$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa File: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (raw, json) Hash identifier: LiXQFtp2ngg/qzCFHe4dcqm+yap/blmF4mtH/hvw6dc= Subject key identifier: F4:E9:D9:39:7C:2D:29:27:25:66:BA:FB:F1:36:A8:CC:71:C6:98:D6 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 05C8 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:54:26 +0000 ROA not before: Tue 02 Sep 2025 23:44:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 142593 IP address blocks: 103.170.138.0/23 maxlen: 23 103.170.138.0/24 maxlen: 24 103.170.139.0/24 maxlen: 24 2407:b2c0::/32 maxlen: 32 2407:b2c0::/36 maxlen: 36 2407:b2c0:1000::/36 maxlen: 36 2407:b2c0:2000::/36 maxlen: 36 2407:b2c0:3000::/36 maxlen: 36 2407:b2c0:4000::/36 maxlen: 36 2407:b2c0:5000::/36 maxlen: 36 2407:b2c0:6000::/36 maxlen: 36 2407:b2c0:7000::/36 maxlen: 36 2407:b2c0:8000::/36 maxlen: 36 2407:b2c0:9000::/36 maxlen: 36 2407:b2c0:a000::/36 maxlen: 36 2407:b2c0:b000::/36 maxlen: 36 2407:b2c0:c000::/36 maxlen: 36 2407:b2c0:d000::/36 maxlen: 36 2407:b2c0:e000::/36 maxlen: 36 2407:b2c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1480 (0x5c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: Sep 2 23:44:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a40cd2-71bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:a2:21:25:88:11:19:a1:30:ef:64:ae:87: 18:4a:78:61:92:a1:6f:88:02:06:df:b5:94:54:36: a8:c6:5a:5e:d7:8f:19:44:d0:77:10:02:1e:66:2a: 67:4e:c8:18:43:62:61:9c:1a:62:ec:b7:1a:ae:20: 3a:2a:5a:f8:c9:d4:da:e6:94:e8:c0:61:0b:68:0d: 76:30:55:93:bb:fc:b2:55:06:e3:d4:16:b8:96:11: 50:37:0d:77:44:b3:b1:21:5d:7f:aa:1b:33:13:b1: 22:dd:cc:89:23:81:7a:bb:a5:03:72:30:6c:7a:55: 8b:5c:c3:63:b1:e9:39:f9:17:1f:bf:11:e5:5b:14: e7:72:8b:bc:0f:5a:42:be:2a:ca:11:28:21:f9:fd: 27:0b:6e:58:21:38:ba:9d:d9:d2:bb:d0:43:24:e9: 68:3e:d5:71:1c:de:9d:21:9a:a9:91:39:ea:96:ec: 37:19:09:a9:7a:90:4d:21:09:aa:7e:4b:e4:d3:41: c6:2a:17:5b:8a:63:bb:66:47:40:d5:c6:d1:77:d7: b1:e2:93:8e:ca:f0:eb:ca:9c:af:31:8e:e4:de:77: 39:ef:f1:fe:5e:3e:73:44:76:16:ad:41:d5:1b:74: 7d:c4:a3:0a:35:ac:a5:8d:8a:02:c0:12:51:0d:39: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E9:D9:39:7C:2D:29:27:25:66:BA:FB:F1:36:A8:CC:71:C6:98:D6 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/713C4814F9DC11EBA9C81A44C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.170.138.0/23 IPv6: 2407:b2c0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:50:32:b2:fe:55:6d:97:ef:20:c3:9b:7d:01:b8:93:28:b2: aa:41:79:0d:9d:85:f3:f8:69:f4:1d:8d:55:e0:40:c8:f4:09: a6:6b:c0:9a:41:dc:a6:73:64:72:96:98:87:46:a5:f5:0a:39: 87:78:fc:57:24:00:a6:c5:3a:1d:2e:03:79:d7:03:e9:13:6f: 52:5e:76:17:c0:23:19:87:b0:e9:a8:90:ce:73:46:46:c4:cf: 36:35:0f:67:9b:7d:d2:1d:78:59:0f:24:39:57:e4:0e:e2:30: bd:3a:a4:bc:5a:78:3b:27:38:0c:42:36:e1:2f:6c:6c:01:3a: d3:e9:97:c9:cb:70:47:7c:93:16:90:e2:cb:6c:69:a7:ed:05: 28:d7:81:ae:6e:29:90:59:8e:54:81:b6:04:e3:00:9b:71:08: 6e:27:e0:bf:21:b0:19:3d:da:7b:39:e6:13:89:8e:b7:0a:42: 28:af:f8:b7:de:ba:c3:ab:fc:f4:16:5b:df:73:63:eb:ee:a9: 44:13:b4:93:88:e2:4d:d4:44:b4:79:07:17:22:37:59:13:d7: 00:35:58:84:1c:16:5e:75:eb:c9:17:db:a9:f7:68:16:ac:79: 4c:ea:3a:a7:78:f5:c2:4c:13:12:07:d0:14:54:12:38:dd:19: 93:cf:7b:4e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUwOTAyMjM0NDQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGNkMi03MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7GiISWIERmhMO9krocYSnhhkqFviAIG37WUVDaoxlpe148ZRNB3EAIeZipn TsgYQ2JhnBpi7LcariA6Klr4ydTa5pTowGELaA12MFWTu/yyVQbj1Ba4lhFQNw13 RLOxIV1/qhszE7Ei3cyJI4F6u6UDcjBselWLXMNjsek5+RcfvxHlWxTncou8D1pC virKESgh+f0nC25YITi6ndnSu9BDJOloPtVxHN6dIZqpkTnqluw3GQmpepBNIQmq fkvk00HGKhdbimO7ZkdA1cbRd9ex4pOOyvDrypyvMY7k3nc57/H+Xj5zRHYWrUHV G3R9xKMKNayljYoCwBJRDTkEMQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPTp2Tl8 LSknJWa6+/E2qMxxxpjWMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkQ5QjcvMTQ5ODA0OThGOUQ5MTFFQjhEMkIwRTNFQzRGOUFFMDIvNzEzQzQ4MTRG OURDMTFFQkE5QzgxQTQ0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6qKMA0EAgACMAcDBQAkB7LAMA0GCSqGSIb3DQEBCwUAA4IBAQBu UDKy/lVtl+8gw5t9AbiTKLKqQXkNnYXz+Gn0HY1V4EDI9Amma8CaQdymc2RylpiH RqX1CjmHePxXJACmxTodLgN51wPpE29SXnYXwCMZh7DpqJDOc0ZGxM82NQ9nm33S HXhZDyQ5V+QO4jC9OqS8Wng7JzgMQjbhL2xsATrT6ZfJy3BHfJMWkOLLbGmn7QUo 14GubimQWY5UgbYE4wCbcQhuJ+C/IbAZPdp7OeYTiY63CkIor/i33rrDq/z0Flvf c2Pr7qlEE7STiOJN1ES0eQcXIjdZE9cANViEHBZedevJF9up92gWrHlM6jqnePXC TBMSB9AUVBI43RmTz3tO -----END CERTIFICATE-----Generated at Mon Mar 2 04:03:37 2026 by rpki-client