$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa File: 6A3FA88A693C11EF8B032237C4F9AE02.roa (raw, json) Hash identifier: Ut6wTzQqWH7gTz2iJzacD5zAQ3RJj3PLXlh5yOWIbT0= Subject key identifier: 27:00:0B:96:AF:D7:01:54:33:D4:62:08:67:38:F0:55:26:DF:EA:2D Certificate issuer: /CN=A91F7D74/serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Certificate serial: 0124 Authority key identifier: D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:17:51 +0000 ROA not before: Tue 29 Apr 2025 06:43:19 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 135319 IP address blocks: 103.214.56.0/22 maxlen: 22 103.214.56.0/24 maxlen: 24 103.214.57.0/24 maxlen: 24 103.214.58.0/24 maxlen: 24 103.214.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7D74, serialNumber=D3DCE17143F9CF5DF8004F8C6597FB2C8CCC7046 Validity Not Before: Apr 29 06:43:19 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59c0f-695a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:50:70:f8:13:50:93:1f:e8:ae:c3:e6:23:ab: bf:b2:ba:0b:71:8a:ff:f0:70:37:6a:ea:f9:2c:03: 1c:c6:29:51:54:d1:11:1a:88:72:b4:97:46:bf:6e: e6:74:eb:a0:73:a5:6a:15:56:1e:93:02:9a:20:43: fb:87:40:82:dd:a9:1c:b0:a8:70:48:d8:73:be:3d: 07:08:16:04:08:c2:87:3c:3b:cb:57:1e:6c:10:d9: 5f:f6:26:75:0a:66:c0:dd:ab:79:2c:00:6d:85:6c: 55:11:98:62:66:fb:3a:68:64:12:10:e4:09:a5:79: 75:f5:d7:83:73:1e:7f:dc:e9:c9:3d:03:32:7b:8d: b8:09:0f:c9:d3:c0:93:cc:4b:0f:d1:f6:fe:cd:06: 3f:61:6b:d6:68:81:f8:35:bf:0e:2d:af:4e:1b:e8: ef:3e:9f:3f:14:7e:c8:f1:e5:82:d2:33:ef:a8:33: 0b:f4:34:69:e9:b9:8b:3f:1b:71:1a:a9:36:ac:42: 8d:63:e8:ca:81:75:a4:87:d4:dd:e5:c3:50:a4:f0: 9f:c4:1c:2f:4d:8f:ef:9e:4f:ec:84:61:f2:6c:d1: da:f1:7c:a6:48:98:6a:2f:2a:9e:b3:a5:25:85:5a: 7b:a6:54:2d:6b:c0:39:c2:f9:0a:4a:1c:3a:5e:08: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:00:0B:96:AF:D7:01:54:33:D4:62:08:67:38:F0:55:26:DF:EA:2D X509v3 Authority Key Identifier: keyid:D3:DC:E1:71:43:F9:CF:5D:F8:00:4F:8C:65:97:FB:2C:8C:CC:70:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/09zhcUP5z134AE-MZZf7LIzMcEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09zhcUP5z134AE-MZZf7LIzMcEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D74/378D9A0A692811EFAF711487C4F9AE02/6A3FA88A693C11EF8B032237C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.214.56.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:e9:7b:0e:2e:ec:6c:e7:aa:17:85:d1:4f:b5:df:17:4d:fa: b2:9c:31:91:08:1b:95:97:91:9a:26:59:9a:4e:7d:0a:b4:97: 1b:77:ba:58:4c:cf:19:a7:0a:d3:31:e2:03:48:76:2b:0c:f5: 73:cb:e8:b8:89:8b:2f:36:fd:61:94:32:35:7d:d2:a0:ad:ff: 8b:fd:73:d9:1e:07:2e:8c:ce:54:8e:74:39:bf:59:3c:8c:d1: 44:77:52:6c:47:a9:b7:f2:53:6a:a1:9b:67:81:a2:9e:28:d8: d8:46:5c:22:84:84:17:45:1c:6f:4a:02:17:3e:5f:3a:26:e4: 67:4d:a8:72:40:42:33:a1:83:89:4c:c3:86:96:f3:42:1c:c1: 5f:6a:38:2e:df:d3:e9:6c:84:4f:ce:0d:73:9c:03:7e:6a:62: d1:0c:4a:26:86:e1:22:57:e1:91:8d:4e:65:1c:6f:ac:15:af: 70:98:73:ef:8c:dd:e9:26:51:ca:50:bb:76:10:12:b8:d7:b0: 16:2e:18:5c:53:6e:dc:c2:04:ab:61:a1:7e:11:a5:93:58:6b: d6:cb:e5:31:f5:45:f3:7d:d8:e8:01:b9:be:cb:df:41:d4:2c: 94:a0:9b:c5:ab:ab:a7:e4:e0:e5:0f:fc:d7:41:94:59:86:62: ae:85:f5:f8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdENzQxMTAvBgNVBAUTKEQzRENFMTcxNDNGOUNGNURGODAwNEY4QzY1OTdGQjJD OENDQzcwNDYwHhcNMjUwNDI5MDY0MzE5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWMwZi02OTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFBw+BNQkx/orsPmI6u/sroLcYr/8HA3aur5LAMcxilRVNERGohytJdGv27m dOugc6VqFVYekwKaIEP7h0CC3akcsKhwSNhzvj0HCBYECMKHPDvLVx5sENlf9iZ1 CmbA3at5LABthWxVEZhiZvs6aGQSEOQJpXl19deDcx5/3OnJPQMye424CQ/J08CT zEsP0fb+zQY/YWvWaIH4Nb8OLa9OG+jvPp8/FH7I8eWC0jPvqDML9DRp6bmLPxtx Gqk2rEKNY+jKgXWkh9Td5cNQpPCfxBwvTY/vnk/shGHybNHa8XymSJhqLyqes6Ul hVp7plQta8A5wvkKShw6XggpWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCcAC5av 1wFUM9RiCGc48FUm3+otMB8GA1UdIwQYMBaAFNPc4XFD+c9d+ABPjGWX+yyMzHBG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0Q3NC8zNzhEOUEwQTY5 MjgxMUVGQUY3MTE0ODdDNEY5QUUwMi8wOXpoY1VQNXoxMzRBRS1NWlpmN0xJek1j RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5emhjVVA1ejEzNEFFLU1aWmY3TEl6TWNFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdENzQvMzc4RDlBMEE2OTI4MTFFRkFGNzExNDg3QzRGOUFFMDIvNkEzRkE4OEE2 OTNDMTFFRjhCMDMyMjM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ9Y4MA0GCSqGSIb3DQEBCwUAA4IBAQAK6XsOLuxs56oXhdFPtd8X TfqynDGRCBuVl5GaJlmaTn0KtJcbd7pYTM8ZpwrTMeIDSHYrDPVzy+i4iYsvNv1h lDI1fdKgrf+L/XPZHgcujM5UjnQ5v1k8jNFEd1JsR6m38lNqoZtngaKeKNjYRlwi hIQXRRxvSgIXPl86JuRnTahyQEIzoYOJTMOGlvNCHMFfajgu39PpbIRPzg1znAN+ amLRDEomhuEiV+GRjU5lHG+sFa9wmHPvjN3pJlHKULt2EBK417AWLhhcU27cwgSr YaF+EaWTWGvWy+Ux9UXzfdjoAbm+y99B1CyUoJvFq6un5ODlD/zXQZRZhmKuhfX4 -----END CERTIFICATE-----Generated at Mon Mar 2 22:19:24 2026 by rpki-client