$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/3965E27CD7A611F088E56E7A8AD3641D.roa File: 3965E27CD7A611F088E56E7A8AD3641D.roa (raw, json) Hash identifier: A43dZvYLViwuUUceosJAKKQ1uBmKCxEnWPtg0DfsvCU= Subject key identifier: F5:E2:FE:E5:97:44:C0:BE:4F:8B:60:38:C1:1E:04:C6:1E:9C:2D:8F Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: 0159 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/3965E27CD7A611F088E56E7A8AD3641D.roa Signing time: Sun 01 Mar 2026 15:21:08 +0000 ROA not before: Fri 12 Dec 2025 22:02:17 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138926 IP address blocks: 103.157.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A, serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: Dec 12 22:02:17 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45964-5146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:04:20:f3:b2:4c:4d:6d:56:bf:5a:31:10:f8: 41:d7:e1:27:c8:17:f8:e9:1e:6b:dc:65:4e:9f:54: cf:e2:04:0d:f3:01:b6:a9:e6:8f:0b:38:32:8f:d6: a6:c2:50:ea:5a:fc:49:7d:b4:01:f4:b5:d7:7a:9c: ad:ea:de:83:9b:e4:3b:3a:3f:52:cc:18:bb:96:f0: 5c:1e:25:cd:2e:64:fc:d9:26:87:78:cf:98:39:63: de:e0:3d:b8:bb:89:c4:7d:57:9e:68:4c:30:fd:f5: 0f:57:7a:5d:98:67:ba:f0:69:74:f9:16:9d:24:32: 14:40:53:b3:49:79:5c:19:55:1b:5f:30:ac:ea:68: 94:95:f7:01:d5:ab:15:70:c5:36:cc:fb:61:04:7d: 52:aa:96:4a:df:29:07:f7:61:f5:fb:a6:90:f8:bc: b7:00:30:f8:b3:9e:ae:1e:a6:f7:04:24:ef:0a:92: 82:df:c4:e5:fd:37:73:4f:cd:b1:60:8f:b4:8e:58: 8c:ee:65:ea:86:89:e3:4f:ac:03:18:b8:bf:fc:bb: 87:50:5c:cc:b9:0b:7d:c0:b1:41:66:fe:c9:22:8a: d4:ef:9c:0b:64:cf:2c:ef:3f:c9:3f:f4:9a:c7:ac: 9a:0c:89:26:2c:f3:ed:c7:34:64:14:ea:21:98:23: 07:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:FE:E5:97:44:C0:BE:4F:8B:60:38:C1:1E:04:C6:1E:9C:2D:8F X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/3965E27CD7A611F088E56E7A8AD3641D.roa sbgp-ipAddrBlock: critical IPv4: 103.157.89.0/24 Signature Algorithm: sha256WithRSAEncryption 37:a9:f3:83:87:4a:9a:3c:e3:6b:db:e7:a1:71:5d:13:2b:71: 10:96:34:d4:7d:8a:4d:c7:10:74:11:73:0f:06:ff:b5:0b:52: 58:f9:a5:9d:95:d8:20:64:0b:99:eb:11:68:5b:e7:fa:52:41: 11:e5:ef:04:db:e0:50:3d:e0:2c:e0:47:4a:4b:0a:62:1d:71: 05:df:b6:05:cd:dc:f3:19:d2:b6:90:5b:d5:f8:47:54:0a:6a: b0:19:6e:b5:66:0d:e5:69:3c:92:73:4a:c6:24:ae:63:e5:08: 04:56:75:cd:45:f1:0c:41:30:c7:6c:8a:95:4d:41:38:b1:fa: 17:65:43:1e:f5:dd:90:98:62:e7:c6:45:4d:28:85:b6:5f:5d: 4d:64:5b:91:38:02:22:e5:ee:0b:ae:53:2b:f5:9d:d9:4e:88: 3e:cb:78:c1:44:6a:22:14:4f:39:77:dd:b1:f0:f0:23:2e:75: f9:e3:74:8c:86:2d:9e:3d:6f:8f:4d:5b:5b:bb:49:f8:a6:a2: 1d:5c:a7:3a:4f:c0:d1:2e:0e:83:8d:54:55:61:f5:b2:a2:a0: 43:82:46:0b:8c:e0:92:fd:b1:45:16:3d:d8:15:8f:e3:42:ca: 64:c1:a2:7d:2c:e6:09:66:55:ea:b2:d7:3c:5c:67:30:44:6e: 62:c7:89:2a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg4MkExMTAvBgNVBAUTKDZGQTYyQkUwQUQ3OUExQjRDMzg2OUJBMTk5MEYyMTRE RjZCM0NFMjcwHhcNMjUxMjEyMjIwMjE3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTk2NC01MTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAQg87JMTW1Wv1oxEPhB1+EnyBf46R5r3GVOn1TP4gQN8wG2qeaPCzgyj9am wlDqWvxJfbQB9LXXepyt6t6Dm+Q7Oj9SzBi7lvBcHiXNLmT82SaHeM+YOWPe4D24 u4nEfVeeaEww/fUPV3pdmGe68Gl0+RadJDIUQFOzSXlcGVUbXzCs6miUlfcB1asV cMU2zPthBH1SqpZK3ykH92H1+6aQ+Ly3ADD4s56uHqb3BCTvCpKC38Tl/TdzT82x YI+0jliM7mXqhonjT6wDGLi//LuHUFzMuQt9wLFBZv7JIorU75wLZM8s7z/JP/Sa x6yaDIkmLPPtxzRkFOohmCMH3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPXi/uWX RMC+T4tgOMEeBMYenC2PMB8GA1UdIwQYMBaAFG+mK+CteaG0w4aboZkPIU32s84n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODgyQS9COUMwQzk3QTIx QTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9iVERocHVobVE4aFRmYXp6 aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenppYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzg4MkEvQjlDMEM5N0EyMUEyMTFFRkI5MDY5QTZBQzRGOUFFMDIvMzk2NUUyN0NE N0E2MTFGMDg4RTU2RTdBOEFEMzY0MUQucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ51ZMA0GCSqGSIb3DQEBCwUAA4IBAQA3qfODh0qaPONr2+ehcV0T K3EQljTUfYpNxxB0EXMPBv+1C1JY+aWdldggZAuZ6xFoW+f6UkER5e8E2+BQPeAs 4EdKSwpiHXEF37YFzdzzGdK2kFvV+EdUCmqwGW61Zg3laTySc0rGJK5j5QgEVnXN RfEMQTDHbIqVTUE4sfoXZUMe9d2QmGLnxkVNKIW2X11NZFuROAIi5e4LrlMr9Z3Z Tog+y3jBRGoiFE85d92x8PAjLnX543SMhi2ePW+PTVtbu0n4pqIdXKc6T8DRLg6D jVRVYfWyoqBDgkYLjOCS/bFFFj3YFY/jQspkwaJ9LOYJZlXqstc8XGcwRG5ix4kq -----END CERTIFICATE-----Generated at Mon Mar 2 04:43:47 2026 by rpki-client