$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa File: B3250BC6307B11E989188B3BC4F9AE02.roa (raw, json) Hash identifier: H9XQTZ60jMuFo2PNGfbFtuVLEIj/ygfEz3QtM6zzjrA= Subject key identifier: 61:D6:21:EB:97:F6:0A:F1:F6:1C:0D:32:D4:F5:5B:69:08:EC:8F:CF Certificate issuer: /CN=A91C2CE9/serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Certificate serial: 1149 Authority key identifier: 78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:18:47 +0000 ROA not before: Tue 04 Mar 2025 18:05:28 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136260 IP address blocks: 103.85.134.0/24 maxlen: 24 103.141.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4425 (0x1149) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CE9, serialNumber=785AB0B22DCE5A1266500C1066B4F6B05F75CAC0 Validity Not Before: Mar 4 18:05:28 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a40476-7b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9a:e5:0f:b5:e2:24:b8:cc:54:93:44:7b:d8: 38:5e:65:3b:f7:b7:5b:66:48:f1:ab:bd:9e:ff:7e: 56:0e:5d:5a:a5:2d:d9:83:87:2a:46:de:bd:f3:0c: 4e:e4:4e:99:f1:be:89:55:ec:64:23:fc:f6:c0:6f: 3f:3b:f2:80:a4:ac:66:dd:2c:23:51:31:f2:4e:3f: 54:53:bf:b4:6a:b4:22:1f:b6:b2:78:69:cd:bb:1b: 3d:bf:df:92:a2:8a:48:b1:51:8b:19:6f:47:9c:dc: bb:dc:f7:aa:4e:d0:e9:6e:87:4f:ed:af:7a:b1:2a: d3:7c:5f:15:f0:73:aa:f9:4a:41:36:a6:f8:be:d6: 61:84:4e:b2:50:fc:f0:7e:c3:c8:04:4c:03:cc:9c: 28:d4:2f:96:7e:11:14:18:b8:88:77:e3:12:72:3b: 19:cc:77:d4:31:bd:cb:41:c6:8b:f7:60:2e:53:10: ab:51:c5:cc:dd:21:b1:df:5c:38:52:05:65:71:eb: e3:41:56:ca:28:fa:3a:86:6a:e1:04:9a:1c:a8:eb: e7:99:9b:74:bc:2a:82:9b:7f:91:f6:b6:e7:fc:98: e3:f1:1f:b7:c5:48:f9:89:b0:33:f9:12:c7:8d:9e: 40:b5:3b:c9:90:6b:97:e6:02:6c:b5:ea:1d:10:3c: 96:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D6:21:EB:97:F6:0A:F1:F6:1C:0D:32:D4:F5:5B:69:08:EC:8F:CF X509v3 Authority Key Identifier: keyid:78:5A:B0:B2:2D:CE:5A:12:66:50:0C:10:66:B4:F6:B0:5F:75:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/eFqwsi3OWhJmUAwQZrT2sF91ysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFqwsi3OWhJmUAwQZrT2sF91ysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CE9/87106D3E270011E9A77B6E2CC4F9AE02/B3250BC6307B11E989188B3BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.134.0/24 103.141.29.0/24 Signature Algorithm: sha256WithRSAEncryption 53:6e:ec:28:83:e9:48:42:6f:03:c3:4e:f1:7c:4b:19:7b:09: 9b:b6:ae:f2:e7:de:d4:03:75:30:2e:5b:f2:97:e0:65:7d:2e: 9f:34:11:d7:87:19:fd:45:6b:1e:13:62:d7:7a:9a:a4:b4:67: 4d:5a:87:e8:ee:be:90:3d:99:54:80:ba:06:9b:dc:a4:30:0d: ec:e5:77:d8:2d:0a:b7:3c:fa:d9:9c:90:2a:2b:c2:86:3d:8b: a1:01:85:11:6b:dd:7a:61:13:e6:0e:77:e8:92:1a:f6:c9:7e: c0:54:e1:d3:75:ce:90:ac:83:88:ec:69:26:a6:f8:dd:b5:4b: 74:3f:3e:d8:f6:db:8b:28:04:69:5d:89:66:8e:0b:02:41:e8: 24:7e:8f:b3:bf:d8:59:9f:17:95:99:d8:e6:f1:38:3d:ba:bc: f4:77:14:6f:74:e8:6a:fb:31:30:d6:02:f6:90:35:4b:29:a2: 70:21:a2:07:ce:8f:e1:cc:43:de:3b:62:82:85:b6:07:50:1b: ad:f9:50:7c:40:3d:83:30:11:48:c8:e8:5d:e4:91:c7:d9:f3: dd:f3:c5:f1:16:3b:74:0e:5d:5c:73:d1:53:f2:af:ef:6a:f1: 95:26:ab:1a:f6:a3:52:01:4f:99:21:91:e3:b8:e2:f0:0c:b6: f9:75:10:24 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICEUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDRTkxMTAvBgNVBAUTKDc4NUFCMEIyMkRDRTVBMTI2NjUwMEMxMDY2QjRGNkIw NUY3NUNBQzAwHhcNMjUwMzA0MTgwNTI4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDQ3Ni03YjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZrlD7XiJLjMVJNEe9g4XmU797dbZkjxq72e/35WDl1apS3Zg4cqRt698wxO 5E6Z8b6JVexkI/z2wG8/O/KApKxm3SwjUTHyTj9UU7+0arQiH7ayeGnNuxs9v9+S oopIsVGLGW9HnNy73PeqTtDpbodP7a96sSrTfF8V8HOq+UpBNqb4vtZhhE6yUPzw fsPIBEwDzJwo1C+WfhEUGLiId+MScjsZzHfUMb3LQcaL92AuUxCrUcXM3SGx31w4 UgVlcevjQVbKKPo6hmrhBJocqOvnmZt0vCqCm3+R9rbn/Jjj8R+3xUj5ibAz+RLH jZ5AtTvJkGuX5gJsteodEDyWxQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGHWIeuX 9grx9hwNMtT1W2kI7I/PMB8GA1UdIwQYMBaAFHhasLItzloSZlAMEGa09rBfdcrA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNFOS84NzEwNkQzRTI3 MDAxMUU5QTc3QjZFMkNDNEY5QUUwMi9lRnF3c2kzT1doSm1VQXdRWnJUMnNGOTF5 c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGcXdzaTNPV2hKbVVBd1FaclQyc0Y5MXlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDRTkvODcxMDZEM0UyNzAwMTFFOUE3N0I2RTJDQzRGOUFFMDIvQjMyNTBCQzYz MDdCMTFFOTg5MTg4QjNCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ1WGAwQAZ40dMA0GCSqGSIb3DQEBCwUAA4IBAQBTbuwog+lIQm8D w07xfEsZewmbtq7y597UA3UwLlvyl+BlfS6fNBHXhxn9RWseE2LXepqktGdNWofo 7r6QPZlUgLoGm9ykMA3s5XfYLQq3PPrZnJAqK8KGPYuhAYURa916YRPmDnfokhr2 yX7AVOHTdc6QrIOI7GkmpvjdtUt0Pz7Y9tuLKARpXYlmjgsCQegkfo+zv9hZnxeV mdjm8Tg9urz0dxRvdOhq+zEw1gL2kDVLKaJwIaIHzo/hzEPeO2KChbYHUBut+VB8 QD2DMBFIyOhd5JHH2fPd88XxFjt0Dl1cc9FT8q/vavGVJqsa9qNSAU+ZIZHjuOLw DLb5dRAk -----END CERTIFICATE-----Generated at Fri Mar 27 01:07:29 2026 by rpki-client