$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa File: 345AD30E1E1311EE846A3261C4F9AE02.roa (raw, json) Hash identifier: 03kLR+C25ViK6svptIQQKIVeWD8uwE8Zv/L1lnXYNuw= Subject key identifier: 92:F0:62:9E:FF:B3:12:1E:08:CE:8F:1B:89:4C:72:A2:47:10:AB:16 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 01F7 Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:34:04 +0000 ROA not before: Wed 03 Sep 2025 03:51:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151488 IP address blocks: 103.234.16.0/23 maxlen: 23 103.234.16.0/25 maxlen: 25 103.234.16.128/25 maxlen: 25 103.234.17.0/25 maxlen: 25 103.234.17.128/25 maxlen: 25 2001:df2:a7c0::/48 maxlen: 48 2001:df2:a7c0::/64 maxlen: 64 2001:df2:a7c0:1::/64 maxlen: 64 2001:df2:a7c0:2::/64 maxlen: 64 2001:df2:a7c0:3::/64 maxlen: 64 2001:df2:a7c0:4::/64 maxlen: 64 2001:df2:a7c0:5::/64 maxlen: 64 2001:df2:a7c0:6::/64 maxlen: 64 2001:df2:a7c0:7::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Sep 3 03:51:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3ebec-a506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:9f:9e:7d:68:24:c1:42:a5:34:d2:52:db: 90:60:fe:16:9c:c5:15:33:49:ff:d1:b4:1f:f6:2e: c8:01:fe:97:72:e6:ce:6c:99:51:aa:08:c5:68:8c: 59:b2:e4:7d:33:6c:40:3d:ae:da:1c:74:1b:11:4d: 09:43:a5:f1:2c:48:10:9b:66:c6:38:9d:e7:de:01: 67:15:95:a0:71:68:b1:82:06:28:75:29:59:f9:b2: be:0d:ba:80:44:aa:f3:3d:cd:44:89:42:52:1d:54: 66:71:10:44:07:70:43:96:24:8f:3d:e5:5f:33:08: 5a:20:f3:3f:1f:d0:bc:5f:2c:70:35:06:5b:4b:7a: fa:c8:53:1d:ae:33:d9:85:c3:db:4d:0c:6c:b3:58: ac:74:92:94:58:96:1c:51:e6:27:42:f1:1a:50:92: 82:36:1d:7d:e8:1f:15:16:3c:fb:f8:11:72:65:51: 5f:1f:7a:84:4e:68:ba:40:1a:54:4f:cc:09:7c:0e: 74:57:3e:9f:57:2e:ad:d1:ab:bc:f0:04:ed:72:80: 9d:51:1c:9e:75:e9:ad:b9:0f:e3:16:72:5f:a6:e0: 81:84:55:24:c8:bc:aa:df:e0:c0:c3:9f:bf:3d:da: b9:eb:21:db:76:c8:c3:de:64:42:1c:63:02:00:20: 5a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F0:62:9E:FF:B3:12:1E:08:CE:8F:1B:89:4C:72:A2:47:10:AB:16 X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.234.16.0/23 IPv6: 2001:df2:a7c0::/48 Signature Algorithm: sha256WithRSAEncryption 5f:ad:1e:2d:7c:2c:de:e4:3f:e0:57:7e:06:f4:af:32:d9:30: 4d:75:41:33:c7:28:a1:c0:eb:a7:6e:34:d9:9f:10:af:c0:ff: 64:2f:6c:1d:0f:1d:2e:65:a1:a0:a9:d9:aa:c7:ca:23:ef:27: 95:d7:06:22:53:6a:f6:21:1a:ea:59:d6:c1:7e:07:b1:b6:e8: ff:60:2d:7f:27:96:af:ca:11:94:a6:10:2a:94:8d:d7:1f:0f: 87:24:50:a5:66:ad:f8:b5:6a:b8:a0:b9:6e:05:5d:cc:f8:ea: 70:b1:46:b6:5b:02:fb:57:51:00:68:a7:49:2f:8c:32:09:41: 92:f6:9b:b3:fd:07:68:cd:21:d1:0e:31:34:3b:7a:ac:30:01: a1:95:f7:49:0d:0f:89:cc:11:0e:aa:1a:0b:1a:f8:47:30:95: 60:91:38:3f:89:de:8f:99:0b:6f:4d:c4:63:be:0d:cf:1d:63: 64:52:a0:a3:14:a7:c4:41:07:61:9f:db:56:16:97:38:aa:22: bf:78:11:29:c6:3d:74:55:4a:48:8d:55:8d:85:60:13:85:67: e1:bd:83:84:19:3f:96:c3:65:82:59:5a:9b:10:9b:56:c6:dc: 02:89:b6:62:9f:a7:b2:1c:04:bb:9d:87:e6:d9:5c:ba:34:ef: 28:03:e1:50 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjUwOTAzMDM1MTM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWJlYy1hNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjOfnn1oJMFCpTTSUtuQYP4WnMUVM0n/0bQf9i7IAf6XcubObJlRqgjFaIxZ suR9M2xAPa7aHHQbEU0JQ6XxLEgQm2bGOJ3n3gFnFZWgcWixggYodSlZ+bK+DbqA RKrzPc1EiUJSHVRmcRBEB3BDliSPPeVfMwhaIPM/H9C8XyxwNQZbS3r6yFMdrjPZ hcPbTQxss1isdJKUWJYcUeYnQvEaUJKCNh196B8VFjz7+BFyZVFfH3qETmi6QBpU T8wJfA50Vz6fVy6t0au88ATtcoCdURyedemtuQ/jFnJfpuCBhFUkyLyq3+DAw5+/ Pdq56yHbdsjD3mRCHGMCACBa7QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJLwYp7/ sxIeCM6PG4lMcqJHEKsWMB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ2RTQvQUJFN0UwNTYxRTBFMTFFRTkxNzBGNDI5QzRGOUFFMDIvMzQ1QUQzMEUx RTEzMTFFRTg0NkEzMjYxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ+oQMA8EAgACMAkDBwAgAQ3yp8AwDQYJKoZIhvcNAQELBQADggEB AF+tHi18LN7kP+BXfgb0rzLZME11QTPHKKHA66duNNmfEK/A/2QvbB0PHS5loaCp 2arHyiPvJ5XXBiJTavYhGupZ1sF+B7G26P9gLX8nlq/KEZSmECqUjdcfD4ckUKVm rfi1ariguW4FXcz46nCxRrZbAvtXUQBop0kvjDIJQZL2m7P9B2jNIdEOMTQ7eqww AaGV90kND4nMEQ6qGgsa+EcwlWCROD+J3o+ZC29NxGO+Dc8dY2RSoKMUp8RBB2Gf 21YWlziqIr94ESnGPXRVSkiNVY2FYBOFZ+G9g4QZP5bDZYJZWpsQm1bG3AKJtmKf p7IcBLudh+bZXLo07ygD4VA= -----END CERTIFICATE-----Generated at Mon Mar 2 02:36:57 2026 by rpki-client