$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa File: DDFEB10C385E11EB8E85F467C4F9AE02.roa (raw, json) Hash identifier: Zf96iP55f5Jtpq3Ou1kpv1F94L3YI94DnzVRT1WWO7c= Subject key identifier: 0E:44:10:79:AC:81:DB:76:E1:4E:61:05:DB:29:DD:94:C1:51:1C:3B Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Certificate serial: 07B3 Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:10:18 +0000 ROA not before: Mon 22 Dec 2025 21:17:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 139818 IP address blocks: 103.159.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1AF5, serialNumber=81433A63C2D75D0032552C426C43533ECAC83515 Validity Not Before: Dec 22 21:17:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a448ca-03e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:37:0a:eb:46:25:de:8c:3c:fe:56:ff:85: b7:47:2e:de:c7:f9:89:cf:df:d1:ce:ca:02:22:58: 94:49:f1:b2:28:a3:ab:3c:ca:ac:a5:07:e5:64:8d: 5a:9d:4f:34:9e:47:80:68:48:8d:b2:b2:b0:e6:df: 10:19:2a:1b:bc:82:cc:91:17:89:9c:9a:23:7f:b3: f9:31:dd:39:6d:ec:5f:dd:f2:80:0c:04:5b:44:1e: c3:3d:42:04:3d:73:4c:38:d6:68:dd:a2:27:27:86: e6:84:2e:69:24:75:8c:88:84:47:8e:ec:19:5d:c1: 6d:3c:0b:cf:4c:9b:34:0e:bf:6d:18:d5:2f:0a:54: 63:41:c0:8c:cd:fb:de:5d:fa:a6:f5:6b:04:82:10: 68:5f:91:6a:81:d3:72:36:b9:00:6c:15:c0:a4:86: 8e:bf:6c:5f:0d:a8:fd:93:b5:e0:50:47:e1:bb:ef: 26:4b:02:44:a0:dd:1d:8b:16:98:c4:90:cb:be:1d: 13:8d:8d:09:a2:f2:21:a7:d5:b8:c3:26:c4:bf:5d: bc:97:0e:b3:bf:c9:7e:26:d8:f5:50:8a:ee:fc:3b: 80:fa:c2:af:f0:de:5d:bd:2b:7f:09:71:0d:4d:df: ba:8c:06:f3:38:23:ad:a2:ff:4e:93:1b:63:f5:b6: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:10:79:AC:81:DB:76:E1:4E:61:05:DB:29:DD:94:C1:51:1C:3B X509v3 Authority Key Identifier: keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.159.110.0/24 Signature Algorithm: sha256WithRSAEncryption 07:52:9e:5b:0f:f0:b8:02:10:13:b3:d4:d6:3f:f0:ff:a3:21: 09:ef:e0:d0:9f:0e:81:ca:8e:79:0f:8f:fa:5e:f5:09:f3:a5: 74:54:b9:3f:f4:67:43:a0:76:a9:61:6d:75:4a:fe:19:01:01: f9:38:68:c9:27:14:70:eb:78:5a:40:36:43:90:92:8a:f8:f6: aa:e8:05:b8:db:98:ee:e2:3c:65:9b:b8:25:b7:78:6a:1f:70: 5a:4b:ea:14:ca:84:68:e6:d8:5c:82:a0:f9:8d:3c:c4:59:19: 63:41:81:d9:73:06:b1:6a:5f:15:63:d5:f6:cd:c5:da:b5:96: f9:7c:cc:a1:36:6e:b1:16:9b:d5:56:f9:63:ef:1d:dc:b6:c8: 08:6e:28:27:63:18:69:74:e8:6b:d6:e5:19:6b:91:9a:c1:be: 95:32:cf:e5:de:35:97:3f:2a:96:11:ed:73:b1:33:d1:d2:e1: e3:45:de:45:f1:1b:79:16:ea:2c:4e:5b:7a:23:94:62:73:41: 33:40:38:0e:ce:b2:22:07:df:80:20:bf:07:30:25:fb:38:31: 7b:5d:75:a2:1e:06:2b:4e:3c:8f:9d:44:c9:cc:e0:31:31:95: 19:28:83:00:02:59:dc:27:74:e7:53:8a:e2:87:5c:85:2d:50: 34:72:08:4c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFBRjUxMTAvBgNVBAUTKDgxNDMzQTYzQzJENzVEMDAzMjU1MkM0MjZDNDM1MzNF Q0FDODM1MTUwHhcNMjUxMjIyMjExNzM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDhjYS0wM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH03CutGJd6MPP5W/4W3Ry7ex/mJz9/RzsoCIliUSfGyKKOrPMqspQflZI1a nU80nkeAaEiNsrKw5t8QGSobvILMkReJnJojf7P5Md05bexf3fKADARbRB7DPUIE PXNMONZo3aInJ4bmhC5pJHWMiIRHjuwZXcFtPAvPTJs0Dr9tGNUvClRjQcCMzfve Xfqm9WsEghBoX5FqgdNyNrkAbBXApIaOv2xfDaj9k7XgUEfhu+8mSwJEoN0dixaY xJDLvh0TjY0JovIhp9W4wybEv128lw6zv8l+Jtj1UIru/DuA+sKv8N5dvSt/CXEN Td+6jAbzOCOtov9Okxtj9bYjpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA5EEHms gdt24U5hBdsp3ZTBURw7MB8GA1UdIwQYMBaAFIFDOmPC110AMlUsQmxDUz7KyDUV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUFGNS8xNTEwRkI1QzM4 NUQxMUVCQkNCMjA0NjNDNEY5QUUwMi9nVU02WThMWFhRQXlWU3hDYkVOVFBzcklO UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dVTTZZOExYWFFBeVZTeENiRU5UUHNySU5SVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjFBRjUvMTUxMEZCNUMzODVEMTFFQkJDQjIwNDYzQzRGOUFFMDIvRERGRUIxMEMz ODVFMTFFQjhFODVGNDY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ59uMA0GCSqGSIb3DQEBCwUAA4IBAQAHUp5bD/C4AhATs9TWP/D/ oyEJ7+DQnw6Byo55D4/6XvUJ86V0VLk/9GdDoHapYW11Sv4ZAQH5OGjJJxRw63ha QDZDkJKK+Paq6AW425ju4jxlm7glt3hqH3BaS+oUyoRo5thcgqD5jTzEWRljQYHZ cwaxal8VY9X2zcXatZb5fMyhNm6xFpvVVvlj7x3ctsgIbignYxhpdOhr1uUZa5Ga wb6VMs/l3jWXPyqWEe1zsTPR0uHjRd5F8Rt5FuosTlt6I5Ric0EzQDgOzrIiB9+A IL8HMCX7ODF7XXWiHgYrTjyPnUTJzOAxMZUZKIMAAlncJ3TnU4rih1yFLVA0cghM -----END CERTIFICATE-----Generated at Mon Mar 2 11:36:41 2026 by rpki-client