$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/B35DF2B8FBA211EEA8D1C351C4F9AE02.roa File: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (raw, json) Hash identifier: xA69nJThb7qSmzNZKEVWJfaSdeU9xfVDwX5mxId3GkA= Subject key identifier: 13:10:69:75:FB:90:98:02:12:3C:B0:32:69:31:AD:AB:1E:7C:7F:E5 Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: 0182 Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/B35DF2B8FBA211EEA8D1C351C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:03:49 +0000 ROA not before: Fri 13 Jun 2025 04:34:49 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 135338 IP address blocks: 103.225.28.0/23 maxlen: 24 2001:df2:95c0::/48 maxlen: 48 2401:a060::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: Jun 13 04:34:49 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a5a6d5-e536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:4f:6d:28:97:08:f4:d2:af:a3:02:49:a8: 98:cb:28:46:c1:1c:7a:49:fd:3d:12:7b:04:2f:1e: 3a:cf:14:3d:1f:30:62:d7:e5:3a:d0:e9:fb:61:e3: 2e:ff:b6:de:0f:65:69:81:c3:78:5e:6b:c3:65:bd: d6:70:37:ad:41:99:30:9a:9b:2e:5a:cb:6b:2a:ea: 5c:07:db:09:b1:56:74:79:2d:b8:44:f3:ac:56:f4: 1a:c1:69:9c:a4:bc:e1:a2:26:97:1d:ad:ae:b3:4e: a3:fe:54:f7:b3:25:08:1d:63:fe:b4:b6:c8:0d:58: 9e:85:13:1f:af:5e:ec:38:a1:97:af:86:e3:66:84: 54:ca:85:dd:7d:0e:a2:0e:28:32:e4:09:5f:2e:ab: 1b:79:8f:75:e3:1b:e9:b7:1a:ae:fe:25:07:3a:03: 30:49:cb:30:a5:7a:49:e6:07:67:f1:9e:37:e3:be: 14:33:4a:5c:24:35:ba:83:98:79:2b:d3:f6:7e:d1: 2f:d2:ba:ea:e3:b1:29:cc:f8:99:10:23:12:bd:74: bd:93:2d:e8:7f:b1:69:3d:06:6c:5f:4f:49:1a:1e: b7:e7:65:5e:58:43:d7:bf:04:bf:36:c2:f7:82:19: 44:a4:ab:37:8b:33:66:12:e8:49:34:5e:39:bf:65: b2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:10:69:75:FB:90:98:02:12:3C:B0:32:69:31:AD:AB:1E:7C:7F:E5 X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/B35DF2B8FBA211EEA8D1C351C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.225.28.0/23 IPv6: 2001:df2:95c0::/48 2401:a060::/32 Signature Algorithm: sha256WithRSAEncryption 90:67:11:31:9e:b3:db:9c:af:f9:da:97:f1:af:57:98:47:1a: 9e:95:fb:e8:13:60:fb:12:50:ce:29:fb:8b:40:ed:ea:61:33: 24:c6:7c:22:84:c3:72:63:7e:75:64:bb:b8:a3:d5:f6:a8:4f: d5:98:16:c7:35:04:2a:78:51:7f:14:d3:b2:bd:8b:ab:9a:f7: b2:db:1a:dd:87:b1:4a:0a:e3:32:46:a3:7a:5b:d7:be:49:4a: c1:f9:b3:58:48:f8:13:50:5a:ef:be:0f:cf:ff:7b:16:66:4a: bc:62:12:67:f1:78:c3:35:8f:41:53:b8:0c:3d:3a:53:2d:c3: 03:03:74:58:5c:82:76:bb:7e:6d:94:db:e1:68:c1:d3:db:e4: 65:28:0a:d7:76:f6:b2:21:32:c7:af:28:71:63:95:8d:ed:f9: ea:21:2b:d6:cd:bd:5e:f1:59:8c:e4:2b:7e:bb:ac:81:47:d1: b9:ba:83:3d:50:b4:d6:db:c2:28:db:40:f2:e0:26:67:87:4b: 01:0f:fe:81:1b:a5:91:51:fe:32:b2:4a:71:97:90:58:6f:63: b2:e7:f2:68:93:40:36:41:75:63:5e:24:e1:98:7d:27:e4:98: f2:a7:de:78:a3:f7:4d:8c:56:01:02:4e:cd:e8:fa:fc:8b:64: a4:b5:21:54 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUwNjEzMDQzNDQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTZkNS1lNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgdPbSiXCPTSr6MCSaiYyyhGwRx6Sf09EnsELx46zxQ9HzBi1+U60On7YeMu /7beD2VpgcN4XmvDZb3WcDetQZkwmpsuWstrKupcB9sJsVZ0eS24RPOsVvQawWmc pLzhoiaXHa2us06j/lT3syUIHWP+tLbIDViehRMfr17sOKGXr4bjZoRUyoXdfQ6i Digy5AlfLqsbeY914xvptxqu/iUHOgMwScswpXpJ5gdn8Z43474UM0pcJDW6g5h5 K9P2ftEv0rrq47EpzPiZECMSvXS9ky3of7FpPQZsX09JGh6352VeWEPXvwS/NsL3 ghlEpKs3izNmEuhJNF45v2Wy5wIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFBMQaXX7 kJgCEjywMmkxrasefH/lMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc3QjgvMEFCMDc0MDRFMUYwMTFFRTkwMUE2MDg1QzRGOUFFMDIvQjM1REYyQjhG QkEyMTFFRUE4RDFDMzUxQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ+EcMBYEAgACMBADBwAgAQ3ylcADBQAkAaBgMA0GCSqGSIb3DQEB CwUAA4IBAQCQZxExnrPbnK/52pfxr1eYRxqelfvoE2D7ElDOKfuLQO3qYTMkxnwi hMNyY351ZLu4o9X2qE/VmBbHNQQqeFF/FNOyvYurmvey2xrdh7FKCuMyRqN6W9e+ SUrB+bNYSPgTUFrvvg/P/3sWZkq8YhJn8XjDNY9BU7gMPTpTLcMDA3RYXIJ2u35t lNvhaMHT2+RlKArXdvayITLHryhxY5WN7fnqISvWzb1e8VmM5Ct+u6yBR9G5uoM9 ULTW28Io20Dy4CZnh0sBD/6BG6WRUf4yskpxl5BYb2Oy5/Jok0A2QXVjXiThmH0n 5Jjyp954o/dNjFYBAk7N6Pr8i2SktSFU -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:10 2026 by rpki-client