$ rpki-client -vvf rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/3F4ECBD2744D11EDB5D08682C4F9AE02.roa File: 3F4ECBD2744D11EDB5D08682C4F9AE02.roa (raw, json) Hash identifier: vmwtzTnOhvd/7QUFb3dk5usPy+P3Fs2BEdZg8lbgpbw= Subject key identifier: 36:EF:6E:FC:D5:95:98:97:7F:CA:B6:37:E0:3E:93:C0:7B:D5:02:E9 Certificate issuer: /CN=A91E268B/serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Certificate serial: 06F1 Authority key identifier: 46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/3F4ECBD2744D11EDB5D08682C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:45:58 +0000 ROA not before: Wed 02 Apr 2025 22:54:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38215 IP address blocks: 103.164.236.0/23 maxlen: 24 103.164.236.0/30 maxlen: 30 2001:df6:5180::/48 maxlen: 48 2400:bf60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1777 (0x6f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E268B, serialNumber=462B16D327972EA771226A01588B5205EFEA4496 Validity Not Before: Apr 2 22:54:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a40ad6-b195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:5d:7a:b4:25:4c:9b:0a:d3:db:07:e5:c5:e9: a7:62:47:46:51:3b:90:19:13:ae:fa:e6:ac:ab:f6: 19:e3:35:d6:1e:ca:76:08:6b:97:c4:08:09:c7:45: 53:fc:81:9c:e5:69:d9:10:1d:2d:5a:19:0f:6f:f5: 56:40:0b:c4:ca:95:ca:2a:f8:6d:fb:9b:f1:d2:d0: 9c:98:ee:81:0e:70:ab:9a:04:d0:17:70:6a:5b:9e: 04:90:18:34:0e:7f:d6:34:3f:2e:ab:56:01:fa:77: 73:6f:5d:6d:c0:38:64:4b:27:49:db:f8:cc:e3:0f: 4f:58:e4:9a:0a:df:17:96:d5:a4:12:31:ba:e1:ad: 17:49:5f:98:dc:f1:37:f5:71:78:c4:cf:67:e4:d6: 55:93:47:bb:e0:70:f0:7e:9d:6d:50:ca:8b:e6:6a: 57:f8:bf:45:bf:be:9d:45:16:de:1d:f6:a3:dd:e0: f4:f0:5b:06:77:da:68:c3:c2:9d:6c:b9:f8:c9:a4: db:74:a1:d8:bc:e3:5f:54:ef:11:0b:0f:ca:bc:be: 63:38:2a:c4:67:ef:58:bd:5a:e5:01:06:4c:b0:ef: dd:2d:00:b6:c9:61:e9:4a:03:90:9e:68:09:00:aa: 32:de:e6:31:70:c4:a7:b1:94:d1:ec:56:a3:44:27: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EF:6E:FC:D5:95:98:97:7F:CA:B6:37:E0:3E:93:C0:7B:D5:02:E9 X509v3 Authority Key Identifier: keyid:46:2B:16:D3:27:97:2E:A7:71:22:6A:01:58:8B:52:05:EF:EA:44:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/RisW0yeXLqdxImoBWItSBe_qRJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RisW0yeXLqdxImoBWItSBe_qRJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E268B/426F57C08D3911EBB9F4CB17C4F9AE02/3F4ECBD2744D11EDB5D08682C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.164.236.0/23 IPv6: 2001:df6:5180::/48 2400:bf60::/32 Signature Algorithm: sha256WithRSAEncryption 23:b5:43:9e:f2:8b:7c:56:e3:4c:0b:dc:24:20:39:af:76:84: a0:89:71:e8:87:1f:ac:c9:0c:4d:8c:8b:96:6a:7c:0d:e7:bc: 7a:35:fa:5f:1c:50:41:7a:1f:4e:c2:61:9e:33:10:42:e3:47: 64:40:4d:65:cb:af:0e:81:90:a2:2c:f5:9d:9b:64:af:91:c0: 15:45:e9:44:14:bd:e0:be:2d:7e:d3:94:79:90:19:af:db:5f: 5f:4b:ef:bf:f0:8b:7d:79:a7:d4:cb:31:c2:6d:c1:68:a6:f7: 40:f2:70:0b:55:6f:d4:ff:83:86:a3:8f:4d:88:2c:eb:1b:b2: 86:9b:c5:f1:a9:20:5f:d8:e1:5b:94:04:d4:66:16:d9:25:7f: f2:dd:35:4b:ee:e7:ae:6c:5b:96:0c:a2:e8:bc:88:20:6f:da: 4c:07:6a:c7:37:f4:7e:d4:cf:c3:28:17:95:89:10:5e:c5:6f: 03:4f:39:8c:d7:cc:65:70:36:de:e6:43:e1:ed:05:df:ab:18: 14:6b:cc:c1:32:e7:2f:70:27:19:cb:a1:bb:e9:2b:34:2a:57: d9:68:86:ec:d6:13:d1:99:a9:86:0e:3b:16:72:27:b0:1a:fc: 1b:6f:51:31:c2:b3:2d:c8:c3:50:77:f3:4f:e3:ef:24:d3:75: 6d:ef:e5:b3 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICBvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OEIxMTAvBgNVBAUTKDQ2MkIxNkQzMjc5NzJFQTc3MTIyNkEwMTU4OEI1MjA1 RUZFQTQ0OTYwHhcNMjUwNDAyMjI1NDM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGFkNi1iMTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7116tCVMmwrT2wflxemnYkdGUTuQGROu+uasq/YZ4zXWHsp2CGuXxAgJx0VT /IGc5WnZEB0tWhkPb/VWQAvEypXKKvht+5vx0tCcmO6BDnCrmgTQF3BqW54EkBg0 Dn/WND8uq1YB+ndzb11twDhkSydJ2/jM4w9PWOSaCt8XltWkEjG64a0XSV+Y3PE3 9XF4xM9n5NZVk0e74HDwfp1tUMqL5mpX+L9Fv76dRRbeHfaj3eD08FsGd9pow8Kd bLn4yaTbdKHYvONfVO8RCw/KvL5jOCrEZ+9YvVrlAQZMsO/dLQC2yWHpSgOQnmgJ AKoy3uYxcMSnsZTR7FajRCcg0wIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFDbvbvzV lZiXf8q2N+A+k8B71QLpMB8GA1UdIwQYMBaAFEYrFtMnly6ncSJqAViLUgXv6kSW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY4Qi80MjZGNTdDMDhE MzkxMUVCQjlGNENCMTdDNEY5QUUwMi9SaXNXMHllWExxZHhJbW9CV0l0U0JlX3FS SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Jpc1cweWVYTHFkeEltb0JXSXRTQmVfcVJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI2OEIvNDI2RjU3QzA4RDM5MTFFQkI5RjRDQjE3QzRGOUFFMDIvM0Y0RUNCRDI3 NDREMTFFREI1RDA4NjgyQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ6TsMBYEAgACMBADBwAgAQ32UYADBQAkAL9gMA0GCSqGSIb3DQEB CwUAA4IBAQAjtUOe8ot8VuNMC9wkIDmvdoSgiXHohx+syQxNjIuWanwN57x6Nfpf HFBBeh9OwmGeMxBC40dkQE1ly68OgZCiLPWdm2SvkcAVRelEFL3gvi1+05R5kBmv 219fS++/8It9eafUyzHCbcFopvdA8nALVW/U/4OGo49NiCzrG7KGm8XxqSBf2OFb lATUZhbZJX/y3TVL7ueubFuWDKLovIggb9pMB2rHN/R+1M/DKBeViRBexW8DTzmM 18xlcDbe5kPh7QXfqxgUa8zBMucvcCcZy6G76Ss0KlfZaIbs1hPRmamGDjsWciew Gvwbb1ExwrMtyMNQd/NP4+8k03Vt7+Wz -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:16 2026 by rpki-client