$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa File: 35D9F1BE8A7C11E79774186BC4F9AE02.roa (raw, json) Hash identifier: F0WJms8XK6BlLcq72nRtfb0wbpatPMGsbZK+wFqdSZk= Subject key identifier: 44:19:CA:35:00:AC:9F:46:C8:43:64:E5:56:39:82:58:66:B5:3C:E1 Certificate issuer: /CN=A91DB0C1/serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Certificate serial: 197A Authority key identifier: C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:30:58 +0000 ROA not before: Sat 06 Sep 2025 16:55:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 136937 IP address blocks: 103.99.128.0/22 maxlen: 24 2401:aec0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6522 (0x197a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C1, serialNumber=C1080E661B0DFA620EB09AAB2DEAD6034B828EBC Validity Not Before: Sep 6 16:55:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a42372-0ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:33:00:63:cc:90:26:9e:e3:56:d2:09:d8:bc: d9:49:90:89:0e:58:1f:75:e4:95:a6:a2:d2:ef:22: e1:ec:7d:fb:a6:9a:fd:35:21:f8:c3:db:3f:93:e6: 9d:97:4a:22:22:70:7c:63:e1:2a:62:59:f1:3e:8a: 3b:16:dd:5c:11:9a:44:36:79:96:1f:c9:58:35:61: 05:22:86:10:73:80:17:52:47:89:44:f8:9d:68:4c: 9b:e7:41:9e:c9:b9:37:56:5c:c6:fc:ab:19:1c:35: b7:9b:3b:3d:93:3c:01:50:75:df:76:4f:d5:70:e7: b4:8b:74:3c:db:f7:7f:63:81:ba:f6:4c:1f:cd:1c: 3e:10:78:42:d6:b1:d2:6d:59:8f:33:82:7b:68:b2: 57:51:d6:9a:36:3b:cb:67:2f:8c:0b:78:39:8d:b9: 9e:d7:24:ad:05:0f:3f:cd:02:d5:7a:c9:34:6a:a5: 51:7a:6e:cc:28:f1:f3:3d:f3:ca:73:d9:a5:fe:b0: 77:c8:5e:2a:57:36:eb:1e:26:0d:31:74:09:0e:f1: d4:c5:42:3c:f3:7e:30:aa:96:d9:ac:c6:49:03:1b: 9e:68:2e:55:11:32:99:4e:ca:21:b8:c0:91:31:4e: 9f:03:18:e0:7f:b7:94:38:70:6a:56:15:ad:ca:8d: a9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:19:CA:35:00:AC:9F:46:C8:43:64:E5:56:39:82:58:66:B5:3C:E1 X509v3 Authority Key Identifier: keyid:C1:08:0E:66:1B:0D:FA:62:0E:B0:9A:AB:2D:EA:D6:03:4B:82:8E:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/wQgOZhsN-mIOsJqrLerWA0uCjrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wQgOZhsN-mIOsJqrLerWA0uCjrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C1/802C24328A7A11E799E9F764C4F9AE02/35D9F1BE8A7C11E79774186BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.128.0/22 IPv6: 2401:aec0::/32 Signature Algorithm: sha256WithRSAEncryption 1d:7e:5b:67:fe:10:6c:96:00:a7:18:76:f2:75:3a:cb:85:82: 18:d0:a0:ae:a9:b2:24:f8:19:27:49:e6:67:dd:51:0c:d4:98: 8d:61:22:1e:22:14:b2:68:e6:df:98:8c:8b:45:96:53:23:6f: f3:b9:a3:33:b9:d3:f6:6c:b1:49:25:2f:b0:d6:77:7e:c5:06: 71:92:13:21:a5:b7:07:ae:e5:f3:16:a5:ca:f8:34:bc:23:aa: e1:54:3a:48:6d:77:53:0f:70:c8:48:3d:c5:c9:58:a0:2d:d1: dd:f2:6c:51:da:61:f5:bb:46:f7:f2:c4:ab:93:ee:8a:1f:28: ab:7e:0d:a6:24:9d:a1:79:f1:cd:68:74:16:61:1b:f9:da:87: 76:ee:80:66:d1:8b:d0:82:29:a8:4f:7f:1c:94:68:0a:56:11: 22:44:c6:59:74:1c:3c:1c:40:29:0b:13:8c:4a:1c:7d:0f:8a: 5d:c5:15:e4:40:9e:12:12:b4:f6:52:c1:43:81:c3:e1:ab:af: 88:01:a3:84:da:98:55:52:84:16:ef:dc:ca:99:c6:52:3d:3f: 6b:02:99:ce:17:8e:cd:f8:9a:f4:7b:fa:35:3d:35:69:02:3c: cd:ea:ba:1a:7b:ab:3e:5f:4e:b0:0a:6d:95:14:5e:eb:b4:10: 21:63:2e:ed -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzExMTAvBgNVBAUTKEMxMDgwRTY2MUIwREZBNjIwRUIwOUFBQjJERUFENjAz NEI4MjhFQkMwHhcNMjUwOTA2MTY1NTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM3Mi0wYWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5DMAY8yQJp7jVtIJ2LzZSZCJDlgfdeSVpqLS7yLh7H37ppr9NSH4w9s/k+ad l0oiInB8Y+EqYlnxPoo7Ft1cEZpENnmWH8lYNWEFIoYQc4AXUkeJRPidaEyb50Ge ybk3VlzG/KsZHDW3mzs9kzwBUHXfdk/VcOe0i3Q82/d/Y4G69kwfzRw+EHhC1rHS bVmPM4J7aLJXUdaaNjvLZy+MC3g5jbme1yStBQ8/zQLVesk0aqVRem7MKPHzPfPK c9ml/rB3yF4qVzbrHiYNMXQJDvHUxUI8834wqpbZrMZJAxueaC5VETKZTsohuMCR MU6fAxjgf7eUOHBqVhWtyo2p3QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEQZyjUA rJ9GyENk5VY5glhmtTzhMB8GA1UdIwQYMBaAFMEIDmYbDfpiDrCaqy3q1gNLgo68 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMS84MDJDMjQzMjhB N0ExMUU3OTlFOUY3NjRDNEY5QUUwMi93UWdPWmhzTi1tSU9zSnFyTGVyV0EwdUNq cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dRZ09aaHNOLW1JT3NKcXJMZXJXQTB1Q2pydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REIwQzEvODAyQzI0MzI4QTdBMTFFNzk5RTlGNzY0QzRGOUFFMDIvMzVEOUYxQkU4 QTdDMTFFNzk3NzQxODZCQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2OAMA0EAgACMAcDBQAkAa7AMA0GCSqGSIb3DQEBCwUAA4IBAQAd fltn/hBslgCnGHbydTrLhYIY0KCuqbIk+BknSeZn3VEM1JiNYSIeIhSyaObfmIyL RZZTI2/zuaMzudP2bLFJJS+w1nd+xQZxkhMhpbcHruXzFqXK+DS8I6rhVDpIbXdT D3DISD3FyVigLdHd8mxR2mH1u0b38sSrk+6KHyirfg2mJJ2hefHNaHQWYRv52od2 7oBm0YvQgimoT38clGgKVhEiRMZZdBw8HEApCxOMShx9D4pdxRXkQJ4SErT2UsFD gcPhq6+IAaOE2phVUoQW79zKmcZSPT9rApnOF47N+Jr0e/o1PTVpAjzN6roae6s+ X06wCm2VFF7rtBAhYy7t -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:17 2026 by rpki-client