$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/2D215B32584111EDBE50107CC4F9AE02.roa File: 2D215B32584111EDBE50107CC4F9AE02.roa (raw, json) Hash identifier: Pa8/tXZDBBcugTIYS0qc4xZU9zj2bowpPp2mEtUG0X8= Subject key identifier: 65:26:15:EF:2E:3A:A9:0C:7D:A3:E9:69:56:28:5E:C5:B6:9F:79:07 Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 0292 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/2D215B32584111EDBE50107CC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:51:47 +0000 ROA not before: Thu 11 Dec 2025 00:09:47 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 142592 IP address blocks: 103.104.244.0/24 maxlen: 24 2402:20c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 658 (0x292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Dec 11 00:09:47 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46ea3-0c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:61:77:85:65:11:87:99:50:4a:e7:98:21:cb: 30:84:74:41:3e:a3:17:f8:ce:5a:ee:fe:fb:e3:f7: 0c:f7:9c:ae:43:47:7c:9f:16:f5:4f:3f:d9:c9:f6: 3f:f7:b0:02:d1:1d:d5:97:c5:0d:ff:71:ef:ac:5e: 55:bf:4f:97:ff:73:7b:16:7c:20:4f:1a:93:8b:b5: ec:ce:5f:f9:bf:82:17:b8:4f:0c:d7:76:ca:9e:8e: d5:c4:ce:fa:34:54:96:76:08:43:7f:6b:65:cf:6d: 34:de:05:05:13:f5:e2:be:f0:81:d3:61:da:da:62: ec:6b:34:6d:00:7c:96:f5:82:4c:17:44:b6:d9:8b: b5:65:e2:5a:56:38:11:e1:0c:ba:08:e9:be:f2:3e: 81:be:d4:98:f6:68:c5:b9:cd:e6:9e:99:fe:12:29: 18:72:56:d9:68:ce:ef:8a:8a:c8:b9:37:a8:5f:18: f8:18:4d:71:db:8c:11:3e:46:c7:25:89:86:87:21: 18:38:35:41:ef:11:de:15:03:29:34:6e:b7:67:aa: 91:c1:4f:d4:72:fd:a1:85:ce:79:18:eb:91:1a:8c: d1:29:bb:6c:ce:29:ea:a8:fb:06:1d:45:51:06:e8: 10:b5:75:89:a5:65:80:11:49:93:d0:ad:62:c4:d1: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:26:15:EF:2E:3A:A9:0C:7D:A3:E9:69:56:28:5E:C5:B6:9F:79:07 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/2D215B32584111EDBE50107CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.244.0/24 IPv6: 2402:20c0:1::/48 Signature Algorithm: sha256WithRSAEncryption c7:ce:f1:b7:d8:26:59:d2:5d:b3:62:af:4a:83:6c:44:fb:fc: c2:96:eb:75:1a:20:63:cd:6c:3d:0c:dd:cf:ad:0c:2f:58:6f: 7d:ab:77:4d:08:03:b3:89:a2:80:dd:1c:13:20:d8:17:34:0f: a8:87:ff:64:4a:20:15:c9:a7:be:f2:88:93:26:42:f7:54:3b: 7e:68:33:a0:74:5f:2b:57:f8:09:d3:67:f0:d2:4d:87:7d:65: d5:f6:58:eb:90:a0:4a:73:ed:70:1b:51:11:86:12:fd:e4:84: f6:92:3c:2c:0f:ea:aa:70:1f:a2:5f:c0:48:d4:de:21:ea:3f: 5c:f0:35:2f:99:f8:29:f9:af:0a:14:21:81:18:dd:27:7b:dc: 6e:25:46:35:1f:48:f0:83:3d:db:df:0f:94:84:fb:1b:6d:16: c7:99:02:7b:2d:8f:85:d8:04:f2:8a:4f:81:15:fe:25:17:93: 3b:7f:13:77:ce:2d:52:19:a4:ed:78:b1:e3:89:cc:60:4d:9d: 90:01:9f:93:d7:ca:3d:73:63:c8:3a:52:74:2e:95:b1:75:f2: 68:e2:61:6f:3c:47:a7:ee:b7:a6:fc:14:3e:dc:88:74:62:d3: e2:cc:4a:6f:3f:c3:be:6c:79:20:84:4d:6d:6d:44:5b:58:99: 57:58:26:77 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUxMjExMDAwOTQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmVhMy0wYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8GF3hWURh5lQSueYIcswhHRBPqMX+M5a7v774/cM95yuQ0d8nxb1Tz/ZyfY/ 97AC0R3Vl8UN/3HvrF5Vv0+X/3N7FnwgTxqTi7Xszl/5v4IXuE8M13bKno7VxM76 NFSWdghDf2tlz2003gUFE/XivvCB02Ha2mLsazRtAHyW9YJMF0S22Yu1ZeJaVjgR 4Qy6COm+8j6BvtSY9mjFuc3mnpn+EikYclbZaM7viorIuTeoXxj4GE1x24wRPkbH JYmGhyEYODVB7xHeFQMpNG63Z6qRwU/Ucv2hhc55GOuRGozRKbtszinqqPsGHUVR BugQtXWJpWWAEUmT0K1ixNF8dwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGUmFe8u OqkMfaPpaVYoXsW2n3kHMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI4QzkvMjE5N0IwOTI1ODNGMTFFRDgxODFFNTdCQzRGOUFFMDIvMkQyMTVCMzI1 ODQxMTFFREJFNTAxMDdDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ2j0MA8EAgACMAkDBwAkAiDAAAEwDQYJKoZIhvcNAQELBQADggEB AMfO8bfYJlnSXbNir0qDbET7/MKW63UaIGPNbD0M3c+tDC9Yb32rd00IA7OJooDd HBMg2Bc0D6iH/2RKIBXJp77yiJMmQvdUO35oM6B0XytX+AnTZ/DSTYd9ZdX2WOuQ oEpz7XAbURGGEv3khPaSPCwP6qpwH6JfwEjU3iHqP1zwNS+Z+Cn5rwoUIYEY3Sd7 3G4lRjUfSPCDPdvfD5SE+xttFseZAnstj4XYBPKKT4EV/iUXkzt/E3fOLVIZpO14 seOJzGBNnZABn5PXyj1zY8g6UnQulbF18mjiYW88R6fut6b8FD7ciHRi0+LMSm8/ w75seSCETW1tRFtYmVdYJnc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:26:05 2026 by rpki-client