$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa File: 10771E5497C211F0A9D40817C4F9AE02.roa (raw, json) Hash identifier: Ih6CUVzbaPRdHejVQvZNcYEMy1tnq4yUXbGOoq+u3g0= Subject key identifier: 39:9C:1F:B8:65:72:D6:C7:6C:81:6B:BA:79:E6:2C:87:C5:52:60:A2 Certificate issuer: /CN=A91BAD2D/serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Certificate serial: 018B Authority key identifier: 94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:20:29 +0000 ROA not before: Thu 27 Nov 2025 02:50:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 133894 IP address blocks: 43.230.209.0/24 maxlen: 24 103.46.208.0/22 maxlen: 23 103.46.208.0/24 maxlen: 24 103.46.209.0/24 maxlen: 24 103.46.210.0/24 maxlen: 24 103.46.211.0/24 maxlen: 24 103.96.233.0/24 maxlen: 24 103.146.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAD2D, serialNumber=94A950B303B46900DD5A3061030C89A4896803AF Validity Not Before: Nov 27 02:50:18 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a59cad-7879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:5d:49:25:05:88:5f:c4:f4:3a:c5:0f:f3: 91:98:b7:c0:f3:11:03:8c:6c:4d:7c:d2:9d:b3:85: 5a:47:83:09:fb:44:c1:5b:10:e1:a0:13:cb:c5:ce: 1f:e2:20:ab:10:11:2a:73:a5:a2:8c:37:e4:3f:9f: 88:ed:18:7a:99:6c:08:a2:e4:58:19:ec:22:77:30: 0c:bd:62:f9:84:2c:5c:bb:be:b9:f0:c5:50:3d:c8: 97:0c:cd:7c:ae:40:58:f2:a5:b7:f5:21:1c:89:71: 4a:3f:4e:70:46:4a:cb:29:bc:b3:6d:a0:d0:b7:81: d1:29:11:8a:8a:db:6d:75:56:5e:79:2a:13:ee:ed: 88:df:f9:c6:e7:96:97:33:7e:f6:ef:43:f6:9f:42: 52:09:b2:34:00:3b:49:3e:50:f0:65:60:6d:c1:7b: 61:4f:5f:76:f8:19:d8:50:9c:72:9c:1b:a1:dc:df: b1:2d:36:55:62:bc:0c:4c:b2:f4:5a:d5:ae:da:f7: 96:38:17:00:d4:4d:0c:41:03:0a:97:13:99:2f:7f: 5a:fe:de:3b:0c:39:11:17:22:bc:ee:49:ab:6e:60: 27:12:e6:8a:c0:79:77:5b:2e:6e:3b:e2:7c:d1:d3: 17:7b:82:d7:17:ff:1e:34:a2:b5:96:3a:5d:1d:a0: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:1F:B8:65:72:D6:C7:6C:81:6B:BA:79:E6:2C:87:C5:52:60:A2 X509v3 Authority Key Identifier: keyid:94:A9:50:B3:03:B4:69:00:DD:5A:30:61:03:0C:89:A4:89:68:03:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/lKlQswO0aQDdWjBhAwyJpIloA68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lKlQswO0aQDdWjBhAwyJpIloA68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD2D/9088EE5AE80111EEAD6C5030C4F9AE02/10771E5497C211F0A9D40817C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.209.0/24 103.46.208.0/22 103.96.233.0/24 103.146.104.0/24 Signature Algorithm: sha256WithRSAEncryption 39:16:0b:b2:b0:8c:1f:9e:1f:37:5d:bf:67:d9:45:c1:98:82: d8:21:72:28:a2:85:c6:e1:eb:8f:1b:6b:b9:ab:b8:51:c4:5d: a4:c1:75:e4:2d:79:36:19:1d:82:4e:ec:a3:40:3b:cb:69:09: 51:1e:98:25:c8:f0:b3:5c:9f:15:ce:b8:0c:23:80:96:95:a8: 5c:be:ee:1d:b3:3f:d5:cf:de:c3:32:58:64:24:eb:07:40:6d: d6:8a:0c:fb:36:84:2f:50:de:82:09:87:7c:b8:a8:fd:32:81: 7a:da:ff:4d:44:e7:b0:f0:ef:d7:b1:7e:42:b7:70:42:4d:e8: 59:fb:4a:0e:6f:97:d7:94:bd:11:c5:3f:09:4d:b3:66:cd:3f: fa:0e:40:9e:c2:19:4b:46:5c:f4:12:38:2e:a8:3c:5a:f6:ef: 86:32:b7:c0:47:cd:e3:66:3e:cd:45:dd:39:67:82:fb:1d:9f: 12:ce:e6:90:79:fa:59:fa:18:61:5e:33:cd:d5:4c:a5:88:cb: dd:85:1b:9c:36:cd:d9:77:27:17:43:2c:6a:76:dc:db:86:08: 7d:b3:9a:28:cc:4a:0e:b5:3f:f1:33:03:7f:c9:cc:f1:33:28: 87:18:16:ac:f5:75:fc:2b:84:b2:88:27:82:48:c5:6d:84:ce: 85:f0:e7:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFEMkQxMTAvBgNVBAUTKDk0QTk1MEIzMDNCNDY5MDBERDVBMzA2MTAzMEM4OUE0 ODk2ODAzQUYwHhcNMjUxMTI3MDI1MDE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWNhZC03ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSZdSSUFiF/E9DrFD/ORmLfA8xEDjGxNfNKds4VaR4MJ+0TBWxDhoBPLxc4f 4iCrEBEqc6WijDfkP5+I7Rh6mWwIouRYGewidzAMvWL5hCxcu7658MVQPciXDM18 rkBY8qW39SEciXFKP05wRkrLKbyzbaDQt4HRKRGKitttdVZeeSoT7u2I3/nG55aX M37270P2n0JSCbI0ADtJPlDwZWBtwXthT192+BnYUJxynBuh3N+xLTZVYrwMTLL0 WtWu2veWOBcA1E0MQQMKlxOZL39a/t47DDkRFyK87kmrbmAnEuaKwHl3Wy5uO+J8 0dMXe4LXF/8eNKK1ljpdHaAV2QIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFDmcH7hl ctbHbIFrunnmLIfFUmCiMB8GA1UdIwQYMBaAFJSpULMDtGkA3VowYQMMiaSJaAOv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQyRC85MDg4RUU1QUU4 MDExMUVFQUQ2QzUwMzBDNEY5QUUwMi9sS2xRc3dPMGFRRGRXakJoQXd5SnBJbG9B NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xLbFFzd08wYVFEZFdqQmhBd3lKcElsb0E2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFEMkQvOTA4OEVFNUFFODAxMTFFRUFENkM1MDMwQzRGOUFFMDIvMTA3NzFFNTQ5 N0MyMTFGMEE5RDQwODE3QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAK+bRAwQCZy7QAwQAZ2DpAwQAZ5JoMA0GCSqGSIb3DQEBCwUAA4IB AQA5FguysIwfnh83Xb9n2UXBmILYIXIoooXG4euPG2u5q7hRxF2kwXXkLXk2GR2C TuyjQDvLaQlRHpglyPCzXJ8VzrgMI4CWlahcvu4dsz/Vz97DMlhkJOsHQG3Wigz7 NoQvUN6CCYd8uKj9MoF62v9NROew8O/XsX5Ct3BCTehZ+0oOb5fXlL0RxT8JTbNm zT/6DkCewhlLRlz0EjguqDxa9u+GMrfAR83jZj7NRd05Z4L7HZ8SzuaQefpZ+hhh XjPN1UyliMvdhRucNs3ZdycXQyxqdtzbhgh9s5oozEoOtT/xMwN/yczxMyiHGBas 9XX8K4SyiCeCSMVthM6F8OdE -----END CERTIFICATE-----Generated at Fri Mar 27 05:20:52 2026 by rpki-client