$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/35831FCE937011EA8A795583C4F9AE02.roa File: 35831FCE937011EA8A795583C4F9AE02.roa (raw, json) Hash identifier: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U= Subject key identifier: A2:CC:91:D8:D6:D8:F4:28:DD:E4:A5:2D:1C:95:24:74:9D:76:F7:E3 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A12 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/35831FCE937011EA8A795583C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:31:52 +0000 ROA not before: Fri 30 Jan 2026 20:16:43 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 32242 IP address blocks: 103.6.4.0/24 maxlen: 24 103.6.5.0/24 maxlen: 24 103.6.6.0/24 maxlen: 24 103.6.7.0/24 maxlen: 24 113.20.20.0/24 maxlen: 24 113.20.21.0/24 maxlen: 24 113.20.22.0/24 maxlen: 24 113.20.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2578 (0xa12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Jan 30 20:16:43 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a469f8-4034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b1:9b:7a:2f:6e:2e:b3:10:66:1d:56:d4:9f: d8:e0:78:46:78:15:a0:c3:c6:36:5b:25:47:f3:06: 0e:05:bf:b2:16:71:2a:57:0b:f8:1f:77:50:c9:28: 9f:78:3c:73:bb:ea:52:d1:19:a8:49:53:54:ff:39: fc:db:f5:e7:32:99:59:52:bc:44:e1:7d:53:23:57: 64:45:1b:c9:e6:cd:74:fe:47:7f:a8:7c:8a:7d:1b: 06:7e:16:00:ea:e9:bf:e9:2d:d1:57:97:3a:02:8f: a3:6c:de:1d:d7:0f:6a:37:48:d0:fd:be:d5:13:49: 4a:aa:26:6c:cc:11:a7:28:38:2e:0a:0c:7c:a8:64: ab:22:0d:c8:2a:7b:ef:9a:93:88:0f:ef:0c:db:f2: c7:ed:ac:47:44:59:f3:f5:d1:9d:13:b2:ec:a2:b5: 2c:98:f7:0b:fb:65:66:6b:94:22:31:2a:f6:6f:5d: 4d:f2:02:ea:a6:d7:34:0c:bc:06:2a:2a:88:3b:3e: 20:03:a4:b2:61:a2:97:44:ac:3e:fb:cf:68:16:7d: 47:13:29:ff:b1:cb:a4:a6:fc:8c:4c:b6:10:a9:a2: f6:d4:0e:68:49:71:c4:f7:f8:0e:e2:6d:7c:8e:a7: 85:55:74:9e:ad:4f:c0:aa:04:2c:ee:05:bc:5f:85: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CC:91:D8:D6:D8:F4:28:DD:E4:A5:2D:1C:95:24:74:9D:76:F7:E3 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/35831FCE937011EA8A795583C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.6.4.0/22 113.20.20.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:4c:aa:61:3a:6e:1f:9a:63:aa:bd:2c:34:d4:a2:8b:7d:b9: c1:b7:cd:1b:3e:96:d7:f7:c6:03:cb:5c:b8:6c:ac:05:47:c7: ae:e3:ee:cd:4b:6f:9d:4b:68:a8:7b:2c:03:5d:4c:b5:52:7b: f0:36:fc:95:96:a0:66:9a:2f:ed:49:b8:1a:e3:ff:cf:79:36: 0e:0f:07:17:15:d6:9c:1d:11:73:4c:b7:fa:a7:8b:0d:c8:29: f1:de:38:24:b1:2b:4c:e3:f5:8e:6e:b6:36:3c:90:86:ec:78: c8:c5:8e:39:d9:38:68:d0:28:05:fb:6d:59:b6:f9:e1:f9:a0: 51:5b:63:da:3e:d8:06:57:fe:b5:de:77:66:96:8b:71:63:2d: e5:34:e0:9a:33:72:98:6c:f6:e9:d8:b6:5e:54:31:96:5b:df: 9c:84:29:78:3d:98:cb:8c:94:bf:ab:8d:5e:be:0e:e1:cb:13: dd:27:02:98:fd:d4:73:56:65:15:8b:80:af:f7:5d:9d:ba:5f: 58:cf:1c:bf:03:de:76:8b:80:ca:eb:68:67:7b:ca:6c:dd:cb: 0b:a1:07:73:9e:81:01:59:38:fe:e6:8c:8f:8e:88:4f:05:76: d7:1b:ae:e6:5f:64:2a:2f:90:a8:35:50:b1:0d:d7:aa:13:17: 7f:4c:f4:e6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICChIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYwMTMwMjAxNjQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjlmOC00MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLGbei9uLrMQZh1W1J/Y4HhGeBWgw8Y2WyVH8wYOBb+yFnEqVwv4H3dQySif eDxzu+pS0RmoSVNU/zn82/XnMplZUrxE4X1TI1dkRRvJ5s10/kd/qHyKfRsGfhYA 6um/6S3RV5c6Ao+jbN4d1w9qN0jQ/b7VE0lKqiZszBGnKDguCgx8qGSrIg3IKnvv mpOID+8M2/LH7axHRFnz9dGdE7LsorUsmPcL+2Vma5QiMSr2b11N8gLqptc0DLwG KiqIOz4gA6SyYaKXRKw++89oFn1HEyn/scukpvyMTLYQqaL21A5oSXHE9/gO4m18 jqeFVXSerU/AqgQs7gW8X4UoBQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKLMkdjW 2PQo3eSlLRyVJHSddvfjMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNGRUIvQ0IyQzMzRTY5MzZFMTFFQUE1RTU2QjdFQzRGOUFFMDIvMzU4MzFGQ0U5 MzcwMTFFQThBNzk1NTgzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZwYEAwQCcRQUMA0GCSqGSIb3DQEBCwUAA4IBAQAtTKphOm4fmmOq vSw01KKLfbnBt80bPpbX98YDy1y4bKwFR8eu4+7NS2+dS2ioeywDXUy1UnvwNvyV lqBmmi/tSbga4//PeTYODwcXFdacHRFzTLf6p4sNyCnx3jgksStM4/WObrY2PJCG 7HjIxY452Tho0CgF+21Ztvnh+aBRW2PaPtgGV/613ndmlotxYy3lNOCaM3KYbPbp 2LZeVDGWW9+chCl4PZjLjJS/q41evg7hyxPdJwKY/dRzVmUVi4Cv912dul9Yzxy/ A952i4DK62hne8ps3csLoQdznoEBWTj+5oyPjohPBXbXG67mX2QqL5CoNVCxDdeq Exd/TPTm -----END CERTIFICATE-----Generated at Thu Mar 26 18:15:50 2026 by rpki-client