$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/9D8E0AF4E18C11ECB1697F55C4F9AE02.roa File: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (raw, json) Hash identifier: v3KWCKQioly5U45019IwNwKf+DqRI3FGebku0Ww86z0= Subject key identifier: 09:C1:9C:52:AB:88:15:EC:96:72:C9:D5:4E:DB:D2:8C:F8:29:12:FF Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0C65 Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/9D8E0AF4E18C11ECB1697F55C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:24:51 +0000 ROA not before: Tue 22 Apr 2025 19:17:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137543 IP address blocks: 103.112.156.0/22 maxlen: 24 2402:abc0::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Apr 22 19:17:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a405e3-ef38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ed:be:53:40:8d:9b:52:d7:9a:9d:69:d6:05: 69:ad:ca:92:a7:02:61:51:2c:83:f3:b2:80:d8:76: fe:c4:fa:78:36:87:5e:0a:5b:b6:3b:d1:6c:14:0b: 8d:e1:87:fe:10:92:02:a5:51:18:08:c5:a7:5d:85: 3d:3d:53:16:1b:01:5d:bb:ce:59:74:84:3a:fe:44: b9:30:bb:36:d3:83:1d:dd:21:89:15:76:4e:14:95: 4c:1f:82:95:44:30:df:18:1b:98:55:df:40:a6:3d: a1:f6:f6:b3:02:64:b0:50:37:3a:ad:9d:3d:8f:0b: ed:73:7b:38:1f:83:5e:53:63:22:f1:68:4f:12:d0: 13:4d:6d:ba:50:4b:c5:3f:df:d6:dd:3b:79:7e:1d: 28:2f:70:30:4e:de:53:87:61:8d:f9:53:68:93:ca: 15:b0:8e:47:02:e5:11:21:38:a7:6f:73:0a:7f:89: 3d:30:5e:6c:36:94:f7:19:e5:42:ae:69:82:19:83: c2:f9:1f:5d:35:38:8b:05:20:75:9a:f0:7d:18:28: af:e3:5e:3b:03:87:be:57:44:1a:f0:e1:ba:97:25: ef:64:8b:c9:36:95:ef:78:ba:2b:1c:74:1d:c7:74: 9b:bb:cc:0a:75:67:f1:4e:b9:ff:5c:f1:c9:f7:c4: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:9C:52:AB:88:15:EC:96:72:C9:D5:4E:DB:D2:8C:F8:29:12:FF X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/9D8E0AF4E18C11ECB1697F55C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.156.0/22 IPv6: 2402:abc0::/32 Signature Algorithm: sha256WithRSAEncryption 38:1a:2a:36:fc:99:7a:50:2d:2d:5b:6d:3b:74:43:c4:b1:4f: 55:b1:3c:71:78:0b:4f:b2:bb:51:db:63:8f:4c:2b:08:ca:91: 9e:fb:95:3f:89:38:42:a7:96:63:7d:20:9e:90:de:15:18:6b: df:f6:f2:6e:18:c3:a8:83:22:be:92:a2:37:67:f1:d4:c5:16: d2:2e:94:dd:11:ed:d1:67:bd:7e:4a:2c:cf:7a:04:05:17:b6: 75:90:52:55:75:0e:01:71:47:45:80:aa:43:9e:17:2e:71:d2: 81:9d:05:f9:7f:b6:36:20:88:39:12:e7:5a:bd:a0:f8:ac:c2: 13:d6:07:7d:d4:da:42:55:a1:95:61:a7:59:09:13:7a:3d:a6: 8f:f2:14:b8:74:52:99:88:d5:a7:da:6f:5b:e0:e1:39:53:9c: cc:5e:93:14:fb:6b:f6:7d:14:2b:76:8d:b6:64:0e:be:f6:ef: 67:e9:69:c1:dd:0b:dc:98:92:78:4c:6b:af:6b:1c:3b:2e:24: 9f:19:80:e8:16:4d:4a:f6:2b:19:48:77:fd:90:11:85:5b:bb: 74:36:ac:d4:f6:d9:52:b6:0f:6d:0c:6d:47:42:dc:0a:c6:5c: c4:60:9e:5c:d4:64:ab:f2:7f:6b:ed:c2:28:8f:de:d1:4c:1d: 00:9a:b9:6c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjUwNDIyMTkxNzU5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDVlMy1lZjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4O2+U0CNm1LXmp1p1gVprcqSpwJhUSyD87KA2Hb+xPp4NodeClu2O9FsFAuN 4Yf+EJICpVEYCMWnXYU9PVMWGwFdu85ZdIQ6/kS5MLs204Md3SGJFXZOFJVMH4KV RDDfGBuYVd9Apj2h9vazAmSwUDc6rZ09jwvtc3s4H4NeU2Mi8WhPEtATTW26UEvF P9/W3Tt5fh0oL3AwTt5Th2GN+VNok8oVsI5HAuURITinb3MKf4k9MF5sNpT3GeVC rmmCGYPC+R9dNTiLBSB1mvB9GCiv4147A4e+V0Qa8OG6lyXvZIvJNpXveLorHHQd x3Sbu8wKdWfxTrn/XPHJ98TmIwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAnBnFKr iBXslnLJ1U7b0oz4KRL/MB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzM4NjkvNzVEQTQ0N0MxRjREMTFFQTkwNTA1NzYyQzRGOUFFMDIvOUQ4RTBBRjRF MThDMTFFQ0IxNjk3RjU1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3CcMA0EAgACMAcDBQAkAqvAMA0GCSqGSIb3DQEBCwUAA4IBAQA4 Gio2/Jl6UC0tW207dEPEsU9VsTxxeAtPsrtR22OPTCsIypGe+5U/iThCp5ZjfSCe kN4VGGvf9vJuGMOogyK+kqI3Z/HUxRbSLpTdEe3RZ71+SizPegQFF7Z1kFJVdQ4B cUdFgKpDnhcucdKBnQX5f7Y2IIg5EudavaD4rMIT1gd91NpCVaGVYadZCRN6PaaP 8hS4dFKZiNWn2m9b4OE5U5zMXpMU+2v2fRQrdo22ZA6+9u9n6WnB3QvcmJJ4TGuv axw7LiSfGYDoFk1K9isZSHf9kBGFW7t0NqzU9tlStg9tDG1HQtwKxlzEYJ5c1GSr 8n9r7cIoj97RTB0Amrls -----END CERTIFICATE-----Generated at Mon Mar 2 04:11:59 2026 by rpki-client