$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/3C4374804CEC11ECAE6AB280C4F9AE02.roa File: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (raw, json) Hash identifier: jGT9DPCJHSotVx11OyuLlszzlR3EFrAj5UdwSuwi13Y= Subject key identifier: 20:47:40:0F:41:65:84:A0:62:36:7E:5E:B4:A6:6D:0D:91:7D:C2:1E Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 04F7 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/3C4374804CEC11ECAE6AB280C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:46:28 +0000 ROA not before: Fri 31 Oct 2025 00:14:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63991 IP address blocks: 103.176.228.0/23 maxlen: 24 2400:36a0::/32 maxlen: 32 2400:36a0::/48 maxlen: 48 2400:36a0:3c::/48 maxlen: 48 2400:36a0:3f::/48 maxlen: 48 2400:36a0:54::/48 maxlen: 48 2400:36a0:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:54:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Oct 31 00:14:10 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a43524-422b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:05:b4:dd:96:e6:db:ce:1f:2d:2f:b7:9d:3b: e6:b7:d9:d5:e4:07:94:d2:e2:a2:86:7a:5d:b6:36: 46:63:5d:df:62:2d:d3:50:78:01:01:f1:d4:dc:46: 51:3d:29:2b:87:d1:cf:b2:d8:4c:b2:c5:76:83:fc: 7f:d1:81:34:ca:fa:3e:2e:d2:fe:5a:eb:d0:f6:f0: 8c:87:c8:11:81:99:41:77:d6:52:44:6d:05:55:df: 63:fc:ef:b6:b4:fa:ad:30:d2:dd:cb:f0:8b:13:c3: 58:0d:07:b2:4d:3f:2c:52:14:20:c9:33:1b:ce:10: 82:00:62:0c:a5:6d:17:cf:2d:ef:3a:aa:e0:de:65: d2:cd:35:cc:c8:3b:77:8c:60:e0:b5:a0:d2:af:f3: 8c:95:7e:8f:50:5d:3c:30:c6:25:28:6c:a4:3b:32: dc:dd:1b:69:cb:50:b3:d8:14:f9:e1:90:24:e9:95: 72:1b:78:52:dc:85:50:c2:f7:3a:cc:55:e8:ac:a4: ee:95:56:62:c5:19:3c:09:ec:aa:61:13:5a:19:fe: 9e:37:7d:cc:af:9f:af:ce:fc:62:be:0c:5e:4b:38: 6f:b9:a7:07:93:b1:dc:1c:e3:99:e7:9d:3d:3d:ac: c4:ef:05:d3:07:3d:3c:bf:6c:b4:a3:2c:52:f8:10: 54:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:47:40:0F:41:65:84:A0:62:36:7E:5E:B4:A6:6D:0D:91:7D:C2:1E X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/3C4374804CEC11ECAE6AB280C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.176.228.0/23 IPv6: 2400:36a0::/32 Signature Algorithm: sha256WithRSAEncryption 58:e3:fa:a6:d3:ee:b1:f4:64:fd:81:ba:7b:cd:65:d9:c3:63: 0c:cb:fe:7f:2e:59:31:02:ba:8b:af:de:ed:68:21:ab:52:0e: 05:9a:0c:77:62:50:88:d6:90:5d:d4:b7:f1:64:f6:31:ea:38: 66:5f:15:7a:1b:08:65:22:ef:89:c2:0d:16:b1:ec:14:56:e0: d8:be:77:08:58:51:20:e9:ae:09:c3:88:b1:3b:e9:4e:cc:37: 72:cf:de:de:4e:2b:e3:4f:34:b0:81:dd:17:d8:41:01:9f:d0: 5d:00:94:2f:d3:ee:9e:6f:c0:77:7b:40:a1:84:99:c8:91:ae: ab:2a:ec:ab:6f:b0:ef:e8:c6:fd:5d:b3:69:34:05:68:a4:44: 4e:d1:f0:e9:d6:3d:fb:e1:1f:f9:13:21:59:4a:82:d8:5c:0e: 38:38:cd:45:80:c7:45:ce:5c:c4:39:f9:fc:d7:8d:e1:ee:f9: 70:e4:49:65:9d:2a:82:40:3e:a0:d1:ef:36:ee:dd:c9:bc:4c: 89:56:79:8d:80:6a:a9:3d:6a:5e:58:5d:21:84:87:48:38:65: 6e:0a:af:ed:ab:5d:6d:7d:66:ad:b7:98:89:3b:f7:cd:cc:9a: 97:1a:38:37:91:be:4a:98:f5:3c:3c:15:58:33:a9:55:6f:40: 47:8a:ac:7d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUxMDMxMDAxNDEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzUyNC00MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwW03Zbm284fLS+3nTvmt9nV5AeU0uKihnpdtjZGY13fYi3TUHgBAfHU3EZR PSkrh9HPsthMssV2g/x/0YE0yvo+LtL+WuvQ9vCMh8gRgZlBd9ZSRG0FVd9j/O+2 tPqtMNLdy/CLE8NYDQeyTT8sUhQgyTMbzhCCAGIMpW0Xzy3vOqrg3mXSzTXMyDt3 jGDgtaDSr/OMlX6PUF08MMYlKGykOzLc3Rtpy1Cz2BT54ZAk6ZVyG3hS3IVQwvc6 zFXorKTulVZixRk8CeyqYRNaGf6eN33Mr5+vzvxivgxeSzhvuacHk7HcHOOZ5509 PazE7wXTBz08v2y0oyxS+BBUWwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCBHQA9B ZYSgYjZ+XrSmbQ2RfcIeMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjIwODkvRTFDNEE0MUU0Q0U4MTFFQ0JEMDVGQTdDQzRGOUFFMDIvM0M0Mzc0ODA0 Q0VDMTFFQ0FFNkFCMjgwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ7DkMA0EAgACMAcDBQAkADagMA0GCSqGSIb3DQEBCwUAA4IBAQBY 4/qm0+6x9GT9gbp7zWXZw2MMy/5/LlkxArqLr97taCGrUg4Fmgx3YlCI1pBd1Lfx ZPYx6jhmXxV6GwhlIu+Jwg0WsewUVuDYvncIWFEg6a4Jw4ixO+lOzDdyz97eTivj TzSwgd0X2EEBn9BdAJQv0+6eb8B3e0ChhJnIka6rKuyrb7Dv6Mb9XbNpNAVopERO 0fDp1j374R/5EyFZSoLYXA44OM1FgMdFzlzEOfn8143h7vlw5EllnSqCQD6g0e82 7t3JvEyJVnmNgGqpPWpeWF0hhIdIOGVuCq/tq11tfWatt5iJO/fNzJqXGjg3kb5K mPU8PBVYM6lVb0BHiqx9 -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:57 2026 by rpki-client