$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/4ECF0A4C765C11E9A01A6E34C4F9AE02.roa File: 4ECF0A4C765C11E9A01A6E34C4F9AE02.roa (raw, json) Hash identifier: xbMUHktmtqoO4YD2xQk5VmAmqFtIHFV5OiNCpWlNa0Y= Subject key identifier: 0D:B2:B1:33:C7:F3:AF:13:07:8E:FF:23:B2:02:15:91:25:90:08:7E Certificate issuer: /CN=A91D5C25/serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Certificate serial: 0FB3 Authority key identifier: CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/4ECF0A4C765C11E9A01A6E34C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:07:41 +0000 ROA not before: Fri 28 Mar 2025 17:58:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 59340 IP address blocks: 103.87.112.0/22 maxlen: 22 103.87.112.0/23 maxlen: 23 103.87.112.0/24 maxlen: 24 103.87.113.0/24 maxlen: 24 103.87.114.0/23 maxlen: 23 103.87.114.0/24 maxlen: 24 103.87.115.0/24 maxlen: 24 116.204.220.0/22 maxlen: 22 116.204.220.0/23 maxlen: 23 116.204.220.0/24 maxlen: 24 116.204.221.0/24 maxlen: 24 116.204.222.0/23 maxlen: 23 116.204.222.0/24 maxlen: 24 116.204.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4019 (0xfb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5C25, serialNumber=CBF2A9DA88AC08F8D5106DECBD72D6FA09C818E9 Validity Not Before: Mar 28 17:58:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a4644d-24f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:ad:e0:6a:95:3e:f9:57:6d:eb:21:14:7a: 99:4b:54:d5:9f:e1:5a:fd:77:84:a3:8f:27:c4:fd: 95:29:13:81:1a:ce:ba:08:7f:96:78:fb:fd:71:00: c9:8c:08:68:42:ed:ba:8a:b7:cf:fd:cd:cf:e2:4c: e0:8c:2a:da:16:86:db:6d:45:0f:50:f6:b7:db:d4: 0f:04:83:59:05:25:5a:43:a2:e0:ab:47:5f:ff:e9: 0d:51:f6:d7:70:d8:be:d4:75:92:d3:24:f0:dd:a8: 32:e6:12:6b:21:cf:c9:22:36:96:4b:41:dc:41:21: d3:c8:26:f1:9b:c2:17:97:ea:f4:76:16:be:d5:f8: 39:b6:99:7b:f3:89:ed:4b:6e:57:db:b2:c7:0c:40: 24:98:e7:53:11:1b:34:66:18:67:62:34:96:ee:8b: 5b:6c:f4:13:4e:a7:19:db:b7:99:42:7b:e9:b4:8b: 05:52:b9:81:b9:e4:15:b8:72:d6:9d:fe:3b:7b:4e: 8a:11:38:e6:46:3d:33:87:a8:09:ea:f7:44:d6:17: f1:43:87:73:c3:c2:f2:b3:47:d2:f9:9b:6d:47:7b: 7a:7f:e2:76:2e:63:e3:46:8f:9b:5f:c0:48:89:2e: 68:44:ae:cc:c3:a7:cb:d5:36:be:f3:cb:e1:d8:60: 43:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B2:B1:33:C7:F3:AF:13:07:8E:FF:23:B2:02:15:91:25:90:08:7E X509v3 Authority Key Identifier: keyid:CB:F2:A9:DA:88:AC:08:F8:D5:10:6D:EC:BD:72:D6:FA:09:C8:18:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/y_Kp2oisCPjVEG3svXLW-gnIGOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y_Kp2oisCPjVEG3svXLW-gnIGOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5C25/687A10A6765A11E99D01E42EC4F9AE02/4ECF0A4C765C11E9A01A6E34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.87.112.0/22 116.204.220.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:61:4d:4d:6a:7f:4a:bd:84:94:df:7f:8c:06:e2:5d:a5:af: e5:2a:5d:ac:9e:d2:71:3c:39:27:72:25:96:64:aa:63:cd:ec: dd:b9:75:90:d0:49:e5:a6:63:bc:1a:ca:16:02:15:97:32:cc: de:e7:e1:bf:36:cf:0a:d7:ca:5e:26:6c:53:25:a6:40:2e:01: cd:3f:20:ad:3a:91:cf:7a:72:82:87:ea:fe:29:2a:08:e8:bf: b0:f0:22:35:da:29:55:f1:6f:35:54:ba:b5:5f:49:8e:07:0c: a5:1c:10:4e:0e:6e:e3:2e:f7:a7:d9:a2:ec:81:fb:c5:4c:12: b1:4a:a3:a3:a2:3c:9d:18:91:5b:73:23:6a:61:e6:e1:ca:58: f8:41:76:be:58:c1:bf:3f:08:62:d1:e6:db:c2:09:99:f7:23: 6f:6c:71:aa:52:46:ab:4b:d4:32:8a:b8:0b:d8:11:b4:22:23: 40:da:87:c7:32:08:6d:50:4d:23:8e:e6:f3:ef:1e:4b:c0:76: f8:f3:9c:ad:34:5c:87:a8:c6:7e:e4:95:13:d7:0a:f4:cd:b4: a5:fa:5f:26:9f:94:be:f9:fb:20:c0:64:77:66:77:15:b2:59: 17:45:76:c3:9a:e2:c0:1c:fa:2c:4c:9c:95:ba:cb:03:d3:a7: 8c:16:ef:0b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICD7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVDMjUxMTAvBgNVBAUTKENCRjJBOURBODhBQzA4RjhENTEwNkRFQ0JENzJENkZB MDlDODE4RTkwHhcNMjUwMzI4MTc1ODM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjQ0ZC0yNGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDGt4GqVPvlXbeshFHqZS1TVn+Fa/XeEo48nxP2VKROBGs66CH+WePv9cQDJ jAhoQu26irfP/c3P4kzgjCraFobbbUUPUPa329QPBINZBSVaQ6Lgq0df/+kNUfbX cNi+1HWS0yTw3agy5hJrIc/JIjaWS0HcQSHTyCbxm8IXl+r0dha+1fg5tpl784nt S25X27LHDEAkmOdTERs0ZhhnYjSW7otbbPQTTqcZ27eZQnvptIsFUrmBueQVuHLW nf47e06KETjmRj0zh6gJ6vdE1hfxQ4dzw8Lys0fS+ZttR3t6f+J2LmPjRo+bX8BI iS5oRK7Mw6fL1Ta+88vh2GBDYQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFA2ysTPH 868TB47/I7ICFZElkAh+MB8GA1UdIwQYMBaAFMvyqdqIrAj41RBt7L1y1voJyBjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUMyNS82ODdBMTBBNjc2 NUExMUU5OUQwMUU0MkVDNEY5QUUwMi95X0twMm9pc0NQalZFRzNzdlhMVy1nbklH T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lfS3Ayb2lzQ1BqVkVHM3N2WExXLWduSUdPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVDMjUvNjg3QTEwQTY3NjVBMTFFOTlEMDFFNDJFQzRGOUFFMDIvNEVDRjBBNEM3 NjVDMTFFOUEwMUE2RTM0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1dwAwQCdMzcMA0GCSqGSIb3DQEBCwUAA4IBAQB9YU1Nan9KvYSU 33+MBuJdpa/lKl2sntJxPDknciWWZKpjzezduXWQ0EnlpmO8GsoWAhWXMsze5+G/ Ns8K18peJmxTJaZALgHNPyCtOpHPenKCh+r+KSoI6L+w8CI12ilV8W81VLq1X0mO BwylHBBODm7jLven2aLsgfvFTBKxSqOjojydGJFbcyNqYebhylj4QXa+WMG/Pwhi 0ebbwgmZ9yNvbHGqUkarS9QyirgL2BG0IiNA2ofHMghtUE0jjubz7x5LwHb485yt NFyHqMZ+5JUT1wr0zbSl+l8mn5S++fsgwGR3ZncVslkXRXbDmuLAHPosTJyVussD 06eMFu8L -----END CERTIFICATE-----Generated at Mon Mar 2 07:13:56 2026 by rpki-client