$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/D8D34E92100411EE9849087AC4F9AE02.roa File: D8D34E92100411EE9849087AC4F9AE02.roa (raw, json) Hash identifier: 7JNmlbMqJmYKkSRMUqjjlP0pR2Q9I21oeD7RxmLV6bk= Subject key identifier: 26:D3:1B:78:03:65:AB:31:F4:58:92:65:5F:5D:6B:34:0E:65:2E:10 Certificate issuer: /CN=A91FDCF0/serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Certificate serial: 1826 Authority key identifier: 39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/D8D34E92100411EE9849087AC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:34:48 +0000 ROA not before: Thu 08 Jan 2026 17:14:12 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 132111 IP address blocks: 103.13.75.0/24 maxlen: 24 103.26.170.0/23 maxlen: 24 103.28.162.0/24 maxlen: 24 103.230.124.0/22 maxlen: 24 113.11.188.0/23 maxlen: 24 113.11.190.0/23 maxlen: 24 2001:df0:272::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6182 (0x1826) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCF0, serialNumber=39D09B4A5360808205A9D6914719E0B989CF560B Validity Not Before: Jan 8 17:14:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a44e87-ca8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:1b:a7:6f:37:ee:7f:94:43:2f:1e:01:04: 30:89:15:30:9b:d0:00:05:cb:a1:78:a0:d2:68:02: d3:c3:6e:ae:ba:41:bb:a5:ff:d6:19:de:da:e0:5c: d1:da:8c:d3:d9:1a:33:27:33:ab:74:21:80:2c:6d: 1d:b8:f5:09:b9:a9:5c:82:dd:ae:96:2f:57:08:a6: d3:c0:a5:8e:df:bf:f3:24:d0:6d:b2:49:de:25:fc: 3a:74:55:03:9a:7f:d3:af:4d:98:d8:33:72:62:77: d7:1b:e4:7d:d0:8d:1b:02:99:87:21:ea:76:4f:ba: ca:6e:7a:bd:5e:f4:3a:e0:01:50:2d:49:93:49:a9: f1:d3:7b:f6:a2:dd:5e:4a:ac:54:b4:4e:54:62:ff: d2:6f:21:dc:1d:39:32:11:26:cd:ea:69:cb:e6:a5: 8d:cf:33:5f:66:eb:65:37:47:6c:a1:be:c8:65:10: f0:21:9d:8f:30:91:ad:94:a5:5b:69:e7:7a:c4:52: 46:29:c6:91:07:06:c8:8c:9f:31:f0:ce:98:e5:d5: bf:67:c4:81:ba:a5:aa:27:f7:a5:3b:45:a3:30:52: 8d:30:c4:dd:be:95:6b:61:8d:5c:7a:5e:4f:fb:ff: 7b:5b:5d:f9:33:88:99:95:45:8a:66:e9:5c:cf:71: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D3:1B:78:03:65:AB:31:F4:58:92:65:5F:5D:6B:34:0E:65:2E:10 X509v3 Authority Key Identifier: keyid:39:D0:9B:4A:53:60:80:82:05:A9:D6:91:47:19:E0:B9:89:CF:56:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/OdCbSlNggIIFqdaRRxnguYnPVgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OdCbSlNggIIFqdaRRxnguYnPVgs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCF0/3127B018CEAE11E789784825C4F9AE02/D8D34E92100411EE9849087AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.13.75.0/24 103.26.170.0/23 103.28.162.0/24 103.230.124.0/22 113.11.188.0/22 IPv6: 2001:df0:272::/48 Signature Algorithm: sha256WithRSAEncryption 1f:df:26:ce:87:64:1b:52:4d:4e:44:44:20:ba:2d:25:ee:ce: 72:ac:61:18:c4:c1:89:48:8f:b7:f7:d6:41:48:c6:c1:9e:a9: 1f:63:01:09:b9:de:62:75:ef:c5:5f:3b:69:fa:f4:98:10:c4: 76:5f:2a:82:03:2d:ab:94:45:6a:e8:e3:d5:e4:da:58:86:31: 97:a8:11:70:8a:f8:84:e3:56:73:ae:2e:d4:07:fd:4f:fc:a4: 07:b3:c4:c6:f4:11:78:96:ae:2f:69:bd:8e:db:2e:28:0a:de: 16:99:47:d4:d3:ef:0c:f8:02:05:15:e5:1c:51:f6:64:cb:45: 8b:b5:d5:ab:31:d2:e3:68:ab:1b:a5:42:24:28:06:42:41:f7: b9:be:1e:5e:4b:f2:49:85:d7:e7:c9:97:14:45:d9:ae:d0:10: 3e:80:8c:9b:06:da:82:79:71:0e:a0:50:dd:13:a7:c1:3e:0a: ae:3e:85:9f:0e:8f:20:66:2f:e9:a5:1d:48:90:81:3c:eb:12: 5c:e8:ab:86:04:ed:5a:ec:03:60:c0:5d:35:3a:2c:6b:82:e0: 6d:15:be:70:7f:08:97:74:c0:35:5c:40:66:04:f5:7e:49:c7: ce:6d:19:6f:6b:0f:34:c9:99:a5:89:ec:64:86:a8:bb:7b:23: 3a:33:06:b9 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICGCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRjAxMTAvBgNVBAUTKDM5RDA5QjRBNTM2MDgwODIwNUE5RDY5MTQ3MTlFMEI5 ODlDRjU2MEIwHhcNMjYwMTA4MTcxNDEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGU4Ny1jYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl44bp2837n+UQy8eAQQwiRUwm9AABcuheKDSaALTw26uukG7pf/WGd7a4FzR 2ozT2RozJzOrdCGALG0duPUJualcgt2uli9XCKbTwKWO37/zJNBtskneJfw6dFUD mn/Tr02Y2DNyYnfXG+R90I0bApmHIep2T7rKbnq9XvQ64AFQLUmTSanx03v2ot1e SqxUtE5UYv/SbyHcHTkyESbN6mnL5qWNzzNfZutlN0dsob7IZRDwIZ2PMJGtlKVb aed6xFJGKcaRBwbIjJ8x8M6Y5dW/Z8SBuqWqJ/elO0WjMFKNMMTdvpVrYY1cel5P +/97W135M4iZlUWKZulcz3EXJwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFCbTG3gD Zasx9FiSZV9dazQOZS4QMB8GA1UdIwQYMBaAFDnQm0pTYICCBanWkUcZ4LmJz1YL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGMC8zMTI3QjAxOENF QUUxMUU3ODk3ODQ4MjVDNEY5QUUwMi9PZENiU2xOZ2dJSUZxZGFSUnhuZ3VZblBW Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09kQ2JTbE5nZ0lJRnFkYVJSeG5ndVluUFZncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRDRjAvMzEyN0IwMThDRUFFMTFFNzg5Nzg0ODI1QzRGOUFFMDIvRDhEMzRFOTIx MDA0MTFFRTk4NDkwODdBQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAk BAIAATAeAwQAZw1LAwQBZxqqAwQAZxyiAwQCZ+Z8AwQCcQu8MA8EAgACMAkDBwAg AQ3wAnIwDQYJKoZIhvcNAQELBQADggEBAB/fJs6HZBtSTU5ERCC6LSXuznKsYRjE wYlIj7f31kFIxsGeqR9jAQm53mJ178VfO2n69JgQxHZfKoIDLauURWro49Xk2liG MZeoEXCK+ITjVnOuLtQH/U/8pAezxMb0EXiWri9pvY7bLigK3haZR9TT7wz4AgUV 5RxR9mTLRYu11asx0uNoqxulQiQoBkJB97m+Hl5L8kmF1+fJlxRF2a7QED6AjJsG 2oJ5cQ6gUN0Tp8E+Cq4+hZ8OjyBmL+mlHUiQgTzrElzoq4YE7VrsA2DAXTU6LGuC 4G0VvnB/CJd0wDVcQGYE9X5Jx85tGW9rDzTJmaWJ7GSGqLt7IzozBrk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:08:32 2026 by rpki-client