$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/37A30AA2157A11F1B5E2F6BC3D3D8C67.roa File: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (raw, json) Hash identifier: dBkk8gzxpWAkhHfAOLQ7jEXfDy4v7KWWXX08BHROty0= Subject key identifier: C2:41:F8:A2:30:22:4F:F8:3F:51:40:05:D4:B1:8E:0D:6A:90:7D:B7 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 08F4 Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/37A30AA2157A11F1B5E2F6BC3D3D8C67.roa Signing time: Sun 01 Mar 2026 14:23:29 +0000 ROA not before: Sun 01 Mar 2026 14:23:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.70.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 15:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2292 (0x8f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Mar 1 14:23:29 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44be1-e02f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a5:1a:11:66:15:03:46:aa:bc:89:7e:04:24: b5:6b:63:dd:70:f0:49:8e:05:74:4c:c3:e1:9b:a2: c5:e9:bc:22:7b:38:c3:8b:71:ff:cb:46:51:6d:80: 38:52:40:62:04:8a:68:71:48:c5:e8:08:dc:64:14: b2:a6:1a:9e:ac:0e:73:6e:93:21:b9:82:14:82:c3: 6c:cf:f1:23:0c:4c:e9:a1:7a:af:84:f8:ab:bb:48: c5:a1:bd:97:36:65:73:ef:41:d6:20:90:e4:57:63: 3f:b5:bb:13:94:64:77:d3:23:ba:d4:78:72:b2:ba: e2:d5:e1:e9:0d:98:e3:5e:9c:92:e2:4b:0f:1a:7a: e0:88:10:b6:fe:de:dd:ac:5b:fd:9a:3f:55:ae:c1: 1a:44:57:be:80:ed:56:3e:3c:dd:dd:9b:9b:cb:5c: 89:d8:a2:1e:4d:fd:76:fd:71:9d:00:f4:4a:28:9a: 94:44:12:9f:c2:18:e2:98:00:3a:e5:d4:ac:98:3d: 53:c8:40:80:74:76:f3:4e:84:89:11:30:e5:bf:e7: 75:25:f0:51:48:1a:c5:7f:8c:56:fd:80:45:fd:37: 91:03:51:11:30:bc:6a:23:ad:ed:36:53:c5:0b:99: 09:7d:47:47:d9:f7:47:6d:8c:cb:f7:cc:f5:95:c1: 4a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:41:F8:A2:30:22:4F:F8:3F:51:40:05:D4:B1:8E:0D:6A:90:7D:B7 X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/37A30AA2157A11F1B5E2F6BC3D3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.70.224.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:5e:67:d4:1e:1a:d2:7b:21:cb:0c:31:14:d9:ec:59:12:44: 74:62:d6:fe:28:dc:81:91:82:74:91:3d:b5:5f:fe:63:75:63: 94:c6:07:63:f3:7e:e9:0d:e8:2e:8b:11:a0:2a:e8:6f:d9:ac: c2:98:80:eb:7e:99:c7:fb:8d:93:d1:50:35:57:72:26:2c:85: 26:28:68:ed:e1:a5:c9:16:fc:2f:f6:81:76:fa:54:44:e3:e5: 65:fa:6c:2d:a7:06:a4:a8:84:09:9c:c4:2c:18:6c:a5:e9:85: 86:74:89:b8:00:e4:64:62:5a:2c:69:ee:4e:f5:82:ee:b3:82: 4a:7d:ab:ac:5e:01:c0:55:44:43:4d:dd:ca:48:06:42:0a:eb: aa:2e:50:df:f5:ff:f7:3b:f3:26:d0:14:65:ff:30:66:7a:69: 70:ad:fd:11:f7:db:1b:d0:1b:85:bf:af:4a:be:03:ed:25:39: 8d:ca:4c:74:04:2d:3c:16:0d:a0:23:87:33:9f:6b:be:ed:eb: 38:a8:ee:4a:61:01:ca:bb:f7:83:4e:7f:b6:31:d1:ee:e9:50: c1:71:7d:d9:6e:ca:e0:2f:88:10:6f:8d:7d:d3:32:a8:db:2a: e4:ed:f7:7f:77:3c:45:cb:53:ea:9b:12:39:f2:6c:65:0b:48: 96:c2:eb:8e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjYwMzAxMTQyMzI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGJlMS1lMDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqUaEWYVA0aqvIl+BCS1a2PdcPBJjgV0TMPhm6LF6bwiezjDi3H/y0ZRbYA4 UkBiBIpocUjF6AjcZBSyphqerA5zbpMhuYIUgsNsz/EjDEzpoXqvhPiru0jFob2X NmVz70HWIJDkV2M/tbsTlGR30yO61Hhysrri1eHpDZjjXpyS4ksPGnrgiBC2/t7d rFv9mj9VrsEaRFe+gO1WPjzd3Zuby1yJ2KIeTf12/XGdAPRKKJqURBKfwhjimAA6 5dSsmD1TyECAdHbzToSJETDlv+d1JfBRSBrFf4xW/YBF/TeRA1ERMLxqI63tNlPF C5kJfUdH2fdHbYzL98z1lcFKIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMJB+KIw Ik/4P1FABdSxjg1qkH23MB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU0Q0YvRDhGM0FDQUNDQzhGMTFFQUJDMUYxNDQyQzRGOUFFMDIvMzdBMzBBQTIx NTdBMTFGMUI1RTJGNkJDM0QzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ0bgMA0GCSqGSIb3DQEBCwUAA4IBAQAvXmfUHhrSeyHLDDEU2exZ EkR0Ytb+KNyBkYJ0kT21X/5jdWOUxgdj837pDeguixGgKuhv2azCmIDrfpnH+42T 0VA1V3ImLIUmKGjt4aXJFvwv9oF2+lRE4+Vl+mwtpwakqIQJnMQsGGyl6YWGdIm4 AORkYlosae5O9YLus4JKfausXgHAVURDTd3KSAZCCuuqLlDf9f/3O/Mm0BRl/zBm emlwrf0R99sb0BuFv69KvgPtJTmNykx0BC08Fg2gI4czn2u+7es4qO5KYQHKu/eD Tn+2MdHu6VDBcX3ZbsrgL4gQb4190zKo2yrk7fd/dzxFy1PqmxI58mxlC0iWwuuO -----END CERTIFICATE-----Generated at Sun Mar 1 23:18:06 2026 by rpki-client