$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa File: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (raw, json) Hash identifier: oegRAcugKLatUbTXSLvKEbrye0Tdi4sy7aoKF/I5tTI= Subject key identifier: EF:B4:08:AC:D2:4C:44:10:09:CE:23:7B:9A:97:8A:FF:CA:01:6A:FE Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 01AF Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:31:14 +0000 ROA not before: Sat 21 Jun 2025 04:33:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134378 IP address blocks: 103.63.92.0/22 maxlen: 22 103.63.92.0/23 maxlen: 23 103.63.92.0/24 maxlen: 24 103.63.93.0/24 maxlen: 24 103.63.94.0/23 maxlen: 23 103.63.94.0/24 maxlen: 24 103.63.95.0/24 maxlen: 24 103.153.120.0/23 maxlen: 23 103.153.120.0/24 maxlen: 24 103.153.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:32:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Jun 21 04:33:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a41571-bebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:a4:4e:db:f1:c9:2a:19:78:e9:87:b0:1a: 2d:e0:6c:36:2d:cc:1e:8b:90:2b:e8:91:fc:d1:b5: 78:27:0d:a1:b2:dd:63:de:01:83:03:67:f8:ef:c8: 59:f0:c3:7a:b5:5a:fa:7c:ad:53:4e:6d:50:01:65: 3d:c2:b5:de:80:7c:75:a8:ba:f3:fc:b8:7d:1f:06: 7c:0c:3b:f2:27:ff:61:58:2b:49:ab:77:2e:20:11: ba:91:8d:9e:81:98:ab:65:24:0b:3c:78:13:c6:c8: 25:07:29:40:3c:86:ac:4b:c7:3a:f0:e6:6e:36:b0: b3:d6:53:f2:43:0c:49:c9:da:27:33:3f:a7:5e:0a: 29:8f:b4:a2:48:b5:91:24:78:53:20:f5:4c:35:db: 2b:8b:ee:70:1c:fb:21:ef:4d:03:83:df:42:d2:56: 04:af:c9:50:22:28:67:e7:41:a9:ae:ad:b3:2f:6b: 1d:95:b5:98:e8:e3:12:9b:2e:a0:cb:d5:52:a3:49: 2e:3f:5b:6a:73:e4:1b:65:6d:29:d9:0c:24:80:8b: d8:3b:d9:d0:60:e2:20:38:d5:89:69:46:e0:43:a8: 45:17:a8:68:01:b1:88:29:70:b1:5c:34:43:d1:55: 8c:71:16:54:d5:31:1c:c8:c5:28:bd:ab:a4:fd:8a: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B4:08:AC:D2:4C:44:10:09:CE:23:7B:9A:97:8A:FF:CA:01:6A:FE X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/D1DEC18AB5B711EEB1FB8657C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.63.92.0/22 103.153.120.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:d3:2c:f1:fd:6a:ad:c9:a2:32:cc:ec:c8:f8:d0:06:6f:bf: 93:6d:18:9c:16:4a:ef:d0:25:7f:d8:c9:0b:be:82:b7:34:8b: 11:dc:a6:1b:c7:97:d9:db:50:3f:24:29:55:35:d6:15:9b:31: a0:21:93:a1:27:4e:69:80:d3:d8:db:9f:cd:4c:4b:46:33:c6: 3b:f9:53:dc:88:7a:d1:bf:0a:59:ca:5e:2b:fe:e9:98:35:4e: 71:1b:9b:17:1b:a3:db:ec:59:17:e1:9f:87:50:a3:a2:1a:05: c7:71:ae:64:fc:65:15:e8:6e:6f:4e:28:75:02:1e:a7:ef:82: 4e:d0:68:19:cf:26:9a:d4:42:74:c8:4c:b6:62:2e:0e:fe:e6: 60:0c:e1:26:9b:5b:a3:07:a4:2f:b0:84:5b:15:71:32:e0:4d: a2:9a:5b:e4:e7:7b:df:ca:85:7c:f8:c5:21:1d:c0:72:02:e9: a1:f6:de:c7:2a:d0:e1:2f:75:b0:59:d3:d4:25:60:a8:dd:d1: 79:0a:3f:45:cf:5e:b9:27:39:64:b3:0f:c3:3d:20:6e:5a:1d: 79:18:4e:3b:81:33:17:dd:2e:6d:dc:d0:0b:c6:85:7c:67:88: b2:5d:3c:80:8d:42:46:7a:c8:23:ae:28:1a:e4:df:de:75:ae: d5:1b:55:57 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUwNjIxMDQzMzExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTU3MS1iZWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6ikTtvxySoZeOmHsBot4Gw2Lcwei5Ar6JH80bV4Jw2hst1j3gGDA2f478hZ 8MN6tVr6fK1TTm1QAWU9wrXegHx1qLrz/Lh9HwZ8DDvyJ/9hWCtJq3cuIBG6kY2e gZirZSQLPHgTxsglBylAPIasS8c68OZuNrCz1lPyQwxJydonMz+nXgopj7SiSLWR JHhTIPVMNdsri+5wHPsh700Dg99C0lYEr8lQIihn50Gprq2zL2sdlbWY6OMSmy6g y9VSo0kuP1tqc+QbZW0p2QwkgIvYO9nQYOIgONWJaUbgQ6hFF6hoAbGIKXCxXDRD 0VWMcRZU1TEcyMUovauk/YpQdwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFO+0CKzS TEQQCc4je5qXiv/KAWr+MB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhGMzQvODFEQUVDNUFCNTk4MTFFRTlBMThGOTVGQzRGOUFFMDIvRDFERUMxOEFC NUI3MTFFRUIxRkI4NjU3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZz9cAwQBZ5l4MA0GCSqGSIb3DQEBCwUAA4IBAQBs0yzx/WqtyaIy zOzI+NAGb7+TbRicFkrv0CV/2MkLvoK3NIsR3KYbx5fZ21A/JClVNdYVmzGgIZOh J05pgNPY25/NTEtGM8Y7+VPciHrRvwpZyl4r/umYNU5xG5sXG6Pb7FkX4Z+HUKOi GgXHca5k/GUV6G5vTih1Ah6n74JO0GgZzyaa1EJ0yEy2Yi4O/uZgDOEmm1ujB6Qv sIRbFXEy4E2imlvk53vfyoV8+MUhHcByAumh9t7HKtDhL3WwWdPUJWCo3dF5Cj9F z165Jzlksw/DPSBuWh15GE47gTMX3S5t3NALxoV8Z4iyXTyAjUJGesgjriga5N/e da7VG1VX -----END CERTIFICATE-----Generated at Thu Mar 26 07:09:45 2026 by rpki-client