$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa File: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (raw, json) Hash identifier: fQgQ0VLTGkoR20JE5CrFqxEVCmsrE7jBwatjIG70kMM= Subject key identifier: 59:64:C2:87:EA:C2:48:7A:B7:4D:F3:7F:9A:AE:73:C3:31:86:6D:7A Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 05C9 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:50:42 +0000 ROA not before: Sat 31 May 2025 00:25:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 55482 IP address blocks: 103.153.86.0/24 maxlen: 24 103.153.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1481 (0x5c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: May 31 00:25:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3fde2-d585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:49:23:7f:64:20:36:2d:6f:63:84:98:fb: 35:f5:c4:64:8f:c2:86:20:eb:69:90:86:98:f3:c1: bb:56:cd:c5:12:f4:1b:3c:2f:64:8f:9b:4c:bf:83: dc:f4:35:6a:89:a3:97:6f:f2:e3:d6:e5:49:da:3f: 96:07:d5:7e:2f:44:87:2b:d8:5d:a8:b8:e9:ee:f3: 0d:61:8d:84:5f:4b:c6:27:d9:2d:60:62:32:dd:1f: 69:b7:30:21:cf:22:91:b0:33:ec:c4:0d:89:93:a4: dc:66:fb:0f:cf:6e:26:2b:ab:d8:f1:c2:fe:fc:e6: 84:af:92:43:d0:32:ff:c4:68:4b:ff:f8:5a:e6:11: 21:3a:44:65:2d:9e:49:0c:23:e8:29:0c:f6:ca:4f: 96:e8:84:ff:2e:32:27:46:d7:25:8b:c9:64:c5:c0: de:3c:b8:a2:7c:74:e9:9c:03:dd:bd:b9:35:51:26: 60:c6:ca:84:a3:e9:c1:f1:fd:1f:a4:38:57:19:17: 1f:f0:97:e8:dd:81:90:30:fe:98:10:de:4e:52:36: 36:de:75:44:3f:b0:e8:d8:c7:41:61:a4:d7:1f:08: 67:9d:16:92:af:30:8f:21:27:d3:fd:98:11:f4:6d: 69:bd:42:66:67:09:44:a6:c0:12:c5:37:e7:5a:9c: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:64:C2:87:EA:C2:48:7A:B7:4D:F3:7F:9A:AE:73:C3:31:86:6D:7A X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.153.86.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:07:5d:9a:24:d1:07:4c:65:bc:29:35:73:91:32:91:22:02: b4:85:60:1a:14:36:f0:a7:23:86:8e:ba:75:41:37:eb:c6:49: 54:64:22:9a:2c:c2:5c:26:a4:68:57:54:f2:ff:d0:df:fd:eb: a2:1f:62:bb:13:00:a8:e5:b6:6e:28:5c:03:32:ce:fd:44:21: d5:34:79:42:78:53:04:eb:a4:f4:1e:d5:9d:82:13:1d:54:b0: 49:b3:2e:27:7c:de:da:4b:43:3a:77:c5:fa:28:00:c7:58:34: d6:93:e6:62:b9:c3:9e:8e:a2:a1:37:87:bf:49:ef:be:f3:b2: 19:be:36:10:e0:32:2c:15:3a:bc:a3:bb:a6:36:19:11:eb:81: a6:6f:8b:77:71:4a:fc:84:1f:b0:24:09:d3:32:81:6e:6f:37: cd:69:2d:dc:97:5f:df:e5:66:61:60:90:97:43:ed:e9:86:2b: b6:a4:46:df:ad:7f:2b:5f:81:8f:fd:66:e3:ec:94:e7:03:65: 00:c3:c3:f3:d0:76:9c:c8:a1:56:b6:f5:46:c0:ce:e2:3f:f5: f0:34:9f:64:d8:ac:2b:cd:97:c2:75:6f:e8:55:f8:a1:1e:35: 89:f2:96:e7:7d:6c:88:3c:d1:c0:58:30:a7:52:b5:26:37:73: 34:75:75:33 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjUwNTMxMDAyNTQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmRlMi1kNTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpRJI39kIDYtb2OEmPs19cRkj8KGIOtpkIaY88G7Vs3FEvQbPC9kj5tMv4Pc 9DVqiaOXb/Lj1uVJ2j+WB9V+L0SHK9hdqLjp7vMNYY2EX0vGJ9ktYGIy3R9ptzAh zyKRsDPsxA2Jk6TcZvsPz24mK6vY8cL+/OaEr5JD0DL/xGhL//ha5hEhOkRlLZ5J DCPoKQz2yk+W6IT/LjInRtcli8lkxcDePLiifHTpnAPdvbk1USZgxsqEo+nB8f0f pDhXGRcf8Jfo3YGQMP6YEN5OUjY23nVEP7Do2MdBYaTXHwhnnRaSrzCPISfT/ZgR 9G1pvUJmZwlEpsASxTfnWpxlVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFlkwofq wkh6t03zf5quc8Mxhm16MB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ4MDMvODBGMDM0QkVGOUUxMTFFQkEzMkNFMjFCQzRGOUFFMDIvMkIxQjhDOTJG OUU1MTFFQkJCOUI1RDIyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5lWMA0GCSqGSIb3DQEBCwUAA4IBAQCLB12aJNEHTGW8KTVzkTKR IgK0hWAaFDbwpyOGjrp1QTfrxklUZCKaLMJcJqRoV1Ty/9Df/euiH2K7EwCo5bZu KFwDMs79RCHVNHlCeFME66T0HtWdghMdVLBJsy4nfN7aS0M6d8X6KADHWDTWk+Zi ucOejqKhN4e/Se++87IZvjYQ4DIsFTq8o7umNhkR64Gmb4t3cUr8hB+wJAnTMoFu bzfNaS3cl1/f5WZhYJCXQ+3phiu2pEbfrX8rX4GP/Wbj7JTnA2UAw8Pz0HacyKFW tvVGwM7iP/XwNJ9k2KwrzZfCdW/oVfihHjWJ8pbnfWyIPNHAWDCnUrUmN3M0dXUz -----END CERTIFICATE-----Generated at Mon Mar 2 03:51:00 2026 by rpki-client