$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa File: C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa (raw, json) Hash identifier: A4zYqw73DHHyadBQLcyhIlD6IDAEqxDy3foGsjv4EZ8= Subject key identifier: F8:E6:A3:0F:B3:D5:C4:83:96:EA:89:1C:C8:F7:F0:AE:C6:CB:B1:FA Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0D28 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa Signing time: Mon 02 Mar 2026 19:23:32 +0000 ROA not before: Mon 02 Mar 2026 19:23:32 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 17408 IP address blocks: 103.15.76.0/24 maxlen: 24 103.15.77.0/24 maxlen: 24 103.15.78.0/24 maxlen: 24 103.21.105.0/24 maxlen: 24 103.21.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 02:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Mar 2 19:23:32 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a5e3b4-c700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:9c:bd:ed:b7:55:bc:07:cb:22:00:fc:64: 3f:38:d5:7c:36:52:7b:48:67:ea:db:07:cc:51:b9: 02:7b:5f:27:99:23:be:29:12:70:d6:4a:0f:97:85: c0:f6:6f:0b:f4:6c:30:7b:25:81:b3:c6:09:42:6f: 62:b7:ac:20:08:9a:fe:d7:40:62:6e:4a:dc:53:47: 0c:a4:9d:e9:e9:76:b8:eb:c3:ed:93:4f:ca:39:31: 92:13:df:66:61:2a:fa:b1:60:e6:1d:e7:65:9b:95: 10:de:4b:fe:2f:3f:ed:f1:6d:55:b3:a5:57:24:53: 1d:a4:68:39:ee:7f:57:49:d7:27:83:bf:95:fd:3c: 51:c7:e3:d9:90:c1:d3:e7:6a:22:d1:79:08:93:d9: 5f:d5:c9:e7:f4:74:a5:5c:61:61:64:29:08:2d:53: 1a:cc:cb:15:29:73:2f:89:fe:d6:4b:60:3e:65:6a: 93:f1:c1:38:3d:8b:c4:1e:9f:6f:e5:47:a0:4b:76: 91:44:0f:38:2e:8b:3e:0c:91:f9:9b:7d:26:68:b9: f5:be:89:c4:e2:09:6b:2e:3a:e1:60:ce:86:f3:ad: 2a:b3:e3:5b:77:fa:40:77:c8:1b:db:d1:ea:6f:a0: a0:4b:72:e2:0b:99:dc:2e:5b:a1:8d:88:e3:a0:e2: 28:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E6:A3:0F:B3:D5:C4:83:96:EA:89:1C:C8:F7:F0:AE:C6:CB:B1:FA X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/C3CFE8A06B7B11F0B6D16E2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.15.76.0-103.15.78.255 103.21.105.0/24 103.21.107.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:f9:8e:73:74:b2:a6:bd:c6:a3:3b:81:f8:a8:aa:17:98:ef: a8:b6:b3:b0:59:f5:8a:5b:cb:2a:a7:c8:3a:ae:24:b4:f8:20: 8f:c7:4d:f2:87:27:e0:6b:97:11:c4:8a:f0:de:8b:52:44:b1: 8d:6a:b1:df:a2:8e:45:0f:49:04:76:86:71:68:67:b3:06:1f: 5d:60:e3:71:3d:08:be:f5:6a:b8:47:5f:72:77:13:23:57:f9: 1c:cc:9a:6b:a2:59:1b:87:9f:fe:13:1f:44:fe:cb:87:f0:8a: dc:83:ec:bb:c0:6b:07:6b:7e:b2:af:f2:b2:aa:c5:8d:bf:63: 71:df:98:5f:cb:e3:d2:5c:f9:4e:62:37:46:11:4c:5b:6e:7e: 31:40:c2:5e:18:fe:c6:f3:5d:fb:db:4e:39:c4:1f:7d:b2:48: 9b:54:10:35:c5:8c:b9:1d:8d:9f:6c:45:a2:bf:e7:b9:08:fb: e1:7d:db:73:02:dd:3b:3e:65:a9:22:48:cb:1f:49:f8:b1:23: 0e:d0:7d:c9:b4:06:75:48:08:4b:1c:4b:34:dd:da:1f:2b:4d: 25:fd:06:7c:e3:da:f4:8a:d3:8b:5b:61:8e:27:30:4f:b7:31: 00:9d:cb:54:72:52:bb:a3:2a:35:6d:66:1f:ec:ce:ea:1d:a0: f4:b9:04:9f -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjYwMzAyMTkyMzMyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ZTNiNC1jNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0g2cve23VbwHyyIA/GQ/ONV8NlJ7SGfq2wfMUbkCe18nmSO+KRJw1koPl4XA 9m8L9GwweyWBs8YJQm9it6wgCJr+10BibkrcU0cMpJ3p6Xa468Ptk0/KOTGSE99m YSr6sWDmHedlm5UQ3kv+Lz/t8W1Vs6VXJFMdpGg57n9XSdcng7+V/TxRx+PZkMHT 52oi0XkIk9lf1cnn9HSlXGFhZCkILVMazMsVKXMvif7WS2A+ZWqT8cE4PYvEHp9v 5UegS3aRRA84Los+DJH5m30maLn1vonE4glrLjrhYM6G860qs+Nbd/pAd8gb29Hq b6CgS3LiC5ncLluhjYjjoOIoVQIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFPjmow+z 1cSDluqJHMj38K7Gy7H6MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvQzNDRkU4QTA2 QjdCMTFGMEI2RDE2RTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaMAwDBAJnD0wDBABnD04DBABnFWkDBABnFWswDQYJKoZIhvcNAQELBQAD ggEBAEv5jnN0sqa9xqM7gfioqheY76i2s7BZ9YpbyyqnyDquJLT4II/HTfKHJ+Br lxHEivDei1JEsY1qsd+ijkUPSQR2hnFoZ7MGH11g43E9CL71arhHX3J3EyNX+RzM mmuiWRuHn/4TH0T+y4fwityD7LvAawdrfrKv8rKqxY2/Y3HfmF/L49Jc+U5iN0YR TFtufjFAwl4Y/sbzXfvbTjnEH32ySJtUEDXFjLkdjZ9sRaK/57kI++F923MC3Ts+ ZakiSMsfSfixIw7Qfcm0BnVICEscSzTd2h8rTSX9Bnzj2vSK04tbYY4nME+3MQCd y1RyUrujKjVtZh/szuodoPS5BJ8= -----END CERTIFICATE-----Generated at Thu Mar 26 06:15:03 2026 by rpki-client