$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/7112985C4DE711EC92010E61C4F9AE02.roa File: 7112985C4DE711EC92010E61C4F9AE02.roa (raw, json) Hash identifier: FggND59kHX3eor/ZmBsPBLrZ4G2nM/VFmN6jLu+8rrQ= Subject key identifier: 15:63:AE:EF:D3:33:15:73:F3:DD:D6:A0:77:69:CB:77:A3:A3:3D:05 Certificate issuer: /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Certificate serial: 0509 Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/7112985C4DE711EC92010E61C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:46:39 +0000 ROA not before: Mon 10 Nov 2025 22:45:06 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137078 IP address blocks: 103.175.130.0/23 maxlen: 23 103.175.130.0/24 maxlen: 24 103.175.131.0/24 maxlen: 24 2400:1a20::/32 maxlen: 32 2400:1a20::/48 maxlen: 48 2400:1a20:1::/48 maxlen: 48 2400:1a20:2::/48 maxlen: 48 2400:1a20:3::/48 maxlen: 48 2400:1a20:4::/48 maxlen: 48 2400:1a20:5::/48 maxlen: 48 2400:1a20:6::/48 maxlen: 48 2400:1a20:7::/48 maxlen: 48 2400:1a20:8::/48 maxlen: 48 2400:1a20:9::/48 maxlen: 48 2400:1a20:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1289 (0x509) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0 Validity Not Before: Nov 10 22:45:06 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4352f-0363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:67:f7:67:0a:f4:f3:f0:c7:f3:26:43:cf:ba: 7d:da:13:6f:fb:20:27:c6:a8:59:ab:14:cf:c2:3e: 51:63:df:b8:a6:54:ac:75:14:ee:2f:fb:7e:76:04: 16:03:5a:1e:f5:50:e5:18:5e:37:34:25:1c:c9:66: da:32:ff:ea:2d:f9:61:29:51:fd:d6:3c:d1:15:16: cc:fe:61:da:62:26:aa:f3:96:b3:26:08:45:16:92: 97:39:04:59:a4:21:39:04:77:56:0c:73:f8:8a:b0: ec:86:8f:c6:c1:33:f8:18:68:df:c7:7a:39:80:17: a8:de:84:93:e0:69:42:74:d5:42:eb:ad:58:42:a9: 9f:79:fc:ad:91:95:45:70:89:2f:21:3f:7a:ef:db: c3:bb:6a:24:6c:ab:a8:bd:05:5b:cc:6b:7a:c4:ba: f9:7c:96:10:b0:27:c5:8c:20:fe:3f:08:dd:08:34: 61:92:ff:23:d3:19:77:f6:e2:97:d8:33:3e:b3:6e: 65:4a:70:da:32:d9:cc:04:59:bb:e4:9e:4c:8d:89: fe:1a:55:b5:52:4e:c7:0a:6a:88:b5:b8:87:ad:7d: 7a:3c:df:89:53:e3:9a:db:87:8e:27:da:c7:8d:77: 69:02:f6:40:4c:74:41:b7:2c:73:7b:18:73:16:da: d2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:63:AE:EF:D3:33:15:73:F3:DD:D6:A0:77:69:CB:77:A3:A3:3D:05 X509v3 Authority Key Identifier: keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/7112985C4DE711EC92010E61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.175.130.0/23 IPv6: 2400:1a20::/32 Signature Algorithm: sha256WithRSAEncryption 8e:cc:4a:d0:83:16:71:23:a5:51:06:7e:24:c5:0b:83:2d:31: 3a:0c:2d:a7:da:38:4f:86:3f:21:ab:47:c3:87:f4:1d:67:f5: e3:05:7c:3b:fb:ca:39:4c:1b:05:9a:c8:ff:29:36:0a:6e:c1: c0:3e:d0:52:6b:58:8c:97:9d:ed:a1:5c:9d:73:2b:51:59:af: 3b:a9:1b:15:43:95:fa:76:17:62:ab:0b:43:bf:af:35:21:0b: e8:ed:d7:7c:ee:83:26:69:3f:44:32:57:9d:7c:c5:a8:97:95: 18:0d:00:35:a7:fd:ac:d2:95:6b:3e:a1:2a:eb:93:57:47:3b: ac:5a:3d:46:b7:69:41:63:4a:c9:9a:30:6d:8d:0b:95:1b:0e: 3f:df:58:6c:62:d4:46:cb:0d:31:76:3c:03:67:f9:f2:a9:11: db:3e:fb:08:55:aa:bd:8b:51:f7:65:8f:96:ad:70:18:7c:f4: 83:ef:b1:f4:dc:d6:a4:66:92:b2:ce:b5:b0:9d:56:16:56:d2: 68:3a:13:d4:bd:82:80:f1:f8:9f:e2:77:ef:dd:f4:9f:fd:ea: d7:6f:3c:cf:6e:bc:31:a2:aa:47:dc:3d:8c:aa:c4:59:1a:83: f3:10:64:c1:e2:0f:85:29:5b:f5:f3:df:c7:ec:5b:01:65:48: a8:37:7e:92 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3 MTc1NkIxQjAwHhcNMjUxMTEwMjI0NTA2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzUyZi0wMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkmf3Zwr08/DH8yZDz7p92hNv+yAnxqhZqxTPwj5RY9+4plSsdRTuL/t+dgQW A1oe9VDlGF43NCUcyWbaMv/qLflhKVH91jzRFRbM/mHaYiaq85azJghFFpKXOQRZ pCE5BHdWDHP4irDsho/GwTP4GGjfx3o5gBeo3oST4GlCdNVC661YQqmfefytkZVF cIkvIT9679vDu2okbKuovQVbzGt6xLr5fJYQsCfFjCD+PwjdCDRhkv8j0xl39uKX 2DM+s25lSnDaMtnMBFm75J5MjYn+GlW1Uk7HCmqItbiHrX16PN+JU+Oa24eOJ9rH jXdpAvZATHRBtyxzexhzFtrSbwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBVjru/T MxVz893WoHdpy3ejoz0FMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkwREQvNkQ4N0VEMDI0REU0MTFFQ0EzMTc5MTVEQzRGOUFFMDIvNzExMjk4NUM0 REU3MTFFQzkyMDEwRTYxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6+CMA0EAgACMAcDBQAkABogMA0GCSqGSIb3DQEBCwUAA4IBAQCO zErQgxZxI6VRBn4kxQuDLTE6DC2n2jhPhj8hq0fDh/QdZ/XjBXw7+8o5TBsFmsj/ KTYKbsHAPtBSa1iMl53toVydcytRWa87qRsVQ5X6dhdiqwtDv681IQvo7dd87oMm aT9EMledfMWol5UYDQA1p/2s0pVrPqEq65NXRzusWj1Gt2lBY0rJmjBtjQuVGw4/ 31hsYtRGyw0xdjwDZ/nyqRHbPvsIVaq9i1H3ZY+WrXAYfPSD77H03NakZpKyzrWw nVYWVtJoOhPUvYKA8fif4nfv3fSf/erXbzzPbrwxoqpH3D2MqsRZGoPzEGTB4g+F KVv189/H7FsBZUioN36S -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:50 2026 by rpki-client