$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/D2312B583F0511ECA6E6BB80C4F9AE02.roa File: D2312B583F0511ECA6E6BB80C4F9AE02.roa (raw, json) Hash identifier: IciT28SUjRQ0I2gdini8FnT61/04yJg06IILVj5+2rU= Subject key identifier: 3D:6E:2A:31:28:A0:91:7D:2A:9F:21:2F:30:8E:F1:70:6B:13:AC:61 Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 0536 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/D2312B583F0511ECA6E6BB80C4F9AE02.roa Signing time: Sat 14 Mar 2026 07:58:09 +0000 ROA not before: Sat 14 Mar 2026 07:58:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 147063 IP address blocks: 103.174.0.0/23 maxlen: 23 103.174.0.0/24 maxlen: 24 103.174.1.0/24 maxlen: 24 2407:f5c0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Mar 14 07:58:09 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69b51511-45d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:75:7b:ca:8f:51:9f:fa:0b:c8:7a:83:81: 70:af:3d:1b:3f:e8:a6:93:aa:81:e5:bf:9e:19:54: 78:aa:b3:b9:7c:6f:59:92:14:35:c2:2f:e4:70:53: 74:d8:ee:6d:70:9e:7b:ba:c2:15:45:bb:15:c5:e7: 59:6c:aa:4a:16:9b:36:5c:f2:bd:f9:6a:a3:90:a6: c6:d2:c5:0a:c0:90:18:0b:59:77:94:75:99:a0:56: 88:2a:f3:8a:9e:48:3f:a3:e2:ce:67:09:7b:42:0a: 43:f5:6a:c9:93:64:e4:73:d1:eb:c9:e8:24:f5:87: 7b:ef:79:0a:68:9f:84:3b:35:5c:e0:ef:eb:38:e8: 35:cf:c2:0f:cc:d1:5a:52:09:aa:80:1f:c0:5f:60: 9c:63:5d:21:8f:a2:b2:02:3e:e5:fb:d8:ec:a3:34: 6b:7e:dd:c4:2b:c9:76:f9:95:61:0e:55:96:df:d3: 85:4a:99:5c:60:02:ab:51:fc:ea:69:ca:fe:35:67: eb:88:13:15:42:38:1c:71:18:f3:a8:ee:4e:e3:a1: 2f:d3:84:ce:72:55:83:6a:4b:ef:8c:57:8c:d4:d0: 12:cd:92:c7:91:18:58:83:c4:8a:40:80:a7:75:0d: d2:c5:1b:b1:9e:86:b5:e7:09:a7:3d:e3:85:81:89: b9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6E:2A:31:28:A0:91:7D:2A:9F:21:2F:30:8E:F1:70:6B:13:AC:61 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/D2312B583F0511ECA6E6BB80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.174.0.0/23 IPv6: 2407:f5c0::/36 Signature Algorithm: sha256WithRSAEncryption 71:66:ad:88:6d:67:cf:a6:0c:75:b2:0b:74:e6:94:a2:e4:81: d0:d2:3a:e4:60:83:32:48:2b:ce:4d:98:bf:91:cc:18:57:88: 45:e0:89:45:29:4d:97:9e:dc:61:99:87:a6:d5:76:f8:d5:85: 3d:cb:13:a2:82:7e:62:cd:1a:58:42:33:45:f1:e9:12:c7:74: db:cf:74:c1:ab:1f:74:c3:8c:36:6d:f8:38:e8:fa:c4:2f:73: 6e:df:7d:6b:ff:ad:54:87:d7:7c:de:d8:58:d5:0f:a0:16:d1: 91:d9:2e:91:df:e6:ce:21:2e:e1:25:61:67:34:05:dd:6e:dd: c6:48:e2:7e:d0:3e:4d:ed:24:fd:6b:57:d5:7e:a7:7a:9a:da: 98:2d:bc:12:9d:13:f4:aa:0e:b0:11:37:c3:1c:c2:6f:62:03: e1:57:c6:24:67:80:10:4b:81:e7:3b:98:64:e5:66:0b:96:fa: 8e:d7:80:44:e5:ca:e7:92:c5:07:4a:06:35:46:f7:2f:05:4e: a7:2a:05:ed:00:79:45:a2:cf:23:e1:29:2b:77:30:23:b7:15: 8d:7e:ac:fb:a7:bc:f0:95:0f:01:af:c6:cd:3d:3b:40:ec:d2: ea:74:27:00:9b:aa:fc:b6:89:50:58:03:d0:32:6a:f8:77:28: e0:3e:d8:e4 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjYwMzE0MDc1ODA5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1MTUxMS00NWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQF1e8qPUZ/6C8h6g4Fwrz0bP+imk6qB5b+eGVR4qrO5fG9ZkhQ1wi/kcFN0 2O5tcJ57usIVRbsVxedZbKpKFps2XPK9+WqjkKbG0sUKwJAYC1l3lHWZoFaIKvOK nkg/o+LOZwl7QgpD9WrJk2Tkc9Hryegk9Yd773kKaJ+EOzVc4O/rOOg1z8IPzNFa UgmqgB/AX2CcY10hj6KyAj7l+9jsozRrft3EK8l2+ZVhDlWW39OFSplcYAKrUfzq acr+NWfriBMVQjgccRjzqO5O46Ev04TOclWDakvvjFeM1NASzZLHkRhYg8SKQICn dQ3SxRuxnoa15wmnPeOFgYm5FwIDAQABo4ICcDCCAmwwHQYDVR0OBBYEFD1uKjEo oJF9Kp8hLzCO8XBrE6xhMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI1MDgvN0EzMzc5MUUzOTU3MTFFQ0FCRDQzNzZFQzRGOUFFMDIvRDIzMTJCNTgz RjA1MTFFQ0E2RTZCQjgwQzRGOUFFMDIucm9hMC8GCCsGAQUFBwEHAQH/BCAwHjAM BAIAATAGAwQBZ64AMA4EAgACMAgDBgQkB/XAADANBgkqhkiG9w0BAQsFAAOCAQEA cWatiG1nz6YMdbILdOaUouSB0NI65GCDMkgrzk2Yv5HMGFeIReCJRSlNl57cYZmH ptV2+NWFPcsTooJ+Ys0aWEIzRfHpEsd02890wasfdMOMNm34OOj6xC9zbt99a/+t VIfXfN7YWNUPoBbRkdkukd/mziEu4SVhZzQF3W7dxkjiftA+Te0k/WtX1X6nepra mC28Ep0T9KoOsBE3wxzCb2ID4VfGJGeAEEuB5zuYZOVmC5b6jteAROXK55LFB0oG NUb3LwVOpyoF7QB5RaLPI+EpK3cwI7cVjX6s+6e88JUPAa/GzT07QOzS6nQnAJuq /LaJUFgD0DJq+Hco4D7Y5A== -----END CERTIFICATE-----Generated at Thu Mar 26 04:16:23 2026 by rpki-client