$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/0C8BE222C89F11EF972B8B0FC4F9AE02.roa File: 0C8BE222C89F11EF972B8B0FC4F9AE02.roa (raw, json) Hash identifier: iV/MInNHo2LobUXyb+9etutWIXIjmkHKsXN/PC7Q7A8= Subject key identifier: C5:4F:32:FD:C7:B6:EF:A9:B4:E3:EC:A4:C1:1B:8B:BE:14:04:4A:D3 Certificate issuer: /CN=A91881D5/serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Certificate serial: FC Authority key identifier: 53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/0C8BE222C89F11EF972B8B0FC4F9AE02.roa Signing time: Tue 03 Mar 2026 06:41:30 +0000 ROA not before: Tue 03 Mar 2026 06:41:30 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135326 IP address blocks: 103.209.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D5, serialNumber=5344D6BB37EA0CC391D124207AD995FCD77B9E95 Validity Not Before: Mar 3 06:41:30 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a6829a-d6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:14:16:89:a3:7f:80:4b:08:f8:b8:d9:05: 72:a7:07:86:41:b7:95:bb:14:c2:c3:46:80:b1:25: fc:fe:b6:22:d3:35:d5:3a:0b:ff:c3:0f:6d:e8:dc: a7:5d:c8:e0:44:42:50:75:f6:e9:91:6f:e4:a0:b8: c6:c4:b1:b3:6e:30:b9:b3:d3:3c:09:cf:85:38:0c: cf:ac:24:7a:c4:8d:5e:ef:b1:91:3e:8d:74:6a:92: 78:65:34:e3:8f:5d:fe:48:fe:60:48:e9:e9:48:d7: 81:62:09:cb:eb:4e:4b:51:9f:9e:87:21:33:52:8a: e6:58:2b:6a:ca:f9:ec:57:ae:3b:ab:12:a8:9f:20: e5:ef:13:bd:fb:0f:9e:34:1b:50:93:3e:f3:c6:c5: f6:4c:53:ee:82:e4:6e:df:42:f9:d5:95:dd:0f:3e: 07:b0:3f:89:a5:87:7f:7b:7d:11:73:6d:86:11:99: c4:15:5e:5d:9a:f3:c0:69:ea:e8:46:74:b5:61:cf: 72:93:36:4e:fb:67:90:8b:65:9c:43:ed:75:d0:d4: 36:6c:d1:96:98:1f:02:ae:b7:fa:0c:98:66:fc:8d: b7:01:6f:2f:56:98:f2:5e:3f:b4:96:a4:b4:7b:22: 92:81:bc:b2:fa:1d:6a:5e:b9:2f:27:c7:78:db:1b: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:32:FD:C7:B6:EF:A9:B4:E3:EC:A4:C1:1B:8B:BE:14:04:4A:D3 X509v3 Authority Key Identifier: keyid:53:44:D6:BB:37:EA:0C:C3:91:D1:24:20:7A:D9:95:FC:D7:7B:9E:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/U0TWuzfqDMOR0SQgetmV_Nd7npU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U0TWuzfqDMOR0SQgetmV_Nd7npU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D5/665DB7C6A7C011EF98BA5E2AC4F9AE02/0C8BE222C89F11EF972B8B0FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.2.0/24 Signature Algorithm: sha256WithRSAEncryption b8:37:80:85:0a:8d:ae:d2:42:2e:f3:71:59:21:7f:ab:0e:07: fe:db:05:61:83:70:fa:73:cc:0d:b2:ba:34:d0:a9:dd:e9:20: fe:68:43:53:0e:ad:75:e9:bb:4f:53:da:0d:d3:9f:40:b4:0f: 9b:fc:2d:85:71:ae:c5:4d:a2:ae:55:b1:1e:40:e0:fa:0a:7b: 19:da:26:48:26:fd:0a:5e:99:80:9c:06:7b:e0:48:3f:fb:84: 08:5a:b8:ee:d2:a3:68:02:29:4a:bc:b6:c6:6a:84:ad:fb:49: e0:5e:a9:fe:48:56:73:a5:ac:3f:2e:3d:c9:6e:08:bc:89:cd: e5:16:7e:4c:d3:a4:6a:52:22:31:c8:d3:90:75:bf:37:22:b3: fa:7c:d8:f6:e0:db:0e:35:8d:54:66:25:c7:f5:1c:4f:4e:e0: 9e:fc:c8:a5:04:4d:f5:5f:c3:2d:46:09:11:fc:cc:ef:1a:69: c1:ee:03:dc:83:aa:6b:7c:38:f1:cf:a9:22:c4:0c:87:c5:20: 17:88:5f:65:15:f2:f0:db:e0:44:6c:c9:b2:33:48:f8:7f:5f: 18:7c:7d:eb:11:e8:fd:0b:10:27:c6:63:8f:8f:56:eb:0c:10: e2:fe:2e:55:87:b1:1b:01:e7:ff:0a:6d:07:5f:f4:73:6c:d2: ed:8b:3f:a0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDUxMTAvBgNVBAUTKDUzNDRENkJCMzdFQTBDQzM5MUQxMjQyMDdBRDk5NUZD RDc3QjlFOTUwHhcNMjYwMzAzMDY0MTMwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2ODI5YS1kNmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2wUFomjf4BLCPi42QVypweGQbeVuxTCw0aAsSX8/rYi0zXVOgv/ww9t6Nyn XcjgREJQdfbpkW/koLjGxLGzbjC5s9M8Cc+FOAzPrCR6xI1e77GRPo10apJ4ZTTj j13+SP5gSOnpSNeBYgnL605LUZ+ehyEzUormWCtqyvnsV647qxKonyDl7xO9+w+e NBtQkz7zxsX2TFPuguRu30L51ZXdDz4HsD+JpYd/e30Rc22GEZnEFV5dmvPAaero RnS1Yc9ykzZO+2eQi2WcQ+110NQ2bNGWmB8Crrf6DJhm/I23AW8vVpjyXj+0lqS0 eyKSgbyy+h1qXrkvJ8d42xvn6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMVPMv3H tu+ptOPspMEbi74UBErTMB8GA1UdIwQYMBaAFFNE1rs36gzDkdEkIHrZlfzXe56V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFENS82NjVEQjdDNkE3 QzAxMUVGOThCQTVFMkFDNEY5QUUwMi9VMFRXdXpmcURNT1IwU1FnZXRtVl9OZDdu cFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1UwVFd1emZxRE1PUjBTUWdldG1WX05kN25wVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODgxRDUvNjY1REI3QzZBN0MwMTFFRjk4QkE1RTJBQzRGOUFFMDIvMEM4QkUyMjJD ODlGMTFFRjk3MkI4QjBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9ECMA0GCSqGSIb3DQEBCwUAA4IBAQC4N4CFCo2u0kIu83FZIX+r Dgf+2wVhg3D6c8wNsro00Knd6SD+aENTDq116btPU9oN059AtA+b/C2Fca7FTaKu VbEeQOD6CnsZ2iZIJv0KXpmAnAZ74Eg/+4QIWrju0qNoAilKvLbGaoSt+0ngXqn+ SFZzpaw/Lj3Jbgi8ic3lFn5M06RqUiIxyNOQdb83IrP6fNj24NsONY1UZiXH9RxP TuCe/MilBE31X8MtRgkR/MzvGmnB7gPcg6prfDjxz6kixAyHxSAXiF9lFfLw2+BE bMmyM0j4f18YfH3rEej9CxAnxmOPj1brDBDi/i5Vh7EbAef/Cm0HX/RzbNLtiz+g -----END CERTIFICATE-----Generated at Thu Mar 26 17:32:23 2026 by rpki-client