$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa File: BE243D98CCE311EAA397205EC4F9AE02.roa (raw, json) Hash identifier: qZ3PJo0PmY9ezmHmQvTDErn7qslnxEuobh+f3U89VNI= Subject key identifier: 2B:E2:DD:C5:A9:9E:CA:90:E0:34:FC:B0:20:05:7C:72:CB:C6:4A:DA Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 08DC Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:50:08 +0000 ROA not before: Wed 30 Jul 2025 21:01:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 134179 IP address blocks: 103.57.0.0/22 maxlen: 22 103.57.0.0/24 maxlen: 24 103.57.1.0/24 maxlen: 24 103.57.2.0/24 maxlen: 24 103.57.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2268 (0x8dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Jul 30 21:01:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a45220-c540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:3a:79:d6:ef:4f:3d:de:ac:d7:42:c2:03: 72:39:7a:2e:84:2f:ab:49:a2:78:7c:4d:43:6c:af: 64:0c:1a:6f:3f:e8:3a:20:ef:fc:72:f4:c3:58:7b: b9:a8:e1:43:d7:24:6f:32:4b:41:39:30:d4:1d:48: 58:db:2d:1e:66:98:b0:8f:bb:f7:62:44:81:6f:3e: 02:48:a7:d2:1b:73:cf:15:c9:bb:9f:dc:8a:49:69: f7:23:32:a8:29:f1:bd:e5:79:4b:23:9d:79:15:52: 6e:91:aa:d9:c5:e9:79:d3:7b:41:66:b6:4d:da:41: 71:45:4b:1f:29:93:98:d1:59:fd:52:61:7e:37:ba: dc:ca:6d:cb:5d:ca:8f:e8:d8:e3:ea:a8:e7:9a:e8: 10:61:c6:50:c5:98:6b:c9:2d:bb:55:c5:ed:48:51: cd:c8:96:6c:63:21:48:bf:25:05:31:bd:16:41:28: 4f:93:0c:27:6b:9a:3e:ca:15:2e:8b:b8:59:af:b8: 32:41:5f:83:f5:c9:ad:42:82:ff:df:c3:03:d8:96: 59:73:f1:38:d4:01:97:5b:af:07:4b:f4:75:9c:0a: 09:0d:a0:f3:57:63:83:08:63:28:9e:cd:bf:86:aa: 05:68:1a:8c:d9:9b:49:1f:21:ed:0b:c7:b6:b7:31: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E2:DD:C5:A9:9E:CA:90:E0:34:FC:B0:20:05:7C:72:CB:C6:4A:DA X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/BE243D98CCE311EAA397205EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.57.0.0/22 Signature Algorithm: sha256WithRSAEncryption 45:16:5a:62:02:0a:ee:34:31:c0:7c:2a:5d:cf:81:d5:db:77: 17:ef:22:f9:22:0e:4b:51:21:1c:73:d0:47:7a:7b:94:a0:53: b4:12:f8:b7:aa:08:2a:00:2c:32:29:35:e8:4a:f2:84:78:c8: 6d:39:ef:6d:ab:65:7a:18:ab:16:08:07:91:c0:ad:d2:a1:fd: f6:57:f0:b8:a0:26:4a:48:d9:29:b6:9a:62:43:e8:5f:4f:bb: ff:bf:25:51:d9:bf:7c:58:04:06:b9:5c:7d:a5:c8:1d:31:c0: 05:b5:c5:e8:fe:19:f3:e4:70:8f:bd:78:ab:08:40:98:b1:da: e6:77:c2:3f:f4:c9:87:46:b1:3d:1e:9c:f3:8b:97:84:ed:b3: 45:96:db:45:33:6b:0c:a7:8d:4e:a5:9b:c3:32:a9:c4:0f:d9: e9:94:41:81:f7:5e:c8:e1:a9:e7:8c:da:a3:2c:b5:fa:c7:fb: 9b:b7:85:6a:b5:22:7c:ae:3e:bc:dc:f8:2e:df:cb:cc:05:7e: 8e:e2:40:b5:fe:80:bd:92:81:fb:de:82:40:62:a7:a1:44:ed: 1e:c2:46:bd:c7:28:43:9b:cc:b8:c5:2a:0a:de:ca:f5:71:95: 36:c1:9f:79:03:61:b5:d5:6d:f8:0f:c5:b1:d3:ef:6f:48:91: e3:63:69:af -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUwNzMwMjEwMTU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTIyMC1jNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4g6edbvTz3erNdCwgNyOXouhC+rSaJ4fE1DbK9kDBpvP+g6IO/8cvTDWHu5 qOFD1yRvMktBOTDUHUhY2y0eZpiwj7v3YkSBbz4CSKfSG3PPFcm7n9yKSWn3IzKo KfG95XlLI515FVJukarZxel503tBZrZN2kFxRUsfKZOY0Vn9UmF+N7rcym3LXcqP 6Njj6qjnmugQYcZQxZhryS27VcXtSFHNyJZsYyFIvyUFMb0WQShPkwwna5o+yhUu i7hZr7gyQV+D9cmtQoL/38MD2JZZc/E41AGXW68HS/R1nAoJDaDzV2ODCGMons2/ hqoFaBqM2ZtJHyHtC8e2tzHJLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCvi3cWp nsqQ4DT8sCAFfHLLxkraMB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMwQzAvMDIyREJDQTRDQ0UzMTFFQUFGNzNGQzVEQzRGOUFFMDIvQkUyNDNEOThD Q0UzMTFFQUEzOTcyMDVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZzkAMA0GCSqGSIb3DQEBCwUAA4IBAQBFFlpiAgruNDHAfCpdz4HV 23cX7yL5Ig5LUSEcc9BHenuUoFO0Evi3qggqACwyKTXoSvKEeMhtOe9tq2V6GKsW CAeRwK3Sof32V/C4oCZKSNkptppiQ+hfT7v/vyVR2b98WAQGuVx9pcgdMcAFtcXo /hnz5HCPvXirCECYsdrmd8I/9MmHRrE9Hpzzi5eE7bNFlttFM2sMp41OpZvDMqnE D9nplEGB917I4annjNqjLLX6x/ubt4VqtSJ8rj683Pgu38vMBX6O4kC1/oC9koH7 3oJAYqehRO0ewka9xyhDm8y4xSoK3sr1cZU2wZ95A2G11W34D8Wx0+9vSJHjY2mv -----END CERTIFICATE-----Generated at Fri Mar 27 09:36:40 2026 by rpki-client