$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/10A8D0E263F611ECB344F979C4F9AE02.roa File: 10A8D0E263F611ECB344F979C4F9AE02.roa (raw, json) Hash identifier: SmcwGq0dD9iTZhV8jdPLgAp8Fs3hII4+H1WFKJpXd7c= Subject key identifier: 2D:E9:2D:C6:0F:9A:64:60:C2:32:7D:1E:11:CB:E3:13:08:B1:8E:5F Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 0507 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/10A8D0E263F611ECB344F979C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:08:06 +0000 ROA not before: Sat 22 Nov 2025 22:45:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 132420 IP address blocks: 103.173.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1287 (0x507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Nov 22 22:45:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46466-cda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:5b:40:3f:7f:ab:1a:27:5b:9b:9e:78:82: e8:b9:0a:57:1f:47:4a:92:5a:28:02:63:29:3d:e6: c9:86:13:9a:ca:5c:69:ec:f2:e1:2c:f7:52:70:bf: 8b:52:b7:f5:da:99:9c:68:77:49:d3:f3:1d:66:95: d8:b5:5f:c9:47:bf:01:78:9a:b6:4d:e7:14:2a:46: 87:6d:e5:b5:38:bb:2b:7a:14:3b:13:d8:99:87:23: 73:a3:ba:a4:37:a2:09:24:6c:5f:51:73:bf:03:64: 39:f6:da:11:c2:d3:39:62:a4:04:5d:84:53:73:cd: 08:24:70:29:03:1f:42:26:2b:73:a7:93:76:50:8f: 01:6e:f5:97:c2:04:f8:c7:d5:1f:45:fc:19:d2:dc: 93:75:b8:16:b4:0a:36:a5:ae:7e:a5:ae:58:33:33: 9b:7b:fe:21:47:52:85:ee:b5:6d:ff:a1:01:cb:d5: 3d:9b:c8:33:a1:0e:b5:85:55:db:e0:30:a0:f9:58: e6:b0:76:2b:94:d9:0c:0d:e1:22:04:75:2c:dc:4f: 6d:b4:bc:d8:49:39:e7:2e:8d:bc:fd:77:6f:07:0a: 00:01:89:23:bf:ab:cd:ed:ba:6f:57:3e:eb:d2:45: c4:55:b8:8e:3b:4e:f7:ad:33:ac:ed:21:0c:4d:5e: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E9:2D:C6:0F:9A:64:60:C2:32:7D:1E:11:CB:E3:13:08:B1:8E:5F X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/10A8D0E263F611ECB344F979C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.173.112.0/24 Signature Algorithm: sha256WithRSAEncryption 12:09:78:a1:13:23:a7:2d:40:a7:75:8d:00:e2:a2:bd:df:c3: a4:f3:98:ae:ad:1c:e9:58:35:5b:9f:2c:51:a5:3d:ed:eb:1b: 80:ab:6b:54:a9:32:f6:10:e6:2f:9c:09:c8:d7:b8:f0:61:68: 4a:a1:9b:ad:14:14:a4:a6:25:8c:ca:60:42:3c:e4:91:a6:32: f9:23:ce:d1:7b:e0:bd:56:76:08:a2:6e:e0:7a:10:f0:b9:9f: 70:2a:96:84:eb:c9:84:8b:cc:d6:38:2e:48:92:06:a9:26:e5: ba:0e:97:bb:fd:94:ab:3e:54:00:5a:84:2f:75:b1:31:be:c8: 62:0c:1c:e4:f8:3f:bf:96:67:83:85:6d:33:f2:dd:e8:1e:84: 13:c6:ac:83:88:06:51:cf:24:8c:c8:e8:22:bd:47:71:62:4e: a6:de:6c:3f:f6:6e:d8:bf:01:e4:76:be:cd:f0:aa:8b:14:e5: 1f:5c:d3:44:a8:66:2f:75:c4:b3:f7:f9:76:15:62:b2:93:a7: e0:6f:2e:bc:aa:90:f9:fb:d5:7a:20:07:b6:35:75:82:cd:6d: c8:ba:ee:98:2c:f0:f3:e0:59:18:14:ef:26:3e:bc:2b:cc:80: 3b:70:41:e9:c9:84:8c:dd:16:55:d7:e5:66:d0:55:c1:9c:14: f6:c9:7a:62 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUxMTIyMjI0NTA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjQ2Ni1jZGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjvJbQD9/qxonW5ueeILouQpXH0dKklooAmMpPebJhhOaylxp7PLhLPdScL+L Urf12pmcaHdJ0/MdZpXYtV/JR78BeJq2TecUKkaHbeW1OLsrehQ7E9iZhyNzo7qk N6IJJGxfUXO/A2Q59toRwtM5YqQEXYRTc80IJHApAx9CJitzp5N2UI8BbvWXwgT4 x9UfRfwZ0tyTdbgWtAo2pa5+pa5YMzObe/4hR1KF7rVt/6EBy9U9m8gzoQ61hVXb 4DCg+VjmsHYrlNkMDeEiBHUs3E9ttLzYSTnnLo28/XdvBwoAAYkjv6vN7bpvVz7r 0kXEVbiOO073rTOs7SEMTV4vPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC3pLcYP mmRgwjJ9HhHL4xMIsY5fMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUMzQTgvMjFGQTAyNzI0QzZDMTFFQ0JCQ0ZBRDI2QzRGOUFFMDIvMTBBOEQwRTI2 M0Y2MTFFQ0IzNDRGOTc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ61wMA0GCSqGSIb3DQEBCwUAA4IBAQASCXihEyOnLUCndY0A4qK9 38Ok85iurRzpWDVbnyxRpT3t6xuAq2tUqTL2EOYvnAnI17jwYWhKoZutFBSkpiWM ymBCPOSRpjL5I87Re+C9VnYIom7gehDwuZ9wKpaE68mEi8zWOC5IkgapJuW6Dpe7 /ZSrPlQAWoQvdbExvshiDBzk+D+/lmeDhW0z8t3oHoQTxqyDiAZRzySMyOgivUdx Yk6m3mw/9m7YvwHkdr7N8KqLFOUfXNNEqGYvdcSz9/l2FWKyk6fgby68qpD5+9V6 IAe2NXWCzW3Iuu6YLPDz4FkYFO8mPrwrzIA7cEHpyYSM3RZV1+Vm0FXBnBT2yXpi -----END CERTIFICATE-----Generated at Mon Mar 2 16:07:53 2026 by rpki-client