:2B:48:E1:E4:49:14:79:30:67:94:1C:C2:EA:42:A8:4F:CA:D8 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: DD Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:56:52 +0000 ROA not before: Sat 31 May 2025 06:59:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.218.96.0/24 maxlen: 24 103.218.97.0/24 maxlen: 24 103.218.98.0/24 maxlen: 24 103.218.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: May 31 06:59:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3e334-db2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:ec:76:07:e5:15:e6:1d:97:60:a0:f9:b0: 47:ec:97:61:6d:1d:40:75:9b:c1:fc:29:ac:e2:48: bd:6d:88:95:57:82:a4:9d:64:36:52:14:e1:3f:64: c0:6a:5a:3c:79:17:10:2c:b5:08:8a:fb:4c:37:a4: 41:7d:3c:1d:08:e2:ef:f3:46:1e:dd:28:53:c3:32: 61:74:6b:75:ed:1c:49:ec:7e:be:89:f6:33:32:fa: a9:d8:07:41:c5:c3:05:8f:ce:f3:74:59:7b:76:9d: cb:87:d1:0e:6c:a4:f0:e5:41:a6:12:83:c5:53:7a: ad:d1:9f:d2:9e:c3:bf:bd:e8:7c:34:c7:db:5a:7e: 64:27:27:23:83:26:40:eb:8e:81:d3:04:1d:ef:36: 06:bb:75:08:c7:cc:f8:4c:3e:19:60:09:2b:51:d9: ff:61:2a:d8:f3:58:94:b5:4f:51:5f:09:47:22:63: ea:95:2e:c8:4a:fd:1f:89:9e:08:a9:46:bd:05:f9: a7:7b:02:8e:5e:b8:cb:e6:be:4d:5f:24:2d:93:72: db:98:96:77:bc:7f:6a:91:c0:05:22:d3:09:0b:8b: 09:68:96:4f:da:04:38:84:f6:ea:fe:eb:2e:72:f8: 44:44:a9:a2:f9:7b:1a:06:15:66:82:e3:f0:e6:50: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4D:2B:48:E1:E4:49:14:79:30:67:94:1C:C2:EA:42:A8:4F:CA:D8 X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:a2:65:64:97:e6:90:45:27:6d:71:97:83:1c:93:7f:4e:b9: b1:ce:dc:0a:4a:64:bc:6a:3d:54:ec:14:5b:6c:1f:db:ef:11: 61:69:5b:31:88:7a:3a:39:78:ea:f2:55:f3:d4:d2:45:b2:65: 6a:70:62:77:b6:b5:b2:31:40:29:29:0b:db:c6:50:d1:fa:63: 39:bc:21:0d:01:60:18:2d:95:6c:37:b4:84:f5:90:59:43:57: f1:c6:6f:47:fc:b3:d2:d4:fa:1e:da:98:22:b3:59:d5:4d:0e: af:d2:7b:87:44:88:25:f9:6c:b3:d3:60:6a:98:de:66:d2:b8: 74:8c:03:78:c3:be:64:3f:eb:ac:16:46:bb:5d:33:b2:a7:fb: c2:83:cb:b4:bf:05:b0:ad:1e:27:0d:35:6d:37:fe:6b:4b:4a: bf:49:b3:44:4a:50:f4:b8:30:ac:66:bd:c5:62:0b:db:12:7b: e8:4c:35:c3:6f:27:2b:4e:1c:fb:a3:62:37:06:96:5a:a9:67: 5d:89:65:74:c9:9d:8a:22:3f:ef:cf:85:10:67:c4:03:ba:d8: b4:5e:a3:b9:05:c6:43:a8:e4:6e:f2:bd:31:da:9f:bd:02:6f: 6b:42:ba:de:66:9c:29:88:0d:f6:0d:6b:2b:f7:39:a3:be:93: ad:90:9a:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjUwNTMxMDY1OTM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTMzNC1kYjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqPnsdgflFeYdl2Cg+bBH7JdhbR1AdZvB/Cms4ki9bYiVV4KknWQ2UhThP2TA alo8eRcQLLUIivtMN6RBfTwdCOLv80Ye3ShTwzJhdGt17RxJ7H6+ifYzMvqp2AdB xcMFj87zdFl7dp3Lh9EObKTw5UGmEoPFU3qt0Z/SnsO/veh8NMfbWn5kJycjgyZA 646B0wQd7zYGu3UIx8z4TD4ZYAkrUdn/YSrY81iUtU9RXwlHImPqlS7ISv0fiZ4I qUa9BfmnewKOXrjL5r5NXyQtk3LbmJZ3vH9qkcAFItMJC4sJaJZP2gQ4hPbq/usu cvhERKmi+XsaBhVmguPw5lBh6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPFNK0jh 5EkUeTBnlBzC6kKoT8rYMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkMyMzgvQ0Q3MTdEOUNDQkYzMTFFRkJFNUIzMzMwQzRGOUFFMDIvMzEzNUFGQ0VD QkY0MTFFRkJDQTA2QjZCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ9pgMA0GCSqGSIb3DQEBCwUAA4IBAQCPomVkl+aQRSdtcZeDHJN/ TrmxztwKSmS8aj1U7BRbbB/b7xFhaVsxiHo6OXjq8lXz1NJFsmVqcGJ3trWyMUAp KQvbxlDR+mM5vCENAWAYLZVsN7SE9ZBZQ1fxxm9H/LPS1Poe2pgis1nVTQ6v0nuH RIgl+Wyz02BqmN5m0rh0jAN4w75kP+usFka7XTOyp/vCg8u0vwWwrR4nDTVtN/5r S0q/SbNESlD0uDCsZr3FYgvbEnvoTDXDbycrThz7o2I3BpZaqWddiWV0yZ2KIj/v z4UQZ8QDuti0XqO5BcZDqORu8r0x2p+9Am9rQrreZpwpiA32DWsr9zmjvpOtkJro -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:55 2026 by rpki-client