$ rpki-client -vvf rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa File: 25C61AECB7ED11ED9CF6A63EC4F9AE02.roa (raw, json) Hash identifier: xofse8Wy66MIstuqq88GIwR6LgO/Bu5HVqHK6p5t5Hk= Subject key identifier: BD:2B:CC:3D:F3:96:D4:1D:6C:C8:8D:87:09:30:3F:66:F1:35:1A:D3 Certificate issuer: /CN=A91376FB/serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Certificate serial: 0478 Authority key identifier: 88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:26:35 +0000 ROA not before: Sun 03 Aug 2025 01:07:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131306 IP address blocks: 103.47.230.0/24 maxlen: 24 103.47.231.0/24 maxlen: 24 103.69.108.0/24 maxlen: 24 103.152.9.0/24 maxlen: 24 2001:df3:3a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91376FB, serialNumber=886A0EE6BC7ABDC09FA822E114DF435F0B0E865A Validity Not Before: Aug 3 01:07:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44c9b-2d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:29:26:a5:d0:f2:5a:87:dd:86:4c:c0:b9: 72:89:de:7b:d3:3e:9d:43:6b:46:dc:ed:40:d9:a2: c1:cb:30:75:67:22:1f:8f:d0:8b:68:f3:b4:24:a2: 3b:86:f8:5a:c1:b7:6d:72:11:63:bc:24:49:60:d0: df:e8:1c:65:d3:b9:3a:e7:a1:73:49:00:77:25:90: 47:56:9b:9a:44:b6:40:67:58:1b:c3:02:a5:ce:f9: 7d:dd:e7:97:02:db:03:5e:ff:f0:af:34:a7:f3:4a: 3d:9a:b8:c2:35:0f:a8:2f:6c:6b:23:fa:7b:bf:4b: b7:31:ff:d8:f0:46:b8:2a:af:e2:3e:1f:d4:9a:78: 83:7a:d4:c5:8a:57:a4:2d:e0:7f:c7:71:f3:53:27: b8:1e:be:7e:91:2d:aa:0e:4c:8e:b3:ee:e9:6a:e8: 8f:c3:7e:00:7c:da:98:d0:0e:28:57:49:d2:86:6e: 8e:c6:22:ae:0b:0f:8e:e3:84:6f:9c:81:3a:6d:ab: 3a:e6:ba:5f:70:b5:dd:b2:a8:07:28:58:ce:f6:8b: 53:1d:bc:ac:73:92:9f:01:a0:09:de:40:b7:a7:68: 32:8e:86:b1:3c:d2:80:79:2e:ba:54:37:f4:cd:97: d5:a5:05:64:ca:a7:23:fb:84:ab:e9:f2:43:df:82: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2B:CC:3D:F3:96:D4:1D:6C:C8:8D:87:09:30:3F:66:F1:35:1A:D3 X509v3 Authority Key Identifier: keyid:88:6A:0E:E6:BC:7A:BD:C0:9F:A8:22:E1:14:DF:43:5F:0B:0E:86:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/iGoO5rx6vcCfqCLhFN9DXwsOhlo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iGoO5rx6vcCfqCLhFN9DXwsOhlo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91376FB/92FB71A083F211ECBB251985C4F9AE02/25C61AECB7ED11ED9CF6A63EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.47.230.0/23 103.69.108.0/24 103.152.9.0/24 IPv6: 2001:df3:3a00::/48 Signature Algorithm: sha256WithRSAEncryption 56:e4:38:77:2f:13:3c:6d:a3:eb:11:f5:59:a8:05:f9:74:51: ab:e6:75:56:7b:1c:77:c8:4b:90:34:04:21:7a:d1:a9:00:ae: cc:60:52:f3:ec:ba:01:94:81:3d:b5:66:04:0f:30:d6:7f:07: ad:e2:71:88:0f:ea:2a:9c:8c:6f:fa:86:9b:37:82:72:7d:86: fd:ed:44:10:21:f5:a4:94:52:a1:09:c0:75:59:9e:be:45:91: a1:33:15:b9:fe:85:b8:3c:bb:ed:9e:fe:97:ee:ef:3a:75:74: 78:29:a0:95:1f:0e:09:7f:d3:1c:1f:ac:1c:38:ed:35:0b:f0: df:4f:65:02:f5:56:b9:76:2c:65:72:66:8e:50:a8:11:d8:52: e5:e3:84:64:ee:19:41:d3:db:bd:05:27:01:ca:42:82:2a:ee: 1d:ec:f0:37:96:1f:57:cf:f7:9b:0b:f4:c6:f1:b5:60:b0:56: 7b:2d:df:02:02:4f:0b:05:5d:29:07:53:fd:b7:f0:87:af:78: 58:4b:ff:bd:36:15:c8:9b:31:4c:2e:2c:45:02:0b:43:0f:8e: 32:16:09:1b:16:84:09:52:ca:46:e9:3e:30:61:32:f2:a0:7f: 44:66:15:80:b1:80:9b:69:ea:71:e6:32:68:22:ec:8e:f8:20: ed:3c:3a:6b -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2RkIxMTAvBgNVBAUTKDg4NkEwRUU2QkM3QUJEQzA5RkE4MjJFMTE0REY0MzVG MEIwRTg2NUEwHhcNMjUwODAzMDEwNzUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM5Yi0yZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4GApJqXQ8lqH3YZMwLlyid570z6dQ2tG3O1A2aLByzB1ZyIfj9CLaPO0JKI7 hvhawbdtchFjvCRJYNDf6Bxl07k656FzSQB3JZBHVpuaRLZAZ1gbwwKlzvl93eeX AtsDXv/wrzSn80o9mrjCNQ+oL2xrI/p7v0u3Mf/Y8Ea4Kq/iPh/UmniDetTFilek LeB/x3HzUye4Hr5+kS2qDkyOs+7pauiPw34AfNqY0A4oV0nShm6OxiKuCw+O44Rv nIE6bas65rpfcLXdsqgHKFjO9otTHbysc5KfAaAJ3kC3p2gyjoaxPNKAeS66VDf0 zZfVpQVkyqcj+4Sr6fJD34LD2QIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFL0rzD3z ltQdbMiNhwkwP2bxNRrTMB8GA1UdIwQYMBaAFIhqDua8er3An6gi4RTfQ18LDoZa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzZGQi85MkZCNzFBMDgz RjIxMUVDQkIyNTE5ODVDNEY5QUUwMi9pR29PNXJ4NnZjQ2ZxQ0xoRk45RFh3c09o bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lHb081cng2dmNDZnFDTGhGTjlEWHdzT2hsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc2RkIvOTJGQjcxQTA4M0YyMTFFQ0JCMjUxOTg1QzRGOUFFMDIvMjVDNjFBRUNC N0VEMTFFRDlDRjZBNjNFQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQBZy/mAwQAZ0VsAwQAZ5gJMA8EAgACMAkDBwAgAQ3zOgAwDQYJKoZI hvcNAQELBQADggEBAFbkOHcvEzxto+sR9VmoBfl0UavmdVZ7HHfIS5A0BCF60akA rsxgUvPsugGUgT21ZgQPMNZ/B63icYgP6iqcjG/6hps3gnJ9hv3tRBAh9aSUUqEJ wHVZnr5FkaEzFbn+hbg8u+2e/pfu7zp1dHgpoJUfDgl/0xwfrBw47TUL8N9PZQL1 Vrl2LGVyZo5QqBHYUuXjhGTuGUHT270FJwHKQoIq7h3s8DeWH1fP95sL9MbxtWCw Vnst3wICTwsFXSkHU/238IeveFhL/702FcibMUwuLEUCC0MPjjIWCRsWhAlSykbp PjBhMvKgf0RmFYCxgJtp6nHmMmgi7I74IO08Oms= -----END CERTIFICATE-----Generated at Thu Mar 26 18:54:17 2026 by rpki-client