$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa File: 2DD4424401A211F09D28335BC4F9AE02.roa (raw, json) Hash identifier: 9CADDAJZmgOw1GekSnkxSy/Sscxgt5k8qPmh6aRwoGs= Subject key identifier: E4:9D:43:F9:0E:EC:2E:3C:B7:94:60:0B:02:37:77:F6:8A:23:EC:33 Certificate issuer: /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Certificate serial: 13C9 Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:56:16 +0000 ROA not before: Mon 12 May 2025 17:48:41 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 137827 IP address blocks: 103.115.33.0/24 maxlen: 24 103.139.80.0/24 maxlen: 24 2001:df7:1300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5065 (0x13c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2 Validity Not Before: May 12 17:48:41 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a461a0-070d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bd:bc:85:fa:6a:58:43:3d:30:bf:96:12:fa: a7:4b:83:e2:1a:35:58:fd:b3:31:c9:16:97:ff:82: b6:3d:4c:cf:95:b7:ec:4c:de:58:3e:1f:55:83:82: 07:25:f1:db:ba:bb:b7:7c:7c:da:d7:01:51:3e:40: f3:05:56:46:fe:84:11:b2:c2:5b:f3:0e:99:c7:34: 20:54:53:42:fe:03:6a:15:26:d5:6d:81:a1:c2:d4: 3a:cf:43:9e:1c:a1:a5:9f:69:30:d5:c5:10:bb:89: a5:37:3a:43:4e:ec:26:98:fd:c1:7b:09:ab:36:83: fd:25:d4:30:2a:df:ee:e1:c2:1e:2c:75:c7:10:a1: 88:fe:ad:c3:8f:3d:b0:ac:05:e7:10:ab:3d:d1:65: d3:11:a9:59:4a:43:da:0c:c9:d7:25:32:cc:2a:0f: 8c:e2:c6:6f:95:84:9a:74:5d:82:88:40:ad:5b:a4: de:14:07:c0:63:54:1b:3a:f2:94:31:a6:7e:7f:d7: 7c:a4:ad:7a:34:bf:fa:23:2b:56:39:f1:0c:72:f5: 11:83:a0:74:77:6a:25:ce:6c:c9:72:65:e8:f0:fb: a9:c5:a9:a9:50:92:e8:7e:c5:f2:af:bb:93:ae:95: c1:ab:84:64:64:cf:d5:bd:4d:e9:12:6b:71:46:c3: 05:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9D:43:F9:0E:EC:2E:3C:B7:94:60:0B:02:37:77:F6:8A:23:EC:33 X509v3 Authority Key Identifier: keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/2DD4424401A211F09D28335BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.115.33.0/24 103.139.80.0/24 IPv6: 2001:df7:1300::/48 Signature Algorithm: sha256WithRSAEncryption 4c:7c:f7:bc:ba:5f:47:3b:37:51:e0:bb:f6:5d:ea:3e:d0:da: 03:5a:98:8c:f4:16:e6:4f:47:b9:97:ac:15:11:03:e1:5a:f3: 8d:21:aa:ef:b7:f6:61:28:49:10:d2:62:a1:ca:5e:56:c2:93: fa:e5:ff:16:ab:ae:53:4d:d9:d5:15:27:a7:b8:e8:b4:05:bf: 1f:79:b0:fa:8e:7a:be:08:30:97:f0:ee:0d:f9:ec:b5:5e:eb: d1:80:8f:d5:8c:87:3d:d3:d4:09:72:dc:bf:55:b5:c5:d9:bd: c1:68:f7:6f:2f:15:94:95:0d:e7:63:61:81:cc:d7:52:d0:a7: 6c:07:72:ad:28:ab:38:0f:a7:55:e3:82:48:ce:31:27:78:9a: 71:dd:ed:97:7d:1b:db:84:2a:9d:8b:6d:da:55:da:47:c6:cb: c1:2b:3d:cd:e8:be:8b:3d:88:ea:59:8f:08:5f:74:e7:94:63: b5:fc:e3:30:44:c9:ae:86:0d:55:63:0a:1c:3e:6c:07:ea:90: 92:ac:00:44:2f:10:07:d4:b4:0a:93:29:93:e1:31:f9:f5:64: f5:92:6f:77:4d:7a:ff:a4:94:44:65:d4:5e:bb:dc:d5:93:68: ec:75:06:44:58:8f:70:c6:4f:af:57:1e:86:55:ce:19:ab:9f: e2:59:6d:d7 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICE8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4 ODRBRTY5QTIwHhcNMjUwNTEyMTc0ODQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjFhMC0wNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4r28hfpqWEM9ML+WEvqnS4PiGjVY/bMxyRaX/4K2PUzPlbfsTN5YPh9Vg4IH JfHburu3fHza1wFRPkDzBVZG/oQRssJb8w6ZxzQgVFNC/gNqFSbVbYGhwtQ6z0Oe HKGln2kw1cUQu4mlNzpDTuwmmP3BewmrNoP9JdQwKt/u4cIeLHXHEKGI/q3Djz2w rAXnEKs90WXTEalZSkPaDMnXJTLMKg+M4sZvlYSadF2CiECtW6TeFAfAY1QbOvKU MaZ+f9d8pK16NL/6IytWOfEMcvURg6B0d2olzmzJcmXo8PupxampUJLofsXyr7uT rpXBq4RkZM/VvU3pEmtxRsMFcwIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFOSdQ/kO 7C48t5RgCwI3d/aKI+wzMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUZGRjAvNDRGRUJDOTJBREIyMTFFODlDOUI0NTUzQzRGOUFFMDIvMkRENDQyNDQw MUEyMTFGMDlEMjgzMzVCQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ3MhAwQAZ4tQMA8EAgACMAkDBwAgAQ33EwAwDQYJKoZIhvcNAQEL BQADggEBAEx897y6X0c7N1Hgu/Zd6j7Q2gNamIz0FuZPR7mXrBURA+Fa840hqu+3 9mEoSRDSYqHKXlbCk/rl/xarrlNN2dUVJ6e46LQFvx95sPqOer4IMJfw7g357LVe 69GAj9WMhz3T1Aly3L9VtcXZvcFo928vFZSVDedjYYHM11LQp2wHcq0oqzgPp1Xj gkjOMSd4mnHd7Zd9G9uEKp2LbdpV2kfGy8ErPc3ovos9iOpZjwhfdOeUY7X84zBE ya6GDVVjChw+bAfqkJKsAEQvEAfUtAqTKZPhMfn1ZPWSb3dNev+klERl1F673NWT aOx1BkRYj3DGT69XHoZVzhmrn+JZbdc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:10 2026 by rpki-client