$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/3AA556009A8411EFB791ED77C4F9AE02.roa File: 3AA556009A8411EFB791ED77C4F9AE02.roa (raw, json) Hash identifier: 6t+wjHRQ/GqT5IcSFRj+6zc7NKRi89qTochP2LMsRS8= Subject key identifier: DA:B9:55:46:09:9C:79:6F:5F:CF:A2:60:C4:BF:DE:FA:F7:69:71:24 Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08A4 Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/3AA556009A8411EFB791ED77C4F9AE02.roa Signing time: Mon 16 Mar 2026 20:27:44 +0000 ROA not before: Mon 16 Mar 2026 20:27:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136897 IP address blocks: 103.39.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 16 20:27:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b867bf-4051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:52:49:3d:e0:f9:07:42:af:ab:d0:4f:fb:ea: 3c:d4:68:94:5d:43:b5:94:2e:ed:14:a2:1a:61:f9: 16:ef:f7:f8:97:53:ef:4a:84:e6:a7:92:41:bf:65: 1f:41:4f:f3:2f:c0:9c:f8:8e:a0:d3:52:c6:7b:b6: 32:2e:4f:bf:9a:a9:89:0d:bc:2c:6b:80:31:08:39: 99:c3:5c:3d:8d:72:ff:3e:f8:9d:0e:73:5a:74:70: 7e:2c:54:86:2e:c1:8c:63:90:cc:a4:5f:92:f8:0e: 9d:f7:11:2f:09:d8:71:92:a7:0d:94:d1:28:f0:54: c2:d8:f7:66:21:1f:ab:00:93:37:43:f8:2c:a7:37: 24:de:57:27:c6:87:9d:9b:e9:55:e4:aa:88:e3:98: 13:11:3b:4f:96:0c:50:d8:53:74:ef:26:ed:88:23: 70:77:31:a1:c0:19:13:24:f1:28:67:9e:e6:54:7e: 53:01:b4:04:17:25:1b:60:a5:2b:b4:32:50:33:29: 51:39:c4:df:9c:5f:8d:e2:55:ac:99:e7:e4:c0:8a: 9a:d7:e9:da:87:b8:eb:c5:17:81:f2:8a:d1:c3:64: c3:9d:e7:fb:54:99:58:21:1a:a6:31:20:ee:db:30: 5d:88:4d:cb:a7:e0:94:f2:c4:4a:b2:e8:61:f0:b3: a7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B9:55:46:09:9C:79:6F:5F:CF:A2:60:C4:BF:DE:FA:F7:69:71:24 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/3AA556009A8411EFB791ED77C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.39.110.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c3:34:37:4e:5b:ce:cc:53:8d:d5:e7:e1:85:99:cd:49:08: 25:c4:5b:e2:b3:d1:dd:b9:1e:2c:d8:13:9b:9c:b0:ed:6f:ac: 49:b5:99:c8:7e:61:2c:9c:64:3b:59:38:44:87:9f:c4:dd:ea: 27:ef:bc:a6:11:1c:58:25:66:93:53:97:10:72:2f:3e:f1:fb: 07:7a:94:8a:74:17:5e:5a:1d:44:da:5f:fc:fd:e6:a9:eb:88: 62:96:c3:90:97:0c:99:5e:9f:4b:cd:9b:b0:d3:0b:80:50:6e: c6:9b:81:67:4a:be:28:6d:6c:4a:2a:a7:02:6e:b4:d5:86:5c: 10:a2:b1:ce:a9:d8:b3:3d:a6:d5:e0:e8:1e:c6:81:ca:6d:6b: ea:86:f9:38:0f:04:a8:5f:4f:ba:1f:c1:9a:f5:50:6e:d0:01: 78:1b:aa:2b:df:74:3b:5b:e0:e2:28:2c:f1:6d:28:56:94:d8: 79:c6:11:e0:9e:b0:93:50:e5:c9:64:06:e6:55:3a:97:80:4b: 16:89:0d:93:5e:09:cb:95:c4:c6:52:f1:79:34:cd:9e:48:9e: 4b:d7:6f:d5:97:5f:f2:4e:c6:9e:30:31:98:1b:0c:7a:a0:ed: 3d:c8:fa:c9:c5:fd:f7:17:6e:b6:09:c5:5b:f1:22:16:61:9d: 92:52:c0:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwMzE2MjAyNzQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4NjdiZi00MDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi1JJPeD5B0Kvq9BP++o81GiUXUO1lC7tFKIaYfkW7/f4l1PvSoTmp5JBv2Uf QU/zL8Cc+I6g01LGe7YyLk+/mqmJDbwsa4AxCDmZw1w9jXL/PvidDnNadHB+LFSG LsGMY5DMpF+S+A6d9xEvCdhxkqcNlNEo8FTC2PdmIR+rAJM3Q/gspzck3lcnxoed m+lV5KqI45gTETtPlgxQ2FN07ybtiCNwdzGhwBkTJPEoZ57mVH5TAbQEFyUbYKUr tDJQMylROcTfnF+N4lWsmefkwIqa1+nah7jrxReB8orRw2TDnef7VJlYIRqmMSDu 2zBdiE3Lp+CU8sRKsuhh8LOnBwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNq5VUYJ nHlvX8+iYMS/3vr3aXEkMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvM0FBNTU2MDA5 QTg0MTFFRkI3OTFFRDc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZyduMA0GCSqGSIb3DQEBCwUAA4IBAQAHwzQ3TlvOzFON1efhhZnN SQglxFvis9HduR4s2BObnLDtb6xJtZnIfmEsnGQ7WThEh5/E3eon77ymERxYJWaT U5cQci8+8fsHepSKdBdeWh1E2l/8/eap64hilsOQlwyZXp9LzZuw0wuAUG7Gm4Fn Sr4obWxKKqcCbrTVhlwQorHOqdizPabV4OgexoHKbWvqhvk4DwSoX0+6H8Ga9VBu 0AF4G6or33Q7W+DiKCzxbShWlNh5xhHgnrCTUOXJZAbmVTqXgEsWiQ2TXgnLlcTG UvF5NM2eSJ5L12/Vl1/yTsaeMDGYGwx6oO09yPrJxf33F262CcVb8SIWYZ2SUsBU -----END CERTIFICATE-----Generated at Thu Mar 26 14:45:01 2026 by rpki-client