$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/35D4363E330711EB9D3AA60BC4F9AE02.roa File: 35D4363E330711EB9D3AA60BC4F9AE02.roa (raw, json) Hash identifier: MIjawd33la/jBdvWj1qHhi7fRFhJrDfr9QRihhf5huE= Subject key identifier: 97:7E:53:21:B6:8A:26:1D:B2:10:05:CF:06:91:4E:54:F0:1C:F8:EF Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Certificate serial: 07C3 Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/35D4363E330711EB9D3AA60BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:27:20 +0000 ROA not before: Fri 12 Dec 2025 20:57:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134797 IP address blocks: 103.199.216.0/22 maxlen: 22 103.199.216.0/24 maxlen: 24 103.199.217.0/24 maxlen: 24 103.199.218.0/24 maxlen: 24 103.199.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1987 (0x7c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A Validity Not Before: Dec 12 20:57:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a430a8-ce77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:64:3f:6a:3c:76:4c:9f:27:17:f4:f4:13: a8:72:e8:81:a8:7e:e4:95:57:45:95:a5:3f:b9:99: 9d:56:a2:4d:f9:0e:a8:3d:04:46:a6:fd:1a:c6:f0: 4c:e7:72:c8:be:a6:7a:34:c6:3b:f2:5a:5e:43:bf: 23:58:73:85:cc:f3:dd:b3:98:19:48:06:93:41:0e: 68:e3:82:59:17:b7:da:df:3d:68:9a:7a:70:04:a2: c4:e2:01:71:78:aa:89:44:03:b6:65:8b:8f:68:17: 8a:c3:33:25:76:d6:bd:0b:0d:57:bf:24:55:0c:61: 32:8b:0c:44:fd:f4:6e:0a:3f:7f:bd:bc:aa:6a:cc: cc:c4:ac:79:fc:22:94:f4:d9:a4:50:d5:f0:44:4d: 3d:36:52:c5:5a:0e:01:30:c0:08:51:84:3d:50:16: d5:ba:02:50:4c:51:b2:de:f1:d1:5e:20:5a:f8:30: fe:50:3e:78:c3:00:f3:ae:cc:5f:ad:10:db:89:39: 3e:57:a7:5f:4b:1f:e3:4b:d0:7c:e2:62:56:47:35: e4:5c:6a:28:df:bb:14:c3:60:22:cf:44:3f:b3:bc: d6:21:16:ca:10:bf:a1:2f:64:81:95:6b:db:b8:6f: fe:46:43:ec:06:37:3f:69:62:4e:b6:9e:95:15:8c: 0e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7E:53:21:B6:8A:26:1D:B2:10:05:CF:06:91:4E:54:F0:1C:F8:EF X509v3 Authority Key Identifier: keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/35D4363E330711EB9D3AA60BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.199.216.0/22 Signature Algorithm: sha256WithRSAEncryption 91:05:a5:d4:fd:67:c6:3f:b0:3c:7f:4b:fa:b8:12:dc:64:97: c1:d8:a8:b7:7d:12:a5:4c:04:ce:dc:9f:93:f8:42:67:e8:b0: e0:9a:6f:c8:9f:1e:0b:8e:98:d0:0b:f3:58:e6:f3:f7:29:fa: a5:80:0c:40:56:43:21:3b:09:e7:aa:dd:24:85:ed:47:cd:8e: 3b:2b:e6:77:1e:3d:c0:b7:5f:4f:6f:82:d3:96:00:b6:18:1c: e4:79:5a:9f:5d:19:58:9b:26:26:22:f7:7e:1e:0f:7c:4f:b0: 09:58:33:0d:ce:26:31:31:8e:cf:97:d0:5d:c2:8b:17:69:ce: a5:56:18:59:76:25:9c:42:ec:bd:d4:17:eb:b7:9c:54:a4:f5: 74:4e:28:2c:b9:1c:e1:be:5f:1a:17:d4:40:5e:10:cb:19:45: f9:fe:16:3d:6a:df:90:62:e7:7c:a7:52:68:a1:7a:03:31:79: 42:bc:93:b3:f2:74:a1:04:5c:a5:3c:93:cb:a5:db:7f:bf:32: 9d:11:00:fe:9e:8d:e5:e0:1f:eb:51:e2:2d:7b:ec:62:b4:b9: 53:6f:e7:75:02:5f:00:1a:90:44:db:11:74:7d:c7:80:fa:ee: 20:ab:45:ae:ee:aa:7c:8e:7e:69:ba:19:ca:f7:92:e6:42:cd: 5b:35:bc:0d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF Q0E3QzUxMEEwHhcNMjUxMjEyMjA1NzUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzBhOC1jZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKxkP2o8dkyfJxf09BOocuiBqH7klVdFlaU/uZmdVqJN+Q6oPQRGpv0axvBM 53LIvqZ6NMY78lpeQ78jWHOFzPPds5gZSAaTQQ5o44JZF7fa3z1omnpwBKLE4gFx eKqJRAO2ZYuPaBeKwzMldta9Cw1XvyRVDGEyiwxE/fRuCj9/vbyqaszMxKx5/CKU 9NmkUNXwRE09NlLFWg4BMMAIUYQ9UBbVugJQTFGy3vHRXiBa+DD+UD54wwDzrsxf rRDbiTk+V6dfSx/jS9B84mJWRzXkXGoo37sUw2Aiz0Q/s7zWIRbKEL+hL2SBlWvb uG/+RkPsBjc/aWJOtp6VFYwOgwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJd+UyG2 iiYdshAFzwaRTlTwHPjvMB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI3MDYvMDRENDU3QzIzMzA2MTFFQkEyODJEMzBBQzRGOUFFMDIvMzVENDM2M0Uz MzA3MTFFQjlEM0FBNjBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8fYMA0GCSqGSIb3DQEBCwUAA4IBAQCRBaXU/WfGP7A8f0v6uBLc ZJfB2Ki3fRKlTATO3J+T+EJn6LDgmm/Inx4LjpjQC/NY5vP3KfqlgAxAVkMhOwnn qt0khe1HzY47K+Z3Hj3At19Pb4LTlgC2GBzkeVqfXRlYmyYmIvd+Hg98T7AJWDMN ziYxMY7Pl9BdwosXac6lVhhZdiWcQuy91Bfrt5xUpPV0TigsuRzhvl8aF9RAXhDL GUX5/hY9at+QYud8p1JooXoDMXlCvJOz8nShBFylPJPLpdt/vzKdEQD+no3l4B/r UeIte+xitLlTb+d1Al8AGpBE2xF0fceA+u4gq0Wu7qp8jn5puhnK95LmQs1bNbwN -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:59 2026 by rpki-client