$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/21525A1C520B11EE8B79021AC4F9AE02.roa File: 21525A1C520B11EE8B79021AC4F9AE02.roa (raw, json) Hash identifier: KWX82VUSGhT9UsPkifLZyX4n6ROSHucaBgxHHGSJG/Q= Subject key identifier: F5:EE:EB:37:43:25:CE:8F:FF:F0:84:4F:AC:DC:FA:A6:CD:51:63:EB Certificate issuer: /CN=A91C5AEE/serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Certificate serial: 01D1 Authority key identifier: 28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/21525A1C520B11EE8B79021AC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:38:04 +0000 ROA not before: Wed 03 Sep 2025 04:23:29 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151664 IP address blocks: 103.253.100.0/23 maxlen: 23 2001:df2:d040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5AEE, serialNumber=28C0607D96831A3D18093345B37258EE3BD7F3E7 Validity Not Before: Sep 3 04:23:29 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3ecdc-bbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:61:ac:17:53:f2:b5:ed:18:9e:1c:21:b5: cd:57:64:4c:7b:18:3f:5a:19:a0:9b:e1:b1:97:23: df:8e:b2:dc:26:06:71:38:44:9e:8d:3d:5f:1b:85: 14:56:f3:f1:39:d7:5f:58:1a:7b:bc:e7:62:ff:2e: ba:e3:52:26:bd:45:d6:26:df:8a:82:b7:5f:fa:51: 04:01:04:96:7d:64:c0:ea:2f:77:5f:34:c9:6b:79: 25:ea:c7:b1:7e:13:6f:9d:31:77:5f:df:7b:ba:43: 1e:a0:bb:bd:89:16:f8:f1:b1:15:1d:1d:bc:e1:2b: e5:5b:59:d8:3a:b9:f9:98:fc:17:7c:e1:72:ff:e2: 6d:64:80:37:2a:c1:1c:1d:a5:cc:40:3b:62:67:b0: c8:7a:e5:7f:a1:f1:9e:39:59:cd:93:c7:3a:c4:a5: 8b:db:d1:48:dc:1c:3e:b6:10:61:05:a6:cf:e6:e3: dc:e5:50:45:21:a9:1b:35:48:e8:d4:3d:3b:a2:e3: 89:2e:c1:c0:7e:c9:57:28:08:3b:91:16:fd:62:c6: ac:12:c5:08:a6:ec:4f:32:12:64:d9:29:11:82:7d: 45:7b:66:26:2f:7a:92:d3:36:65:15:49:ff:ee:91: 9f:8f:61:19:f7:84:a3:70:a9:b0:6c:64:36:37:9a: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EE:EB:37:43:25:CE:8F:FF:F0:84:4F:AC:DC:FA:A6:CD:51:63:EB X509v3 Authority Key Identifier: keyid:28:C0:60:7D:96:83:1A:3D:18:09:33:45:B3:72:58:EE:3B:D7:F3:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/KMBgfZaDGj0YCTNFs3JY7jvX8-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KMBgfZaDGj0YCTNFs3JY7jvX8-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5AEE/3E3901F2520711EEB57B5877C4F9AE02/21525A1C520B11EE8B79021AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.253.100.0/23 IPv6: 2001:df2:d040::/48 Signature Algorithm: sha256WithRSAEncryption 93:42:a7:db:a7:23:ba:65:11:16:10:ca:ed:b3:eb:fa:ea:81: ab:b2:83:f8:44:2f:1a:62:c6:43:f8:e1:c3:ee:3c:ba:ee:d7: b1:5d:a3:9b:9c:9b:83:17:cd:6f:5e:c6:39:d7:4a:90:cf:ec: 08:aa:0d:13:0e:30:71:fd:29:b0:6d:84:ee:0b:e6:18:a6:e2: 2c:b8:30:6b:4a:1a:aa:ba:33:69:90:f9:d0:86:34:8d:e0:e0: ca:31:88:43:06:96:34:0d:1a:34:c0:40:68:c6:ef:de:25:21: 46:2e:db:85:a1:7f:dc:d1:8d:37:6a:c3:ff:4f:2c:0f:88:e7: a6:99:85:78:20:b5:cf:7c:52:eb:df:a9:de:cb:4b:e3:a0:38: 7a:ff:46:71:5c:53:02:df:68:30:81:fd:b5:d5:70:c5:c0:1f: c1:79:16:a0:31:7d:89:06:a0:82:4f:90:00:ce:1c:8c:95:99: 1c:be:9c:8e:16:ed:97:9f:de:aa:30:09:b7:ad:86:0b:2f:db: 0a:46:12:b9:1b:9f:f6:68:87:61:5e:d0:6a:44:49:e6:8c:43: ea:84:93:da:33:bc:ce:bc:a6:b0:f6:6c:8b:71:90:91:21:39: 22:b9:7d:8a:89:39:0c:e9:eb:58:12:06:2e:92:c6:73:36:5a: 6e:d3:12:d3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBRUUxMTAvBgNVBAUTKDI4QzA2MDdEOTY4MzFBM0QxODA5MzM0NUIzNzI1OEVF M0JEN0YzRTcwHhcNMjUwOTAzMDQyMzI5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWNkYy1iYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulNhrBdT8rXtGJ4cIbXNV2RMexg/Whmgm+GxlyPfjrLcJgZxOESejT1fG4UU VvPxOddfWBp7vOdi/y6641ImvUXWJt+Kgrdf+lEEAQSWfWTA6i93XzTJa3kl6sex fhNvnTF3X997ukMeoLu9iRb48bEVHR284SvlW1nYOrn5mPwXfOFy/+JtZIA3KsEc HaXMQDtiZ7DIeuV/ofGeOVnNk8c6xKWL29FI3Bw+thBhBabP5uPc5VBFIakbNUjo 1D07ouOJLsHAfslXKAg7kRb9YsasEsUIpuxPMhJk2SkRgn1Fe2YmL3qS0zZlFUn/ 7pGfj2EZ94SjcKmwbGQ2N5riSwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPXu6zdD Jc6P//CET6zc+qbNUWPrMB8GA1UdIwQYMBaAFCjAYH2Wgxo9GAkzRbNyWO471/Pn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUFFRS8zRTM5MDFGMjUy MDcxMUVFQjU3QjU4NzdDNEY5QUUwMi9LTUJnZlphREdqMFlDVE5GczNKWTdqdlg4 LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tNQmdmWmFER2owWUNUTkZzM0pZN2p2WDgtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzVBRUUvM0UzOTAxRjI1MjA3MTFFRUI1N0I1ODc3QzRGOUFFMDIvMjE1MjVBMUM1 MjBCMTFFRThCNzkwMjFBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ/1kMA8EAgACMAkDBwAgAQ3y0EAwDQYJKoZIhvcNAQELBQADggEB AJNCp9unI7plERYQyu2z6/rqgauyg/hELxpixkP44cPuPLru17Fdo5ucm4MXzW9e xjnXSpDP7AiqDRMOMHH9KbBthO4L5him4iy4MGtKGqq6M2mQ+dCGNI3g4MoxiEMG ljQNGjTAQGjG794lIUYu24Whf9zRjTdqw/9PLA+I56aZhXggtc98Uuvfqd7LS+Og OHr/RnFcUwLfaDCB/bXVcMXAH8F5FqAxfYkGoIJPkADOHIyVmRy+nI4W7Zef3qow Cbethgsv2wpGErkbn/Zoh2Fe0GpESeaMQ+qEk9ozvM68prD2bItxkJEhOSK5fYqJ OQzp61gSBi6SxnM2Wm7TEtM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:10 2026 by rpki-client