$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa File: F550BA02768A11F081B6114EC4F9AE02.roa (raw, json) Hash identifier: JTVcuzCMMmNhrtmEPsXbEStRIxrikUXR5e5QVLrqde8= Subject key identifier: C0:20:5F:1D:2A:7C:F6:1B:69:CD:A5:15:17:10:86:E9:20:BA:AD:73 Certificate issuer: /CN=A91C9350/serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Certificate serial: 354F Authority key identifier: CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:32:51 +0000 ROA not before: Wed 04 Feb 2026 15:09:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136468 IP address blocks: 103.35.251.0/24 maxlen: 24 103.35.251.16/28 maxlen: 28 103.35.251.32/28 maxlen: 28 103.35.251.48/28 maxlen: 28 103.35.251.64/28 maxlen: 28 2402:cf80:100a::/48 maxlen: 48 2402:cf80:100b::/48 maxlen: 48 2402:cf80:7ffd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13647 (0x354f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9350, serialNumber=CF706D8147D779207D99AF9AD39DD5F2DFE59DE4 Validity Not Before: Feb 4 15:09:26 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a47843-c0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:32:98:bc:dc:60:64:7e:31:14:e7:ed:cd: e2:1a:7e:ca:da:2b:dc:3a:9e:88:83:ba:ad:93:73: 09:31:b4:2c:c3:87:18:85:37:17:07:70:c2:8e:ff: 36:25:4d:4d:2e:89:ee:d0:c3:da:83:dc:32:31:e8: 57:10:f7:c6:c8:43:13:54:24:d9:18:01:69:30:4d: 3d:26:3a:85:ed:ff:d9:d9:fe:ae:54:2a:9f:69:9a: 17:a0:6b:70:27:94:91:e9:03:fd:b5:c1:c2:3b:f1: 21:72:94:99:9d:77:23:aa:fe:1e:e3:57:a5:68:3f: 56:0a:2f:1a:0e:20:25:36:6c:26:d2:2f:e6:a8:6b: 5b:6c:dc:6d:55:45:bc:23:bf:37:30:4b:3a:4c:53: 9f:79:1d:93:fd:ad:42:b2:31:ae:e8:c9:20:a1:7c: 42:26:25:fb:40:05:85:55:4f:65:7f:e3:b2:04:51: 0a:f7:c7:ef:d0:3e:38:6c:c9:da:0b:5a:4d:e9:ac: a3:d2:7b:e4:58:8a:f3:a2:c6:4c:0d:71:9b:63:b5: 4d:3a:10:43:3d:86:c6:71:4d:5e:1a:48:5f:c2:5d: eb:44:95:92:a8:4e:ef:8e:cc:52:cf:bf:46:cc:86: bc:d9:81:85:47:80:af:05:9b:6d:d5:75:cb:2f:d7: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:20:5F:1D:2A:7C:F6:1B:69:CD:A5:15:17:10:86:E9:20:BA:AD:73 X509v3 Authority Key Identifier: keyid:CF:70:6D:81:47:D7:79:20:7D:99:AF:9A:D3:9D:D5:F2:DF:E5:9D:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/z3BtgUfXeSB9ma-a053V8t_lneQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3BtgUfXeSB9ma-a053V8t_lneQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9350/3913BCA01D8711E2B42B02DF08B02CD2/F550BA02768A11F081B6114EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.35.251.0/24 IPv6: 2402:cf80:100a::/47 2402:cf80:7ffd::/48 Signature Algorithm: sha256WithRSAEncryption 50:b0:f1:1b:f4:47:84:d1:e1:ba:fe:ed:ad:41:89:25:3c:94: c3:71:88:0a:d7:16:9b:8f:ae:da:50:89:17:a6:24:3b:db:34: 8b:ab:fd:37:32:6f:de:88:e4:6c:8c:2f:05:e6:05:91:fe:7d: a0:39:37:2a:d9:01:4a:9c:2d:c1:f4:41:ad:63:4f:ee:af:c5: 84:95:17:88:96:5d:c3:1c:93:51:26:dd:0f:1f:ac:5d:10:c8: 6e:0b:fd:77:4e:3c:4b:eb:49:0e:00:f8:1a:0a:de:0b:d8:3a: 03:b7:1a:77:ea:7b:28:27:9f:9b:71:f5:70:c2:d2:5c:48:8f: 8f:35:3b:da:ff:13:1c:ef:c0:0e:d0:ec:cc:12:bc:50:a0:0b: 81:a3:09:19:4e:83:9e:ca:50:eb:91:c0:88:c3:05:ac:00:ed: cf:6d:88:39:8c:91:af:d1:36:3d:b6:75:ce:b1:4a:34:fc:e5: a9:8e:c8:4d:8e:cf:92:6d:ac:71:80:7c:1c:d1:bc:37:f0:87: d9:ba:7f:03:30:eb:b0:80:7c:54:3f:ce:a2:97:7f:21:7d:2e: 5e:c5:05:6b:8d:44:47:2a:4e:19:07:0f:81:cd:cc:fc:49:21: 3f:b7:c7:0a:87:6b:f7:67:78:94:8f:82:0c:d4:45:cd:e4:d5: 53:94:96:02 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICNU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzNTAxMTAvBgNVBAUTKENGNzA2RDgxNDdENzc5MjA3RDk5QUY5QUQzOURENUYy REZFNTlERTQwHhcNMjYwMjA0MTUwOTI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzg0My1jMGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtn0ymLzcYGR+MRTn7c3iGn7K2ivcOp6Ig7qtk3MJMbQsw4cYhTcXB3DCjv82 JU1NLonu0MPag9wyMehXEPfGyEMTVCTZGAFpME09JjqF7f/Z2f6uVCqfaZoXoGtw J5SR6QP9tcHCO/EhcpSZnXcjqv4e41elaD9WCi8aDiAlNmwm0i/mqGtbbNxtVUW8 I783MEs6TFOfeR2T/a1CsjGu6MkgoXxCJiX7QAWFVU9lf+OyBFEK98fv0D44bMna C1pN6ayj0nvkWIrzosZMDXGbY7VNOhBDPYbGcU1eGkhfwl3rRJWSqE7vjsxSz79G zIa82YGFR4CvBZtt1XXLL9f2VwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFMAgXx0q fPYbac2lFRcQhukguq1zMB8GA1UdIwQYMBaAFM9wbYFH13kgfZmvmtOd1fLf5Z3k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTM1MC8zOTEzQkNBMDFE ODcxMUUyQjQyQjAyREYwOEIwMkNEMi96M0J0Z1VmWGVTQjltYS1hMDUzVjh0X2xu ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozQnRnVWZYZVNCOW1hLWEwNTNWOHRfbG5lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkzNTAvMzkxM0JDQTAxRDg3MTFFMkI0MkIwMkRGMDhCMDJDRDIvRjU1MEJBMDI3 NjhBMTFGMDgxQjYxMTRFQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM BAIAATAGAwQAZyP7MBgEAgACMBIDBwEkAs+AEAoDBwAkAs+Af/0wDQYJKoZIhvcN AQELBQADggEBAFCw8Rv0R4TR4br+7a1BiSU8lMNxiArXFpuPrtpQiRemJDvbNIur /Tcyb96I5GyMLwXmBZH+faA5NyrZAUqcLcH0Qa1jT+6vxYSVF4iWXcMck1Em3Q8f rF0QyG4L/XdOPEvrSQ4A+BoK3gvYOgO3Gnfqeygnn5tx9XDC0lxIj481O9r/Exzv wA7Q7MwSvFCgC4GjCRlOg57KUOuRwIjDBawA7c9tiDmMka/RNj22dc6xSjT85amO yE2Oz5JtrHGAfBzRvDfwh9m6fwMw67CAfFQ/zqKXfyF9Ll7FBWuNREcqThkHD4HN zPxJIT+3xwqHa/dneJSPggzURc3k1VOUlgI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:58:36 2026 by rpki-client