$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa File: AB731B004B2A11EFAAFCC92CC4F9AE02.roa (raw, json) Hash identifier: Qof8TRE4aGZ+awtau2DmuMHWzwauOGLSt/MWNgJ6+M4= Subject key identifier: 6D:BA:AA:46:8E:B7:D7:1D:5A:D3:C2:EE:98:C4:F9:6E:53:91:9A:41 Certificate issuer: /CN=A91CF285/serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Certificate serial: 1119 Authority key identifier: 3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:16:36 +0000 ROA not before: Fri 02 May 2025 17:56:39 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152676 IP address blocks: 103.24.132.0/23 maxlen: 23 2406:bf00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4377 (0x1119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF285, serialNumber=3E29CE6F6A7DB94B6D09133B73FED52DDEE12DAB Validity Not Before: May 2 17:56:39 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42e23-173b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:d1:b1:ec:20:9f:00:ee:f7:27:21:54:0a: cb:44:be:0c:33:af:60:73:4c:39:3f:9f:46:cb:9e: 1d:44:69:46:23:17:33:da:21:46:e9:18:d4:28:3e: 0d:fc:b4:73:a0:a3:0f:31:35:60:f9:a1:7a:6b:2e: ad:f6:4b:76:9e:76:a4:2b:3b:ef:cd:34:cb:05:e8: e2:22:69:5f:40:d9:06:14:5c:ee:09:58:8e:6a:8e: 17:d4:95:73:10:bb:79:3b:23:89:1d:c1:05:c7:18: de:86:7b:5d:67:03:6b:08:2e:16:fc:39:84:f8:6a: 4e:ec:b1:48:f5:f9:96:50:d2:2f:85:03:31:d5:cf: 30:df:ef:67:03:67:b9:01:f5:f7:8a:1b:a5:40:09: a8:01:85:0b:6c:21:c4:36:5f:89:9e:35:df:46:bf: 36:ad:92:b2:7b:d0:1a:1f:9b:23:fd:98:1c:cf:b5: 59:85:9f:04:28:4f:5d:55:6f:87:5f:b9:25:87:69: 48:4a:dc:43:24:d4:c3:87:33:65:ca:0c:2a:90:7c: ab:5b:63:9b:3a:52:91:d0:e8:21:17:d8:5a:ac:df: a1:09:67:d4:bb:4f:2d:ad:d8:64:01:9d:dd:83:2c: 9f:d3:a4:73:55:38:f3:f1:6d:bd:a2:49:6f:5b:dc: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BA:AA:46:8E:B7:D7:1D:5A:D3:C2:EE:98:C4:F9:6E:53:91:9A:41 X509v3 Authority Key Identifier: keyid:3E:29:CE:6F:6A:7D:B9:4B:6D:09:13:3B:73:FE:D5:2D:DE:E1:2D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/PinOb2p9uUttCRM7c_7VLd7hLas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PinOb2p9uUttCRM7c_7VLd7hLas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF285/FD64F0B8340C11E9966C5A76C4F9AE02/AB731B004B2A11EFAAFCC92CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.132.0/23 IPv6: 2406:bf00::/48 Signature Algorithm: sha256WithRSAEncryption 65:78:51:79:30:d3:f8:fa:52:fb:c5:c0:c9:0f:f3:0c:4e:fe: aa:a3:0f:43:e1:90:81:28:a0:cf:f2:d2:b7:4d:fd:cb:fa:87: 6e:0d:24:9f:c5:e3:7c:00:5e:16:f3:a2:d0:fd:8c:7a:59:eb: b6:cf:26:a2:6c:43:6d:ec:7f:d2:22:80:6a:bc:5e:07:20:a4: 20:59:11:bc:48:ca:63:9d:7a:1b:f2:d0:5f:18:c2:81:1f:49: 70:8c:a7:2a:25:47:34:5f:96:2b:93:1b:61:ef:c8:eb:d9:69: d9:76:b1:15:9f:c4:92:aa:e4:83:3b:d7:2e:6c:a4:e9:80:02: e7:bd:f1:04:2f:98:d1:ec:8f:a2:3b:98:04:b7:93:4a:6e:42: d0:8c:71:13:67:70:6c:81:4d:a2:da:74:73:b1:a0:f9:7c:5b: 32:c3:1b:ca:ed:8c:e0:f9:38:1e:fc:cb:07:42:44:fd:77:a2: 6f:9c:a5:7f:49:1b:13:94:ec:41:f3:95:8c:6d:f4:0a:c5:4f: 91:0b:39:b7:c4:0a:50:3b:b6:5b:ad:87:77:2d:22:79:b9:81: 18:2b:20:26:6e:15:59:0e:43:dc:ec:76:a2:bf:28:a2:cd:b5: 34:f1:00:95:71:3a:43:9b:17:1e:0f:fc:0f:70:6e:13:16:fc: a9:d7:d1:ac -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICERkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YyODUxMTAvBgNVBAUTKDNFMjlDRTZGNkE3REI5NEI2RDA5MTMzQjczRkVENTJE REVFMTJEQUIwHhcNMjUwNTAyMTc1NjM5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmUyMy0xNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiZ/RsewgnwDu9ychVArLRL4MM69gc0w5P59Gy54dRGlGIxcz2iFG6RjUKD4N /LRzoKMPMTVg+aF6ay6t9kt2nnakKzvvzTTLBejiImlfQNkGFFzuCViOao4X1JVz ELt5OyOJHcEFxxjehntdZwNrCC4W/DmE+GpO7LFI9fmWUNIvhQMx1c8w3+9nA2e5 AfX3ihulQAmoAYULbCHENl+JnjXfRr82rZKye9AaH5sj/Zgcz7VZhZ8EKE9dVW+H X7klh2lIStxDJNTDhzNlygwqkHyrW2ObOlKR0OghF9harN+hCWfUu08trdhkAZ3d gyyf06RzVTjz8W29oklvW9xk7QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFG26qkaO t9cdWtPC7pjE+W5TkZpBMB8GA1UdIwQYMBaAFD4pzm9qfblLbQkTO3P+1S3e4S2r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjI4NS9GRDY0RjBCODM0 MEMxMUU5OTY2QzVBNzZDNEY5QUUwMi9QaW5PYjJwOXVVdHRDUk03Y183VkxkN2hM YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Bpbk9iMnA5dVV0dENSTTdjXzdWTGQ3aExhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0YyODUvRkQ2NEYwQjgzNDBDMTFFOTk2NkM1QTc2QzRGOUFFMDIvQUI3MzFCMDA0 QjJBMTFFRkFBRkNDOTJDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZxiEMA8EAgACMAkDBwAkBr8AAAAwDQYJKoZIhvcNAQELBQADggEB AGV4UXkw0/j6UvvFwMkP8wxO/qqjD0PhkIEooM/y0rdN/cv6h24NJJ/F43wAXhbz otD9jHpZ67bPJqJsQ23sf9IigGq8XgcgpCBZEbxIymOdehvy0F8YwoEfSXCMpyol RzRfliuTG2HvyOvZadl2sRWfxJKq5IM71y5spOmAAue98QQvmNHsj6I7mAS3k0pu QtCMcRNncGyBTaLadHOxoPl8WzLDG8rtjOD5OB78ywdCRP13om+cpX9JGxOU7EHz lYxt9ArFT5ELObfEClA7tluth3ctInm5gRgrICZuFVkOQ9zsdqK/KKLNtTTxAJVx OkObFx4P/A9wbhMW/KnX0aw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:01:37 2026 by rpki-client