$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa File: 3F6AC59EB27A11F095B9C63DC4F9AE02.roa (raw, json) Hash identifier: DNZsoV57+rQGIAJrL+CwAovCV4qI5UyFXg2qYhLRO4o= Subject key identifier: BF:13:2C:54:CE:57:1B:41:1C:62:C1:14:CC:A2:27:6D:95:49:81:93 Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D79 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:18:07 +0000 ROA not before: Sun 26 Oct 2025 14:44:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 212238 IP address blocks: 103.99.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3449 (0xd79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Oct 26 14:44:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42e7f-4bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:a2:7e:d9:53:df:1e:f8:41:0c:8f:54:d3: c4:fd:e3:7f:88:1d:5b:1c:ca:f8:94:a4:ab:36:06: cf:ef:b1:60:78:91:78:d5:eb:0d:27:98:49:66:55: df:2e:8f:75:99:d4:3b:95:ad:0e:35:86:3f:5e:08: 33:3f:eb:1f:74:65:04:f4:12:da:5d:37:bd:7b:17: 3c:34:b1:a5:6a:2b:08:b8:21:77:ab:05:34:f5:9b: b1:67:f4:c9:1e:db:61:61:d4:73:f2:b4:b3:7f:df: fe:1d:57:27:ab:63:38:2e:fb:be:14:0c:80:d4:39: e9:09:c6:54:ca:3c:89:29:fc:7d:8d:85:77:96:cd: 09:1b:da:26:7e:0a:34:f4:a7:38:c4:f1:8c:03:05: af:f7:30:54:36:de:75:7a:04:cf:c2:ff:e0:20:a1: b1:b4:10:87:40:bd:8d:35:e3:72:65:59:fa:de:3e: 76:96:a5:db:3c:cf:ab:d0:eb:fb:9a:ee:b2:11:b3: c3:ac:cc:22:69:7d:dd:6d:d7:69:7b:77:9e:9a:2c: 94:a8:c6:ab:c5:4f:85:b5:0a:e0:b0:27:34:2c:22: 53:d5:be:55:14:d0:12:b0:7b:26:7a:5f:73:f9:20: 7b:4e:ee:da:87:b4:1e:d3:69:4e:03:aa:49:2a:d2: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:13:2C:54:CE:57:1B:41:1C:62:C1:14:CC:A2:27:6D:95:49:81:93 X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/3F6AC59EB27A11F095B9C63DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.87.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:12:6c:23:4a:6f:25:9a:3e:9c:a3:83:6e:7b:29:bd:01:26: be:c1:04:63:66:55:2e:c6:26:05:bc:41:67:9e:bf:94:35:50: d6:c9:35:74:4b:8c:b0:29:87:79:5a:8c:c6:55:66:84:07:5c: 19:9f:2a:df:53:72:98:bf:87:00:52:e2:15:fd:ac:8d:b1:d2: 7d:df:3b:59:49:b7:ff:c0:d8:17:c1:35:44:8a:b1:a4:4b:c6: 98:e8:bf:c5:4d:ee:d8:22:9b:36:a7:49:88:b0:16:fa:42:2f: 14:1a:3f:c0:52:2c:0a:f2:9a:0b:38:72:63:f2:0e:38:f3:0f: ab:fe:dd:d4:f3:d2:76:19:e6:65:25:bc:cb:0b:43:14:c4:2b: 95:11:46:f6:c0:d4:e9:c2:08:61:1e:52:16:84:49:a0:66:1f: 7e:33:fe:29:f9:ed:99:65:0a:2f:9b:db:43:46:67:d3:f0:8f: 17:03:97:e7:29:10:74:8f:b6:05:aa:48:a7:e9:bc:5a:56:01: da:10:e7:ef:f1:4e:04:26:a5:ec:45:a5:16:d8:68:10:5d:2d: 58:67:2c:65:77:4f:61:8a:fd:8d:40:79:d4:61:3b:66:37:ca: e9:f0:d0:e2:f2:ad:39:2e:f4:37:af:6d:77:ba:2e:03:77:96: b5:fe:7b:88 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjUxMDI2MTQ0NDE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmU3Zi00YmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRmiftlT3x74QQyPVNPE/eN/iB1bHMr4lKSrNgbP77FgeJF41esNJ5hJZlXf Lo91mdQ7la0ONYY/XggzP+sfdGUE9BLaXTe9exc8NLGlaisIuCF3qwU09ZuxZ/TJ HtthYdRz8rSzf9/+HVcnq2M4Lvu+FAyA1DnpCcZUyjyJKfx9jYV3ls0JG9omfgo0 9Kc4xPGMAwWv9zBUNt51egTPwv/gIKGxtBCHQL2NNeNyZVn63j52lqXbPM+r0Ov7 mu6yEbPDrMwiaX3dbddpe3eemiyUqMarxU+FtQrgsCc0LCJT1b5VFNASsHsmel9z +SB7Tu7ah7Qe02lOA6pJKtJRlQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL8TLFTO VxtBHGLBFMyiJ22VSYGTMB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI1NTEvREJGNkUxRDRFMkU0MTFFOTlDRDBBOTY5QzRGOUFFMDIvM0Y2QUM1OUVC MjdBMTFGMDk1QjlDNjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2NXMA0GCSqGSIb3DQEBCwUAA4IBAQAPEmwjSm8lmj6co4Nueym9 ASa+wQRjZlUuxiYFvEFnnr+UNVDWyTV0S4ywKYd5WozGVWaEB1wZnyrfU3KYv4cA UuIV/ayNsdJ93ztZSbf/wNgXwTVEirGkS8aY6L/FTe7YIps2p0mIsBb6Qi8UGj/A UiwK8poLOHJj8g448w+r/t3U89J2GeZlJbzLC0MUxCuVEUb2wNTpwghhHlIWhEmg Zh9+M/4p+e2ZZQovm9tDRmfT8I8XA5fnKRB0j7YFqkin6bxaVgHaEOfv8U4EJqXs RaUW2GgQXS1YZyxld09hiv2NQHnUYTtmN8rp8NDi8q05LvQ3r213ui4Dd5a1/nuI -----END CERTIFICATE-----Generated at Sat Mar 28 10:28:00 2026 by rpki-client