$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/4A31F616E8DD11F0AFF4FBBE636F56BC.roa File: 4A31F616E8DD11F0AFF4FBBE636F56BC.roa (raw, json) Hash identifier: Wdgrnef6OjWOvwI+su2ONKUiV39rS9f7YeSG/xsumes= Subject key identifier: 5F:AD:B8:F7:5D:7F:78:DE:98:F0:F6:5E:50:FE:69:14:B7:93:53:6B Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 09A5 Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/4A31F616E8DD11F0AFF4FBBE636F56BC.roa Signing time: Sun 01 Mar 2026 19:10:15 +0000 ROA not before: Fri 23 Jan 2026 02:51:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135130 IP address blocks: 103.210.56.0/24 maxlen: 24 103.210.57.0/24 maxlen: 24 103.210.58.0/24 maxlen: 24 103.210.59.0/24 maxlen: 24 2404:6480::/32 maxlen: 32 2404:6480::/48 maxlen: 48 2404:6480:1::/48 maxlen: 48 2404:6480:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2469 (0x9a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Jan 23 02:51:13 2026 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48f17-4e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ba:41:4f:68:93:66:d7:b8:95:59:67:ba:4d: 46:3f:dd:31:90:44:32:23:ac:8a:5d:55:59:0e:43: 7a:11:a2:20:e3:9a:a3:a8:c2:3b:f5:27:0d:cb:8b: 95:7f:d8:d5:15:2b:10:f8:c1:c4:a2:e7:1d:f4:49: 58:ec:5f:67:58:4c:fc:b3:58:1c:06:99:a6:a2:d2: bc:25:da:b1:02:1b:43:00:e2:c5:93:b0:a7:7e:46: 72:f2:b5:86:41:63:70:e4:f5:62:7a:34:23:77:1c: c9:00:f7:53:2e:f1:fb:26:09:f9:5a:27:9c:cb:12: 50:9f:52:20:29:b2:1e:ba:38:b4:42:79:0d:99:78: ae:c6:f7:80:bf:5e:ad:7f:f3:29:a2:3e:56:91:9b: 7b:87:22:47:7f:3c:86:0f:95:cd:da:13:cf:46:83: ad:37:95:55:9e:f7:a1:10:a5:b3:57:1d:8b:07:88: 04:40:fc:8e:2e:8e:b8:f5:62:36:1d:4e:46:26:6c: 3c:69:34:e7:e4:f5:a4:8e:f9:bc:7e:6b:ac:c7:ab: 75:c4:8c:6d:02:9c:03:08:c9:23:22:05:47:c0:4d: f4:44:00:ed:0c:ed:5c:56:2d:4b:f2:59:67:53:cf: 7a:32:38:97:d5:af:b6:b5:ef:f1:65:30:49:0a:ae: 78:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AD:B8:F7:5D:7F:78:DE:98:F0:F6:5E:50:FE:69:14:B7:93:53:6B X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/4A31F616E8DD11F0AFF4FBBE636F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.210.56.0/22 IPv6: 2404:6480::/32 Signature Algorithm: sha256WithRSAEncryption 26:7e:9b:dd:e7:94:35:48:1a:8e:c1:84:78:37:46:fa:4d:66: 71:d1:04:a5:73:d5:e4:dd:dc:ca:4b:5f:7c:7f:c3:4a:57:90: b7:70:38:6a:2f:db:c9:02:45:1b:0a:e3:27:96:eb:7e:2e:ad: a7:62:18:19:8e:55:62:2c:11:29:21:36:3c:9b:02:63:83:8c: 4b:fe:53:2b:4d:1d:e4:0e:ae:b0:99:c6:2a:dd:42:04:85:ba: f9:25:3b:a3:e2:d2:ca:2b:1f:4f:65:f4:11:38:61:52:8a:f8: 91:3a:67:86:c5:bf:9b:9a:5d:10:dd:fd:61:a6:2a:cf:c4:2d: f6:33:77:e4:0b:d3:14:fe:f7:e3:b0:17:fc:e8:32:47:1f:79: ee:d6:87:36:e7:f8:1a:61:28:a6:69:9d:79:1c:f4:fb:3f:a1: e1:4b:47:16:7d:e9:7e:f7:b4:4b:f2:9e:23:df:e5:71:42:24: 65:a6:cf:8f:01:7a:36:a0:4d:7a:38:1a:bb:2e:21:f1:f6:9b: 1b:43:cd:4c:e3:f9:4b:5c:44:19:62:7b:5f:84:2d:17:63:9b: c2:6d:cb:b8:46:75:9e:ca:bb:11:a1:74:2a:35:eb:f5:24:83: 98:54:a4:22:59:19:57:63:14:80:22:dc:89:e9:1f:10:26:70: c2:fe:28:21 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwMTIzMDI1MTEzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGYxNy00ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrpBT2iTZte4lVlnuk1GP90xkEQyI6yKXVVZDkN6EaIg45qjqMI79ScNy4uV f9jVFSsQ+MHEoucd9ElY7F9nWEz8s1gcBpmmotK8JdqxAhtDAOLFk7CnfkZy8rWG QWNw5PViejQjdxzJAPdTLvH7Jgn5WiecyxJQn1IgKbIeuji0QnkNmXiuxveAv16t f/Mpoj5WkZt7hyJHfzyGD5XN2hPPRoOtN5VVnvehEKWzVx2LB4gEQPyOLo649WI2 HU5GJmw8aTTn5PWkjvm8fmusx6t1xIxtApwDCMkjIgVHwE30RADtDO1cVi1L8lln U896MjiX1a+2te/xZTBJCq54cQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFF+tuPdd f3jemPD2XlD+aRS3k1NrMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNCMjUvN0U4OTJDQzJGNjE1MTFFN0I4MzAwOTZEQzRGOUFFMDIvNEEzMUY2MTZF OEREMTFGMEFGRjRGQkJFNjM2RjU2QkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ9I4MA0EAgACMAcDBQAkBGSAMA0GCSqGSIb3DQEBCwUAA4IBAQAm fpvd55Q1SBqOwYR4N0b6TWZx0QSlc9Xk3dzKS198f8NKV5C3cDhqL9vJAkUbCuMn lut+Lq2nYhgZjlViLBEpITY8mwJjg4xL/lMrTR3kDq6wmcYq3UIEhbr5JTuj4tLK Kx9PZfQROGFSiviROmeGxb+bml0Q3f1hpirPxC32M3fkC9MU/vfjsBf86DJHH3nu 1oc25/gaYSimaZ15HPT7P6HhS0cWfel+97RL8p4j3+VxQiRlps+PAXo2oE16OBq7 LiHx9psbQ81M4/lLXEQZYntfhC0XY5vCbcu4RnWeyrsRoXQqNev1JIOYVKQiWRlX YxSAItyJ6R8QJnDC/igh -----END CERTIFICATE-----Generated at Mon Mar 2 11:12:43 2026 by rpki-client