$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa File: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (raw, json) Hash identifier: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk= Subject key identifier: C4:6C:AF:5A:21:0D:BE:11:86:60:18:20:05:67:97:77:AB:A1:DB:74 Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12A6 Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:26:11 +0000 ROA not before: Fri 26 Sep 2025 17:46:42 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 55799 IP address blocks: 103.70.59.0/24 maxlen: 24 103.81.247.0/24 maxlen: 24 103.82.4.0/23 maxlen: 23 103.82.4.0/24 maxlen: 24 103.82.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4774 (0x12a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Sep 26 17:46:42 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a468a3-3acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:e0:bc:5e:d7:7d:65:b7:75:33:59:d3:23: 79:d7:bf:fc:9b:74:1c:5a:58:fa:77:84:15:82:d0: b2:2e:2c:99:68:50:17:3b:12:0a:24:4b:50:8a:b9: c1:76:fe:1b:90:10:0b:26:94:5c:78:60:f5:f4:2b: 7b:29:a3:68:c9:71:14:9a:b5:87:ee:d9:ac:d4:7a: 65:54:5e:41:3f:b8:44:4c:b6:74:d8:12:c0:07:50: 9c:12:3c:09:79:c4:e2:cc:d5:77:25:75:77:10:3d: 6a:d4:a2:a5:3d:a0:9a:ef:29:21:ba:25:bd:81:33: cd:ff:58:31:5e:12:75:61:54:52:6d:ab:e6:4d:32: d6:3f:b3:78:1f:7c:d0:55:7f:a7:77:99:1b:da:6f: be:12:16:33:df:d0:6c:38:26:ab:96:74:7f:32:34: 45:23:36:98:5b:26:0f:51:b6:4f:1e:fd:af:78:33: 20:7d:37:39:ae:92:f2:9a:3f:5b:c6:64:27:c5:af: eb:12:af:0d:46:31:5c:6e:95:68:e1:02:90:b1:51: cf:d9:df:df:41:5c:8d:57:7d:94:d5:47:b7:5b:be: 7e:f3:d8:aa:ae:62:58:2a:98:73:62:85:3b:ba:00: 59:33:87:1c:16:2f:20:64:9f:57:49:bd:8d:6b:b1: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6C:AF:5A:21:0D:BE:11:86:60:18:20:05:67:97:77:AB:A1:DB:74 X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.70.59.0/24 103.81.247.0/24 103.82.4.0/23 Signature Algorithm: sha256WithRSAEncryption 41:9d:9b:60:d4:a2:56:4a:84:ef:02:89:f4:b1:01:ba:90:de: 90:45:5a:75:f4:ca:55:cc:e1:de:b7:ff:7c:96:be:41:2f:6c: 13:97:40:a1:49:b5:cf:15:6a:74:70:cc:5d:a7:3f:d4:d7:97: 23:52:f2:6c:e4:8b:e2:ae:ab:f8:b0:99:d9:96:70:7f:4b:87: 32:ae:71:c2:6f:4c:11:1e:37:92:7d:57:cd:87:8d:1d:bb:cf: b7:2b:f2:3b:4b:d0:30:a0:0e:9c:db:fb:a3:c4:c8:f8:cf:87: 43:ee:c1:03:db:d4:8c:e7:99:58:27:ee:64:af:4c:73:f2:1b: 7e:e9:8d:bb:58:fa:fe:37:83:9b:a2:8c:a3:fe:9e:b3:8a:59: 23:1c:fe:62:db:8d:d3:32:93:cd:3e:b6:5b:77:de:47:b7:43: b2:05:37:97:9e:1b:e3:d0:54:f5:53:75:cf:22:c5:32:8e:c8: cf:09:8b:18:54:c1:75:af:f3:59:81:cf:85:95:02:32:e2:c7: 95:a8:50:3e:ac:92:0b:ee:e7:b2:6e:7d:bb:c8:8e:e4:8d:97: 13:3a:f6:19:3a:6d:d2:df:85:e8:91:f9:ff:9b:ed:7d:c6:09: 28:d9:e7:60:47:07:35:03:b6:7d:b2:80:0c:84:48:2e:bd:b8: 1a:52:1e:72 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjUwOTI2MTc0NjQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjhhMy0zYWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9XgvF7XfWW3dTNZ0yN517/8m3QcWlj6d4QVgtCyLiyZaFAXOxIKJEtQirnB dv4bkBALJpRceGD19Ct7KaNoyXEUmrWH7tms1HplVF5BP7hETLZ02BLAB1CcEjwJ ecTizNV3JXV3ED1q1KKlPaCa7ykhuiW9gTPN/1gxXhJ1YVRSbavmTTLWP7N4H3zQ VX+nd5kb2m++EhYz39BsOCarlnR/MjRFIzaYWyYPUbZPHv2veDMgfTc5rpLymj9b xmQnxa/rEq8NRjFcbpVo4QKQsVHP2d/fQVyNV32U1Ue3W75+89iqrmJYKphzYoU7 ugBZM4ccFi8gZJ9XSb2Na7F9twIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMRsr1oh Db4RhmAYIAVnl3erodt0MB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNFMzMvODc3QTc5QjZFOUQxMTFFOEFDODkyNzcwQzRGOUFFMDIvRDBCOEMwOUUx QkJGMTFFQUE2NEVDRjcwQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ0Y7AwQAZ1H3AwQBZ1IEMA0GCSqGSIb3DQEBCwUAA4IBAQBBnZtg 1KJWSoTvAon0sQG6kN6QRVp19MpVzOHet/98lr5BL2wTl0ChSbXPFWp0cMxdpz/U 15cjUvJs5Ivirqv4sJnZlnB/S4cyrnHCb0wRHjeSfVfNh40du8+3K/I7S9AwoA6c 2/ujxMj4z4dD7sED29SM55lYJ+5kr0xz8ht+6Y27WPr+N4Obooyj/p6zilkjHP5i 243TMpPNPrZbd95Ht0OyBTeXnhvj0FT1U3XPIsUyjsjPCYsYVMF1r/NZgc+FlQIy 4seVqFA+rJIL7ueybn27yI7kjZcTOvYZOm3S34Xokfn/m+19xgko2edgRwc1A7Z9 soAMhEguvbgaUh5y -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:39 2026 by rpki-client