$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/834C938A12C711F09998A234C4F9AE02.roa File: 834C938A12C711F09998A234C4F9AE02.roa (raw, json) Hash identifier: FGFCUH8ClLANdklj2bZ58cKTnItHntcutDN30p2U93k= Subject key identifier: 9D:54:CC:2D:B1:50:95:67:B4:8F:7E:2F:14:06:AC:6B:D8:6A:3E:5A Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0AE2 Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/834C938A12C711F09998A234C4F9AE02.roa Signing time: Tue 24 Mar 2026 19:25:24 +0000 ROA not before: Tue 24 Mar 2026 19:25:24 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137425 IP address blocks: 103.108.60.0/22 maxlen: 22 103.108.60.0/23 maxlen: 23 103.108.60.0/24 maxlen: 24 103.108.61.0/24 maxlen: 24 103.108.62.0/23 maxlen: 23 103.108.62.0/24 maxlen: 24 103.108.63.0/24 maxlen: 24 2406:ebc0::/32 maxlen: 32 2406:ebc0::/36 maxlen: 36 2406:ebc0:1000::/36 maxlen: 36 2406:ebc0:2000::/36 maxlen: 36 2406:ebc0:3000::/36 maxlen: 36 2406:ebc0:4000::/36 maxlen: 36 2406:ebc0:5000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2786 (0xae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: Mar 24 19:25:24 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c2e524-46c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:f7:44:79:ee:98:50:8a:87:ae:94:05:f8: 26:09:c3:55:4c:1a:ae:be:42:f3:24:11:68:63:a1: 51:86:76:32:4f:cd:c2:a4:50:4e:2e:c8:f8:bf:5f: bd:38:b8:c6:6b:53:66:8b:0c:28:97:3b:3d:08:b0: ea:63:0b:5e:66:3e:8a:d7:64:34:ab:22:72:32:28: d0:ee:81:a9:64:c5:64:1e:73:0c:e1:e0:67:55:52: 0d:38:ad:d2:8c:94:1d:93:cf:78:09:81:c1:e0:a5: ae:0c:59:49:74:e9:b2:e1:ed:1f:ea:fd:a0:47:0b: 28:51:28:53:8e:b6:ac:69:3a:19:d8:3c:d2:aa:62: ab:cb:c6:7e:00:7c:96:ec:c3:fa:3e:dc:1d:62:01: 8f:c7:d5:c1:1c:e3:13:1a:5f:b9:b5:19:d3:98:8c: 11:d8:06:b5:4a:f1:85:be:ad:8b:e9:04:16:c9:b4: 14:f5:ce:4b:48:e7:7a:c8:cf:f3:ea:23:55:38:c0: 47:55:8b:13:4b:14:7d:90:a6:33:28:70:58:a9:b0: 2a:ae:a5:f3:59:8f:13:b7:40:53:6d:65:69:e4:72: 6e:ea:eb:9d:41:5c:d9:bd:36:0f:b7:81:14:d9:ce: 9d:ce:a5:37:58:ca:80:52:84:9e:71:e6:45:a5:ad: f6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:54:CC:2D:B1:50:95:67:B4:8F:7E:2F:14:06:AC:6B:D8:6A:3E:5A X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/834C938A12C711F09998A234C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.60.0/22 IPv6: 2406:ebc0::/32 Signature Algorithm: sha256WithRSAEncryption b4:76:cb:f8:24:3d:4a:9b:e0:41:8b:a1:b4:15:7d:bb:e5:8a: de:27:a3:56:f9:06:db:a0:26:d1:9c:3b:9e:1c:93:22:54:4f: ca:2c:f4:2b:8a:6b:fc:88:7b:09:fc:99:34:bf:20:68:e7:be: d9:6e:59:6b:9e:fd:73:21:f3:d3:e9:52:a9:0b:9f:b8:e5:bf: 91:46:35:d2:31:86:46:a3:95:c6:f9:f6:46:70:ca:81:c8:b5: c4:49:a3:5f:c6:d6:d0:e4:45:dc:34:4a:78:2c:8d:81:eb:67: c9:3e:94:2f:45:3c:12:04:a0:93:0b:d8:c6:0b:a5:ed:50:90: 1e:6d:5f:6b:24:2b:d1:9e:62:80:d9:05:8f:1d:17:34:d7:9d: 32:4a:99:d6:47:9d:9a:14:c0:17:71:56:71:9c:62:b4:f9:8f: 37:90:f6:fb:0c:5b:5a:37:a0:1d:53:3f:bd:0c:1a:82:d4:30: e6:57:3b:d9:de:37:55:75:10:65:38:6f:9d:47:af:44:78:67: c1:2c:b9:64:11:32:8c:48:75:b8:77:d2:64:cb:52:0b:3a:61: e0:4d:df:65:5e:34:dd:ab:a6:3c:04:81:d7:60:6c:14:67:7c: a5:54:04:ea:0e:97:00:61:b2:34:5f:f8:b7:86:29:58:5b:7e: 6c:03:fc:e5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjYwMzI0MTkyNTI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWMyZTUyNC00NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAb3RHnumFCKh66UBfgmCcNVTBquvkLzJBFoY6FRhnYyT83CpFBOLsj4v1+9 OLjGa1Nmiwwolzs9CLDqYwteZj6K12Q0qyJyMijQ7oGpZMVkHnMM4eBnVVINOK3S jJQdk894CYHB4KWuDFlJdOmy4e0f6v2gRwsoUShTjrasaToZ2DzSqmKry8Z+AHyW 7MP6PtwdYgGPx9XBHOMTGl+5tRnTmIwR2Aa1SvGFvq2L6QQWybQU9c5LSOd6yM/z 6iNVOMBHVYsTSxR9kKYzKHBYqbAqrqXzWY8Tt0BTbWVp5HJu6uudQVzZvTYPt4EU 2c6dzqU3WMqAUoSeceZFpa32VQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJ1UzC2x UJVntI9+LxQGrGvYaj5aMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTY2RkMvQUIxRjRFQ0E3MjlBMTFFQUFCQkY5MTQxQzRGOUFFMDIvODM0QzkzOEEx MkM3MTFGMDk5OThBMjM0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2w8MA0EAgACMAcDBQAkBuvAMA0GCSqGSIb3DQEBCwUAA4IBAQC0 dsv4JD1Km+BBi6G0FX275YreJ6NW+QbboCbRnDueHJMiVE/KLPQrimv8iHsJ/Jk0 vyBo577Zbllrnv1zIfPT6VKpC5+45b+RRjXSMYZGo5XG+fZGcMqByLXESaNfxtbQ 5EXcNEp4LI2B62fJPpQvRTwSBKCTC9jGC6XtUJAebV9rJCvRnmKA2QWPHRc0150y SpnWR52aFMAXcVZxnGK0+Y83kPb7DFtaN6AdUz+9DBqC1DDmVzvZ3jdVdRBlOG+d R69EeGfBLLlkETKMSHW4d9Jky1ILOmHgTd9lXjTdq6Y8BIHXYGwUZ3ylVATqDpcA YbI0X/i3hilYW35sA/zl -----END CERTIFICATE-----Generated at Thu Mar 26 13:32:34 2026 by rpki-client