$ rpki-client -vvf rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa File: 57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa (raw, json) Hash identifier: EsS37XCQ+hTMcMmbjcFpgJOlLiK3n71SoYQ41+HMC6I= Subject key identifier: 02:23:A4:8F:0D:65:33:86:D0:27:5B:97:6C:49:E9:B7:8B:FA:AC:54 Certificate issuer: /CN=A91983A2/serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Certificate serial: 0AC7 Authority key identifier: 36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:47:40 +0000 ROA not before: Mon 30 Jun 2025 19:55:36 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140241 IP address blocks: 103.149.106.0/23 maxlen: 23 103.149.106.0/24 maxlen: 24 103.149.107.0/24 maxlen: 24 2001:df3:1f80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983A2, serialNumber=36F2E5FD8675033730BA633A4500AF5502059F0C Validity Not Before: Jun 30 19:55:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4275c-19f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:19:97:2c:b5:75:0c:bf:fa:d2:63:85:1c:52: 28:a4:31:d5:26:16:a0:75:d2:3a:a0:be:9c:ed:66: 98:c3:51:9a:e6:a1:6d:2a:f0:d0:7e:5e:eb:73:99: 34:12:bd:38:05:82:21:a9:f4:3f:d4:07:a5:49:0e: b7:45:e7:85:70:8e:28:f0:93:cf:b2:d7:ef:04:bc: eb:9b:c0:5d:77:c6:c4:ce:d2:51:4c:13:02:21:9a: 76:48:0c:ef:fd:d6:c8:ae:f6:36:a2:d9:ef:3d:04: e7:85:1e:8a:9f:61:de:54:0a:35:b2:0f:f2:49:bb: cb:8e:8f:5b:72:79:0e:89:f8:39:21:16:51:d7:1a: dd:ba:01:63:1b:cc:ad:82:e4:9d:ae:62:30:7a:67: 5f:48:97:89:01:87:26:ea:a9:93:86:92:e4:cc:0c: 47:14:da:2c:f3:1f:ae:ec:cd:02:0d:3c:18:7f:bd: 07:ce:6a:47:0e:98:c6:02:94:1c:84:59:91:bf:f7: e7:9e:60:02:83:5f:b1:99:d3:cc:55:dd:2c:69:b6: 53:a5:39:b5:8d:9c:06:ec:7e:78:a1:06:cd:78:b4: ae:f1:1e:98:72:d5:48:1e:59:af:35:73:95:ab:a7: 59:6a:f3:06:93:fc:97:39:a6:eb:52:00:72:19:4b: 68:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:A4:8F:0D:65:33:86:D0:27:5B:97:6C:49:E9:B7:8B:FA:AC:54 X509v3 Authority Key Identifier: keyid:36:F2:E5:FD:86:75:03:37:30:BA:63:3A:45:00:AF:55:02:05:9F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/NvLl_YZ1AzcwumM6RQCvVQIFnww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NvLl_YZ1AzcwumM6RQCvVQIFnww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983A2/61C1A5786DBA11EA9563CB65C4F9AE02/57DF94FA6DBC11EAB10A1F6CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.106.0/23 IPv6: 2001:df3:1f80::/48 Signature Algorithm: sha256WithRSAEncryption 6a:ee:f9:b4:bb:e3:ed:fc:a2:3d:e1:78:18:39:27:b6:e4:a7: 99:6d:f5:f9:6c:ae:a5:41:1d:d7:c7:45:8e:c2:50:b5:29:f6: ed:d5:e5:ee:7d:63:01:94:b7:00:d8:4c:a1:25:a0:b0:39:13: b7:f0:3d:eb:2c:3e:ad:97:2e:ed:96:ac:ce:23:03:c4:bb:52: cc:02:db:06:b3:79:2e:f9:57:50:0d:6e:43:f3:ac:00:41:51: 60:7f:a2:7a:3d:ae:b3:34:f2:c3:26:e6:17:cc:c3:b7:c4:b5: fd:54:30:11:b4:2f:f9:c5:78:7f:6c:fa:81:bf:7c:5e:a1:fb: 7d:02:97:20:d1:37:13:4d:68:54:0f:2a:76:c7:b2:52:c2:89: 92:5a:ca:fe:ea:ea:99:78:94:e1:3c:02:37:67:48:95:bb:32: cc:f3:73:ef:ae:d0:5a:22:e9:5e:cf:ff:79:4a:58:1e:90:2c: 30:17:62:9b:53:7e:9c:ea:3d:a3:57:f1:5e:76:79:56:bd:cc: df:74:d0:ff:53:99:cf:82:f2:18:57:7c:db:e1:e8:75:c1:d3: ee:df:fe:6b:00:e0:04:67:43:39:93:fa:dc:69:d0:62:e2:b6: 9a:bf:78:71:92:04:bc:8a:a9:11:00:02:13:ba:44:f7:06:79: 7c:8d:72:a3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzQTIxMTAvBgNVBAUTKDM2RjJFNUZEODY3NTAzMzczMEJBNjMzQTQ1MDBBRjU1 MDIwNTlGMEMwHhcNMjUwNjMwMTk1NTM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mjc1Yy0xOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkhmXLLV1DL/60mOFHFIopDHVJhagddI6oL6c7WaYw1Ga5qFtKvDQfl7rc5k0 Er04BYIhqfQ/1AelSQ63ReeFcI4o8JPPstfvBLzrm8Bdd8bEztJRTBMCIZp2SAzv /dbIrvY2otnvPQTnhR6Kn2HeVAo1sg/ySbvLjo9bcnkOifg5IRZR1xrdugFjG8yt guSdrmIwemdfSJeJAYcm6qmThpLkzAxHFNos8x+u7M0CDTwYf70HzmpHDpjGApQc hFmRv/fnnmACg1+xmdPMVd0sabZTpTm1jZwG7H54oQbNeLSu8R6YctVIHlmvNXOV q6dZavMGk/yXOabrUgByGUtoGQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAIjpI8N ZTOG0Cdbl2xJ6beL+qxUMB8GA1UdIwQYMBaAFDby5f2GdQM3MLpjOkUAr1UCBZ8M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNBMi82MUMxQTU3ODZE QkExMUVBOTU2M0NCNjVDNEY5QUUwMi9OdkxsX1laMUF6Y3d1bU02UlFDdlZRSUZu d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL052TGxfWVoxQXpjd3VtTTZSUUN2VlFJRm53dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTgzQTIvNjFDMUE1Nzg2REJBMTFFQTk1NjNDQjY1QzRGOUFFMDIvNTdERjk0RkE2 REJDMTFFQUIxMEExRjZDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5VqMA8EAgACMAkDBwAgAQ3zH4AwDQYJKoZIhvcNAQELBQADggEB AGru+bS74+38oj3heBg5J7bkp5lt9flsrqVBHdfHRY7CULUp9u3V5e59YwGUtwDY TKEloLA5E7fwPessPq2XLu2WrM4jA8S7UswC2wazeS75V1ANbkPzrABBUWB/ono9 rrM08sMm5hfMw7fEtf1UMBG0L/nFeH9s+oG/fF6h+30ClyDRNxNNaFQPKnbHslLC iZJayv7q6pl4lOE8AjdnSJW7Mszzc++u0Foi6V7P/3lKWB6QLDAXYptTfpzqPaNX 8V52eVa9zN900P9Tmc+C8hhXfNvh6HXB0+7f/msA4ARnQzmT+txp0GLitpq/eHGS BLyKqREAAhO6RPcGeXyNcqM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:40:37 2026 by rpki-client