$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/1B97FEB84E8111ECA3589560C4F9AE02.roa File: 1B97FEB84E8111ECA3589560C4F9AE02.roa (raw, json) Hash identifier: eI8p6HpzXJysOZ1MQfoUzQgPrBgjI04EZmU1r+INUvU= Subject key identifier: 62:2F:6C:D9:FC:D9:40:34:19:67:34:04:52:3C:76:61:81:B5:71:79 Certificate issuer: /CN=A91EDF00/serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Certificate serial: 04FB Authority key identifier: A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/1B97FEB84E8111ECA3589560C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:06:05 +0000 ROA not before: Thu 26 Feb 2026 08:24:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 149034 IP address blocks: 103.177.52.0/23 maxlen: 24 2400:3820::/32 maxlen: 32 2400:3820:2::/48 maxlen: 48 2400:3820:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDF00, serialNumber=A33CCA81B55E04655D1B5A7E2CE688C3E46FC530 Validity Not Before: Feb 26 08:24:38 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a471fd-1736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:59:eb:14:3e:35:ca:f2:fb:b9:51:12:56: e5:26:ec:15:64:7e:6b:07:37:de:59:45:be:a7:5d: 3a:fc:99:bb:ed:fc:00:ce:d8:7d:11:e9:48:a5:50: f1:68:d5:3a:5e:77:e6:bc:c6:61:bd:53:ae:83:36: a4:93:26:be:b3:e3:19:c2:93:d8:d4:df:e7:5d:17: f7:91:f6:e7:e6:e6:b8:54:56:cc:a8:c4:2e:f8:2f: ed:67:4d:0c:d4:30:07:dd:45:48:93:4e:7e:51:5f: 07:db:d7:16:a6:54:a1:85:ba:66:ee:f0:95:1d:2f: 5f:ae:03:29:83:6e:f3:57:c6:02:7c:8d:e5:7a:d7: 28:06:3b:b9:d0:fc:0f:d0:5d:ec:ae:13:f5:3d:8a: d0:58:73:41:50:9c:0d:e0:92:cc:39:96:c1:7f:5f: 25:ba:59:5f:f7:ad:03:29:f0:a2:be:57:b0:d5:b6: 27:9e:6e:43:ad:2a:90:98:26:29:5e:9b:98:cf:af: 36:48:8b:98:a6:e6:b5:69:bb:e4:63:f6:96:f7:45: 4a:25:87:8f:a9:ca:d4:5e:d5:fb:ec:52:ab:6a:e8: c7:c3:5c:53:21:d2:5f:70:da:ac:d2:fa:f1:bb:ad: d8:f0:ee:d0:03:10:ce:46:c3:fe:d9:64:82:24:e8: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2F:6C:D9:FC:D9:40:34:19:67:34:04:52:3C:76:61:81:B5:71:79 X509v3 Authority Key Identifier: keyid:A3:3C:CA:81:B5:5E:04:65:5D:1B:5A:7E:2C:E6:88:C3:E4:6F:C5:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/ozzKgbVeBGVdG1p-LOaIw-RvxTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ozzKgbVeBGVdG1p-LOaIw-RvxTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDF00/3AE0034A4E7E11EC9E298429C4F9AE02/1B97FEB84E8111ECA3589560C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.177.52.0/23 IPv6: 2400:3820::/32 Signature Algorithm: sha256WithRSAEncryption 0c:ae:3c:4d:54:9c:db:96:d0:f9:a9:fd:d1:b1:32:fc:28:a6: 5b:52:d2:e7:59:01:ab:e1:f4:fb:5d:ea:a2:80:60:f4:fa:c2: f7:86:7b:5d:43:af:6e:69:35:11:79:41:a1:7a:3a:cc:89:61: fd:ff:c6:0a:de:a6:c6:4d:ef:79:4f:d0:76:04:e7:4a:43:bd: 85:70:27:9a:4d:16:ce:ab:5d:f6:d8:cd:66:63:f7:a2:9d:82: 41:de:4e:6a:97:92:96:37:bc:83:f6:ea:b6:6e:52:eb:37:f2: e3:a9:34:61:a7:79:16:61:58:62:9e:bd:ac:c1:42:7e:33:26: 5c:c1:69:0c:e0:11:69:ef:bb:02:27:e2:3a:ac:81:8e:08:23: c7:99:37:3d:a7:ba:5f:9d:ad:67:e5:b6:ca:88:af:71:bd:a7: 23:7e:e8:43:30:8d:cc:77:2b:ed:6a:b4:cf:70:4f:f4:b9:a4: aa:a0:e0:0a:da:e3:b9:c8:05:94:84:3b:74:42:60:31:bc:3b: 0f:12:b9:28:78:57:ea:e5:5e:56:7e:36:5d:4d:35:dd:56:f0: fd:ed:1c:68:8b:f6:1f:18:59:a0:75:38:0a:8c:9a:2c:2a:1b: 09:46:d7:39:1a:0c:47:6b:87:98:c5:29:ef:68:2c:a0:d5:ca: 63:d8:b0:1b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGMDAxMTAvBgNVBAUTKEEzM0NDQTgxQjU1RTA0NjU1RDFCNUE3RTJDRTY4OEMz RTQ2RkM1MzAwHhcNMjYwMjI2MDgyNDM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzFmZC0xNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VFZ6xQ+Ncry+7lRElblJuwVZH5rBzfeWUW+p106/Jm77fwAzth9EelIpVDx aNU6XnfmvMZhvVOugzakkya+s+MZwpPY1N/nXRf3kfbn5ua4VFbMqMQu+C/tZ00M 1DAH3UVIk05+UV8H29cWplShhbpm7vCVHS9frgMpg27zV8YCfI3letcoBju50PwP 0F3srhP1PYrQWHNBUJwN4JLMOZbBf18lullf960DKfCivlew1bYnnm5DrSqQmCYp XpuYz682SIuYpua1abvkY/aW90VKJYePqcrUXtX77FKraujHw1xTIdJfcNqs0vrx u63Y8O7QAxDORsP+2WSCJOh5yQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGIvbNn8 2UA0GWc0BFI8dmGBtXF5MB8GA1UdIwQYMBaAFKM8yoG1XgRlXRtafizmiMPkb8Uw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREYwMC8zQUUwMDM0QTRF N0UxMUVDOUUyOTg0MjlDNEY5QUUwMi9venpLZ2JWZUJHVmRHMXAtTE9hSXctUnZ4 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL296ektnYlZlQkdWZEcxcC1MT2FJdy1SdnhUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURGMDAvM0FFMDAzNEE0RTdFMTFFQzlFMjk4NDI5QzRGOUFFMDIvMUI5N0ZFQjg0 RTgxMTFFQ0EzNTg5NTYwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ7E0MA0EAgACMAcDBQAkADggMA0GCSqGSIb3DQEBCwUAA4IBAQAM rjxNVJzbltD5qf3RsTL8KKZbUtLnWQGr4fT7XeqigGD0+sL3hntdQ69uaTUReUGh ejrMiWH9/8YK3qbGTe95T9B2BOdKQ72FcCeaTRbOq1322M1mY/einYJB3k5ql5KW N7yD9uq2blLrN/LjqTRhp3kWYVhinr2swUJ+MyZcwWkM4BFp77sCJ+I6rIGOCCPH mTc9p7pfna1n5bbKiK9xvacjfuhDMI3MdyvtarTPcE/0uaSqoOAK2uO5yAWUhDt0 QmAxvDsPErkoeFfq5V5WfjZdTTXdVvD97Rxoi/YfGFmgdTgKjJosKhsJRtc5GgxH a4eYxSnvaCyg1cpj2LAb -----END CERTIFICATE-----Generated at Mon Mar 2 04:11:51 2026 by rpki-client