$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa File: 03EE880413F511EA8D120C65C4F9AE02.roa (raw, json) Hash identifier: 2QGfkxbn7M0/GCnbZiSq9uZzzvvClpW7C4zygip+ABU= Subject key identifier: B2:52:76:39:36:02:C8:A4:9D:23:A6:0B:2C:E5:0E:00:3E:57:7C:A2 Certificate issuer: /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Certificate serial: 0C90 Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:54:36 +0000 ROA not before: Fri 12 Dec 2025 18:35:28 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136007 IP address blocks: 103.78.248.0/24 maxlen: 24 103.78.249.0/24 maxlen: 24 103.78.250.0/24 maxlen: 24 103.78.251.0/24 maxlen: 24 2400:10c0::/32 maxlen: 32 2400:10c0::/35 maxlen: 35 2400:10c0:2000::/35 maxlen: 35 2400:10c0:4000::/35 maxlen: 35 2400:10c0:6000::/35 maxlen: 35 2400:10c0:8000::/35 maxlen: 35 2400:10c0:a000::/35 maxlen: 35 2400:10c0:c000::/35 maxlen: 35 2400:10c0:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3216 (0xc90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F Validity Not Before: Dec 12 18:35:28 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4451c-266e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f0:f1:4a:e7:30:44:16:df:a1:f6:1b:1f:f9: 9b:2b:7b:d2:3f:2c:71:de:01:24:0a:70:1c:65:c7: 55:53:74:e2:08:73:0a:17:e0:1d:15:cf:33:06:80: 53:bc:2b:50:81:0b:56:83:f3:6f:66:1c:d8:95:f6: 94:ad:c8:69:36:5c:0c:e1:df:3e:72:de:ee:52:ed: 22:91:6e:46:a0:f3:3a:f6:8a:45:de:d3:2d:39:19: 3a:8f:33:94:7f:21:61:1b:92:62:51:88:7a:c9:f7: ba:bb:f8:67:f2:64:03:59:af:a5:35:8b:aa:e7:08: 71:82:92:aa:0a:d3:0e:a4:82:e9:3e:8c:14:3c:c8: 54:9d:f6:3a:a4:a6:2e:ef:fe:68:68:19:72:ac:33: 42:3b:0b:89:70:1d:13:94:a7:f4:82:8e:20:dc:16: 70:5b:38:3e:f1:ec:55:c6:9f:19:49:6b:32:54:76: 52:17:0c:f6:92:43:bf:6d:b6:ca:ac:37:65:b7:62: ff:3c:ab:e3:1b:01:fb:1b:79:9d:c2:33:f5:e5:6e: 64:9f:d5:45:51:a7:0e:c8:f6:d1:7d:54:ce:5a:23: 06:40:d1:c6:ac:cc:98:74:bb:30:3c:0a:da:52:71: 75:ba:a6:83:04:6f:92:ac:af:34:b9:f4:36:d5:9d: 6d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:52:76:39:36:02:C8:A4:9D:23:A6:0B:2C:E5:0E:00:3E:57:7C:A2 X509v3 Authority Key Identifier: keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/03EE880413F511EA8D120C65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.78.248.0/22 IPv6: 2400:10c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:0e:11:e0:29:7b:c3:85:bf:13:89:49:6e:89:ca:6c:4c:a8: da:5f:a2:87:a8:73:b3:f3:d3:5f:8a:02:5d:13:0d:96:30:ea: 40:0a:20:5c:24:fa:73:4a:8e:e5:9b:ab:94:94:38:87:db:5a: 74:2e:35:df:9e:bb:9e:1b:bd:2a:4a:f4:14:4e:d0:fa:53:f8: 1d:09:20:ba:24:0b:57:32:8c:22:57:e5:3f:35:f0:75:a3:9c: 9a:be:fb:e9:e0:5d:43:d1:91:6d:96:e2:52:fc:a0:65:b4:60: c2:35:4c:73:c4:c6:f3:24:4f:0a:02:65:32:16:b6:e6:8e:79: 23:0d:ee:45:b9:d0:8a:4b:9c:af:96:47:3a:7b:09:ae:9d:6c: 90:b5:b9:7b:0c:b6:4a:67:e2:23:a5:68:cd:7d:23:be:5e:70: aa:d9:e3:89:40:86:7b:bc:d6:21:02:a9:49:c3:d5:43:83:e4: e2:2c:96:f2:45:90:d4:71:4b:c5:8c:f7:32:51:f9:35:22:90: 1f:00:a3:1e:94:0e:dd:a9:4f:43:a5:2d:98:a8:bf:3e:ad:4c: f6:ab:81:27:79:b6:7a:7d:09:3f:c8:cd:6d:dd:36:d5:69:a6: 1f:5d:08:dd:68:c7:01:c2:ab:9f:25:b0:fc:a2:49:8e:17:37: ae:b2:b6:58 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCRjUxMTAvBgNVBAUTKDNFODQ1RUE4NEUxMTAzMEJDMkExMDYxMzA4OTc5Rjc5 OEExMjExM0YwHhcNMjUxMjEyMTgzNTI4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDUxYy0yNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvDxSucwRBbfofYbH/mbK3vSPyxx3gEkCnAcZcdVU3TiCHMKF+AdFc8zBoBT vCtQgQtWg/NvZhzYlfaUrchpNlwM4d8+ct7uUu0ikW5GoPM69opF3tMtORk6jzOU fyFhG5JiUYh6yfe6u/hn8mQDWa+lNYuq5whxgpKqCtMOpILpPowUPMhUnfY6pKYu 7/5oaBlyrDNCOwuJcB0TlKf0go4g3BZwWzg+8exVxp8ZSWsyVHZSFwz2kkO/bbbK rDdlt2L/PKvjGwH7G3mdwjP15W5kn9VFUacOyPbRfVTOWiMGQNHGrMyYdLswPAra UnF1uqaDBG+SrK80ufQ21Z1tEQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLJSdjk2 AsiknSOmCyzlDgA+V3yiMB8GA1UdIwQYMBaAFD6EXqhOEQMLwqEGEwiXn3mKEhE/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJGNS85RDBCNDIyMjEz RjMxMUVBODBCMzc0NUZDNEY5QUUwMi9Qb1JlcUU0UkF3dkNvUVlUQ0plZmVZb1NF VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BvUmVxRTRSQXd2Q29RWVRDSmVmZVlvU0VUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZCRjUvOUQwQjQyMjIxM0YzMTFFQTgwQjM3NDVGQzRGOUFFMDIvMDNFRTg4MDQx M0Y1MTFFQThEMTIwQzY1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ074MA0EAgACMAcDBQAkABDAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ DhHgKXvDhb8TiUluicpsTKjaX6KHqHOz89NfigJdEw2WMOpACiBcJPpzSo7lm6uU lDiH21p0LjXfnrueG70qSvQUTtD6U/gdCSC6JAtXMowiV+U/NfB1o5yavvvp4F1D 0ZFtluJS/KBltGDCNUxzxMbzJE8KAmUyFrbmjnkjDe5FudCKS5yvlkc6ewmunWyQ tbl7DLZKZ+IjpWjNfSO+XnCq2eOJQIZ7vNYhAqlJw9VDg+TiLJbyRZDUcUvFjPcy Ufk1IpAfAKMelA7dqU9DpS2YqL8+rUz2q4EnebZ6fQk/yM1t3TbVaaYfXQjdaMcB wqufJbD8okmOFzeusrZY -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:47 2026 by rpki-client