$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/AA5ADA7C579511ECA9BDE14AC4F9AE02.roa File: AA5ADA7C579511ECA9BDE14AC4F9AE02.roa (raw, json) Hash identifier: CUi6qSkk6AvtDzoENCKzbdOy/ZIbS3MaboxSVGLnEEM= Subject key identifier: 56:F3:19:7A:AE:25:8C:AD:05:3E:ED:28:4F:92:F0:45:A1:4A:99:8A Certificate issuer: /CN=A91D5BA2/serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D Certificate serial: 04DB Authority key identifier: 6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/AA5ADA7C579511ECA9BDE14AC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:53:14 +0000 ROA not before: Tue 11 Mar 2025 00:45:56 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 133951 IP address blocks: 103.49.204.0/24 maxlen: 24 103.93.19.0/24 maxlen: 24 103.112.46.0/24 maxlen: 24 103.114.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:33:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BA2, serialNumber=6CAC2B720885E823824C1967EDFC363EC874768D Validity Not Before: Mar 11 00:45:56 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3fe79-92fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:6f:92:ae:a9:25:b6:72:4a:10:fc:5d:9f: 8b:db:ed:3e:0f:8e:1c:61:3d:76:7f:63:ae:b1:21: 60:47:09:87:bc:44:14:3f:d9:4f:13:84:f5:9a:aa: 27:58:7f:2f:a8:18:33:65:19:59:24:87:33:51:24: f7:40:ae:2c:07:55:79:af:ba:74:c6:2f:b0:ac:ce: 3c:ac:8c:c5:09:82:4f:48:1c:62:6e:52:3f:1f:ae: e4:42:c5:94:29:85:55:03:a6:37:c5:0d:c7:1a:14: c9:14:b4:9b:fa:41:30:af:cc:f0:a1:d5:6d:d4:cd: 1a:cc:a6:12:a7:e1:94:77:dc:56:c4:ef:16:16:15: 39:e8:85:2a:b3:8d:6f:83:6b:a6:50:e7:81:fc:2f: 13:1f:cb:a1:1f:c2:c2:96:4e:6b:f7:41:47:27:ed: 80:13:6d:23:3e:62:60:b9:76:51:8c:1a:16:98:32: 6a:b5:c2:7e:23:50:50:3e:c6:7a:32:48:91:6a:82: 3f:d4:19:31:5b:84:ab:d5:44:66:af:bc:67:30:16: 8a:99:9d:6c:64:44:0c:02:a9:43:6b:fa:18:00:37: fd:ce:6c:ee:51:ee:6e:7a:55:bd:f1:ae:c2:bc:c4: 96:24:8e:6b:76:3f:6e:2a:89:7f:9c:38:34:5d:7d: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F3:19:7A:AE:25:8C:AD:05:3E:ED:28:4F:92:F0:45:A1:4A:99:8A X509v3 Authority Key Identifier: keyid:6C:AC:2B:72:08:85:E8:23:82:4C:19:67:ED:FC:36:3E:C8:74:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/bKwrcgiF6COCTBln7fw2Psh0do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKwrcgiF6COCTBln7fw2Psh0do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BA2/14FEC2EC579311ECBA2FB048C4F9AE02/AA5ADA7C579511ECA9BDE14AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.49.204.0/24 103.93.19.0/24 103.112.46.0/24 103.114.231.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:39:1a:b3:af:67:a2:7a:b2:b6:3e:85:4d:16:ce:9e:d5:24: 73:b2:23:ec:da:f3:1c:0f:76:ca:0c:03:50:9b:77:f7:72:d1: 01:51:59:e1:4d:68:3b:05:5d:71:48:fe:c4:07:ce:d7:5c:b2: bf:9a:d3:d0:23:97:6c:2e:5d:02:26:cd:67:60:7f:96:57:df: 58:08:2e:b1:a8:7f:d3:88:d6:9c:38:2e:e0:99:bb:97:e7:66: 2a:2e:7f:d8:5c:65:aa:c2:55:28:62:cd:94:11:6d:80:a1:29: f2:19:80:3d:53:6c:ea:27:d2:fc:c5:a1:12:13:35:1e:e8:1a: a4:32:93:17:a5:09:ba:97:5d:5e:4d:00:dc:a6:90:13:19:8e: a9:f6:94:3e:ad:5c:3d:22:51:58:6c:1e:4f:61:73:c8:71:4f: 1b:27:5c:f4:ed:dc:d3:4e:60:68:08:97:7f:57:21:07:99:f9: 83:b6:8c:0e:9b:18:cd:3e:8b:07:ce:f8:78:57:87:cd:b3:a6: 95:eb:df:32:bf:53:cd:55:fd:25:fa:cc:a5:b9:06:0a:f7:a0: e1:fa:e3:ab:51:a7:13:bb:a4:2d:d3:5a:41:cf:b0:ec:62:a2: fa:81:d3:06:fe:4e:50:0b:d2:9e:f1:34:51:3a:ab:ed:1c:fb: b9:96:81:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCQTIxMTAvBgNVBAUTKDZDQUMyQjcyMDg4NUU4MjM4MjRDMTk2N0VERkMzNjNF Qzg3NDc2OEQwHhcNMjUwMzExMDA0NTU2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmU3OS05MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWxvkq6pJbZyShD8XZ+L2+0+D44cYT12f2OusSFgRwmHvEQUP9lPE4T1mqon WH8vqBgzZRlZJIczUST3QK4sB1V5r7p0xi+wrM48rIzFCYJPSBxiblI/H67kQsWU KYVVA6Y3xQ3HGhTJFLSb+kEwr8zwodVt1M0azKYSp+GUd9xWxO8WFhU56IUqs41v g2umUOeB/C8TH8uhH8LClk5r90FHJ+2AE20jPmJguXZRjBoWmDJqtcJ+I1BQPsZ6 MkiRaoI/1BkxW4Sr1URmr7xnMBaKmZ1sZEQMAqlDa/oYADf9zmzuUe5uelW98a7C vMSWJI5rdj9uKol/nDg0XX3MVQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFFbzGXqu JYytBT7tKE+S8EWhSpmKMB8GA1UdIwQYMBaAFGysK3IIhegjgkwZZ+38Nj7IdHaN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJBMi8xNEZFQzJFQzU3 OTMxMUVDQkEyRkIwNDhDNEY5QUUwMi9iS3dyY2dpRjZDT0NUQmxuN2Z3MlBzaDBk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLd3JjZ2lGNkNPQ1RCbG43ZncyUHNoMGRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVCQTIvMTRGRUMyRUM1NzkzMTFFQ0JBMkZCMDQ4QzRGOUFFMDIvQUE1QURBN0M1 Nzk1MTFFQ0E5QkRFMTRBQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZzHMAwQAZ10TAwQAZ3AuAwQAZ3LnMA0GCSqGSIb3DQEBCwUAA4IB AQB/ORqzr2eierK2PoVNFs6e1SRzsiPs2vMcD3bKDANQm3f3ctEBUVnhTWg7BV1x SP7EB87XXLK/mtPQI5dsLl0CJs1nYH+WV99YCC6xqH/TiNacOC7gmbuX52YqLn/Y XGWqwlUoYs2UEW2AoSnyGYA9U2zqJ9L8xaESEzUe6BqkMpMXpQm6l11eTQDcppAT GY6p9pQ+rVw9IlFYbB5PYXPIcU8bJ1z07dzTTmBoCJd/VyEHmfmDtowOmxjNPosH zvh4V4fNs6aV698yv1PNVf0l+syluQYK96Dh+uOrUacTu6Qt01pBz7DsYqL6gdMG /k5QC9Ke8TRROqvtHPu5loGj -----END CERTIFICATE-----Generated at Mon Mar 2 08:50:10 2026 by rpki-client