$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/17C68D301C0311EE9B0F2938C4F9AE02.roa File: 17C68D301C0311EE9B0F2938C4F9AE02.roa (raw, json) Hash identifier: PPUG38GrYc1pSvAs42aCMPByXIt0IlvrGE9mP2N9xD4= Subject key identifier: DF:C0:A7:DE:C1:16:D6:E7:67:F7:9A:DF:8B:C1:76:3E:B2:30:20:EA Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 020B Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/17C68D301C0311EE9B0F2938C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:15:23 +0000 ROA not before: Thu 31 Jul 2025 04:10:59 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 139780 IP address blocks: 103.225.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Jul 31 04:10:59 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a411bb-aa63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:be:4d:0e:c5:7a:36:e6:43:28:f2:82:c5: 9e:84:8b:9d:34:6d:fe:26:43:39:2c:b9:a7:b8:53: 0a:ce:c5:3f:13:3a:d1:eb:10:1a:50:f2:1c:f7:7e: 5b:ce:0a:6a:1d:74:2c:db:28:2c:2c:b8:a5:64:ca: 2d:04:ec:b1:a8:ea:37:67:43:c8:56:61:1d:f5:b3: 01:46:85:cb:fe:b4:ea:df:49:e7:71:6f:4b:f9:d0: 33:74:c4:33:14:da:06:17:37:84:4c:70:b1:c3:00: 1f:31:55:23:03:b8:39:c1:b3:6d:b5:57:26:b7:f7: 98:ee:38:b4:06:eb:ed:a8:e1:b0:11:55:7a:b7:db: 75:88:e6:47:fd:46:be:bd:54:df:da:6b:44:bb:13: 0e:f5:27:23:57:07:6b:bd:93:f9:a1:02:11:89:ea: 57:a6:ef:ec:bc:35:7c:13:e8:c4:4a:e0:f6:be:5d: e5:a8:0d:2c:8d:a2:83:14:f1:92:e3:e7:c8:1c:59: d6:48:e0:ce:c6:92:b3:7d:27:6a:aa:6f:0e:3a:f3: 15:4e:35:60:3f:8e:56:cd:2d:8f:22:e9:9a:90:92: 9f:2f:07:e0:3e:c0:01:fa:d8:78:68:f4:6d:d1:f3: de:85:d8:6e:bd:4c:cc:72:a3:00:93:e5:a3:cc:55: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C0:A7:DE:C1:16:D6:E7:67:F7:9A:DF:8B:C1:76:3E:B2:30:20:EA X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/17C68D301C0311EE9B0F2938C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.225.219.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5c:3d:13:8d:19:43:fc:e2:33:75:2e:bf:9e:74:ac:93:b9: 9a:20:3b:3f:55:4e:9f:23:10:4a:90:43:be:40:0f:6f:0a:c1: df:7e:05:97:03:77:b1:76:24:a6:62:d7:50:51:72:6c:30:68: 78:80:88:63:72:76:97:4e:63:b9:50:14:f0:e0:d1:17:a4:d8: 17:b8:87:f1:c1:87:bd:cb:9e:42:f6:13:66:15:dd:df:d5:82: 80:8d:45:c7:4d:fd:99:71:aa:bd:18:17:36:17:88:de:7e:bc: 26:6b:c9:46:f9:ad:70:25:54:99:ef:8f:09:9e:cc:a4:2d:33: 3d:00:5b:65:37:c4:07:d3:4e:cb:7e:06:7e:85:48:fc:d8:75: 1a:7c:23:d9:13:95:72:d9:af:ae:3d:13:cb:15:21:57:c7:56: 15:f1:d7:a7:36:d2:58:04:55:5c:3f:53:c0:5e:84:93:fb:19: 1e:cf:f0:af:e7:e8:7b:ce:c0:24:21:24:e1:1c:ab:f6:fb:be: 4e:c2:cb:e6:ed:e0:b5:e1:6a:10:14:be:94:eb:35:ba:b7:39: 4f:41:dd:26:74:66:78:8f:12:9d:c4:8e:a9:d2:a4:f1:0b:42: 11:75:a1:0e:ec:b5:b4:ab:53:e0:fa:28:e6:dd:c5:49:7d:07: f6:c2:3f:76 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwNzMxMDQxMDU5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTFiYi1hYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiZ2+TQ7FejbmQyjygsWehIudNG3+JkM5LLmnuFMKzsU/EzrR6xAaUPIc935b zgpqHXQs2ygsLLilZMotBOyxqOo3Z0PIVmEd9bMBRoXL/rTq30nncW9L+dAzdMQz FNoGFzeETHCxwwAfMVUjA7g5wbNttVcmt/eY7ji0BuvtqOGwEVV6t9t1iOZH/Ua+ vVTf2mtEuxMO9ScjVwdrvZP5oQIRiepXpu/svDV8E+jESuD2vl3lqA0sjaKDFPGS 4+fIHFnWSODOxpKzfSdqqm8OOvMVTjVgP45WzS2PIumakJKfLwfgPsAB+th4aPRt 0fPehdhuvUzMcqMAk+WjzFWJNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN/Ap97B FtbnZ/ea34vBdj6yMCDqMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU3MkIvRjdFNUMxNjgwRTlBMTFFRUE2NDQ5RTcxQzRGOUFFMDIvMTdDNjhEMzAx QzAzMTFFRTlCMEYyOTM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ+HbMA0GCSqGSIb3DQEBCwUAA4IBAQBAXD0TjRlD/OIzdS6/nnSs k7maIDs/VU6fIxBKkEO+QA9vCsHffgWXA3exdiSmYtdQUXJsMGh4gIhjcnaXTmO5 UBTw4NEXpNgXuIfxwYe9y55C9hNmFd3f1YKAjUXHTf2Zcaq9GBc2F4jefrwma8lG +a1wJVSZ748JnsykLTM9AFtlN8QH007LfgZ+hUj82HUafCPZE5Vy2a+uPRPLFSFX x1YV8denNtJYBFVcP1PAXoST+xkez/Cv5+h7zsAkISThHKv2+75Owsvm7eC14WoQ FL6U6zW6tzlPQd0mdGZ4jxKdxI6p0qTxC0IRdaEO7LW0q1Pg+ijm3cVJfQf2wj92 -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:42 2026 by rpki-client