$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/D24575B2D22E11EA9D4DDE29C4F9AE02.roa File: D24575B2D22E11EA9D4DDE29C4F9AE02.roa (raw, json) Hash identifier: WjGg/ZejwvG9Siea7F263gfGtLWehGPgmKPNRYmD4sA= Subject key identifier: 77:50:0A:E7:8B:8C:6E:DD:E6:8E:4C:C4:D6:16:6B:DE:08:BC:FB:C6 Certificate issuer: /CN=A91CF77D/serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Certificate serial: 08C2 Authority key identifier: 98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/D24575B2D22E11EA9D4DDE29C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:54:40 +0000 ROA not before: Mon 02 Jun 2025 21:08:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139067 IP address blocks: 103.139.62.0/24 maxlen: 24 103.210.224.0/24 maxlen: 24 2001:df0:6c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF77D, serialNumber=983D783002C54DA8F8A6E295838B9CAF01364358 Validity Not Before: Jun 2 21:08:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a428ff-bea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:a3:ee:10:26:fb:ce:da:3a:79:10:a5:87: 7b:ca:ae:ad:b8:d2:f9:1a:5f:63:05:e3:bd:bc:56: 6f:d6:8f:34:f1:3e:c7:55:75:88:a7:e6:0e:57:45: 44:19:8a:a4:17:4d:d2:cd:07:df:90:f8:fa:0e:c1: 9d:8f:0a:e3:30:3b:39:0e:29:9d:9e:ed:6a:76:88: d9:9a:9a:23:93:cc:38:36:35:f8:be:ac:f6:b7:fb: f4:a8:03:06:fd:94:57:4f:13:98:bd:2f:1a:bc:05: 79:58:60:83:06:54:f5:b8:71:76:4c:29:52:e1:05: bc:d7:b5:6e:44:ee:74:05:5e:b3:38:f3:29:7d:e1: f6:8d:d0:ba:5b:1c:25:5a:02:86:f8:15:ab:e5:05: 15:90:44:97:9b:fe:60:ce:1e:2b:eb:0a:52:fb:e1: a8:e4:d8:8d:40:a6:d3:6f:a0:85:49:8b:82:cd:82: 37:7f:84:f5:9f:ff:47:56:8d:6a:15:e7:d4:27:1a: 42:b5:e1:60:05:ec:a2:23:25:c1:d7:d7:f3:3f:7d: 5f:bc:b6:1a:49:e2:5b:07:93:d6:2e:d7:8c:fd:bb: 0e:4e:ff:95:0f:36:82:ac:7c:1a:cc:92:e7:a9:fb: b4:e7:93:ef:c6:84:73:43:a1:00:7c:69:0a:51:33: 94:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:50:0A:E7:8B:8C:6E:DD:E6:8E:4C:C4:D6:16:6B:DE:08:BC:FB:C6 X509v3 Authority Key Identifier: keyid:98:3D:78:30:02:C5:4D:A8:F8:A6:E2:95:83:8B:9C:AF:01:36:43:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/mD14MALFTaj4puKVg4ucrwE2Q1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mD14MALFTaj4puKVg4ucrwE2Q1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF77D/11E259D0D22D11EA8AE73D27C4F9AE02/D24575B2D22E11EA9D4DDE29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.62.0/24 103.210.224.0/24 IPv6: 2001:df0:6c80::/48 Signature Algorithm: sha256WithRSAEncryption 8f:57:b8:53:00:6f:32:a9:b1:be:b0:c5:40:ae:0c:52:30:4c: 2a:5c:a2:db:df:a8:98:c5:e2:5a:60:1b:8f:73:9c:83:c7:bd: 31:38:77:c1:2c:b5:74:d9:9e:ce:4c:b9:cb:be:11:b6:63:30: dc:02:3c:19:e2:60:1c:be:de:f8:be:9e:eb:09:80:b2:c0:e7: dc:12:80:78:9e:7a:f3:86:d2:05:64:29:6f:21:17:95:45:99: f5:c6:cc:56:25:65:a7:cd:ac:88:e9:96:e9:a1:d8:57:de:6b: 09:78:1c:eb:b0:d4:83:ff:ab:21:42:5d:16:2c:5a:38:65:e7: 9b:a1:ae:c3:87:f2:91:e9:8f:1d:3d:8b:3a:57:0d:37:1f:9e: 4c:56:7e:2c:25:81:b4:a6:05:b4:1b:df:0f:a8:9b:3a:83:3e: 15:6b:fc:8b:1f:e6:c6:a2:77:83:73:d7:64:a4:f9:4a:5a:ca: 51:08:84:0c:ec:cf:a8:29:db:17:52:3b:32:93:34:f2:11:e0: 8c:df:2e:ac:06:85:11:5f:96:68:f2:8d:a6:44:23:58:b2:91: 3a:53:46:42:51:b8:d7:4d:9c:62:52:a9:66:85:b6:95:3e:61: 1c:b1:07:1e:88:02:da:b8:f4:2f:bd:0a:cf:63:3b:5b:81:33: 6e:d9:2f:1c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y3N0QxMTAvBgNVBAUTKDk4M0Q3ODMwMDJDNTREQThGOEE2RTI5NTgzOEI5Q0FG MDEzNjQzNTgwHhcNMjUwNjAyMjEwODE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjhmZi1iZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiiyj7hAm+87aOnkQpYd7yq6tuNL5Gl9jBeO9vFZv1o808T7HVXWIp+YOV0VE GYqkF03SzQffkPj6DsGdjwrjMDs5Dimdnu1qdojZmpojk8w4NjX4vqz2t/v0qAMG /ZRXTxOYvS8avAV5WGCDBlT1uHF2TClS4QW817VuRO50BV6zOPMpfeH2jdC6Wxwl WgKG+BWr5QUVkESXm/5gzh4r6wpS++Go5NiNQKbTb6CFSYuCzYI3f4T1n/9HVo1q FefUJxpCteFgBeyiIyXB19fzP31fvLYaSeJbB5PWLteM/bsOTv+VDzaCrHwazJLn qfu055PvxoRzQ6EAfGkKUTOUuwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFHdQCueL jG7d5o5MxNYWa94IvPvGMB8GA1UdIwQYMBaAFJg9eDACxU2o+KbilYOLnK8BNkNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjc3RC8xMUUyNTlEMEQy MkQxMUVBOEFFNzNEMjdDNEY5QUUwMi9tRDE0TUFMRlRhajRwdUtWZzR1Y3J3RTJR MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21EMTRNQUxGVGFqNHB1S1ZnNHVjcndFMlExZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Y3N0QvMTFFMjU5RDBEMjJEMTFFQThBRTczRDI3QzRGOUFFMDIvRDI0NTc1QjJE MjJFMTFFQTlENERERTI5QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4s+AwQAZ9LgMA8EAgACMAkDBwAgAQ3wbIAwDQYJKoZIhvcNAQEL BQADggEBAI9XuFMAbzKpsb6wxUCuDFIwTCpcotvfqJjF4lpgG49znIPHvTE4d8Es tXTZns5Mucu+EbZjMNwCPBniYBy+3vi+nusJgLLA59wSgHieevOG0gVkKW8hF5VF mfXGzFYlZafNrIjplumh2Ffeawl4HOuw1IP/qyFCXRYsWjhl55uhrsOH8pHpjx09 izpXDTcfnkxWfiwlgbSmBbQb3w+omzqDPhVr/Isf5said4Nz12Sk+UpaylEIhAzs z6gp2xdSOzKTNPIR4IzfLqwGhRFflmjyjaZEI1iykTpTRkJRuNdNnGJSqWaFtpU+ YRyxBx6IAtq49C+9Cs9jO1uBM27ZLxw= -----END CERTIFICATE-----Generated at Mon Mar 2 15:14:47 2026 by rpki-client