$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa File: F3484DBA34CE11EEBBA9D046C4F9AE02.roa (raw, json) Hash identifier: cCwngW+0nv7VgTk47lxbgT3+ex2bp6tm2PDtS8RdU9M= Subject key identifier: 8C:75:D7:EB:F4:60:3A:49:31:48:F1:06:CA:22:3C:C4:FE:F7:6B:A5 Certificate issuer: /CN=A91DF9B9/serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Certificate serial: 01EB Authority key identifier: 42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:21:41 +0000 ROA not before: Fri 05 Dec 2025 08:05:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141766 IP address blocks: 103.152.24.0/24 maxlen: 24 103.152.25.0/24 maxlen: 24 103.163.156.0/24 maxlen: 24 103.184.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF9B9, serialNumber=42CE50E1AC733D5A166B542C3C49309F3656BF22 Validity Not Before: Dec 5 08:05:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a43d65-3f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:2d:1d:31:07:04:1c:c2:40:bc:8c:01:0a: 8d:dd:1d:d5:40:f4:90:8c:44:3b:1f:aa:68:a1:05: 18:4a:51:3a:d3:95:ac:16:fb:68:63:8b:7c:4e:5d: 2b:76:4b:d3:cb:b8:4a:d2:f4:e9:75:d4:65:4d:e1: 89:47:be:8a:ca:28:65:b4:8a:c6:21:5a:c4:0b:90: aa:ab:6d:1d:9d:60:9e:fd:09:e9:ed:75:1a:6e:9f: e9:c2:4a:7e:7a:78:01:fa:f3:5d:2f:33:e1:74:c6: 2b:86:e5:36:86:eb:e9:90:2e:ed:e0:a7:0d:7f:85: b3:d4:5a:03:47:8f:02:91:72:88:ad:57:31:a5:42: 2f:0f:bd:49:6d:dd:35:6b:61:e8:4e:4b:2e:e8:96: 89:06:d0:96:68:c1:cc:2d:58:28:98:1f:76:01:69: 8d:5e:d0:99:77:60:40:46:e8:69:0b:d8:12:8b:c6: 22:d6:6e:25:e3:16:20:04:0a:26:17:b3:d3:ab:1e: 4b:98:b6:fd:4b:7c:25:23:8a:66:31:38:e2:4e:a8: 57:fb:9c:26:5e:c6:d1:0e:5d:4b:4d:47:8e:37:32: db:f3:cf:3c:34:82:21:8c:11:d3:be:ec:69:b5:d3: 76:8a:82:55:71:cc:d2:5d:f5:44:3a:f6:1d:27:36: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:75:D7:EB:F4:60:3A:49:31:48:F1:06:CA:22:3C:C4:FE:F7:6B:A5 X509v3 Authority Key Identifier: keyid:42:CE:50:E1:AC:73:3D:5A:16:6B:54:2C:3C:49:30:9F:36:56:BF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qs5Q4axzPVoWa1QsPEkwnzZWvyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF9B9/951F98EA32D211EE869FDB71C4F9AE02/F3484DBA34CE11EEBBA9D046C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.24.0/23 103.163.156.0/24 103.184.129.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:87:55:b8:43:f8:83:e9:bc:c0:55:51:4e:dd:84:16:ec:44: 1f:55:04:2c:19:fa:fe:a8:d1:98:72:45:9b:c3:bb:ae:2e:94: e1:31:33:4d:f5:0e:0a:85:b6:6a:31:49:6c:9d:d6:91:8c:f8: 89:e6:07:ba:54:1f:98:50:44:ef:bd:76:67:77:e8:63:b3:79: e8:5e:8d:99:f4:62:88:2a:50:a6:0e:3b:a6:42:9c:67:3a:67: 9a:1a:e8:1a:4c:65:22:69:73:f5:50:f4:94:86:68:73:32:af: 8d:31:a7:bf:58:0c:75:b4:d6:f2:7d:1a:9c:29:1a:78:5a:26: f7:a7:f2:e6:12:52:27:77:7b:50:3d:4b:c5:e6:bd:b9:27:b4: 15:63:99:a5:ca:16:b6:53:b2:d5:32:8b:1b:52:3a:17:f0:34: 22:4c:c8:cf:10:4f:c8:c5:60:5a:19:ba:d0:91:2c:48:86:0d: 8b:ec:a5:f5:c3:04:78:72:42:65:d0:f8:9f:9f:d2:9b:ae:dc: b8:f7:07:50:8e:15:ca:c3:1a:ff:ce:78:b5:25:eb:31:6e:5e: 82:a3:bb:2e:40:f9:78:6c:b5:4b:6e:0b:2a:b1:04:1c:0f:30: e8:2e:f4:dc:cc:30:3c:60:fb:c7:8c:0d:89:9d:70:db:28:ad: 30:7c:62:6d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5QjkxMTAvBgNVBAUTKDQyQ0U1MEUxQUM3MzNENUExNjZCNTQyQzNDNDkzMDlG MzY1NkJGMjIwHhcNMjUxMjA1MDgwNTI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2Q2NS0zZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfUtHTEHBBzCQLyMAQqN3R3VQPSQjEQ7H6pooQUYSlE605WsFvtoY4t8Tl0r dkvTy7hK0vTpddRlTeGJR76KyihltIrGIVrEC5Cqq20dnWCe/Qnp7XUabp/pwkp+ engB+vNdLzPhdMYrhuU2huvpkC7t4KcNf4Wz1FoDR48CkXKIrVcxpUIvD71Jbd01 a2HoTksu6JaJBtCWaMHMLVgomB92AWmNXtCZd2BARuhpC9gSi8Yi1m4l4xYgBAom F7PTqx5LmLb9S3wlI4pmMTjiTqhX+5wmXsbRDl1LTUeONzLb8888NIIhjBHTvuxp tdN2ioJVcczSXfVEOvYdJzaSxwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIx11+v0 YDpJMUjxBsoiPMT+92ulMB8GA1UdIwQYMBaAFELOUOGscz1aFmtULDxJMJ82Vr8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjlCOS85NTFGOThFQTMy RDIxMUVFODY5RkRCNzFDNEY5QUUwMi9RczVRNGF4elBWb1dhMVFzUEVrd256Wld2 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzNVE0YXh6UFZvV2ExUXNQRWt3bnpaV3Z5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5QjkvOTUxRjk4RUEzMkQyMTFFRTg2OUZEQjcxQzRGOUFFMDIvRjM0ODREQkEz NENFMTFFRUJCQTlEMDQ2QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBZ5gYAwQAZ6OcAwQAZ7iBMA0GCSqGSIb3DQEBCwUAA4IBAQAPh1W4 Q/iD6bzAVVFO3YQW7EQfVQQsGfr+qNGYckWbw7uuLpThMTNN9Q4KhbZqMUlsndaR jPiJ5ge6VB+YUETvvXZnd+hjs3noXo2Z9GKIKlCmDjumQpxnOmeaGugaTGUiaXP1 UPSUhmhzMq+NMae/WAx1tNbyfRqcKRp4Wib3p/LmElInd3tQPUvF5r25J7QVY5ml yha2U7LVMosbUjoX8DQiTMjPEE/IxWBaGbrQkSxIhg2L7KX1wwR4ckJl0Pifn9Kb rty49wdQjhXKwxr/zni1Jesxbl6Co7suQPl4bLVLbgsqsQQcDzDoLvTczDA8YPvH jA2JnXDbKK0wfGJt -----END CERTIFICATE-----Generated at Mon Mar 2 01:55:10 2026 by rpki-client