$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/336BD320CA6111EA97DD3439C4F9AE02.roa File: 336BD320CA6111EA97DD3439C4F9AE02.roa (raw, json) Hash identifier: vfYvhHIW5M8s6DC2vNEU1oMvibTPBiBIJ+gkrN1jB0w= Subject key identifier: 91:28:28:76:5C:4F:B4:7D:53:B7:D3:AE:C0:07:A2:D5:17:93:9D:DB Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Certificate serial: 08FE Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/336BD320CA6111EA97DD3439C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:59:49 +0000 ROA not before: Thu 10 Apr 2025 19:28:52 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 138649 IP address blocks: 103.135.132.0/22 maxlen: 22 103.135.132.0/23 maxlen: 23 103.135.132.0/24 maxlen: 24 103.135.133.0/24 maxlen: 24 2404:7e40::/32 maxlen: 32 2404:7e40::/48 maxlen: 48 2404:7e40:1::/48 maxlen: 48 2404:7e40:2::/48 maxlen: 48 2404:7e40:3::/48 maxlen: 48 2404:7e40:4::/48 maxlen: 48 2404:7e40:5::/48 maxlen: 48 2404:7e40:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10 Validity Not Before: Apr 10 19:28:52 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a48ca5-166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:4a:4e:b2:63:67:0f:f2:d3:e3:3c:15:9a: 72:39:42:2d:44:b0:df:65:3d:ef:ba:85:05:c2:7e: 68:3d:12:70:9b:d0:a5:ad:b0:7d:9b:d7:a8:cd:b6: 28:4b:22:d7:22:ad:52:83:23:20:4d:aa:79:a4:15: a8:36:12:c8:8c:da:cf:cd:3c:a4:7c:7b:21:7e:9b: 38:bf:9f:c3:d2:6c:b9:1b:d2:2a:3a:60:dc:d5:11: 41:23:cd:b2:51:e4:14:c7:22:b9:38:a7:67:45:d0: 99:a8:79:a3:66:43:c5:50:3d:0a:9c:5c:03:e8:dc: 5d:68:cc:88:f4:09:e1:34:7d:cb:07:78:fe:e6:2b: f7:3e:34:b9:78:46:bb:10:55:a1:62:cf:c9:5c:cf: 5f:1f:e8:74:7f:c4:22:c0:7f:14:2f:ec:22:cf:f8: 66:a0:93:ac:2f:04:fd:9b:5e:8b:74:6f:bc:e8:81: a6:af:ba:a6:29:a0:5f:fd:ca:8d:23:4f:1f:7c:0b: cf:8f:7b:85:c8:e2:e7:5b:69:1f:5c:38:ce:52:23: a2:b7:28:cc:8a:65:da:a0:4e:d6:da:c8:c1:15:90: b4:f5:2d:39:90:92:6f:7e:67:67:f8:d0:9a:92:a1: 62:d3:d9:25:83:c2:f8:1a:53:05:9d:a7:90:dc:d2: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:28:28:76:5C:4F:B4:7D:53:B7:D3:AE:C0:07:A2:D5:17:93:9D:DB X509v3 Authority Key Identifier: keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/336BD320CA6111EA97DD3439C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.132.0/22 IPv6: 2404:7e40::/32 Signature Algorithm: sha256WithRSAEncryption 74:fe:d0:83:da:b4:34:e1:b1:4f:44:c8:a9:0f:2c:a4:1d:bc: 5d:de:dd:80:4c:be:fc:5d:fe:c0:7e:e7:d4:5f:d8:4f:61:8d: 19:02:e1:4d:ce:82:06:df:bc:c4:d8:99:dc:0e:98:ce:91:43: 04:4a:e3:cf:06:7b:65:4e:ac:31:67:cd:db:5a:a5:43:b1:31: 75:20:84:00:3b:58:93:0a:30:6b:38:85:5a:2d:f6:15:c8:1f: 0f:89:32:ef:ff:69:9f:0c:2d:85:d6:85:64:1b:46:81:06:2e: 76:ec:6a:75:b6:a9:03:32:df:9e:e2:b7:54:c8:9a:99:12:69: 14:54:6c:da:11:02:36:7a:a2:41:92:8e:eb:48:d3:8c:cc:0c: a5:d3:1e:9e:49:33:c0:b7:69:49:f4:f1:39:89:9a:7b:28:53: 1f:6f:37:4a:5d:13:66:be:6a:44:f7:aa:59:f2:98:43:df:4b: 41:29:bd:8c:45:4a:9e:b9:ae:68:4e:cf:ef:53:ff:f7:cd:87: 2a:98:30:0e:a1:dc:5f:de:0e:0d:d1:a4:07:18:e5:21:f5:fe: 3a:95:d0:49:fb:21:3a:91:c4:45:a7:40:ca:c0:f4:34:58:71: e5:0d:58:f6:36:80:92:63:7c:57:d5:40:29:92:54:df:fb:a1: 9b:d0:e1:a6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4 M0QwMUJCMTAwHhcNMjUwNDEwMTkyODUyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGNhNS0xNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj1KTrJjZw/y0+M8FZpyOUItRLDfZT3vuoUFwn5oPRJwm9ClrbB9m9eozbYo SyLXIq1SgyMgTap5pBWoNhLIjNrPzTykfHshfps4v5/D0my5G9IqOmDc1RFBI82y UeQUxyK5OKdnRdCZqHmjZkPFUD0KnFwD6NxdaMyI9AnhNH3LB3j+5iv3PjS5eEa7 EFWhYs/JXM9fH+h0f8QiwH8UL+wiz/hmoJOsLwT9m16LdG+86IGmr7qmKaBf/cqN I08ffAvPj3uFyOLnW2kfXDjOUiOityjMimXaoE7W2sjBFZC09S05kJJvfmdn+NCa kqFi09klg8L4GlMFnaeQ3NK+WQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJEoKHZc T7R9U7fTrsAHotUXk53bMB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1 eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjczMTUvODIwNkY4MzIzMkUyMTFFQTk5QTQzRTY0QzRGOUFFMDIvMzM2QkQzMjBD QTYxMTFFQTk3REQzNDM5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4eEMA0EAgACMAcDBQAkBH5AMA0GCSqGSIb3DQEBCwUAA4IBAQB0 /tCD2rQ04bFPRMipDyykHbxd3t2ATL78Xf7AfufUX9hPYY0ZAuFNzoIG37zE2Jnc DpjOkUMESuPPBntlTqwxZ83bWqVDsTF1IIQAO1iTCjBrOIVaLfYVyB8PiTLv/2mf DC2F1oVkG0aBBi527Gp1tqkDMt+e4rdUyJqZEmkUVGzaEQI2eqJBko7rSNOMzAyl 0x6eSTPAt2lJ9PE5iZp7KFMfbzdKXRNmvmpE96pZ8phD30tBKb2MRUqeua5oTs/v U//3zYcqmDAOodxf3g4N0aQHGOUh9f46ldBJ+yE6kcRFp0DKwPQ0WHHlDVj2NoCS Y3xX1UApklTf+6Gb0OGm -----END CERTIFICATE-----Generated at Mon Mar 2 07:17:05 2026 by rpki-client