$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa File: 9C53117E83FB11EBB159507AC4F9AE02.roa (raw, json) Hash identifier: euM4m6y+HWeOgBOgRlKJkFwGXEQIRQ/gnzbJUpnYNh0= Subject key identifier: E2:7F:B3:4F:58:01:F3:93:50:6F:2B:81:95:86:D9:87:E5:8A:08:E2 Certificate issuer: /CN=A91F33D6/serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Certificate serial: 06F9 Authority key identifier: 82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:44:11 +0000 ROA not before: Mon 21 Apr 2025 15:08:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 139879 IP address blocks: 103.164.48.0/23 maxlen: 23 103.164.48.0/24 maxlen: 24 103.164.49.0/24 maxlen: 24 2001:df6:3c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33D6, serialNumber=82A3E4E02185FFB71AC6C698C067548D9CC18710 Validity Not Before: Apr 21 15:08:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3fc5b-12df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:77:e7:d4:03:11:b9:d5:29:6e:8a:a6:85:43: 04:1e:2f:14:c4:bf:a3:05:14:ea:68:1a:9f:30:06: 2d:bc:b9:f7:b6:73:3c:97:1d:24:fe:42:a3:59:6d: 62:06:92:52:c1:66:72:45:95:0a:7c:a0:be:b7:55: 4d:c9:a1:f6:c8:62:bc:3e:c4:9a:88:03:b7:49:77: e5:9b:d6:a3:d7:66:15:34:65:34:9c:b3:3d:36:77: 44:3c:8a:c6:04:62:9f:b2:2e:fa:d9:5c:e5:20:2c: f9:c5:23:ea:fa:b3:c8:5e:9b:5e:ed:08:d7:94:0f: 5d:32:82:c7:50:9b:d0:f5:e2:b8:b0:25:b2:a5:ca: a5:19:cf:1e:c9:a4:bd:0d:1d:cf:c0:e9:14:b9:fe: bf:62:bf:c3:38:27:de:d6:10:c8:d0:b4:11:33:1b: 6b:5e:e2:14:5a:d5:80:39:bf:77:bd:f5:72:c9:79: b0:90:14:26:b7:33:be:ba:eb:a4:e9:5b:c0:72:af: 8f:81:ca:9b:9c:22:cd:a4:4e:d7:d2:af:89:b5:7a: 1e:95:bf:c3:dc:73:e7:25:57:2f:7d:fc:c3:70:a3: 53:4e:87:ae:93:0a:d5:1f:9d:9a:10:c6:21:20:09: b7:23:27:44:03:b7:57:98:ed:29:91:be:4b:da:62: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:B3:4F:58:01:F3:93:50:6F:2B:81:95:86:D9:87:E5:8A:08:E2 X509v3 Authority Key Identifier: keyid:82:A3:E4:E0:21:85:FF:B7:1A:C6:C6:98:C0:67:54:8D:9C:C1:87:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/gqPk4CGF_7caxsaYwGdUjZzBhxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gqPk4CGF_7caxsaYwGdUjZzBhxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33D6/83B6519683F911EBA7157777C4F9AE02/9C53117E83FB11EBB159507AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.164.48.0/23 IPv6: 2001:df6:3c80::/48 Signature Algorithm: sha256WithRSAEncryption 38:c4:3e:3f:bb:20:08:2a:21:a5:24:eb:3c:b4:73:84:dc:0e: c0:f4:6e:66:fc:53:81:4e:d8:84:dd:b4:c8:23:56:d5:d8:28: 8e:c5:15:64:1a:44:c0:4f:45:dc:b4:2a:35:99:38:50:43:98: 90:3f:79:c1:ce:2f:27:3f:24:84:e9:cf:3d:b8:64:a2:07:94: 60:9a:4f:98:f7:59:25:93:d9:82:7a:d1:65:b3:91:2c:cc:42: e4:95:76:a3:24:56:7c:49:90:2d:66:71:60:9f:da:37:42:6d: 89:97:59:fe:a9:82:f3:bd:3a:4d:00:dd:e6:53:73:73:79:ef: 97:fc:8c:d2:3c:56:40:25:bc:ee:14:d6:a0:2f:bb:ed:3d:e5: 74:e8:38:3a:04:3c:3d:08:0d:13:51:8a:a2:2a:c5:f2:49:a1: 14:63:39:b0:e6:20:97:e4:a5:86:49:32:1c:fa:b8:f0:db:18: 6d:73:af:3e:7a:a4:57:6f:64:2a:d5:23:36:c9:d8:b9:0b:c2: 9a:a9:ea:93:95:6f:e1:4b:85:61:a7:d6:b0:47:38:aa:5f:f6: 62:28:2f:d2:f3:5e:61:b1:f7:f9:55:cd:29:e7:75:3f:6d:b2: 56:a8:79:9a:bb:e0:61:5a:f4:66:2f:c6:c0:cb:9d:c5:c4:55: 39:b6:38:45 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzRDYxMTAvBgNVBAUTKDgyQTNFNEUwMjE4NUZGQjcxQUM2QzY5OEMwNjc1NDhE OUNDMTg3MTAwHhcNMjUwNDIxMTUwODUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmM1Yi0xMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnfn1AMRudUpboqmhUMEHi8UxL+jBRTqaBqfMAYtvLn3tnM8lx0k/kKjWW1i BpJSwWZyRZUKfKC+t1VNyaH2yGK8PsSaiAO3SXflm9aj12YVNGU0nLM9NndEPIrG BGKfsi762VzlICz5xSPq+rPIXpte7QjXlA9dMoLHUJvQ9eK4sCWypcqlGc8eyaS9 DR3PwOkUuf6/Yr/DOCfe1hDI0LQRMxtrXuIUWtWAOb93vfVyyXmwkBQmtzO+uuuk 6VvAcq+PgcqbnCLNpE7X0q+JtXoelb/D3HPnJVcvffzDcKNTToeukwrVH52aEMYh IAm3IydEA7dXmO0pkb5L2mLijwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOJ/s09Y AfOTUG8rgZWG2YfligjiMB8GA1UdIwQYMBaAFIKj5OAhhf+3GsbGmMBnVI2cwYcQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNENi84M0I2NTE5Njgz RjkxMUVCQTcxNTc3NzdDNEY5QUUwMi9ncVBrNENHRl83Y2F4c2FZd0dkVWpaekJo eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dxUGs0Q0dGXzdjYXhzYVl3R2RValp6Qmh4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMzRDYvODNCNjUxOTY4M0Y5MTFFQkE3MTU3Nzc3QzRGOUFFMDIvOUM1MzExN0U4 M0ZCMTFFQkIxNTk1MDdBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6QwMA8EAgACMAkDBwAgAQ32PIAwDQYJKoZIhvcNAQELBQADggEB ADjEPj+7IAgqIaUk6zy0c4TcDsD0bmb8U4FO2ITdtMgjVtXYKI7FFWQaRMBPRdy0 KjWZOFBDmJA/ecHOLyc/JITpzz24ZKIHlGCaT5j3WSWT2YJ60WWzkSzMQuSVdqMk VnxJkC1mcWCf2jdCbYmXWf6pgvO9Ok0A3eZTc3N575f8jNI8VkAlvO4U1qAvu+09 5XToODoEPD0IDRNRiqIqxfJJoRRjObDmIJfkpYZJMhz6uPDbGG1zrz56pFdvZCrV IzbJ2LkLwpqp6pOVb+FLhWGn1rBHOKpf9mIoL9LzXmGx9/lVzSnndT9tslaoeZq7 4GFa9GYvxsDLncXEVTm2OEU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:32:01 2026 by rpki-client