$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa File: 2A8DE0F42FA611EB980DEF79C4F9AE02.roa (raw, json) Hash identifier: J461cEphYF9ExJLG4WmmjdszJJ1c691Yg3Tpfr+lnes= Subject key identifier: 6E:7B:DA:E4:C9:B4:3F:57:1B:2D:B9:DE:04:58:2A:13:80:90:F0:A4 Certificate issuer: /CN=A91F3BDE/serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Certificate serial: 0CDE Authority key identifier: 0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:28:56 +0000 ROA not before: Thu 20 Nov 2025 18:08:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139756 IP address blocks: 103.144.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=0CA407F0DD53072FA8A060816919296E6577D682 Validity Not Before: Nov 20 18:08:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46948-cb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:a4:33:46:63:9b:28:ec:cc:b3:91:33:45: 5f:90:d9:5f:1c:7c:f9:64:c7:45:62:52:78:84:39: 80:58:ec:67:c2:4e:84:ed:4e:1c:44:9b:28:09:22: 9a:c5:a0:76:5c:b8:95:1d:a0:ab:bc:80:c1:a6:26: f7:09:f4:63:37:c9:bf:6d:d0:b4:da:7e:4c:f1:d6: 29:22:dd:5b:8a:5e:fd:d5:ab:fc:d0:6f:29:fc:ef: c3:14:d4:eb:10:50:a6:36:16:61:6b:0c:48:fb:ce: d6:51:32:a7:3a:f0:46:59:de:a0:d1:0e:b1:ee:0d: 0a:ac:f8:af:0f:87:17:32:8d:f4:82:72:54:ee:db: 6f:00:3d:ef:2f:a6:d3:1c:0e:de:b8:e5:10:4f:7d: cf:83:9b:1f:00:c6:08:23:c5:79:de:5b:82:9e:00: 55:c6:10:00:d5:7e:dc:74:3a:b0:de:8f:aa:7f:33: a6:a3:dc:8e:55:27:a5:98:45:45:f7:f9:98:8e:78: 8c:f6:04:00:70:00:af:9d:c1:e1:ed:53:d8:95:c2: d5:c2:87:7e:a6:46:0d:48:42:0a:65:fb:61:9c:1a: f5:65:21:d8:c5:ac:3d:81:dd:a2:ae:09:af:71:9a: 76:f2:64:09:39:74:1b:c2:a6:38:b4:c8:b7:3e:b1: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7B:DA:E4:C9:B4:3F:57:1B:2D:B9:DE:04:58:2A:13:80:90:F0:A4 X509v3 Authority Key Identifier: keyid:0C:A4:07:F0:DD:53:07:2F:A8:A0:60:81:69:19:29:6E:65:77:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/DKQH8N1TBy-ooGCBaRkpbmV31oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DKQH8N1TBy-ooGCBaRkpbmV31oI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/50A90E36081411EA8EB5F810C4F9AE02/2A8DE0F42FA611EB980DEF79C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.144.151.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ed:0a:32:93:f0:8f:44:4a:c1:1c:63:8f:d0:9b:63:0b:76: 10:1a:21:8b:d8:22:33:20:66:80:23:11:58:c1:52:5a:2e:2d: 2a:f4:90:da:dd:0e:be:70:a3:f7:4f:23:e7:24:dc:21:60:db: c3:42:61:fa:3d:44:91:d5:01:ab:2f:33:e6:a6:db:49:e2:eb: 65:d2:36:4b:72:ce:a0:88:bf:fd:4a:a1:43:7f:53:2b:66:10: 41:3c:dd:51:5b:a6:ab:36:b7:5b:16:67:17:c9:87:ff:4a:07: 7e:5c:2b:b3:5f:e4:75:c0:17:94:1f:5b:43:88:94:94:3b:eb: 5c:92:1e:a1:bc:95:3d:9a:6d:70:17:1e:c1:66:c6:a3:e0:2a: 8e:25:b8:f0:9e:69:50:87:65:e5:9d:c9:49:af:49:d3:dd:db: aa:1a:f3:7e:3c:4b:9b:b9:07:72:28:36:f5:16:cd:36:55:4f: f0:db:6b:b9:fd:13:bf:54:9e:d1:ec:79:fd:aa:af:8a:cd:42: 10:00:1a:81:52:e1:b6:3e:f4:7a:cc:e9:0d:c1:39:cd:82:a8: 41:4a:df:18:fa:02:20:0b:e5:1a:f6:62:f3:5e:32:b9:66:d9: 70:15:58:89:c6:22:9f:a3:88:04:39:64:cd:93:74:cd:f8:25: 51:d3:55:89 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCREUxMTAvBgNVBAUTKDBDQTQwN0YwREQ1MzA3MkZBOEEwNjA4MTY5MTkyOTZF NjU3N0Q2ODIwHhcNMjUxMTIwMTgwODQyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njk0OC1jYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0ekM0ZjmyjszLORM0VfkNlfHHz5ZMdFYlJ4hDmAWOxnwk6E7U4cRJsoCSKa xaB2XLiVHaCrvIDBpib3CfRjN8m/bdC02n5M8dYpIt1bil791av80G8p/O/DFNTr EFCmNhZhawxI+87WUTKnOvBGWd6g0Q6x7g0KrPivD4cXMo30gnJU7ttvAD3vL6bT HA7euOUQT33Pg5sfAMYII8V53luCngBVxhAA1X7cdDqw3o+qfzOmo9yOVSelmEVF 9/mYjniM9gQAcACvncHh7VPYlcLVwod+pkYNSEIKZfthnBr1ZSHYxaw9gd2irgmv cZp28mQJOXQbwqY4tMi3PrHDMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG572uTJ tD9XGy253gRYKhOAkPCkMB8GA1UdIwQYMBaAFAykB/DdUwcvqKBggWkZKW5ld9aC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0JERS81MEE5MEUzNjA4 MTQxMUVBOEVCNUY4MTBDNEY5QUUwMi9ES1FIOE4xVEJ5LW9vR0NCYVJrcGJtVjMx b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RLUUg4TjFUQnktb29HQ0JhUmtwYm1WMzFvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCREUvNTBBOTBFMzYwODE0MTFFQThFQjVGODEwQzRGOUFFMDIvMkE4REUwRjQy RkE2MTFFQjk4MERFRjc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ5CXMA0GCSqGSIb3DQEBCwUAA4IBAQCA7Qoyk/CPRErBHGOP0Jtj C3YQGiGL2CIzIGaAIxFYwVJaLi0q9JDa3Q6+cKP3TyPnJNwhYNvDQmH6PUSR1QGr LzPmpttJ4utl0jZLcs6giL/9SqFDf1MrZhBBPN1RW6arNrdbFmcXyYf/Sgd+XCuz X+R1wBeUH1tDiJSUO+tckh6hvJU9mm1wFx7BZsaj4CqOJbjwnmlQh2XlnclJr0nT 3duqGvN+PEubuQdyKDb1Fs02VU/w22u5/RO/VJ7R7Hn9qq+KzUIQABqBUuG2PvR6 zOkNwTnNgqhBSt8Y+gIgC+Ua9mLzXjK5ZtlwFViJxiKfo4gEOWTNk3TN+CVR01WJ -----END CERTIFICATE-----Generated at Mon Mar 2 17:40:58 2026 by rpki-client