$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/D3ECF4B8E61D11EBB92C167BC4F9AE02.roa File: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (raw, json) Hash identifier: JpJW44EKjdDGS9i2UbNxoq47VGQn3OM7oBb7lk+F9fo= Subject key identifier: AA:62:84:64:FD:60:18:C3:2B:92:E5:69:ED:91:9F:A6:7C:97:C9:9F Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 097E Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/D3ECF4B8E61D11EBB92C167BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:01:49 +0000 ROA not before: Thu 20 Nov 2025 19:40:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137184 IP address blocks: 103.104.100.0/22 maxlen: 22 103.104.100.0/24 maxlen: 24 103.104.101.0/24 maxlen: 24 103.104.102.0/24 maxlen: 24 103.104.103.0/24 maxlen: 24 202.43.224.0/24 maxlen: 24 2402:940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2430 (0x97e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Nov 20 19:40:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a462ed-10d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:ad:f7:94:af:f0:c8:93:ba:5e:fb:66:16: 5d:0a:40:9d:aa:a7:db:3b:29:8d:0f:71:3b:14:0c: 4f:a8:d6:22:c6:a5:38:5a:aa:d2:fb:81:6b:71:a4: 42:20:e4:9e:19:f4:0d:cf:87:4c:1a:26:d4:30:12: 7c:06:db:31:5a:85:36:39:23:87:50:77:da:19:52: 0b:7c:cc:62:24:ad:af:30:81:45:79:5f:60:f3:4f: 4f:cd:6e:d5:22:46:6a:6f:39:11:26:d2:a8:59:58: c6:75:86:3f:52:c8:36:4d:0e:6a:f6:87:f1:1f:a1: 13:2d:1d:95:69:d0:81:34:12:e4:8c:43:ce:26:42: bf:ff:c2:ad:25:c7:03:3b:3c:61:f6:fb:33:ce:fe: 6a:b1:07:3d:2d:8a:31:c2:24:e2:25:3e:7e:22:83: 4f:1d:a0:e8:53:52:93:02:e8:53:50:0a:9b:a0:90: 79:8d:d1:5d:0a:61:e7:9e:a5:60:99:2c:c8:ff:cd: 20:f2:0d:6d:51:81:0a:dd:e5:fd:0a:27:5b:e0:55: ce:af:35:de:6e:08:8b:68:4c:d5:86:ad:8d:86:24: e5:13:c7:7e:31:20:56:19:43:ad:0d:af:70:56:e6: 8a:5b:bd:c3:13:21:dd:72:91:25:de:04:2a:8a:f9: c9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:62:84:64:FD:60:18:C3:2B:92:E5:69:ED:91:9F:A6:7C:97:C9:9F X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/D3ECF4B8E61D11EBB92C167BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.100.0/22 202.43.224.0/24 IPv6: 2402:940::/32 Signature Algorithm: sha256WithRSAEncryption 07:5b:b4:bc:8d:49:07:22:ac:d4:c1:71:af:92:8e:79:ea:94: 39:5c:85:8d:35:10:9c:a1:ae:55:a6:47:db:d1:5f:52:60:ae: 67:94:16:d5:c5:3e:2d:bc:c5:43:34:d8:05:ba:f0:b9:6b:47: b9:8f:39:6c:84:5e:07:bc:8d:c3:6b:d5:36:87:62:4a:6b:50: d2:2e:84:23:04:97:1c:4a:f0:74:50:b3:39:fa:cd:e5:47:f0: 21:6c:2f:28:57:cf:1b:dd:30:39:b5:2a:1a:24:f2:a6:50:5c: 9a:10:8c:9a:c1:5b:82:b8:ec:90:26:23:ec:34:56:c2:4a:0d: 92:d1:1b:74:f1:be:43:2b:38:d4:cb:29:d5:cb:2b:09:22:bf: 74:31:06:84:db:07:27:c1:8d:b0:8b:16:61:15:34:d6:d5:fb: a3:01:4d:63:4b:09:9b:cf:50:ee:ce:89:e2:2a:b5:ee:ee:97: 35:db:72:a7:48:67:75:4f:c6:1e:5d:9e:11:bc:de:eb:1e:39: 88:04:bf:6c:42:1d:75:79:8a:58:0c:7a:8a:9f:b8:dd:3d:45: 68:fc:f1:d2:4a:9c:32:f7:3e:ff:64:b9:1d:12:47:ab:d5:56: 92:04:8b:99:2f:44:14:01:a7:90:50:9e:3e:24:29:6b:41:42: 3c:1b:73:15 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUxMTIwMTk0MDQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjJlZC0xMGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1Gt95Sv8MiTul77ZhZdCkCdqqfbOymND3E7FAxPqNYixqU4WqrS+4FrcaRC IOSeGfQNz4dMGibUMBJ8BtsxWoU2OSOHUHfaGVILfMxiJK2vMIFFeV9g809PzW7V IkZqbzkRJtKoWVjGdYY/Usg2TQ5q9ofxH6ETLR2VadCBNBLkjEPOJkK//8KtJccD Ozxh9vszzv5qsQc9LYoxwiTiJT5+IoNPHaDoU1KTAuhTUAqboJB5jdFdCmHnnqVg mSzI/80g8g1tUYEK3eX9Cidb4FXOrzXebgiLaEzVhq2NhiTlE8d+MSBWGUOtDa9w VuaKW73DEyHdcpEl3gQqivnJDQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKpihGT9 YBjDK5Llae2Rn6Z8l8mfMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5Q0QvM0MwRDRBMTZCMDU1MTFFQUEwNDVCODBFQzRGOUFFMDIvRDNFQ0Y0QjhF NjFEMTFFQkI5MkMxNjdCQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ2hkAwQAyivgMA0EAgACMAcDBQAkAglAMA0GCSqGSIb3DQEBCwUA A4IBAQAHW7S8jUkHIqzUwXGvko556pQ5XIWNNRCcoa5Vpkfb0V9SYK5nlBbVxT4t vMVDNNgFuvC5a0e5jzlshF4HvI3Da9U2h2JKa1DSLoQjBJccSvB0ULM5+s3lR/Ah bC8oV88b3TA5tSoaJPKmUFyaEIyawVuCuOyQJiPsNFbCSg2S0Rt08b5DKzjUyynV yysJIr90MQaE2wcnwY2wixZhFTTW1fujAU1jSwmbz1DuzoniKrXu7pc123KnSGd1 T8YeXZ4RvN7rHjmIBL9sQh11eYpYDHqKn7jdPUVo/PHSSpwy9z7/ZLkdEker1VaS BIuZL0QUAaeQUJ4+JClrQUI8G3MV -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:28 2026 by rpki-client