$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/BD115AB24B7C11ECA63C0038C4F9AE02.roa File: BD115AB24B7C11ECA63C0038C4F9AE02.roa (raw, json) Hash identifier: +GvQ/NXwtK6n9zSmGQYOiyRLx0NfuJisquadWhY4pho= Subject key identifier: B4:F8:E0:BB:32:63:64:F1:F8:03:D3:50:42:D4:10:87:41:C4:58:A8 Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Certificate serial: 04FC Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/BD115AB24B7C11ECA63C0038C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:17:54 +0000 ROA not before: Sat 06 Dec 2025 22:36:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 149022 IP address blocks: 103.176.202.0/23 maxlen: 23 103.176.202.0/24 maxlen: 24 103.176.203.0/24 maxlen: 24 2001:df0:13c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1276 (0x4fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Validity Not Before: Dec 6 22:36:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5aa22-60bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:1c:69:f6:d1:93:d3:47:82:30:fb:f1:c4: 0d:5d:bd:c3:d1:48:28:80:a3:82:0e:df:55:4d:26: ca:09:40:8f:cb:59:71:19:7a:4d:e2:33:05:9e:d7: 2c:06:50:8e:6c:88:45:be:9b:d5:06:a3:15:53:07: 88:a8:0c:c2:cd:12:d9:a7:5e:3c:b0:8b:72:ec:e2: 53:8f:fe:04:d3:5d:53:98:0d:a3:72:ad:37:40:c6: 3d:2b:54:db:24:a5:d0:8a:f0:5c:22:f9:c6:39:bd: 59:50:8c:46:02:9e:0a:e7:9c:78:e2:d2:57:33:e1: a6:30:57:46:70:4d:9d:a6:c8:f0:3f:4b:ad:82:24: 2d:2b:88:ef:97:0d:2e:63:36:dc:5c:e3:34:33:d2: 47:47:05:76:82:74:8c:22:b5:15:47:ea:a3:e4:d0: 8b:f3:3f:87:49:ca:14:98:c3:bd:b3:2d:d7:c6:15: 66:5f:2f:0c:d1:f8:e4:de:73:fc:18:10:98:64:e4: 8f:d4:4b:f9:73:e4:88:a1:59:75:c9:e2:69:91:5e: 29:cc:75:ed:de:37:5f:ed:77:53:76:24:dc:9b:ed: 88:7b:dc:2d:26:ba:93:20:0a:dd:a4:49:3f:a7:93: 33:c6:db:0f:de:89:af:6b:9c:a1:ce:5c:2a:6d:30: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F8:E0:BB:32:63:64:F1:F8:03:D3:50:42:D4:10:87:41:C4:58:A8 X509v3 Authority Key Identifier: keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/BD115AB24B7C11ECA63C0038C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.176.202.0/23 IPv6: 2001:df0:13c0::/48 Signature Algorithm: sha256WithRSAEncryption 19:c6:f0:b4:29:34:f9:ec:21:85:14:3e:59:55:c1:76:cc:41: 44:54:8f:f8:04:e0:87:44:ed:6b:d9:7d:7c:b7:d4:0c:a5:bf: 54:a8:b7:5e:a5:58:de:48:8c:79:14:37:04:95:c7:43:84:7c: a9:37:cf:7f:89:af:0e:09:cb:ea:5c:06:90:18:77:f8:bb:d4: 28:b9:ff:95:27:9f:83:cd:a6:9a:92:0e:34:a5:db:41:97:83: ed:1b:ae:a0:c4:5c:2f:f1:8a:a1:0c:ce:c6:96:6d:32:5e:3e: 8f:03:36:d5:e3:3f:9a:e6:dd:18:d5:87:de:88:3c:c6:a9:29: 05:90:58:f6:7f:c1:fc:b8:83:4f:8f:df:61:58:5f:93:d4:3e: 35:11:4e:ad:18:1e:de:65:50:23:12:66:2f:f5:f3:25:7e:62: 05:e6:f6:60:b8:90:c4:36:b3:f4:26:58:af:05:a3:25:ad:6a: 6e:bc:2e:00:07:19:87:cc:63:75:a5:35:08:29:13:a1:2a:cd: 3c:f3:76:9c:40:3e:91:20:ea:c0:d0:6a:08:b7:10:46:d6:c6: c0:18:c3:15:67:0d:d2:f7:41:8c:9b:ac:73:64:bd:d6:30:45: 08:b9:7a:e2:45:8c:1e:96:45:ac:25:5f:4e:e6:6f:40:d8:6c: 4e:a8:4f:4a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGMDExMTAvBgNVBAUTKDVFQkRBN0ZBQTgwMUM1QTI3NERDMjNEMTcxRjg4QjQ2 QTExRTQxNTQwHhcNMjUxMjA2MjIzNjU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWEyMi02MGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl9McafbRk9NHgjD78cQNXb3D0UgogKOCDt9VTSbKCUCPy1lxGXpN4jMFntcs BlCObIhFvpvVBqMVUweIqAzCzRLZp148sIty7OJTj/4E011TmA2jcq03QMY9K1Tb JKXQivBcIvnGOb1ZUIxGAp4K55x44tJXM+GmMFdGcE2dpsjwP0utgiQtK4jvlw0u YzbcXOM0M9JHRwV2gnSMIrUVR+qj5NCL8z+HScoUmMO9sy3XxhVmXy8M0fjk3nP8 GBCYZOSP1Ev5c+SIoVl1yeJpkV4pzHXt3jdf7XdTdiTcm+2Ie9wtJrqTIArdpEk/ p5MzxtsP3omva5yhzlwqbTAxkwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLT44Lsy Y2Tx+APTUELUEIdBxFioMB8GA1UdIwQYMBaAFF69p/qoAcWidNwj0XH4i0ahHkFU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYwMS9BNzAwQTg0NDRC NzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhhSjAzQ1BSY2ZpTFJxRWVR VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyMm4tcWdCeGFKMDNDUFJjZmlMUnFFZVFWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjRGMDEvQTcwMEE4NDQ0Qjc4MTFFQzg2RTUwQTMwQzRGOUFFMDIvQkQxMTVBQjI0 QjdDMTFFQ0E2M0MwMDM4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7DKMA8EAgACMAkDBwAgAQ3wE8AwDQYJKoZIhvcNAQELBQADggEB ABnG8LQpNPnsIYUUPllVwXbMQURUj/gE4IdE7WvZfXy31Aylv1Sot16lWN5IjHkU NwSVx0OEfKk3z3+Jrw4Jy+pcBpAYd/i71Ci5/5Unn4PNppqSDjSl20GXg+0brqDE XC/xiqEMzsaWbTJePo8DNtXjP5rm3RjVh96IPMapKQWQWPZ/wfy4g0+P32FYX5PU PjURTq0YHt5lUCMSZi/18yV+YgXm9mC4kMQ2s/QmWK8FoyWtam68LgAHGYfMY3Wl NQgpE6EqzTzzdpxAPpEg6sDQagi3EEbWxsAYwxVnDdL3QYybrHNkvdYwRQi5euJF jB6WRawlX07mb0DYbE6oT0o= -----END CERTIFICATE-----Generated at Thu Mar 26 04:27:50 2026 by rpki-client