$ rpki-client -vvf rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/35C8F50C218A11EE959B7037C4F9AE02.roa File: 35C8F50C218A11EE959B7037C4F9AE02.roa (raw, json) Hash identifier: 1pvzyLV21JPKIBe4+vpM9SsFH5SGt6T5Irf10NoZGcc= Subject key identifier: 9E:61:60:F5:5D:6F:FF:F8:E5:F4:E2:93:29:7E:BF:3C:27:45:40:BF Certificate issuer: /CN=A91295B6/serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Certificate serial: 01FD Authority key identifier: 16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/35C8F50C218A11EE959B7037C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:17:22 +0000 ROA not before: Thu 03 Jul 2025 04:08:27 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151606 IP address blocks: 103.238.66.0/23 maxlen: 23 103.238.66.0/24 maxlen: 24 103.238.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91295B6, serialNumber=160E00015D2B58153F3482E8DE947B5F4AD78718 Validity Not Before: Jul 3 04:08:27 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a3f612-dc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:bd:ac:5f:e0:6c:03:63:80:73:67:ed:3c: 23:61:eb:4a:9e:44:7c:d5:4b:48:2a:72:9a:30:b5: e0:ae:96:c8:83:03:8a:ef:e8:19:b0:37:2a:52:76: fd:13:ae:c3:5b:5f:6e:b8:91:e9:89:5b:52:7e:ba: 7c:22:ec:bd:1e:91:f6:19:fd:fc:e6:66:75:f3:01: c6:18:43:dc:75:12:21:34:90:17:a5:b7:f1:e7:cd: 18:70:9b:cc:f7:ac:26:b6:9c:dc:ec:9a:d3:7f:7e: 7e:fe:b0:23:26:9f:95:d8:50:e9:78:51:51:5a:9c: 2e:3e:59:a5:20:e5:fb:ca:7c:19:24:48:fd:13:30: 83:63:ab:10:93:92:3a:1d:15:a9:84:28:51:8e:c9: d6:c5:ce:f4:d4:bb:92:29:68:4e:5f:ce:3a:32:4a: 65:c2:d4:57:e6:6e:52:1a:fa:50:30:b1:5d:0b:6e: c7:cd:3a:f1:77:69:08:b8:54:d2:99:73:99:54:4c: a9:df:d9:50:79:e3:3e:31:86:7a:fd:68:45:c8:12: 5c:e7:cd:74:16:43:59:76:d3:06:b7:24:01:08:c1: fb:94:a8:e8:61:b2:97:8d:f7:8a:57:ab:ba:bc:43: bf:bf:81:bb:5b:c4:21:2b:29:08:14:a9:68:e4:1f: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:61:60:F5:5D:6F:FF:F8:E5:F4:E2:93:29:7E:BF:3C:27:45:40:BF X509v3 Authority Key Identifier: keyid:16:0E:00:01:5D:2B:58:15:3F:34:82:E8:DE:94:7B:5F:4A:D7:87:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/Fg4AAV0rWBU_NILo3pR7X0rXhxg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fg4AAV0rWBU_NILo3pR7X0rXhxg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91295B6/F0730C88216911EEB56F2249C4F9AE02/35C8F50C218A11EE959B7037C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.238.66.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:f5:03:bd:61:92:1c:49:07:2a:71:ec:e5:5c:91:e8:bd:44: a7:04:86:d0:49:a8:2b:0f:63:33:5d:8d:70:50:22:f1:50:1d: 9a:cd:58:6e:0e:36:e7:2e:71:30:43:38:0b:06:a8:ad:6e:5d: 20:a4:62:38:02:21:5f:eb:23:00:05:ee:11:05:d3:96:84:ce: 65:c7:00:ac:24:64:57:90:b9:ca:87:9f:37:f8:a7:aa:ca:50: bd:af:59:80:d2:a6:f9:13:9b:a8:ac:80:16:81:4e:b0:80:87: 77:23:2b:b9:1d:61:8c:17:51:57:44:37:ad:7a:35:73:c1:c4: cb:8d:2e:c9:59:30:51:48:f9:4f:05:a4:ee:4c:de:20:8e:a0: 54:e7:e4:b8:bb:50:57:01:3d:86:4f:07:35:e4:c8:db:91:54: 47:56:79:9e:36:be:f2:d6:5a:11:8c:e8:ed:5f:bc:de:a0:96: 51:75:8d:0d:1f:9d:59:dc:93:30:39:88:4f:d9:ba:65:3a:2c: 8d:9f:f5:a7:5d:e1:15:db:f8:f0:08:53:27:4b:47:1f:f1:df: 36:4b:06:0a:d9:4a:80:d6:6e:16:1f:8f:1b:0f:8c:b7:9b:b7: 93:b4:1c:21:44:9d:50:cc:d0:83:d0:91:64:15:7c:dd:83:5b: 3f:94:c4:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk1QjYxMTAvBgNVBAUTKDE2MEUwMDAxNUQyQjU4MTUzRjM0ODJFOERFOTQ3QjVG NEFENzg3MTgwHhcNMjUwNzAzMDQwODI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjYxMi1kYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AW9rF/gbANjgHNn7TwjYetKnkR81UtIKnKaMLXgrpbIgwOK7+gZsDcqUnb9 E67DW19uuJHpiVtSfrp8Iuy9HpH2Gf385mZ18wHGGEPcdRIhNJAXpbfx580YcJvM 96wmtpzc7JrTf35+/rAjJp+V2FDpeFFRWpwuPlmlIOX7ynwZJEj9EzCDY6sQk5I6 HRWphChRjsnWxc701LuSKWhOX846MkplwtRX5m5SGvpQMLFdC27HzTrxd2kIuFTS mXOZVEyp39lQeeM+MYZ6/WhFyBJc5810FkNZdtMGtyQBCMH7lKjoYbKXjfeKV6u6 vEO/v4G7W8QhKykIFKlo5B9tHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ5hYPVd b//45fTikyl+vzwnRUC/MB8GA1UdIwQYMBaAFBYOAAFdK1gVPzSC6N6Ue19K14cY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTVCNi9GMDczMEM4ODIx NjkxMUVFQjU2RjIyNDlDNEY5QUUwMi9GZzRBQVYwcldCVV9OSUxvM3BSN1gwclho eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnNEFBVjByV0JVX05JTG8zcFI3WDByWGh4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk1QjYvRjA3MzBDODgyMTY5MTFFRUI1NkYyMjQ5QzRGOUFFMDIvMzVDOEY1MEMy MThBMTFFRTk1OUI3MDM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+5CMA0GCSqGSIb3DQEBCwUAA4IBAQCd9QO9YZIcSQcqcezlXJHo vUSnBIbQSagrD2MzXY1wUCLxUB2azVhuDjbnLnEwQzgLBqitbl0gpGI4AiFf6yMA Be4RBdOWhM5lxwCsJGRXkLnKh583+KeqylC9r1mA0qb5E5uorIAWgU6wgId3Iyu5 HWGMF1FXRDetejVzwcTLjS7JWTBRSPlPBaTuTN4gjqBU5+S4u1BXAT2GTwc15Mjb kVRHVnmeNr7y1loRjOjtX7zeoJZRdY0NH51Z3JMwOYhP2bplOiyNn/WnXeEV2/jw CFMnS0cf8d82SwYK2UqA1m4WH48bD4y3m7eTtBwhRJ1QzNCD0JFkFXzdg1s/lMTo -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:38 2026 by rpki-client