$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa File: 32091726626D11ED87BDAC82C4F9AE02.roa (raw, json) Hash identifier: K2gsbb3RIWZ1Guz5GtLGoXVH7gl18al99665lqSZyuE= Subject key identifier: 55:2D:E5:5B:F0:52:3E:FD:3B:A3:57:EE:75:6C:8B:B5:EE:48:03:5F Certificate issuer: /CN=A917F4D3/serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Certificate serial: 0270 Authority key identifier: 91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:54:35 +0000 ROA not before: Thu 29 Jan 2026 01:21:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150406 IP address blocks: 103.35.176.0/23 maxlen: 23 103.35.176.0/24 maxlen: 24 103.35.177.0/24 maxlen: 24 2001:df1:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F4D3, serialNumber=9126EFE50D5E3B531FEEE4549AB30BFE7A545507 Validity Not Before: Jan 29 01:21:37 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4370a-d6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:6f:a0:f5:54:6a:5b:dd:fc:db:a3:40:0c: a8:15:da:37:35:36:a1:0b:38:83:91:6b:f9:5a:ce: 41:93:74:c4:73:90:73:72:e1:7f:bd:25:61:ce:2f: 30:73:01:67:40:1a:d4:50:bd:8a:e7:49:15:d5:12: 71:c5:9d:04:4a:93:bb:8b:ad:dd:01:0e:6d:fd:77: d3:1f:0d:95:2e:5b:9a:87:06:77:04:7f:03:5d:d9: 27:cf:03:0d:2c:35:74:7f:5a:af:73:01:c9:3d:c5: 10:fc:86:42:7b:9c:07:2d:c0:68:66:47:fc:f0:0a: d5:5a:6e:46:d9:eb:1d:54:80:8e:30:09:8d:5a:01: 79:2e:b9:ab:ff:09:f7:bc:98:37:f6:ac:84:43:0e: 7f:b8:c1:bf:78:b5:c5:a2:34:de:73:9e:7c:9d:df: be:51:de:57:81:d1:88:d2:96:57:c4:8c:7e:b2:7f: a0:3c:6c:c2:de:4c:05:2f:e0:6d:97:af:af:51:28: 4f:e7:3d:eb:ca:4f:e8:1c:a4:b7:04:1d:8d:1a:b0: 22:17:8a:6d:06:5d:82:a7:6a:04:4a:50:b1:9a:d2: 1f:31:c2:ac:2a:52:4c:da:94:9a:9f:a7:26:9a:27: 3b:21:60:25:d0:ba:bc:97:2f:6d:98:2c:6c:b7:5d: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2D:E5:5B:F0:52:3E:FD:3B:A3:57:EE:75:6C:8B:B5:EE:48:03:5F X509v3 Authority Key Identifier: keyid:91:26:EF:E5:0D:5E:3B:53:1F:EE:E4:54:9A:B3:0B:FE:7A:54:55:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/kSbv5Q1eO1Mf7uRUmrML_npUVQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSbv5Q1eO1Mf7uRUmrML_npUVQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D3/68034C68626611ED8242C786C4F9AE02/32091726626D11ED87BDAC82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.35.176.0/23 IPv6: 2001:df1:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 63:0b:68:6e:37:82:95:c7:be:7b:6f:04:9d:a2:49:44:9a:c5: 7b:a1:f9:9a:d6:21:0f:94:a7:c2:cc:97:91:30:6b:62:8b:6f: 2a:69:9e:7a:20:64:d0:02:f2:bb:4a:70:3d:2e:fd:2b:7d:d2: be:f5:7e:3f:35:5c:96:4b:4b:68:65:14:cb:1e:1d:24:b5:a2: 19:a1:31:31:fc:63:5f:48:a6:66:fd:4a:e4:c5:01:95:9b:ab: ad:84:40:ec:50:5c:3b:a0:0e:77:47:fb:ef:40:b6:08:4c:89: 03:41:2d:45:a0:02:96:cc:6a:27:45:4c:f3:6d:99:51:7f:ca: ae:55:02:79:2b:87:38:61:3b:8b:ed:b7:41:bd:4d:28:1d:2c: 4f:02:ef:30:f7:6d:50:5b:d1:87:69:4f:c8:36:91:89:0c:62: e8:d7:fa:03:6e:bf:2e:59:31:6f:5d:13:58:d5:a3:9d:91:81: 6f:1d:71:e3:cd:25:9b:29:6b:b6:6a:89:2c:e6:89:e3:5b:69: 45:b5:ce:f0:7f:44:a9:9a:20:72:5b:43:21:a3:0c:1f:f4:47: 00:b3:39:6e:2e:16:20:30:fb:89:9f:df:30:19:3d:c6:4e:4d: 7d:bc:4a:a9:ef:59:4c:57:e7:ac:1d:dd:d1:ee:ae:03:fe:89: c6:03:1f:44 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y0RDMxMTAvBgNVBAUTKDkxMjZFRkU1MEQ1RTNCNTMxRkVFRTQ1NDlBQjMwQkZF N0E1NDU1MDcwHhcNMjYwMTI5MDEyMTM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzcwYS1kNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNxvoPVUalvd/NujQAyoFdo3NTahCziDkWv5Ws5Bk3TEc5BzcuF/vSVhzi8w cwFnQBrUUL2K50kV1RJxxZ0ESpO7i63dAQ5t/XfTHw2VLluahwZ3BH8DXdknzwMN LDV0f1qvcwHJPcUQ/IZCe5wHLcBoZkf88ArVWm5G2esdVICOMAmNWgF5Lrmr/wn3 vJg39qyEQw5/uMG/eLXFojTec558nd++Ud5XgdGI0pZXxIx+sn+gPGzC3kwFL+Bt l6+vUShP5z3ryk/oHKS3BB2NGrAiF4ptBl2Cp2oESlCxmtIfMcKsKlJM2pSan6cm mic7IWAl0Lq8ly9tmCxst11TnwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFUt5Vvw Uj79O6NX7nVsi7XuSANfMB8GA1UdIwQYMBaAFJEm7+UNXjtTH+7kVJqzC/56VFUH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjREMy82ODAzNEM2ODYy NjYxMUVEODI0MkM3ODZDNEY5QUUwMi9rU2J2NVExZU8xTWY3dVJVbXJNTF9ucFVW UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tTYnY1UTFlTzFNZjd1UlVtck1MX25wVVZRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Y0RDMvNjgwMzRDNjg2MjY2MTFFRDgyNDJDNzg2QzRGOUFFMDIvMzIwOTE3MjY2 MjZEMTFFRDg3QkRBQzgyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZyOwMA8EAgACMAkDBwAgAQ3xgMAwDQYJKoZIhvcNAQELBQADggEB AGMLaG43gpXHvntvBJ2iSUSaxXuh+ZrWIQ+Up8LMl5Ewa2KLbyppnnogZNAC8rtK cD0u/St90r71fj81XJZLS2hlFMseHSS1ohmhMTH8Y19Ipmb9SuTFAZWbq62EQOxQ XDugDndH++9AtghMiQNBLUWgApbMaidFTPNtmVF/yq5VAnkrhzhhO4vtt0G9TSgd LE8C7zD3bVBb0YdpT8g2kYkMYujX+gNuvy5ZMW9dE1jVo52RgW8dcePNJZspa7Zq iSzmieNbaUW1zvB/RKmaIHJbQyGjDB/0RwCzOW4uFiAw+4mf3zAZPcZOTX28Sqnv WUxX56wd3dHurgP+icYDH0Q= -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:43 2026 by rpki-client