$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa File: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (raw, json) Hash identifier: COaMid1PJ7sNLHUQ6+TBJQt8v3jAUBZ7JzL1Rm6+wuo= Subject key identifier: B2:C1:D2:98:24:A8:83:BB:34:29:06:6F:D6:CE:E6:C0:23:3F:29:0E Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 01DA Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:21:44 +0000 ROA not before: Thu 05 Jun 2025 03:53:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151350 IP address blocks: 103.209.74.0/23 maxlen: 24 2401:2a0:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Jun 5 03:53:01 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a41338-8217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7d:05:9f:e3:b7:7d:0c:33:5c:a5:a9:41:20: 35:ca:5d:ef:8a:68:f6:eb:f0:cc:5e:c8:7c:ed:65: b4:4f:e1:9e:cc:89:5a:85:6e:0c:01:c2:f3:96:76: 4a:63:fc:6e:aa:2b:d0:21:e1:76:fc:c1:76:9c:fe: 37:94:1a:cc:aa:2c:ac:4c:6c:80:ce:30:bc:c4:5f: d7:e0:4b:fe:c9:e7:20:ce:8e:78:63:0e:e7:c8:94: 4a:40:f9:73:7c:24:4a:e6:54:c4:7d:86:3d:f8:34: d4:1b:f9:fb:d3:74:84:5c:0b:e9:9c:7d:6a:8e:47: d8:78:f4:dd:a6:90:ff:c4:f2:46:aa:4d:c0:04:77: 73:a8:4b:5a:89:b0:15:e4:81:3e:b9:bc:3c:ab:3c: 0b:27:34:40:32:19:3b:64:61:17:65:85:40:49:f8: b5:84:cf:09:39:64:8b:a4:bb:8c:7b:07:55:59:ab: d2:1b:d0:ec:8e:ec:d9:3f:b2:34:e6:92:bf:90:ab: 67:31:dc:57:c1:cd:7f:44:88:f4:9d:68:b1:e2:31: ac:d2:19:c2:b9:7a:30:8d:dc:b0:01:fa:23:ab:e6: 06:25:79:61:67:8e:ae:42:89:75:9b:4c:60:a6:7c: b1:18:50:7e:60:66:b7:fb:f0:4d:d8:fe:87:57:8c: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C1:D2:98:24:A8:83:BB:34:29:06:6F:D6:CE:E6:C0:23:3F:29:0E X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/ABA6DCF0030F11EFB12D8A18C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.74.0/23 IPv6: 2401:2a0:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 72:b6:ad:b2:f9:f0:71:76:0d:5a:45:96:7d:09:21:4d:a8:99: 82:7e:b9:63:7b:ca:6e:71:22:e6:23:30:9b:55:e7:b2:6d:02: e5:1e:9c:12:1a:32:0b:19:46:e9:be:48:e3:13:3c:52:17:6c: d4:ab:f4:04:bb:24:f5:db:16:11:cf:e3:66:65:45:5c:16:cf: 00:a8:fc:44:84:d2:b1:2b:a0:a8:3a:77:8c:9b:52:c7:3a:a7: 84:3d:52:87:7a:4a:43:13:00:64:e3:a0:b3:59:fb:48:26:f2: 51:26:01:35:26:fc:79:fc:6a:c2:9f:04:44:3f:8b:be:15:32: 86:84:30:dc:44:02:2d:b3:37:a5:ab:86:33:c5:be:ef:bd:9b: d0:74:11:4c:c2:b0:da:d4:e1:08:a4:0c:34:ca:14:14:92:d2: ae:34:71:5e:1f:f8:cf:81:ae:5f:25:9e:a6:cb:d3:2a:21:0d: 40:00:aa:89:01:0d:ca:76:e7:ba:23:0c:80:a4:4b:d1:fb:12: ad:95:5e:85:6e:89:91:b7:f5:aa:a0:da:a7:68:dd:53:68:2d: e6:82:64:46:24:6c:7a:ee:06:bf:3e:6b:c8:c5:c5:c4:9b:9e: 35:c2:36:6b:b7:c8:1d:6d:43:e1:4b:23:11:7b:e8:0d:c8:45: a9:b9:76:c9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjUwNjA1MDM1MzAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTMzOC04MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtH0Fn+O3fQwzXKWpQSA1yl3vimj26/DMXsh87WW0T+GezIlahW4MAcLzlnZK Y/xuqivQIeF2/MF2nP43lBrMqiysTGyAzjC8xF/X4Ev+yecgzo54Yw7nyJRKQPlz fCRK5lTEfYY9+DTUG/n703SEXAvpnH1qjkfYePTdppD/xPJGqk3ABHdzqEtaibAV 5IE+ubw8qzwLJzRAMhk7ZGEXZYVASfi1hM8JOWSLpLuMewdVWavSG9DsjuzZP7I0 5pK/kKtnMdxXwc1/RIj0nWix4jGs0hnCuXowjdywAfojq+YGJXlhZ46uQol1m0xg pnyxGFB+YGa3+/BN2P6HV4z64QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLLB0pgk qIO7NCkGb9bO5sAjPykOMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0FFMDQvOUQ4Rjc3MkE1Rjk2MTFFRTgzNjM4RjNFQzRGOUFFMDIvQUJBNkRDRjAw MzBGMTFFRkIxMkQ4QTE4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ9FKMA8EAgACMAkDBwAkAQKg//8wDQYJKoZIhvcNAQELBQADggEB AHK2rbL58HF2DVpFln0JIU2omYJ+uWN7ym5xIuYjMJtV57JtAuUenBIaMgsZRum+ SOMTPFIXbNSr9AS7JPXbFhHP42ZlRVwWzwCo/ESE0rEroKg6d4ybUsc6p4Q9Uod6 SkMTAGTjoLNZ+0gm8lEmATUm/Hn8asKfBEQ/i74VMoaEMNxEAi2zN6WrhjPFvu+9 m9B0EUzCsNrU4QikDDTKFBSS0q40cV4f+M+Brl8lnqbL0yohDUAAqokBDcp257oj DICkS9H7Eq2VXoVuiZG39aqg2qdo3VNoLeaCZEYkbHruBr8+a8jFxcSbnjXCNmu3 yB1tQ+FLIxF76A3IRam5dsk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:42 2026 by rpki-client