$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa File: DCE5E9CA713611E9A71D3311C4F9AE02.roa (raw, json) Hash identifier: r2qoF70KaoUoNeFhp3SQI4YnT9KuJGoIc4meKWAMiFQ= Subject key identifier: EE:B9:C9:62:57:07:62:1E:3D:7E:76:27:05:82:77:DF:09:57:AE:4F Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0FC7 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:20:17 +0000 ROA not before: Fri 14 Feb 2025 18:36:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136480 IP address blocks: 103.134.204.0/22 maxlen: 22 103.134.204.0/24 maxlen: 24 103.134.205.0/24 maxlen: 24 103.134.206.0/24 maxlen: 24 103.134.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4039 (0xfc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Feb 14 18:36:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a404d1-445b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:1b:cb:43:0b:dd:b4:b0:ad:01:a8:75:51: 91:55:5c:b2:6f:4c:0f:e7:6a:0e:0b:68:2a:99:da: 02:f0:1f:e6:b6:c6:72:7d:05:2f:ea:42:eb:15:55: b4:ea:16:94:b6:06:99:10:d8:df:b7:03:ec:ca:3c: 34:e1:56:68:19:b9:a1:15:eb:62:ce:14:1a:37:e7: ab:91:f8:b0:8e:5d:b5:e4:07:e2:29:e0:97:34:fd: e1:e2:70:23:b5:7a:3e:17:99:2d:e2:7a:cd:6f:51: 94:53:05:1a:05:0a:64:d6:79:5f:9d:68:f5:68:76: a1:48:d9:aa:e0:4f:be:80:4c:ef:9a:f6:c0:78:47: b3:7d:47:ff:53:ab:88:42:24:fc:aa:ad:ea:97:1c: 97:c2:d9:c5:dd:79:2a:13:3c:ed:41:8c:ee:04:d1: 16:26:31:8b:a4:16:99:37:d5:67:c5:2f:79:85:b0: d3:5f:3c:fa:56:13:32:e6:42:b2:52:9e:52:db:76: 6e:3d:23:2e:78:cc:9f:ea:3e:33:5f:21:3b:a2:7e: 84:26:4e:fe:fd:d7:9c:93:70:ce:89:8e:6d:34:3d: e0:53:47:c2:d8:61:63:59:37:97:86:5d:06:88:6d: cc:bc:71:58:c8:46:30:31:c2:43:3a:74:bf:5f:7d: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B9:C9:62:57:07:62:1E:3D:7E:76:27:05:82:77:DF:09:57:AE:4F X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.204.0/22 Signature Algorithm: sha256WithRSAEncryption 61:86:0e:5c:71:cd:3e:95:50:7d:c9:05:1c:50:8a:83:18:9f: 0f:53:13:84:b8:6e:bf:ff:9c:fd:bb:ff:24:a9:0c:8e:34:d2: ca:22:d6:d2:e1:2a:24:fd:a8:00:97:99:82:88:bd:c3:e2:59: ba:22:61:70:dc:1a:d4:36:7b:71:f7:00:58:8b:f2:99:02:83: e3:72:9b:65:ef:b8:e6:9d:31:f4:76:d3:3e:69:22:8b:d3:fc: e3:51:ae:4a:b8:fc:bc:7e:94:34:66:b0:2f:5f:f0:bb:b5:66: 15:2a:7d:04:d2:53:66:73:f4:ee:c3:80:6a:a8:41:66:96:78: ae:63:6c:3b:d6:ec:c2:64:30:58:17:cc:a0:22:48:04:07:40: ca:b6:5b:2e:c3:24:97:94:09:2b:a1:9c:8c:6b:63:8b:ff:2b: 62:11:3f:69:43:d4:4f:5c:14:60:e5:2d:f5:bc:da:1a:1a:79: 13:80:d4:28:ee:1f:55:95:a0:96:c6:cf:3f:74:23:d8:22:d6: fe:b4:17:3f:00:32:27:80:52:5c:73:e4:54:83:6f:92:e3:e5: 0a:39:c5:73:be:62:29:d8:06:4a:ca:9d:84:b5:90:6a:ee:f0: 78:52:99:5f:a7:b6:f0:fd:6e:e6:95:37:54:4c:00:43:6b:f5: f0:f8:b6:1a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwMjE0MTgzNjIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDRkMS00NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+Eby0ML3bSwrQGodVGRVVyyb0wP52oOC2gqmdoC8B/mtsZyfQUv6kLrFVW0 6haUtgaZENjftwPsyjw04VZoGbmhFetizhQaN+erkfiwjl215AfiKeCXNP3h4nAj tXo+F5kt4nrNb1GUUwUaBQpk1nlfnWj1aHahSNmq4E++gEzvmvbAeEezfUf/U6uI QiT8qq3qlxyXwtnF3XkqEzztQYzuBNEWJjGLpBaZN9VnxS95hbDTXzz6VhMy5kKy Up5S23ZuPSMueMyf6j4zXyE7on6EJk7+/deck3DOiY5tND3gU0fC2GFjWTeXhl0G iG3MvHFYyEYwMcJDOnS/X30icQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO65yWJX B2IePX52JwWCd98JV65PMB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRBMDYvMkJGQzg5NDg3MTM2MTFFOTg2OURCRjEwQzRGOUFFMDIvRENFNUU5Q0E3 MTM2MTFFOUE3MUQzMzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4bMMA0GCSqGSIb3DQEBCwUAA4IBAQBhhg5ccc0+lVB9yQUcUIqD GJ8PUxOEuG6//5z9u/8kqQyONNLKItbS4Sok/agAl5mCiL3D4lm6ImFw3BrUNntx 9wBYi/KZAoPjcptl77jmnTH0dtM+aSKL0/zjUa5KuPy8fpQ0ZrAvX/C7tWYVKn0E 0lNmc/Tuw4BqqEFmlniuY2w71uzCZDBYF8ygIkgEB0DKtlsuwySXlAkroZyMa2OL /ytiET9pQ9RPXBRg5S31vNoaGnkTgNQo7h9VlaCWxs8/dCPYItb+tBc/ADIngFJc c+RUg2+S4+UKOcVzvmIp2AZKyp2EtZBq7vB4Uplfp7bw/W7mlTdUTABDa/Xw+LYa -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:35 2026 by rpki-client