$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/AF7700B2B52A11EAB9426C7DC4F9AE02.roa File: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (raw, json) Hash identifier: AD+/rm2MmNUok2HarnjytNgvmBO5YkdTWhvT8ie3l4U= Subject key identifier: 6A:54:93:90:3E:A8:0B:02:2B:8B:92:FD:E1:F6:89:0E:48:89:59:04 Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Certificate serial: 1BBE Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/AF7700B2B52A11EAB9426C7DC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:08:28 +0000 ROA not before: Tue 10 Feb 2026 16:13:50 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133854 IP address blocks: 103.81.204.0/24 maxlen: 24 103.81.205.0/24 maxlen: 24 103.81.206.0/24 maxlen: 24 202.144.200.0/24 maxlen: 24 202.144.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7102 (0x1bbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD Validity Not Before: Feb 10 16:13:50 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4728c-361f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1d:de:57:70:89:53:91:28:b5:84:30:24:6b: 6a:1a:65:5b:1b:65:79:de:44:69:7b:c4:6d:f3:56: bb:df:cc:81:40:ec:8b:2d:b8:0b:91:c9:23:02:fe: ce:2a:4c:86:cf:ec:a1:2d:30:0d:df:98:43:ca:64: e2:15:09:f3:1c:27:b0:99:5c:74:e4:cb:b7:11:e8: 8c:3a:cc:48:d3:08:6b:f0:42:4c:db:16:a7:1e:01: 7c:c2:1d:6b:77:96:32:02:b0:46:58:cb:85:fd:51: 4a:ff:7d:54:ee:40:2b:ab:31:88:f1:94:62:7f:3d: 8d:d0:56:20:57:70:6c:1c:6a:df:62:46:5c:27:da: 2d:88:fa:79:4e:33:1f:05:a6:f6:a6:0b:52:2e:70: 93:d6:58:3c:7b:fa:16:6e:c0:e0:3a:49:9a:6c:02: 51:e8:50:3d:82:be:b2:5b:51:62:3f:1f:1c:ef:32: fd:58:79:3a:18:8b:77:e7:bc:d3:43:09:fb:0c:be: 12:3c:2c:d1:cc:39:af:8e:cf:c7:3c:d9:d9:0b:29: 22:e1:59:3d:3a:3a:f9:40:73:a0:67:1d:47:06:be: c7:10:81:0a:49:6d:9d:a2:52:da:31:90:5b:2b:19: 31:e7:cf:e4:c3:fc:a3:df:90:ee:e1:d8:ed:28:42: 95:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:93:90:3E:A8:0B:02:2B:8B:92:FD:E1:F6:89:0E:48:89:59:04 X509v3 Authority Key Identifier: keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/AF7700B2B52A11EAB9426C7DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.81.204.0-103.81.206.255 202.144.200.0/24 202.144.202.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:00:68:0f:5a:9c:da:ed:fd:7c:5e:09:bf:f2:77:0c:44:d8: cf:37:0e:8c:7b:9f:71:ea:57:34:ff:4c:0d:22:be:49:d8:72: e6:5d:12:4b:f5:56:ae:28:c4:2b:10:af:f8:4e:02:ec:0c:e5: df:a5:50:81:3f:f0:57:cc:5a:a6:fd:5d:88:7f:72:50:d2:48: c8:3a:fe:21:4b:c9:01:83:4f:65:9a:7e:2b:ff:e7:69:70:da: a4:54:a6:f9:be:3e:07:d0:50:eb:9c:66:f9:53:4d:90:c3:28: ed:a7:e8:a3:0f:10:0d:eb:23:ea:8c:c5:b8:61:6d:a8:b8:e9: 06:ce:ea:8c:ab:3f:28:e3:e1:f9:54:db:6c:aa:dd:95:9f:11: 77:3a:41:05:7d:fb:75:92:ee:bc:c2:84:2c:9a:a3:f4:b7:64: bb:7a:d9:a7:ac:27:4d:1a:b6:1b:65:10:38:30:cb:fd:3c:3d: ec:15:c0:b7:25:cb:1f:05:6b:bc:0c:c3:d1:ab:dc:8b:0c:d9: b0:2e:94:1b:77:da:99:ba:34:b7:f5:d9:29:d8:4d:0a:e0:c6: 2f:c0:cb:87:84:10:81:f9:28:0b:90:40:d3:47:5a:1c:10:47: 68:e5:b2:2a:ac:4c:49:e4:b5:24:6b:55:8a:bd:20:32:46:2b: 8e:4b:db:7f -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICG74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2 ODYxNjc4RkQwHhcNMjYwMjEwMTYxMzUwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzI4Yy0zNjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlx3eV3CJU5EotYQwJGtqGmVbG2V53kRpe8Rt81a738yBQOyLLbgLkckjAv7O KkyGz+yhLTAN35hDymTiFQnzHCewmVx05Mu3EeiMOsxI0whr8EJM2xanHgF8wh1r d5YyArBGWMuF/VFK/31U7kArqzGI8ZRifz2N0FYgV3BsHGrfYkZcJ9otiPp5TjMf Bab2pgtSLnCT1lg8e/oWbsDgOkmabAJR6FA9gr6yW1FiPx8c7zL9WHk6GIt357zT Qwn7DL4SPCzRzDmvjs/HPNnZCyki4Vk9Ojr5QHOgZx1HBr7HEIEKSW2dolLaMZBb Kxkx58/kw/yj35Du4djtKEKVkwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFGpUk5A+ qAsCK4uS/eH2iQ5IiVkEMB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMwODMvQTBDRjA1OUEyRTYwMTFFN0I3NDczRTcwQzRGOUFFMDIvQUY3NzAwQjJC NTJBMTFFQUI5NDI2QzdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaMAwDBAJnUcwDBABnUc4DBADKkMgDBADKkMowDQYJKoZIhvcNAQELBQAD ggEBAHoAaA9anNrt/XxeCb/ydwxE2M83Dox7n3HqVzT/TA0ivknYcuZdEkv1Vq4o xCsQr/hOAuwM5d+lUIE/8FfMWqb9XYh/clDSSMg6/iFLyQGDT2Wafiv/52lw2qRU pvm+PgfQUOucZvlTTZDDKO2n6KMPEA3rI+qMxbhhbai46QbO6oyrPyjj4flU22yq 3ZWfEXc6QQV9+3WS7rzChCyao/S3ZLt62aesJ00athtlEDgwy/08PewVwLclyx8F a7wMw9Gr3IsM2bAulBt32pm6NLf12SnYTQrgxi/Ay4eEEIH5KAuQQNNHWhwQR2jl siqsTEnktSRrVYq9IDJGK45L238= -----END CERTIFICATE-----Generated at Mon Mar 2 09:20:14 2026 by rpki-client