$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/97DFFA2AD39E11EF9395C676C4F9AE02.roa File: 97DFFA2AD39E11EF9395C676C4F9AE02.roa (raw, json) Hash identifier: 7eIKxIs5ApKcSsqSTsxpl/ToP4LMHKxxhepDk6zeUbE= Subject key identifier: 47:4A:52:3F:74:1B:65:94:D5:EE:13:3C:D1:96:D8:DB:AE:A9:F6:9A Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 36CB Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/97DFFA2AD39E11EF9395C676C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:45:47 +0000 ROA not before: Tue 02 Sep 2025 15:01:33 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 61317 IP address blocks: 103.230.68.0/23 maxlen: 23 103.230.70.0/24 maxlen: 24 117.121.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14027 (0x36cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:33 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4895b-73c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:f6:21:0e:76:46:c1:b7:5c:d0:4c:e3:ef: e8:9e:e4:8e:83:00:39:17:78:07:d7:3f:b0:02:10: aa:cf:8d:b4:93:0f:29:b5:d1:c3:f2:1e:42:cd:f3: 7f:4c:6b:61:c9:ed:c3:93:94:a8:28:4a:d4:ec:77: 71:01:b6:8e:84:47:60:2e:51:dd:eb:27:3f:e5:c5: 41:f6:62:87:41:8a:ed:02:4b:58:2f:a1:58:aa:2a: 67:bf:34:db:5d:ee:cc:11:56:6a:bb:6d:ac:16:8e: 77:3e:36:3b:9c:a3:6e:41:1a:49:a5:2f:0c:fd:14: c7:0e:23:65:d9:f4:9b:30:83:6e:78:a7:13:b9:d3: 87:7e:d8:cc:6d:19:8b:6c:a5:45:d2:2f:fd:81:58: 4a:99:bb:12:ce:25:91:3d:a0:aa:4f:2a:ca:43:9c: 9e:88:59:e6:9c:aa:ec:9a:14:31:cd:69:09:26:dd: b3:bc:f9:f2:4b:5f:bc:77:52:89:3f:95:0e:7c:1a: 26:04:2e:30:94:4a:75:95:a0:e1:7a:fe:a5:ac:36: b0:b0:7c:0b:4c:be:31:5c:a2:48:73:36:d1:6f:c1: f1:fa:18:22:db:02:f9:be:86:9d:d8:7b:9c:8a:9c: e9:5a:f1:cf:ba:fc:e9:2f:bc:68:96:63:b9:92:6a: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4A:52:3F:74:1B:65:94:D5:EE:13:3C:D1:96:D8:DB:AE:A9:F6:9A X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/97DFFA2AD39E11EF9395C676C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.230.68.0-103.230.70.255 117.121.247.0/24 Signature Algorithm: sha256WithRSAEncryption 20:cf:15:34:5b:34:e4:7b:c0:ce:a2:09:7d:2a:2b:84:18:ca: 16:66:b5:26:ff:bd:97:b2:79:23:12:9d:dd:31:51:e7:6b:97: 87:8d:57:a0:d9:c3:19:d5:04:92:7d:49:02:83:e9:90:8c:0a: 37:56:36:f4:37:cd:d6:7c:0d:f1:ed:13:5d:fd:13:1b:be:e5: 53:84:d9:9b:16:68:45:0c:ec:ef:34:47:89:4a:ae:ae:0c:a8: 7d:a6:17:ce:a5:4d:22:7e:94:7c:09:f0:93:4c:22:8c:a1:64: cc:07:ea:19:c7:d7:38:05:ad:dd:d1:ab:bf:62:58:91:37:02: c0:f8:09:27:ee:58:4e:f5:a7:e4:42:8d:52:d8:e5:31:a6:97: fe:88:e1:31:de:01:f4:b0:3f:24:25:f5:f7:97:02:d3:5d:b4: 87:02:72:01:74:98:03:96:86:ff:51:e9:f2:c5:c1:c6:05:1e: d0:a8:b9:13:22:c5:e2:9a:0b:9f:fb:08:0b:c6:f5:94:3d:49: a4:57:e2:23:fe:86:89:ad:6c:f1:f7:59:5f:ad:8f:22:1e:f8: 2e:80:88:55:7f:ed:46:fb:c7:e0:d9:19:79:26:57:60:d0:81: f6:4a:98:48:95:f3:3e:a7:62:d7:23:3c:6a:ba:63:f1:c3:da: 6a:4b:69:93 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICNsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODk1Yi03M2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujH2IQ52RsG3XNBM4+/onuSOgwA5F3gH1z+wAhCqz420kw8ptdHD8h5CzfN/ TGthye3Dk5SoKErU7HdxAbaOhEdgLlHd6yc/5cVB9mKHQYrtAktYL6FYqipnvzTb Xe7MEVZqu22sFo53PjY7nKNuQRpJpS8M/RTHDiNl2fSbMINueKcTudOHftjMbRmL bKVF0i/9gVhKmbsSziWRPaCqTyrKQ5yeiFnmnKrsmhQxzWkJJt2zvPnyS1+8d1KJ P5UOfBomBC4wlEp1laDhev6lrDawsHwLTL4xXKJIczbRb8Hx+hgi2wL5voad2Huc ipzpWvHPuvzpL7xolmO5kmpQPwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFEdKUj90 G2WU1e4TPNGW2NuuqfaaMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvOTdERkZBMkFE MzlFMTFFRjkzOTVDNjc2QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAJn5kQDBABn5kYDBAB1efcwDQYJKoZIhvcNAQELBQADggEBACDP FTRbNOR7wM6iCX0qK4QYyhZmtSb/vZeyeSMSnd0xUedrl4eNV6DZwxnVBJJ9SQKD 6ZCMCjdWNvQ3zdZ8DfHtE139Exu+5VOE2ZsWaEUM7O80R4lKrq4MqH2mF86lTSJ+ lHwJ8JNMIoyhZMwH6hnH1zgFrd3Rq79iWJE3AsD4CSfuWE71p+RCjVLY5TGml/6I 4THeAfSwPyQl9feXAtNdtIcCcgF0mAOWhv9R6fLFwcYFHtCouRMixeKaC5/7CAvG 9ZQ9SaRX4iP+homtbPH3WV+tjyIe+C6AiFV/7Ub7x+DZGXkmV2DQgfZKmEiV8z6n YtcjPGq6Y/HD2mpLaZM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:42:26 2026 by rpki-client