$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa File: 97E8ACD68E6611EC9EBE626FC4F9AE02.roa (raw, json) Hash identifier: fjG3+8ZC22UxCMS8177A/y6FTGhegxZaMx8Kk6yByAk= Subject key identifier: 61:CC:19:16:46:4C:F5:95:5A:2E:62:F0:33:B7:75:9A:43:25:7A:04 Certificate issuer: /CN=A91289A2/serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Certificate serial: 0461 Authority key identifier: 68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:02:56 +0000 ROA not before: Thu 25 Dec 2025 00:20:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132584 IP address blocks: 103.142.38.0/24 maxlen: 24 103.176.216.0/24 maxlen: 24 103.176.217.0/24 maxlen: 24 202.20.69.0/24 maxlen: 24 203.56.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=68140C15825ED50A03781052ADDE2ECA1A6FEA3A Validity Not Before: Dec 25 00:20:27 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a45520-93cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:6c:b6:97:8c:48:cb:1a:94:1c:7d:d7:45: 3b:c8:01:c1:2c:bb:e2:39:8a:21:3f:c0:76:a8:6d: 8c:72:31:3e:81:b5:09:69:0b:ae:6e:ee:b4:f9:18: bb:14:d1:8d:56:7f:b8:3f:78:21:2a:3d:50:80:79: f4:41:37:5e:24:a9:28:ad:c7:86:0d:80:b4:cf:50: 4f:e9:97:14:7c:70:50:57:ee:6b:11:52:0e:99:76: 94:f0:75:ed:0c:79:d6:c8:c1:0f:2f:30:b9:5b:6c: de:05:ca:88:bb:ae:86:b8:96:ff:57:99:91:ce:1d: fa:ef:03:84:82:b4:1f:27:fb:e1:8c:7f:c5:df:9c: 29:13:35:18:9b:0e:91:4a:ef:b3:a4:28:93:ad:d0: 54:aa:2a:c3:6c:98:71:35:d2:9a:10:7e:67:fb:cd: 53:cb:53:77:9b:e6:cb:6e:3b:3d:ab:09:de:f5:86: e4:87:27:66:ff:9f:05:7a:14:df:0c:68:ea:a3:4a: c7:b9:54:e7:4e:c0:29:8e:7f:6a:fd:29:f3:c4:b5: c8:1f:d5:f5:6a:08:71:13:41:95:c9:9f:a9:87:9e: f8:a8:d3:76:e3:11:36:53:ad:3f:09:6f:02:b6:fb: c0:19:96:a4:4e:1c:f2:5b:d6:32:5b:65:35:75:85: c6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CC:19:16:46:4C:F5:95:5A:2E:62:F0:33:B7:75:9A:43:25:7A:04 X509v3 Authority Key Identifier: keyid:68:14:0C:15:82:5E:D5:0A:03:78:10:52:AD:DE:2E:CA:1A:6F:EA:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/aBQMFYJe1QoDeBBSrd4uyhpv6jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBQMFYJe1QoDeBBSrd4uyhpv6jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/FB52F64E8E6311EC9E015D6DC4F9AE02/97E8ACD68E6611EC9EBE626FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.38.0/24 103.176.216.0/23 202.20.69.0/24 203.56.80.0/24 Signature Algorithm: sha256WithRSAEncryption 32:f2:b5:07:c1:0b:bc:03:5a:19:dc:39:47:e8:87:e6:8f:b7: 86:51:27:9e:32:61:08:ca:df:49:50:d9:50:44:e4:9f:0f:1d: cb:c3:06:ac:d2:e3:7b:42:97:fe:e6:22:44:7f:19:1a:e5:77: ee:0b:ae:ac:0e:dd:31:11:61:7e:25:21:37:88:61:06:f7:15: 95:68:11:d8:08:09:aa:7d:00:0c:c2:b9:69:63:7e:f8:31:3e: a2:af:8b:6d:25:32:c8:53:8e:5a:df:83:e5:97:91:42:2c:6d: ef:d8:d6:6c:bf:6e:47:0b:16:e1:cb:9c:2d:a7:7f:50:7a:d7: 6b:91:d0:f8:8f:91:6b:63:0d:4a:0e:6a:c4:a7:4b:ad:42:27: 76:5b:61:ef:ac:f7:2f:8d:37:6c:93:80:c1:44:a9:74:c6:dd: 7b:29:4d:af:fd:38:df:3a:2e:7b:df:42:fe:7b:c9:29:3b:62: 6c:42:98:48:58:55:9a:f7:eb:03:2c:62:07:b6:5c:df:b0:4d: 20:8d:d6:ef:f6:36:82:1b:e7:9b:fb:de:d7:38:1e:ed:b5:ab: e2:c5:08:fe:84:17:d4:97:c4:a3:41:af:6b:84:92:73:00:f1: 79:ce:92:03:ed:3d:4e:e2:e9:7a:51:0a:fd:6b:0b:a1:ba:39: 2e:61:ce:ce -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDY4MTQwQzE1ODI1RUQ1MEEwMzc4MTA1MkFEREUyRUNB MUE2RkVBM0EwHhcNMjUxMjI1MDAyMDI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTUyMC05M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwRstpeMSMsalBx910U7yAHBLLviOYohP8B2qG2McjE+gbUJaQuubu60+Ri7 FNGNVn+4P3ghKj1QgHn0QTdeJKkorceGDYC0z1BP6ZcUfHBQV+5rEVIOmXaU8HXt DHnWyMEPLzC5W2zeBcqIu66GuJb/V5mRzh367wOEgrQfJ/vhjH/F35wpEzUYmw6R Su+zpCiTrdBUqirDbJhxNdKaEH5n+81Ty1N3m+bLbjs9qwne9Ybkhydm/58FehTf DGjqo0rHuVTnTsApjn9q/SnzxLXIH9X1aghxE0GVyZ+ph574qNN24xE2U60/CW8C tvvAGZakThzyW9YyW2U1dYXGrQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFGHMGRZG TPWVWi5i8DO3dZpDJXoEMB8GA1UdIwQYMBaAFGgUDBWCXtUKA3gQUq3eLsoab+o6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9GQjUyRjY0RThF NjMxMUVDOUUwMTVENkRDNEY5QUUwMi9hQlFNRllKZTFRb0RlQkJTcmQ0dXlocHY2 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCUU1GWUplMVFvRGVCQlNyZDR1eWhwdjZqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5QTIvRkI1MkY2NEU4RTYzMTFFQzlFMDE1RDZEQzRGOUFFMDIvOTdFOEFDRDY4 RTY2MTFFQzlFQkU2MjZGQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZ44mAwQBZ7DYAwQAyhRFAwQAyzhQMA0GCSqGSIb3DQEBCwUAA4IB AQAy8rUHwQu8A1oZ3DlH6Ifmj7eGUSeeMmEIyt9JUNlQROSfDx3Lwwas0uN7Qpf+ 5iJEfxka5XfuC66sDt0xEWF+JSE3iGEG9xWVaBHYCAmqfQAMwrlpY374MT6ir4tt JTLIU45a34Pll5FCLG3v2NZsv25HCxbhy5wtp39QetdrkdD4j5FrYw1KDmrEp0ut Qid2W2HvrPcvjTdsk4DBRKl0xt17KU2v/TjfOi5730L+e8kpO2JsQphIWFWa9+sD LGIHtlzfsE0gjdbv9jaCG+eb+97XOB7ttavixQj+hBfUl8SjQa9rhJJzAPF5zpID 7T1O4ul6UQr9awuhujkuYc7O -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:53 2026 by rpki-client