$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/DDEC8C2A39AA11E9B0166376C4F9AE02.roa File: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (raw, json) Hash identifier: 8aCMHKssPdN319TEwBaL3NJec+4ceW9OeNk+s6B7p4M= Subject key identifier: B7:45:29:E2:D5:3F:75:9F:68:21:F4:EE:D4:FD:1A:35:1B:CD:B9:14 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 10E1 Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/DDEC8C2A39AA11E9B0166376C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:19:06 +0000 ROA not before: Mon 02 Jun 2025 17:39:00 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132816 IP address blocks: 103.25.200.0/22 maxlen: 22 150.107.152.0/22 maxlen: 22 2400:c980::/40 maxlen: 40 2400:c980::/48 maxlen: 48 2400:c980:1::/48 maxlen: 48 2400:c980:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4321 (0x10e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Jun 2 17:39:00 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40489-0f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:b5:4c:1e:d1:ce:01:a3:4f:fd:80:d0:d8: 8a:f7:bd:67:b3:f5:89:20:54:90:8f:2c:e8:f4:76: 60:b4:b1:83:d7:95:0e:24:4c:d6:ca:2a:6a:85:34: 7c:02:73:ea:a7:71:24:26:4f:0d:4e:fd:2e:99:24: 38:ef:2b:6d:40:e0:06:ea:af:3b:23:99:87:c8:b7: c7:7b:0b:af:5f:d8:dc:01:37:b8:04:0a:55:6d:6b: 81:1c:07:e6:65:4c:ab:c0:44:f5:44:15:ce:79:b7: 22:5a:d0:0d:81:6e:15:75:29:b9:f1:85:61:f4:b6: 51:26:28:95:78:2b:1d:5d:1d:71:2d:ba:6f:d5:3f: a6:2c:4a:5a:cc:4a:19:82:ac:36:71:aa:31:b6:e1: a1:a5:6c:fe:73:12:01:81:eb:6a:32:13:9a:d8:58: 60:31:a7:86:1d:9e:a5:0d:2c:38:78:3a:a0:18:48: 87:a9:9c:10:1b:44:cf:bb:93:da:13:2e:c1:54:cb: b0:7d:f9:98:04:31:73:7f:75:3e:76:b1:8c:6f:de: 85:17:32:1c:a0:1c:01:4b:7f:cd:c9:39:ba:e0:78: b8:f6:3d:73:4f:0a:cd:c1:2f:f2:63:9d:71:29:5f: a5:2e:1b:49:7a:48:16:7e:19:cb:e4:cd:22:9b:08: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:45:29:E2:D5:3F:75:9F:68:21:F4:EE:D4:FD:1A:35:1B:CD:B9:14 X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/DDEC8C2A39AA11E9B0166376C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.25.200.0/22 150.107.152.0/22 IPv6: 2400:c980::/40 Signature Algorithm: sha256WithRSAEncryption a2:94:c4:32:11:0d:b4:0d:74:70:b6:58:31:b1:02:19:bf:ac: 3c:c7:27:95:a5:7a:d8:56:0e:0c:59:4f:6f:ea:d4:c2:ef:65: f4:48:f8:02:99:40:96:32:3b:3d:0f:4f:5d:0e:b0:fa:19:f6: 72:b3:8f:98:34:46:ff:3b:cd:80:fb:6b:8b:bc:6f:0c:0c:d0: e8:5a:ce:03:05:aa:c7:93:3e:02:fa:e0:3a:b3:73:c1:e9:9f: e6:32:3a:90:5b:0a:42:e5:9a:c6:e2:b0:51:25:00:ea:c0:97: 8c:4e:11:99:b3:44:a6:91:6b:a2:76:9d:91:34:3d:4c:b6:fe: ac:53:b9:49:5d:3f:e1:ce:a5:38:53:fb:5f:66:e9:7c:51:c0: a9:10:1e:f0:69:09:a5:b2:0b:1e:ac:80:2f:6e:58:40:5d:f5: 29:dd:fa:fb:04:e6:56:c7:76:04:5a:26:35:8c:34:6d:35:ef: 0c:e8:4b:42:e7:03:0c:46:67:58:60:08:34:15:75:17:60:b8: ea:ad:02:9b:7e:b7:c6:1d:56:28:26:8e:bc:78:64:fa:04:c5: 0d:fc:21:01:27:0b:8a:07:6d:18:88:01:16:10:22:00:03:a5: 2f:7e:b8:4d:f9:6d:1e:d4:8d:a1:69:3a:05:41:c2:0d:c0:e2: 93:8f:cb:d5 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgICEOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUwNjAyMTczOTAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDQ4OS0wZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbe1TB7RzgGjT/2A0NiK971ns/WJIFSQjyzo9HZgtLGD15UOJEzWyipqhTR8 AnPqp3EkJk8NTv0umSQ47yttQOAG6q87I5mHyLfHewuvX9jcATe4BApVbWuBHAfm ZUyrwET1RBXOebciWtANgW4VdSm58YVh9LZRJiiVeCsdXR1xLbpv1T+mLEpazEoZ gqw2caoxtuGhpWz+cxIBgetqMhOa2FhgMaeGHZ6lDSw4eDqgGEiHqZwQG0TPu5Pa Ey7BVMuwffmYBDFzf3U+drGMb96FFzIcoBwBS3/NyTm64Hi49j1zTwrNwS/yY51x KV+lLhtJekgWfhnL5M0imwg0pQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFLdFKeLV P3WfaCH07tT9GjUbzbkUMB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMxQTcvN0IwQjY3ODQzOUFBMTFFOThBOEU1Mjc2QzRGOUFFMDIvRERFQzhDMkEz OUFBMTFFOUIwMTY2Mzc2QzRGOUFFMDIucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAS BAIAATAMAwQCZxnIAwQClmuYMA4EAgACMAgDBgAkAMmAADANBgkqhkiG9w0BAQsF AAOCAQEAopTEMhENtA10cLZYMbECGb+sPMcnlaV62FYODFlPb+rUwu9l9Ej4AplA ljI7PQ9PXQ6w+hn2crOPmDRG/zvNgPtri7xvDAzQ6FrOAwWqx5M+AvrgOrNzwemf 5jI6kFsKQuWaxuKwUSUA6sCXjE4RmbNEppFronadkTQ9TLb+rFO5SV0/4c6lOFP7 X2bpfFHAqRAe8GkJpbILHqyAL25YQF31Kd36+wTmVsd2BFomNYw0bTXvDOhLQucD DEZnWGAINBV1F2C46q0Cm363xh1WKCaOvHhk+gTFDfwhAScLigdtGIgBFhAiAAOl L364TfltHtSNoWk6BUHCDcDik4/L1Q== -----END CERTIFICATE-----Generated at Mon Mar 2 14:27:12 2026 by rpki-client