$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/33284BD019C311EBB9C1D063C4F9AE02.roa File: 33284BD019C311EBB9C1D063C4F9AE02.roa (raw, json) Hash identifier: S+/631V5EbLVHMkrVq986tOSiufFr1O8QILyGk6Ead4= Subject key identifier: F3:8D:29:CC:7D:1D:24:CE:F0:F0:C0:EC:64:1C:0D:DA:A4:D3:0A:D9 Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Certificate serial: 0836 Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/33284BD019C311EBB9C1D063C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:29:27 +0000 ROA not before: Fri 20 Feb 2026 21:18:18 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133860 IP address blocks: 103.225.112.0/23 maxlen: 23 103.225.112.0/24 maxlen: 24 103.225.113.0/24 maxlen: 24 103.225.114.0/24 maxlen: 24 103.225.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2102 (0x836) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Validity Not Before: Feb 20 21:18:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a57496-dad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:1d:e0:30:46:dd:25:85:d9:62:61:8e:2b: dd:5c:b6:69:11:ea:43:ad:5c:b7:a3:a3:0b:c4:f6: 0b:5d:cf:b7:ae:f3:bd:56:9e:c7:8c:6f:94:69:02: 5a:15:41:bd:a4:ba:68:b8:0f:ce:67:43:5d:cf:0f: 1c:ca:c1:60:4a:25:be:83:4d:b2:db:31:7c:03:c6: 0f:5a:76:0b:ad:b8:3c:2e:44:80:b4:13:27:f4:96: 24:96:65:d0:3c:b4:ca:84:54:2a:c7:9e:e1:81:26: db:2f:e6:ad:a2:36:a5:2b:90:6d:8c:c0:29:9c:70: b9:44:02:e2:68:c3:9a:b0:26:b0:46:fe:56:e7:6e: 7d:7c:31:4d:74:67:65:0e:6e:80:87:02:ff:f7:15: 90:e5:f3:bf:40:2b:7b:8b:3b:e8:c1:93:c9:90:58: ba:fb:a1:a8:b7:85:db:dc:36:5f:9c:a0:79:43:2b: 76:2c:87:0f:3f:ac:11:45:51:13:a1:84:7f:9d:dc: d0:b5:6a:d6:ac:62:26:5b:46:21:5d:af:29:7e:40: 69:b2:6d:77:07:05:23:e1:9f:75:d3:1b:eb:30:c3: b0:67:c8:06:07:92:a9:1e:62:99:62:39:5c:39:d1: a7:7b:f6:99:f3:c4:f8:0c:ef:87:5d:0f:7f:e9:88: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8D:29:CC:7D:1D:24:CE:F0:F0:C0:EC:64:1C:0D:DA:A4:D3:0A:D9 X509v3 Authority Key Identifier: keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/33284BD019C311EBB9C1D063C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.225.112.0/22 Signature Algorithm: sha256WithRSAEncryption c0:75:cd:5d:f4:3a:ae:bf:97:4a:5c:c3:d6:84:16:50:90:68: 9c:48:e0:fc:50:68:a7:81:11:fc:e2:7d:60:4a:54:a3:d6:76: 8b:43:2f:c8:50:f9:70:20:53:d5:7b:06:fc:5a:d1:ef:1c:28: 09:3c:4a:cb:2b:23:41:a7:b0:52:08:5a:02:4d:58:10:f9:b1: 6b:ef:94:fe:63:af:2d:d1:46:87:22:6d:0c:af:bd:1a:ed:19: 31:16:38:3c:a9:5f:24:2d:15:5b:4d:6d:50:1a:06:33:89:63: a0:b0:64:96:fe:bf:fc:26:33:89:bb:1c:4f:af:b3:75:30:b2: 54:34:d4:53:2a:ae:be:1a:fd:ae:f2:58:a5:59:56:5d:c4:87: 96:16:65:ac:30:9a:9e:6e:68:c7:79:1c:21:d0:08:4b:71:76: 43:27:cb:a1:b4:2a:9f:9e:d6:89:5b:f8:c0:7c:c4:62:3b:66: dc:6d:09:bd:27:ad:9d:cd:24:1b:31:71:ea:dc:a8:ec:cb:bd: 75:73:bb:3d:2b:7a:52:55:bb:89:30:5f:4d:f2:8a:7d:79:38: 19:70:cf:b9:b6:8a:d1:c6:62:15:12:56:00:11:ef:94:81:58: 3c:7f:29:81:c5:70:0d:b8:7f:bb:da:03:8f:62:82:57:42:4d: 51:7b:96:cd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3 MzU5REQ3NDAwHhcNMjYwMjIwMjExODE4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzQ5Ni1kYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlJ0d4DBG3SWF2WJhjivdXLZpEepDrVy3o6MLxPYLXc+3rvO9Vp7HjG+UaQJa FUG9pLpouA/OZ0Ndzw8cysFgSiW+g02y2zF8A8YPWnYLrbg8LkSAtBMn9JYklmXQ PLTKhFQqx57hgSbbL+atojalK5BtjMApnHC5RALiaMOasCawRv5W5259fDFNdGdl Dm6AhwL/9xWQ5fO/QCt7izvowZPJkFi6+6Got4Xb3DZfnKB5Qyt2LIcPP6wRRVET oYR/ndzQtWrWrGImW0YhXa8pfkBpsm13BwUj4Z910xvrMMOwZ8gGB5KpHmKZYjlc OdGne/aZ88T4DO+HXQ9/6Yh7pQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPONKcx9 HSTO8PDA7GQcDdqk0wrZMB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4 MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI3NzkvODkwMjQ5OTQxODM3MTFFQjgwNjRCMDdBQzRGOUFFMDIvMzMyODRCRDAx OUMzMTFFQkI5QzFEMDYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ+FwMA0GCSqGSIb3DQEBCwUAA4IBAQDAdc1d9Dquv5dKXMPWhBZQ kGicSOD8UGingRH84n1gSlSj1naLQy/IUPlwIFPVewb8WtHvHCgJPErLKyNBp7BS CFoCTVgQ+bFr75T+Y68t0UaHIm0Mr70a7RkxFjg8qV8kLRVbTW1QGgYziWOgsGSW /r/8JjOJuxxPr7N1MLJUNNRTKq6+Gv2u8lilWVZdxIeWFmWsMJqebmjHeRwh0AhL cXZDJ8uhtCqfntaJW/jAfMRiO2bcbQm9J62dzSQbMXHq3Kjsy711c7s9K3pSVbuJ MF9N8op9eTgZcM+5torRxmIVElYAEe+UgVg8fymBxXANuH+72gOPYoJXQk1Re5bN -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:46 2026 by rpki-client