$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa File: C908B72A696F11EFA4DA475FC4F9AE02.roa (raw, json) Hash identifier: oQeIjJKF4m+yoz5ARZ8Odn0EX0eZ3fwE10IEl/U1Ga4= Subject key identifier: A6:AB:FE:BA:8A:E6:4F:91:9F:AE:07:C1:01:F0:B0:48:CC:47:93:11 Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Certificate serial: 0541 Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:58:03 +0000 ROA not before: Mon 03 Mar 2025 01:53:58 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132834 IP address blocks: 103.135.84.0/22 maxlen: 24 103.248.188.0/24 maxlen: 24 180.94.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3307, serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Validity Not Before: Mar 3 01:53:58 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a40dab-c78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:3b:96:da:d7:53:b4:32:1a:44:d4:9b:ed: 6f:a7:31:9c:96:af:7b:7c:af:e8:19:3a:b4:dd:f9: 8d:8a:84:a8:3b:1f:69:ab:92:2c:f7:78:38:32:59: 5e:1e:d1:e4:7a:f4:23:0a:a0:f6:a2:c0:0b:1d:f6: 7b:ce:ba:cd:75:56:0d:1e:79:1a:88:4a:0e:d2:95: 9a:9e:93:13:59:0f:6b:c1:82:62:6d:95:2c:e4:7f: e7:0c:e5:17:c7:2b:9b:0c:b7:51:7c:f9:9f:bd:03: 8d:dc:0c:7f:74:4a:3b:d0:7f:d6:f7:9c:6e:b1:20: 9d:38:21:5d:5e:de:d7:b2:86:f0:b7:28:b1:69:fe: e2:a3:af:b4:d6:3c:34:1c:68:e9:82:64:32:e0:5e: f4:e9:fb:5a:fe:99:f9:2f:5c:58:79:0f:d1:46:65: 49:f3:59:d0:ed:02:4f:9a:69:a3:e8:94:c3:1f:34: e2:0d:bc:1c:39:d9:0c:89:e7:1a:57:4e:37:e5:52: 2f:37:b0:a8:be:dd:98:e0:9a:5d:ea:b0:5b:3b:a1: c5:be:ba:ec:8c:92:7f:38:35:30:f8:d4:a9:e8:b8: df:11:1d:6a:50:1d:c5:8a:b4:ec:fc:d9:67:63:a1: 16:fe:d6:51:fa:cb:67:c8:2a:47:e9:9d:c2:12:e9: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AB:FE:BA:8A:E6:4F:91:9F:AE:07:C1:01:F0:B0:48:CC:47:93:11 X509v3 Authority Key Identifier: keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.84.0/22 103.248.188.0/24 180.94.238.0/23 Signature Algorithm: sha256WithRSAEncryption 74:df:0c:dd:ea:33:c9:d1:85:e7:94:7c:6c:88:0a:db:80:d3: 2e:b7:eb:f9:91:f7:91:5d:fa:72:2d:22:98:1b:0d:79:44:94: bf:7b:47:a2:02:5a:f0:7e:99:a1:04:0e:e9:95:60:79:81:85: 41:f8:3f:40:a7:9c:58:6e:8c:49:15:96:3c:1b:99:78:ed:c1: 0c:0d:eb:0e:9b:7f:14:44:ea:d7:59:87:0a:18:33:e3:35:fb: 9d:27:cb:92:24:04:78:1c:cb:1a:c9:01:73:b8:5c:57:38:9f: dc:ad:3e:ed:9f:4f:10:c9:9c:7a:53:ec:81:44:dd:f0:4f:49: 78:79:cb:8a:2d:ea:1b:70:ff:ba:40:03:bc:7f:fd:41:6a:3a: fb:1c:69:e2:26:37:d9:39:26:7a:30:42:91:61:7d:3e:f4:42: 3f:55:e1:9b:7c:cd:38:5a:3a:14:84:20:dd:c9:e9:3c:38:a9: d3:9d:6a:72:bf:e6:9f:8f:f3:39:a6:2b:68:a4:1a:cc:89:43: f8:1b:08:34:9b:bc:9f:96:62:4e:45:2b:06:40:d5:82:35:28: df:bb:6d:5e:75:b0:03:5b:be:37:65:3c:09:98:4f:83:16:02: 12:fa:13:be:ed:58:b7:3e:45:1b:13:9d:83:90:3e:46:29:4a: 1e:f9:e3:17 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4 ODFDMTk0M0QwHhcNMjUwMzAzMDE1MzU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGRhYi1jNzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ts7ltrXU7QyGkTUm+1vpzGclq97fK/oGTq03fmNioSoOx9pq5Is93g4Mlle HtHkevQjCqD2osALHfZ7zrrNdVYNHnkaiEoO0pWanpMTWQ9rwYJibZUs5H/nDOUX xyubDLdRfPmfvQON3Ax/dEo70H/W95xusSCdOCFdXt7Xsobwtyixaf7io6+01jw0 HGjpgmQy4F706fta/pn5L1xYeQ/RRmVJ81nQ7QJPmmmj6JTDHzTiDbwcOdkMieca V0435VIvN7Covt2Y4Jpd6rBbO6HFvrrsjJJ/ODUw+NSp6LjfER1qUB3FirTs/Nln Y6EW/tZR+stnyCpH6Z3CEunuFwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKar/rqK 5k+Rn64HwQHwsEjMR5MRMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMzMDcvMzQyRDgzMjg0MkNDMTFFQzhGMTMzMjBEQzRGOUFFMDIvQzkwOEI3MkE2 OTZGMTFFRkE0REE0NzVGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ4dUAwQAZ/i8AwQBtF7uMA0GCSqGSIb3DQEBCwUAA4IBAQB03wzd 6jPJ0YXnlHxsiArbgNMut+v5kfeRXfpyLSKYGw15RJS/e0eiAlrwfpmhBA7plWB5 gYVB+D9Ap5xYboxJFZY8G5l47cEMDesOm38UROrXWYcKGDPjNfudJ8uSJAR4HMsa yQFzuFxXOJ/crT7tn08QyZx6U+yBRN3wT0l4ecuKLeobcP+6QAO8f/1Bajr7HGni JjfZOSZ6MEKRYX0+9EI/VeGbfM04WjoUhCDdyek8OKnTnWpyv+afj/M5pitopBrM iUP4Gwg0m7yflmJORSsGQNWCNSjfu21edbADW743ZTwJmE+DFgIS+hO+7Vi3PkUb E52DkD5GKUoe+eMX -----END CERTIFICATE-----Generated at Mon Mar 2 12:38:26 2026 by rpki-client