$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/9C3424A08F7F11F09A0D9529C4F9AE02.roa File: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (raw, json) Hash identifier: hM4BPVux9YYhFTFUn31M+wA3pgU5Mg1/NkcXZA6rsfo= Subject key identifier: A9:94:EC:39:D9:0B:FD:9E:C8:BD:62:19:9F:D8:6A:35:07:92:F5:B1 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 0605 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/9C3424A08F7F11F09A0D9529C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:06:05 +0000 ROA not before: Fri 26 Dec 2025 22:19:14 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 149014 IP address blocks: 103.146.8.0/23 maxlen: 23 103.146.8.0/24 maxlen: 24 103.146.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Dec 26 22:19:14 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a463ed-5b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:be:77:56:7e:5b:e5:d3:2c:fd:54:fd:49: 0f:ca:53:6a:81:d1:59:32:d7:f4:85:93:0e:45:b7: 7f:e3:a2:f0:02:8a:a3:ae:42:3c:15:12:a3:ed:7b: c2:61:d8:46:d7:31:a9:53:f3:34:db:3c:4d:df:ae: 2c:60:4f:e2:8c:ec:eb:54:87:a7:9d:ca:65:50:c6: 3f:a3:53:54:06:64:c5:46:75:13:97:1b:5b:bb:90: ca:72:ab:29:d4:15:1b:e6:1c:9e:ae:db:3a:50:a0: 71:b6:80:0d:e6:3a:3a:a3:f5:a7:0e:c2:33:13:68: 28:33:63:07:14:49:4e:93:72:73:74:b6:0a:f5:36: be:0f:d7:1c:53:f9:45:e6:35:2d:45:64:00:5d:8b: 86:eb:4f:b6:98:42:63:a4:84:dd:b2:55:22:78:48: 80:b3:3f:bf:93:0e:67:87:8f:67:4c:3f:ab:d6:0d: 1c:57:62:7a:f3:ae:85:a5:11:73:d3:a9:3c:74:4a: 13:a4:6e:dc:23:f0:a2:be:63:d4:c4:9c:4b:35:95: ec:08:64:2b:89:f0:1c:e1:7c:06:21:3e:c5:b9:05: 3c:b9:0d:0e:b9:52:c1:76:30:66:30:8c:66:8e:24: 21:f8:bf:90:f9:1c:43:c4:94:42:22:c1:be:c0:a4: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:EC:39:D9:0B:FD:9E:C8:BD:62:19:9F:D8:6A:35:07:92:F5:B1 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/9C3424A08F7F11F09A0D9529C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.8.0/23 Signature Algorithm: sha256WithRSAEncryption c6:8a:a0:82:3e:33:92:9b:5d:94:90:ec:48:c2:1f:57:40:50: d0:6f:4c:4d:17:1d:7a:36:09:88:84:06:71:e2:40:fa:14:74: 25:4d:eb:d3:30:64:77:c6:76:26:32:46:1c:bd:b5:73:9b:41: 59:d0:2d:7a:01:98:43:06:86:e5:4c:5a:2f:a9:07:7a:f9:23: 11:16:28:56:13:52:9b:d9:d2:db:38:56:20:41:4f:35:04:63: 27:a9:10:05:ee:63:c0:89:5e:07:56:64:40:f4:b0:f0:dd:32: cd:19:ab:09:40:01:41:a6:08:f8:53:01:1f:5e:ee:62:a3:50: 33:67:02:85:56:01:06:01:26:37:1f:fe:4f:ea:87:e2:2e:cd: 28:ed:a1:77:88:dc:f7:e3:dc:4e:0d:a8:3e:1e:6e:62:93:5d: 49:7b:ec:44:54:28:24:2a:c4:7f:4a:39:49:21:25:43:cf:a6: b1:8b:f4:b5:3c:7c:d1:65:d2:89:9d:35:0f:e8:d2:df:26:07: e3:d6:27:cf:be:f7:f7:0b:49:16:83:70:08:21:e9:7e:db:48: 4b:f5:19:49:10:34:e9:91:09:7c:80:88:6b:34:14:18:84:e3: 56:6f:03:0f:50:17:00:07:39:a3:83:fb:1a:8d:74:74:fa:a0: c0:6e:ae:13 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUxMjI2MjIxOTE0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjNlZC01YjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF2+d1Z+W+XTLP1U/UkPylNqgdFZMtf0hZMORbd/46LwAoqjrkI8FRKj7XvC YdhG1zGpU/M02zxN364sYE/ijOzrVIenncplUMY/o1NUBmTFRnUTlxtbu5DKcqsp 1BUb5hyerts6UKBxtoAN5jo6o/WnDsIzE2goM2MHFElOk3JzdLYK9Ta+D9ccU/lF 5jUtRWQAXYuG60+2mEJjpITdslUieEiAsz+/kw5nh49nTD+r1g0cV2J6866FpRFz 06k8dEoTpG7cI/CivmPUxJxLNZXsCGQrifAc4XwGIT7FuQU8uQ0OuVLBdjBmMIxm jiQh+L+Q+RxDxJRCIsG+wKRHLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKmU7DnZ C/2eyL1iGZ/YajUHkvWxMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg3QUIvRjA5NkRDQzRFNDRCMTFFQkIyQzgxRTgwQzRGOUFFMDIvOUMzNDI0QTA4 RjdGMTFGMDlBMEQ5NTI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5IIMA0GCSqGSIb3DQEBCwUAA4IBAQDGiqCCPjOSm12UkOxIwh9X QFDQb0xNFx16NgmIhAZx4kD6FHQlTevTMGR3xnYmMkYcvbVzm0FZ0C16AZhDBobl TFovqQd6+SMRFihWE1Kb2dLbOFYgQU81BGMnqRAF7mPAiV4HVmRA9LDw3TLNGasJ QAFBpgj4UwEfXu5io1AzZwKFVgEGASY3H/5P6ofiLs0o7aF3iNz349xODag+Hm5i k11Je+xEVCgkKsR/SjlJISVDz6axi/S1PHzRZdKJnTUP6NLfJgfj1ifPvvf3C0kW g3AIIel+20hL9RlJEDTpkQl8gIhrNBQYhONWbwMPUBcABzmjg/sajXR0+qDAbq4T -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:17 2026 by rpki-client