$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa File: 8698CD28A42211EB91621734C4F9AE02.roa (raw, json) Hash identifier: QYOZ1apbmHEgFA/KTyiwZS4fSNem6E5RLUuLMFBIYIM= Subject key identifier: A1:03:EA:8F:C1:60:B7:27:59:06:D0:49:15:8C:95:ED:36:54:F3:35 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 097F Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:01:50 +0000 ROA not before: Thu 20 Nov 2025 19:40:44 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137990 IP address blocks: 103.104.100.0/22 maxlen: 22 103.104.100.0/24 maxlen: 24 103.104.101.0/24 maxlen: 24 103.104.102.0/24 maxlen: 24 103.104.103.0/24 maxlen: 24 202.43.224.0/24 maxlen: 24 2402:940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Nov 20 19:40:44 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a462ee-2f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:0f:a2:6f:de:76:31:79:b9:77:53:65:fa: a3:f7:4b:77:07:71:9a:da:52:a8:9a:25:77:e2:f9: 8f:a9:30:e5:a0:f9:2a:c4:57:06:91:87:ed:c2:79: 3f:0e:8e:38:55:a5:54:99:f6:ef:2c:80:b3:ef:35: 93:34:35:1c:60:ff:be:cf:38:a6:99:68:c1:0d:31: 20:a3:c3:e1:c2:6e:c4:b2:87:8f:d3:c7:44:16:c1: d0:aa:68:1d:3d:38:d3:b4:cd:4e:26:8f:39:57:9e: b7:1f:64:25:71:3d:7a:4d:94:63:ad:a2:63:5b:f7: d7:91:0e:78:44:e3:c9:e5:91:c9:f5:73:c7:56:b7: 5a:af:78:ba:5d:b9:b4:72:ba:1e:48:be:f5:66:f6: 3b:ee:c4:26:3a:88:21:10:5d:1e:f1:51:5b:d8:ca: d0:fc:2c:f8:2c:2b:c4:7a:fb:3a:d2:47:4c:77:c1: b2:ee:30:0a:e2:26:f8:90:f4:e6:64:cc:57:ee:75: d0:f4:38:e9:2d:98:e4:ab:94:8b:95:cd:ed:e9:72: 52:5c:9e:c4:18:78:1b:6b:97:4f:44:2c:5f:7a:62: 37:a7:28:e6:a4:df:04:87:45:e3:37:b9:49:48:c2: df:dc:25:a8:84:9c:33:39:a7:35:76:37:be:ac:76: a6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:03:EA:8F:C1:60:B7:27:59:06:D0:49:15:8C:95:ED:36:54:F3:35 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/8698CD28A42211EB91621734C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.100.0/22 202.43.224.0/24 IPv6: 2402:940::/32 Signature Algorithm: sha256WithRSAEncryption 85:76:a6:86:15:e8:1a:47:ff:0a:fd:3d:ad:25:32:21:4c:af: 94:a8:7b:26:5a:02:79:fb:e0:03:73:12:d3:f1:90:15:46:01: 31:af:f8:69:2d:2d:0e:b2:84:64:8e:87:10:ab:aa:59:e3:ea: 49:b9:7e:c0:d0:08:57:e6:29:9d:c6:be:19:5d:c2:0a:6f:39: 10:c6:f9:7a:57:84:c5:d9:da:bd:b5:54:2a:0e:3f:52:2b:01: 1d:38:a7:4e:a2:09:ba:c2:7c:6c:53:23:39:17:f7:1c:46:b0: f5:8d:a3:1f:3c:7a:bd:99:50:25:77:30:e9:e8:89:fe:40:9a: 23:38:18:90:78:dc:8a:54:0e:fb:9b:cb:58:71:4a:8a:ba:40: 7c:2e:6c:cf:83:6f:1f:05:f9:fb:a9:19:d0:85:47:aa:db:ab: 77:f4:0d:ce:ba:26:1c:26:e0:bb:80:cf:8b:59:39:cd:ca:a6: 5f:32:ef:18:2c:89:bb:4d:52:2a:01:78:cd:15:0d:a2:26:fb: a4:d3:a4:c2:70:6c:0c:9b:77:07:11:c3:dc:6d:5d:3b:a0:49: c2:17:cd:39:ed:7e:8d:14:02:1c:6a:bd:70:f6:e5:c6:bd:6f: b3:4c:c8:63:d1:d1:c8:7b:29:ff:c6:da:21:c5:ef:07:57:3d: 11:02:d4:ec -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUxMTIwMTk0MDQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjJlZS0yZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXEPom/edjF5uXdTZfqj90t3B3Ga2lKomiV34vmPqTDloPkqxFcGkYftwnk/ Do44VaVUmfbvLICz7zWTNDUcYP++zzimmWjBDTEgo8Phwm7EsoeP08dEFsHQqmgd PTjTtM1OJo85V563H2QlcT16TZRjraJjW/fXkQ54ROPJ5ZHJ9XPHVrdar3i6Xbm0 croeSL71ZvY77sQmOoghEF0e8VFb2MrQ/Cz4LCvEevs60kdMd8Gy7jAK4ib4kPTm ZMxX7nXQ9DjpLZjkq5SLlc3t6XJSXJ7EGHgba5dPRCxfemI3pyjmpN8Eh0XjN7lJ SMLf3CWohJwzOac1dje+rHamXwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKED6o/B YLcnWQbQSRWMle02VPM1MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5Q0QvM0MwRDRBMTZCMDU1MTFFQUEwNDVCODBFQzRGOUFFMDIvODY5OENEMjhB NDIyMTFFQjkxNjIxNzM0QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ2hkAwQAyivgMA0EAgACMAcDBQAkAglAMA0GCSqGSIb3DQEBCwUA A4IBAQCFdqaGFegaR/8K/T2tJTIhTK+UqHsmWgJ5++ADcxLT8ZAVRgExr/hpLS0O soRkjocQq6pZ4+pJuX7A0AhX5imdxr4ZXcIKbzkQxvl6V4TF2dq9tVQqDj9SKwEd OKdOogm6wnxsUyM5F/ccRrD1jaMfPHq9mVAldzDp6In+QJojOBiQeNyKVA77m8tY cUqKukB8LmzPg28fBfn7qRnQhUeq26t39A3OuiYcJuC7gM+LWTnNyqZfMu8YLIm7 TVIqAXjNFQ2iJvuk06TCcGwMm3cHEcPcbV07oEnCF8057X6NFAIcar1w9uXGvW+z TMhj0dHIeyn/xtohxe8HVz0RAtTs -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:42 2026 by rpki-client