$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa File: DDCCD058B35111EE96186E1EC4F9AE02.roa (raw, json) Hash identifier: jGiJWEhk3dhO1eibIxZXdqF5/Lngdo1Rs0UIzjEFR1E= Subject key identifier: D6:F8:96:E1:AF:C0:8D:1F:55:F1:E4:BE:F8:66:C9:F9:3C:A1:F4:75 Certificate issuer: /CN=A91D8A67/serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Certificate serial: 019D Authority key identifier: 03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:18:48 +0000 ROA not before: Wed 03 Dec 2025 02:34:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 135612 IP address blocks: 103.76.176.0/24 maxlen: 24 103.76.177.0/24 maxlen: 24 203.2.158.0/23 maxlen: 23 203.2.158.0/24 maxlen: 24 203.2.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 413 (0x19d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A67, serialNumber=0354DBE1ED3D99E1945E27274BA2F603EB6A1781 Validity Not Before: Dec 3 02:34:55 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58e38-052a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fc:eb:52:e9:c8:3c:ec:33:db:f2:21:72:74: 18:80:4f:b4:01:de:8f:d6:ed:5b:52:ba:47:a5:26: 04:67:4f:f7:fb:69:4f:0d:e6:ca:4b:e1:ee:22:b4: 48:72:88:65:c7:6c:de:09:ce:08:64:45:99:a9:d8: 87:d1:52:7f:09:f9:e2:34:95:33:32:f6:0a:b1:b0: 32:11:b1:08:f1:59:79:6a:60:4a:6c:41:f0:71:e3: fb:8b:ed:66:4c:49:a3:2e:3f:56:26:04:87:3b:75: 8e:1b:a5:5a:8a:18:26:65:ba:47:f5:5e:d1:16:f0: c5:2a:56:31:dc:b3:dc:36:3c:49:97:bf:aa:1a:82: fb:a1:e2:ce:32:0d:c7:66:10:d2:6f:87:04:ee:b7: a6:0f:44:11:24:ed:18:8e:a5:4c:ef:75:d6:23:f2: 12:7a:1b:65:a9:22:3d:e8:16:80:35:65:ba:8d:4a: b2:3f:71:ea:ac:36:e5:b6:64:73:4c:30:30:04:18: 84:ec:d2:87:65:c2:0e:df:5d:cf:17:60:4b:38:3b: 27:8d:11:4f:77:36:df:7d:16:c6:18:32:ee:f0:d6: 92:7e:71:cb:8d:33:3f:e1:2f:47:84:25:cc:24:01: 7e:ee:68:b7:f5:1c:ac:1e:c9:a1:51:d4:67:05:70: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F8:96:E1:AF:C0:8D:1F:55:F1:E4:BE:F8:66:C9:F9:3C:A1:F4:75 X509v3 Authority Key Identifier: keyid:03:54:DB:E1:ED:3D:99:E1:94:5E:27:27:4B:A2:F6:03:EB:6A:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/A1Tb4e09meGUXicnS6L2A-tqF4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A1Tb4e09meGUXicnS6L2A-tqF4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A67/5511AF68B35111EE98BA021DC4F9AE02/DDCCD058B35111EE96186E1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.76.176.0/23 203.2.158.0/23 Signature Algorithm: sha256WithRSAEncryption 82:42:45:54:d5:87:16:1c:f4:23:51:36:4f:c7:62:34:57:0b: 49:a3:b8:b1:4a:36:26:20:6d:c7:b7:79:fe:7a:91:d7:b7:6c: 64:7f:de:9b:1c:d2:5b:77:00:9c:be:cb:5e:08:d7:85:29:b0: 31:9c:9e:ed:b6:62:16:64:de:7a:11:27:c7:e2:af:ae:09:93: e4:37:3a:8b:0c:5f:71:87:0c:b1:79:d1:95:d9:99:bf:90:60: 41:d1:ec:4a:22:21:d6:bb:c3:bb:76:79:41:c9:d2:2f:10:c5: 05:e0:fc:7a:d3:02:20:48:0c:7d:ea:48:b8:31:e3:52:27:c2: 02:aa:06:7a:1c:ca:a1:ec:19:b8:fe:eb:47:a4:b3:c0:8a:25: 14:d9:57:1c:9b:4f:73:60:56:7a:1c:74:51:63:08:13:55:a1: 9b:53:b8:de:b1:17:b8:83:aa:6d:0c:4b:cc:b8:8a:a9:40:be: ea:0b:81:c8:07:e9:42:f0:5e:fc:42:b0:b5:3f:a8:cb:43:ce: 48:3e:98:8b:30:00:ff:fe:77:81:ec:0f:4b:e3:47:0e:9a:26: c6:38:2b:2d:60:7d:9d:11:6b:3b:34:fb:d7:4c:5e:e8:c8:33: 26:25:39:b0:0a:0d:16:92:82:cd:ab:f7:3e:16:2b:6e:56:12: 87:03:36:28 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBNjcxMTAvBgNVBAUTKDAzNTREQkUxRUQzRDk5RTE5NDVFMjcyNzRCQTJGNjAz RUI2QTE3ODEwHhcNMjUxMjAzMDIzNDU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGUzOC0wNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/zrUunIPOwz2/IhcnQYgE+0Ad6P1u1bUrpHpSYEZ0/3+2lPDebKS+HuIrRI cohlx2zeCc4IZEWZqdiH0VJ/CfniNJUzMvYKsbAyEbEI8Vl5amBKbEHwceP7i+1m TEmjLj9WJgSHO3WOG6VaihgmZbpH9V7RFvDFKlYx3LPcNjxJl7+qGoL7oeLOMg3H ZhDSb4cE7remD0QRJO0YjqVM73XWI/ISehtlqSI96BaANWW6jUqyP3HqrDbltmRz TDAwBBiE7NKHZcIO313PF2BLODsnjRFPdzbffRbGGDLu8NaSfnHLjTM/4S9HhCXM JAF+7mi39RysHsmhUdRnBXDWoQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNb4luGv wI0fVfHkvvhmyfk8ofR1MB8GA1UdIwQYMBaAFANU2+HtPZnhlF4nJ0ui9gPraheB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE2Ny81NTExQUY2OEIz NTExMUVFOThCQTAyMURDNEY5QUUwMi9BMVRiNGUwOW1lR1VYaWNuUzZMMkEtdHFG NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ExVGI0ZTA5bWVHVVhpY25TNkwyQS10cUY0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhBNjcvNTUxMUFGNjhCMzUxMTFFRTk4QkEwMjFEQzRGOUFFMDIvRERDQ0QwNThC MzUxMTFFRTk2MTg2RTFFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBZ0ywAwQBywKeMA0GCSqGSIb3DQEBCwUAA4IBAQCCQkVU1YcWHPQj UTZPx2I0VwtJo7ixSjYmIG3Ht3n+epHXt2xkf96bHNJbdwCcvsteCNeFKbAxnJ7t tmIWZN56ESfH4q+uCZPkNzqLDF9xhwyxedGV2Zm/kGBB0exKIiHWu8O7dnlBydIv EMUF4Px60wIgSAx96ki4MeNSJ8ICqgZ6HMqh7Bm4/utHpLPAiiUU2Vccm09zYFZ6 HHRRYwgTVaGbU7jesRe4g6ptDEvMuIqpQL7qC4HIB+lC8F78QrC1P6jLQ85IPpiL MAD//neB7A9L40cOmibGOCstYH2dEWs7NPvXTF7oyDMmJTmwCg0WkoLNq/c+Fitu VhKHAzYo -----END CERTIFICATE-----Generated at Thu Mar 26 19:03:40 2026 by rpki-client