$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa File: 2FE7B7E6500D11F0B18D7376C4F9AE02.roa (raw, json) Hash identifier: GzfRPUDBbDs4K4+434Sr5sRN49sS17wbw5wNG+NNvFM= Subject key identifier: 62:E3:E7:2F:9A:31:85:81:8D:3D:31:02:68:2B:A0:FC:33:D2:B6:85 Certificate issuer: /CN=A91B3B4C/serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Certificate serial: 0133 Authority key identifier: B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:10:06 +0000 ROA not before: Sun 07 Sep 2025 06:43:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 8796 IP address blocks: 103.110.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 09:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3B4C, serialNumber=B63DFD686CE0A90076E4F5FF428685F63FB08EDD Validity Not Before: Sep 7 06:43:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a480fe-b9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8b:62:99:aa:a6:4c:a1:c4:6b:7b:0d:3d:4e: 62:e9:42:83:13:08:39:c1:ac:09:2f:19:42:87:4a: 67:52:bd:de:e4:ca:56:63:b6:c4:dd:a7:aa:77:da: e7:25:8f:4e:31:16:3c:00:12:46:9f:03:0c:95:44: 4f:8f:07:b0:74:34:8e:7d:e4:04:99:52:ec:d7:e6: 0c:98:a2:d6:a7:44:5f:f9:f2:c9:42:3d:ab:ca:55: 11:a0:89:14:eb:b6:04:c4:96:e9:e8:b9:97:e2:4d: ce:c0:62:39:8d:5b:6b:67:ba:aa:00:2f:34:1a:71: 0f:4f:2b:22:1c:22:8d:16:8f:d7:77:18:e5:db:2e: df:72:b6:f2:91:cc:84:31:e7:6d:d6:36:ad:97:bb: 6e:a3:ec:ee:16:74:6f:70:2e:fe:87:cd:72:40:7c: 87:d4:eb:84:bd:0c:65:5b:f1:b0:c3:2b:1a:f2:df: 69:af:c4:14:5e:49:30:38:6c:67:c9:92:8c:37:14: ee:78:da:35:e5:8d:e0:6b:2e:d8:30:6b:13:03:d1: 74:c0:a7:de:d6:68:e8:ee:99:95:c2:8c:98:da:05: b6:e7:4a:ad:14:6c:3c:ba:33:af:50:16:46:4e:7e: b1:58:5b:71:31:c7:ec:a8:b6:00:ef:d9:c1:a2:a1: a5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E3:E7:2F:9A:31:85:81:8D:3D:31:02:68:2B:A0:FC:33:D2:B6:85 X509v3 Authority Key Identifier: keyid:B6:3D:FD:68:6C:E0:A9:00:76:E4:F5:FF:42:86:85:F6:3F:B0:8E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/tj39aGzgqQB25PX_QoaF9j-wjt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tj39aGzgqQB25PX_QoaF9j-wjt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3B4C/DC9DE28E8C5011EFA067C815C4F9AE02/2FE7B7E6500D11F0B18D7376C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.110.220.0/23 Signature Algorithm: sha256WithRSAEncryption 80:70:9f:eb:7d:d6:f0:c0:18:09:00:52:60:d0:fc:e9:c3:db: 30:c6:56:a3:60:82:df:4e:f2:b6:a0:80:1b:b6:57:78:99:6c: 17:8f:0a:c8:66:b6:43:be:dc:13:c9:63:6d:d5:b0:89:8f:b8: 5a:7c:f2:59:59:95:d7:9b:89:a6:01:eb:e3:77:04:85:1e:97: d6:cc:31:6f:95:37:7e:df:e2:db:15:55:0d:ea:51:27:cd:bf: 9a:7e:a7:c5:d2:23:d8:76:36:c0:da:e2:94:a9:16:b4:67:ee: fd:2e:ac:bb:4a:a3:bc:3a:2b:15:ad:a5:3e:55:28:d5:70:fb: 07:56:cc:fe:1d:1e:c3:a7:d9:4b:be:40:43:61:38:0a:f0:18: 3c:fb:1f:7c:22:80:52:db:c8:a2:ff:e3:00:79:bd:93:17:45: 2d:cf:90:de:5a:fb:19:6d:27:3e:86:3e:ff:a9:b6:54:47:20: d4:bb:34:d0:ef:cf:be:99:dc:3d:a3:45:eb:45:45:51:36:7e: d1:79:60:8e:b8:cb:24:0b:aa:70:a5:e1:bd:3a:2e:1d:8e:1e: 5c:51:6b:52:0b:cc:1c:00:7f:30:41:56:62:e1:89:5b:9a:af: d0:cf:d5:b0:43:7d:55:30:97:c4:e1:bf:eb:51:f8:1e:1b:0b: 11:40:eb:9a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNCNEMxMTAvBgNVBAUTKEI2M0RGRDY4NkNFMEE5MDA3NkU0RjVGRjQyODY4NUY2 M0ZCMDhFREQwHhcNMjUwOTA3MDY0MzI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODBmZS1iOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkItimaqmTKHEa3sNPU5i6UKDEwg5wawJLxlCh0pnUr3e5MpWY7bE3aeqd9rn JY9OMRY8ABJGnwMMlURPjwewdDSOfeQEmVLs1+YMmKLWp0Rf+fLJQj2rylURoIkU 67YExJbp6LmX4k3OwGI5jVtrZ7qqAC80GnEPTysiHCKNFo/Xdxjl2y7fcrbykcyE Medt1jatl7tuo+zuFnRvcC7+h81yQHyH1OuEvQxlW/Gwwysa8t9pr8QUXkkwOGxn yZKMNxTueNo15Y3gay7YMGsTA9F0wKfe1mjo7pmVwoyY2gW250qtFGw8ujOvUBZG Tn6xWFtxMcfsqLYA79nBoqGlpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGLj5y+a MYWBjT0xAmgroPwz0raFMB8GA1UdIwQYMBaAFLY9/Whs4KkAduT1/0KGhfY/sI7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0I0Qy9EQzlERTI4RThD NTAxMUVGQTA2N0M4MTVDNEY5QUUwMi90ajM5YUd6Z3FRQjI1UFhfUW9hRjlqLXdq dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqMzlhR3pncVFCMjVQWF9Rb2FGOWotd2p0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNCNEMvREM5REUyOEU4QzUwMTFFRkEwNjdDODE1QzRGOUFFMDIvMkZFN0I3RTY1 MDBEMTFGMEIxOEQ3Mzc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ27cMA0GCSqGSIb3DQEBCwUAA4IBAQCAcJ/rfdbwwBgJAFJg0Pzp w9swxlajYILfTvK2oIAbtld4mWwXjwrIZrZDvtwTyWNt1bCJj7hafPJZWZXXm4mm AevjdwSFHpfWzDFvlTd+3+LbFVUN6lEnzb+afqfF0iPYdjbA2uKUqRa0Z+79Lqy7 SqO8OisVraU+VSjVcPsHVsz+HR7Dp9lLvkBDYTgK8Bg8+x98IoBS28ii/+MAeb2T F0Utz5DeWvsZbSc+hj7/qbZURyDUuzTQ78++mdw9o0XrRUVRNn7ReWCOuMskC6pw peG9Oi4djh5cUWtSC8wcAH8wQVZi4Ylbmq/Qz9WwQ31VMJfE4b/rUfgeGwsRQOua -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:55 2026 by rpki-client