$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/C714C5A6706211EDA9CCDB76C4F9AE02.roa File: C714C5A6706211EDA9CCDB76C4F9AE02.roa (raw, json) Hash identifier: PQz0xbKbyiBo1K+6lX1c97d5j/JyzQaM1t6G0/g1HBw= Subject key identifier: FC:C7:9D:62:E2:C7:44:8F:3E:5A:6F:BC:EE:B0:02:14:6A:1F:99:C4 Certificate issuer: /CN=A91CEDD3/serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Certificate serial: 026F Authority key identifier: F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/C714C5A6706211EDA9CCDB76C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:55:44 +0000 ROA not before: Mon 29 Dec 2025 01:21:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150450 IP address blocks: 103.40.2.0/23 maxlen: 23 103.40.2.0/24 maxlen: 24 103.40.3.0/24 maxlen: 24 2400:c3a0::/32 maxlen: 32 2400:c3a0::/36 maxlen: 36 2400:c3a0:1000::/36 maxlen: 36 2400:c3a0:2000::/36 maxlen: 36 2400:c3a0:3000::/36 maxlen: 36 2400:c3a0:4000::/36 maxlen: 36 2400:c3a0:5000::/36 maxlen: 36 2400:c3a0:6000::/36 maxlen: 36 2400:c3a0:7000::/36 maxlen: 36 2400:c3a0:8000::/36 maxlen: 36 2400:c3a0:9000::/36 maxlen: 36 2400:c3a0:a000::/36 maxlen: 36 2400:c3a0:b000::/36 maxlen: 36 2400:c3a0:c000::/36 maxlen: 36 2400:c3a0:d000::/36 maxlen: 36 2400:c3a0:e000::/36 maxlen: 36 2400:c3a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:34:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 623 (0x26f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEDD3, serialNumber=F7BB172FCAECAFBF9EBEF2508A15426433AEC9DE Validity Not Before: Dec 29 01:21:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43750-b6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0d:70:99:bd:e0:cd:ee:7d:3e:9a:d9:a7:05: 29:52:49:d2:0c:e1:65:d5:d8:de:d1:5d:39:52:e6: b2:d8:ce:de:3f:54:ad:33:c5:93:74:81:c7:bd:de: 1f:1e:47:c7:6d:5c:80:09:44:e5:93:48:e4:dc:41: 0e:20:ca:b5:8c:42:23:c2:ac:d2:6f:0e:51:3e:99: 8f:df:b0:5f:7b:1a:d2:7f:9a:0d:20:6d:fe:b6:46: d9:18:8b:a3:78:99:7f:60:a9:5a:96:35:84:a1:f8: 34:a1:ad:83:f1:ec:7c:43:9b:93:3e:92:6d:12:e1: a6:68:89:ca:f7:8f:c8:c4:8f:72:c2:9a:eb:e5:d7: 3b:07:8e:34:91:80:bd:1f:e7:f8:cd:6a:61:27:0b: 52:7a:78:52:1f:cc:34:a3:97:50:66:51:20:b0:7d: e9:3f:d0:06:30:17:ab:39:ca:9e:1c:a8:12:ae:e7: f6:bb:a9:5d:06:82:5d:a8:9c:2d:7b:0d:f5:3d:ae: ee:3e:b6:71:b2:61:2a:79:84:2a:94:12:ee:16:be: b2:82:fa:50:bc:e7:cf:d9:8e:ea:a3:c2:6b:23:fe: 98:7f:0d:50:8b:df:7c:92:af:8b:ab:c3:e1:ea:f1: 8e:03:a8:59:6f:1b:d1:e2:11:b5:77:02:74:b7:c8: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C7:9D:62:E2:C7:44:8F:3E:5A:6F:BC:EE:B0:02:14:6A:1F:99:C4 X509v3 Authority Key Identifier: keyid:F7:BB:17:2F:CA:EC:AF:BF:9E:BE:F2:50:8A:15:42:64:33:AE:C9:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/97sXL8rsr7-evvJQihVCZDOuyd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/97sXL8rsr7-evvJQihVCZDOuyd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEDD3/D0663328705E11EDACAD885BC4F9AE02/C714C5A6706211EDA9CCDB76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.40.2.0/23 IPv6: 2400:c3a0::/32 Signature Algorithm: sha256WithRSAEncryption a8:cd:27:d9:36:43:00:0f:86:7d:f5:08:b8:4e:da:3c:d7:f2: af:c8:0e:5b:8a:d5:0a:82:11:bd:dd:c2:83:de:ea:d9:81:ca: 8c:36:da:28:8f:f0:2f:54:16:d2:69:b3:05:41:61:d7:52:4c: 95:ad:8a:00:1d:80:5d:69:e9:e9:84:e0:24:dd:77:40:dd:e3: 27:7d:5f:91:1b:ec:db:66:23:32:3b:7a:0f:92:0e:a6:bf:26: 1c:db:a5:c6:1f:51:e5:03:80:7f:58:38:b4:bc:05:30:89:79: 10:3d:06:01:5b:4e:ef:3b:41:f2:e1:d7:c0:58:e5:d1:9a:81: e9:3a:43:a2:97:14:3b:d5:80:35:cc:fb:a7:a2:ae:12:7e:52: fc:19:68:a5:07:ab:ae:2b:ab:81:0a:6b:ac:99:bb:f9:1f:a8: 14:a0:5b:48:6f:5c:4a:6c:94:07:25:2b:09:ce:50:81:78:82: 84:6a:e7:a3:82:36:79:6d:99:48:44:fa:2e:b0:60:a4:41:c5: 97:ed:59:11:c9:b2:43:3d:21:ae:4b:3c:bb:02:64:f9:8a:af: 76:f5:2d:6c:ad:35:96:a3:22:59:2a:5a:13:9e:5a:ff:28:46: 94:19:61:26:63:25:33:dd:c8:1f:38:32:6f:b7:cd:6c:41:43: ac:b3:d6:70 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VERDMxMTAvBgNVBAUTKEY3QkIxNzJGQ0FFQ0FGQkY5RUJFRjI1MDhBMTU0MjY0 MzNBRUM5REUwHhcNMjUxMjI5MDEyMTQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzc1MC1iNmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQ1wmb3gze59PprZpwUpUknSDOFl1dje0V05Uuay2M7eP1StM8WTdIHHvd4f HkfHbVyACUTlk0jk3EEOIMq1jEIjwqzSbw5RPpmP37BfexrSf5oNIG3+tkbZGIuj eJl/YKlaljWEofg0oa2D8ex8Q5uTPpJtEuGmaInK94/IxI9ywprr5dc7B440kYC9 H+f4zWphJwtSenhSH8w0o5dQZlEgsH3pP9AGMBerOcqeHKgSruf2u6ldBoJdqJwt ew31Pa7uPrZxsmEqeYQqlBLuFr6ygvpQvOfP2Y7qo8JrI/6Yfw1Qi998kq+Lq8Ph 6vGOA6hZbxvR4hG1dwJ0t8jLBwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPzHnWLi x0SPPlpvvO6wAhRqH5nEMB8GA1UdIwQYMBaAFPe7Fy/K7K+/nr7yUIoVQmQzrsne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUREMy9EMDY2MzMyODcw NUUxMUVEQUNBRDg4NUJDNEY5QUUwMi85N3NYTDhyc3I3LWV2dkpRaWhWQ1pET3V5 ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk3c1hMOHJzcjctZXZ2SlFpaFZDWkRPdXlkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VERDMvRDA2NjMzMjg3MDVFMTFFREFDQUQ4ODVCQzRGOUFFMDIvQzcxNEM1QTY3 MDYyMTFFREE5Q0NEQjc2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZygCMA0EAgACMAcDBQAkAMOgMA0GCSqGSIb3DQEBCwUAA4IBAQCo zSfZNkMAD4Z99Qi4Tto81/KvyA5bitUKghG93cKD3urZgcqMNtooj/AvVBbSabMF QWHXUkyVrYoAHYBdaenphOAk3XdA3eMnfV+RG+zbZiMyO3oPkg6mvyYc26XGH1Hl A4B/WDi0vAUwiXkQPQYBW07vO0Hy4dfAWOXRmoHpOkOilxQ71YA1zPunoq4SflL8 GWilB6uuK6uBCmusmbv5H6gUoFtIb1xKbJQHJSsJzlCBeIKEauejgjZ5bZlIRPou sGCkQcWX7VkRybJDPSGuSzy7AmT5iq929S1srTWWoyJZKloTnlr/KEaUGWEmYyUz 3cgfODJvt81sQUOss9Zw -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:35 2026 by rpki-client