$ rpki-client -vvf rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa File: E2AD90E813E811E9B287C144C4F9AE02.roa (raw, json) Hash identifier: 2iAA5Sdwm5Oc9oXy7BNKf4hVQshNT/PV2nUfVZIXmzM= Subject key identifier: 12:01:5A:E5:CA:1A:CB:63:B9:A3:52:79:17:BB:29:56:BF:D6:EC:16 Certificate issuer: /CN=A91C21C7/serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Certificate serial: 2DF9 Authority key identifier: D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:12:40 +0000 ROA not before: Sun 18 May 2025 16:02:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55651 IP address blocks: 103.24.120.0/24 maxlen: 24 103.24.121.0/24 maxlen: 24 103.24.122.0/24 maxlen: 24 103.24.123.0/24 maxlen: 24 2406:bd00:de00::/48 maxlen: 48 2406:bd00:de50::/48 maxlen: 48 2406:bd00:decd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11769 (0x2df9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C21C7, serialNumber=D2BC2BCC0F389E3A5C533CC473A7C436BB1B74D9 Validity Not Before: May 18 16:02:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40308-d8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:0c:57:a8:4b:38:ff:d3:12:f2:06:5b:39: 3a:3a:53:72:ff:54:66:77:0a:55:f7:96:c8:19:6b: e3:09:d7:d3:7f:ca:be:26:04:71:1b:48:6a:62:ac: 4c:8f:3c:73:fe:13:bb:3e:ff:2b:72:0d:2f:25:c2: 43:c6:c4:8e:86:60:8e:ce:d8:ac:e1:60:03:fc:51: 94:b3:c5:29:d8:61:76:d4:89:62:60:34:56:cf:71: 51:a3:48:dc:55:25:bc:4b:cc:0a:83:63:af:7d:26: 7e:bf:4f:1c:3b:ec:ab:74:43:e0:f7:da:27:91:db: f1:3f:b8:67:e9:52:b1:87:40:23:85:4e:c7:dc:8a: 10:b9:e5:44:25:91:6d:1c:f8:a9:8f:fe:70:c1:b3: a6:68:f5:c0:0a:85:a7:c0:1a:8d:b4:d1:22:db:22: f9:75:ec:8f:cf:f0:56:7b:6c:6a:59:2d:69:f4:8c: 95:e5:e5:ad:6f:03:28:9a:81:ee:92:93:13:68:66: 7e:50:90:81:ff:52:07:ea:6c:e9:68:43:0b:c1:ee: 71:75:3c:78:87:42:73:0e:34:b4:98:b4:29:51:d2: 3f:26:54:c5:f4:9d:27:86:a4:7f:d3:bc:d3:fc:a4: dd:f9:b0:1c:8d:7a:f1:b6:14:b4:4c:67:97:7b:50: 78:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:01:5A:E5:CA:1A:CB:63:B9:A3:52:79:17:BB:29:56:BF:D6:EC:16 X509v3 Authority Key Identifier: keyid:D2:BC:2B:CC:0F:38:9E:3A:5C:53:3C:C4:73:A7:C4:36:BB:1B:74:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/0rwrzA84njpcUzzEc6fENrsbdNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rwrzA84njpcUzzEc6fENrsbdNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C21C7/54222FD08FAB11E39362EF355911EA32/E2AD90E813E811E9B287C144C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.120.0/22 IPv6: 2406:bd00:de00::/48 2406:bd00:de50::/48 2406:bd00:decd::/48 Signature Algorithm: sha256WithRSAEncryption 17:e8:40:76:e1:d3:34:12:85:9d:56:19:eb:e6:23:20:c6:a0: 4b:dd:a4:0e:38:8d:6f:12:d2:fc:96:9b:65:34:3d:cd:bc:fd: ae:f8:b9:aa:fd:b1:d9:29:a3:4d:bc:e4:79:47:e6:7f:bc:7a: d1:c8:75:bf:2b:14:d8:03:99:62:e8:1b:2b:c8:26:c4:28:f5: 04:12:12:38:00:13:ed:36:8b:77:c8:22:60:10:3b:5f:6c:87: 2d:3a:f5:10:38:bf:90:ec:13:52:f5:e5:59:9c:1e:ed:b8:72: 35:1d:1d:c8:5a:f6:21:c2:7a:f3:75:73:27:f3:06:ac:4b:49: b8:22:8a:1f:fb:ec:3e:5c:08:d8:40:c4:13:1c:77:b7:30:3b: 3d:da:54:a0:40:0f:2b:ae:85:fa:9c:da:6c:08:62:48:de:b1: ae:9b:dc:f0:28:e6:3e:c6:6e:66:7f:41:a1:f7:f7:87:65:48: 0d:9f:86:d2:ec:5a:93:5a:34:99:54:f9:64:49:00:68:04:35: f6:24:07:b2:40:0f:a0:57:69:f0:fe:8f:c9:c5:38:73:fc:57: f1:02:f4:88:a0:ec:be:be:1d:36:61:57:0a:93:38:f9:36:24: 1d:53:a6:50:b7:3a:f9:85:b4:bb:6d:10:74:51:61:68:d7:f2: bc:ff:f3:a3 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICLfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzIxQzcxMTAvBgNVBAUTKEQyQkMyQkNDMEYzODlFM0E1QzUzM0NDNDczQTdDNDM2 QkIxQjc0RDkwHhcNMjUwNTE4MTYwMjU4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDMwOC1kOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGgMV6hLOP/TEvIGWzk6OlNy/1RmdwpV95bIGWvjCdfTf8q+JgRxG0hqYqxM jzxz/hO7Pv8rcg0vJcJDxsSOhmCOztis4WAD/FGUs8Up2GF21IliYDRWz3FRo0jc VSW8S8wKg2OvfSZ+v08cO+yrdEPg99onkdvxP7hn6VKxh0AjhU7H3IoQueVEJZFt HPipj/5wwbOmaPXACoWnwBqNtNEi2yL5deyPz/BWe2xqWS1p9IyV5eWtbwMomoHu kpMTaGZ+UJCB/1IH6mzpaEMLwe5xdTx4h0JzDjS0mLQpUdI/JlTF9J0nhqR/07zT /KTd+bAcjXrxthS0TGeXe1B4xQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFBIBWuXK GstjuaNSeRe7KVa/1uwWMB8GA1UdIwQYMBaAFNK8K8wPOJ46XFM8xHOnxDa7G3TZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjFDNy81NDIyMkZEMDhG QUIxMUUzOTM2MkVGMzU1OTExRUEzMi8wcndyekE4NG5qcGNVenpFYzZmRU5yc2Jk TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzByd3J6QTg0bmpwY1V6ekVjNmZFTnJzYmROay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzIxQzcvNTQyMjJGRDA4RkFCMTFFMzkzNjJFRjM1NTkxMUVBMzIvRTJBRDkwRTgx M0U4MTFFOUIyODdDMTQ0QzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAM BAIAATAGAwQCZxh4MCEEAgACMBsDBwAkBr0A3gADBwAkBr0A3lADBwAkBr0A3s0w DQYJKoZIhvcNAQELBQADggEBABfoQHbh0zQShZ1WGevmIyDGoEvdpA44jW8S0vyW m2U0Pc28/a74uar9sdkpo0285HlH5n+8etHIdb8rFNgDmWLoGyvIJsQo9QQSEjgA E+02i3fIImAQO19shy069RA4v5DsE1L15VmcHu24cjUdHcha9iHCevN1cyfzBqxL Sbgiih/77D5cCNhAxBMcd7cwOz3aVKBADyuuhfqc2mwIYkjesa6b3PAo5j7GbmZ/ QaH394dlSA2fhtLsWpNaNJlU+WRJAGgENfYkB7JAD6BXafD+j8nFOHP8V/EC9Iig 7L6+HTZhVwqTOPk2JB1TplC3OvmFtLttEHRRYWjX8rz/86M= -----END CERTIFICATE-----Generated at Mon Mar 2 21:56:49 2026 by rpki-client