$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/9908BDDE1CAA11EF80E3BB87C4F9AE02.roa File: 9908BDDE1CAA11EF80E3BB87C4F9AE02.roa (raw, json) Hash identifier: F4bqm9WQs1g0ZI6Eys/rDBe4XBqJ0gtCIN4AXwG1g8o= Subject key identifier: F6:C7:C8:2B:6B:D5:88:76:73:AE:F3:1B:36:6B:D9:AC:F6:2E:49:7C Certificate issuer: /CN=A91DC2A9/serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Certificate serial: 01F9 Authority key identifier: 3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/9908BDDE1CAA11EF80E3BB87C4F9AE02.roa Signing time: Tue 03 Mar 2026 03:37:06 +0000 ROA not before: Tue 03 Mar 2026 03:37:06 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 7477 IP address blocks: 103.206.236.0/22 maxlen: 24 114.129.160.0/20 maxlen: 24 114.129.176.0/21 maxlen: 24 180.181.128.0/19 maxlen: 24 210.16.68.0/22 maxlen: 24 2401:a400::/32 maxlen: 32 2401:a400:100::/40 maxlen: 40 2401:a400:200::/40 maxlen: 40 2401:a400:300::/40 maxlen: 40 2401:a400:400::/40 maxlen: 40 2401:a400:500::/40 maxlen: 40 2401:a400:2000::/36 maxlen: 36 2401:a400:3000::/36 maxlen: 36 2401:a400:4000::/36 maxlen: 36 2401:a400:5000::/36 maxlen: 36 2401:a400:6000::/36 maxlen: 36 2401:a400:7000::/36 maxlen: 36 2401:a400:c200::/40 maxlen: 40 2401:a400:c300::/40 maxlen: 40 2401:a400:c400::/40 maxlen: 40 2401:a400:c500::/40 maxlen: 40 2401:a400:c600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC2A9, serialNumber=3F996261AB3D1EF041661B3AEF7D8932B5702637 Validity Not Before: Mar 3 03:37:06 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a65762-5bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:a7:b9:24:85:eb:44:34:9f:47:2f:30:b5: 4b:e5:1b:8a:f3:04:d7:f6:48:86:62:c8:95:e4:5b: f8:2c:34:3b:4e:39:19:05:42:b1:05:18:fd:3d:22: d0:51:85:e2:c6:84:55:47:0f:21:81:aa:29:f8:04: 02:95:bc:b0:01:43:57:58:24:13:ef:56:21:b6:22: fc:61:0a:21:31:88:2f:6b:2c:54:77:84:13:03:22: 23:c1:48:3e:00:9b:87:54:d7:28:77:ae:76:17:84: fc:33:2f:36:b7:7c:94:83:a0:e4:64:3a:59:e1:6d: 7f:cb:8c:bc:66:d6:50:05:31:ac:6f:04:32:79:d5: 9d:3c:5a:29:e3:9a:b9:36:f2:57:08:ab:79:da:9e: df:14:45:10:2c:49:ac:81:8b:4d:34:97:c0:d7:c6: 43:8f:a4:03:96:b3:85:54:ee:be:0e:1f:94:a1:2a: 33:72:3f:f3:32:10:a4:2c:5e:d8:d2:07:c9:a2:e6: 04:22:4e:9f:9a:4d:c5:72:21:da:16:a8:38:85:c3: 39:77:34:00:b3:4d:01:ba:6e:03:6d:81:d8:29:5f: 8a:33:c2:23:0a:ed:e5:a0:4e:e8:40:cb:10:60:f9: 58:ec:66:b0:41:2f:5e:87:6d:ca:04:2e:64:39:53: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:C8:2B:6B:D5:88:76:73:AE:F3:1B:36:6B:D9:AC:F6:2E:49:7C X509v3 Authority Key Identifier: keyid:3F:99:62:61:AB:3D:1E:F0:41:66:1B:3A:EF:7D:89:32:B5:70:26:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/P5liYas9HvBBZhs6732JMrVwJjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P5liYas9HvBBZhs6732JMrVwJjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC2A9/D8DDC1A634C611EEB4EBB070C4F9AE02/9908BDDE1CAA11EF80E3BB87C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.206.236.0/22 114.129.160.0-114.129.183.255 180.181.128.0/19 210.16.68.0/22 IPv6: 2401:a400::/32 Signature Algorithm: sha256WithRSAEncryption 2d:22:cc:d7:b4:71:f8:12:18:b9:9a:39:9a:57:79:42:9c:72: 61:0f:1a:13:76:38:e0:4b:dd:07:05:4d:b2:f2:cd:91:a4:5a: b3:06:0e:07:cf:33:ff:7c:69:c0:f9:ab:95:4a:be:d2:43:49: c5:ac:be:e8:cf:99:24:6e:5b:1c:e3:81:10:c4:69:80:7a:d5: 9f:df:a5:4b:e7:33:0d:d4:99:07:8e:fe:d3:8a:5f:0c:ef:17: c0:57:e2:5a:72:e8:2f:cd:1a:1c:30:fc:a9:51:4f:17:24:2e: 5b:77:de:45:48:18:2b:2a:2c:1f:d4:e3:d6:c4:8d:ac:41:1f: 0c:0a:eb:4d:95:cf:1f:23:77:00:ab:9c:10:8d:1a:3a:ee:ea: 2d:4d:f2:65:c6:ba:a4:10:d0:c5:54:68:03:a3:5d:33:c4:ad: c1:cc:c7:4c:42:e2:b0:d7:a7:fb:20:1e:e8:f7:e9:c5:6f:ed: bb:07:8c:03:6a:4b:58:81:4f:ae:8d:ae:44:95:3d:cb:59:fe: ad:ec:61:08:75:97:ef:10:d3:c9:3e:cd:b2:45:fb:06:2c:1d: 6a:43:26:ae:a1:16:33:3c:b6:f2:bf:a0:a8:62:e8:47:1c:91: 25:92:51:e6:e3:a5:9d:03:b3:af:54:6d:c4:54:42:d4:1c:a8: 6f:40:3d:78 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMyQTkxMTAvBgNVBAUTKDNGOTk2MjYxQUIzRDFFRjA0MTY2MUIzQUVGN0Q4OTMy QjU3MDI2MzcwHhcNMjYwMzAzMDMzNzA2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2NTc2Mi01YmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3anuSSF60Q0n0cvMLVL5RuK8wTX9kiGYsiV5Fv4LDQ7TjkZBUKxBRj9PSLQ UYXixoRVRw8hgaop+AQClbywAUNXWCQT71YhtiL8YQohMYgvayxUd4QTAyIjwUg+ AJuHVNcod652F4T8My82t3yUg6DkZDpZ4W1/y4y8ZtZQBTGsbwQyedWdPFop45q5 NvJXCKt52p7fFEUQLEmsgYtNNJfA18ZDj6QDlrOFVO6+Dh+UoSozcj/zMhCkLF7Y 0gfJouYEIk6fmk3FciHaFqg4hcM5dzQAs00Bum4DbYHYKV+KM8IjCu3loE7oQMsQ YPlY7GawQS9eh23KBC5kOVPKwQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFPbHyCtr 1Yh2c67zGzZr2az2Lkl8MB8GA1UdIwQYMBaAFD+ZYmGrPR7wQWYbOu99iTK1cCY3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzJBOS9EOEREQzFBNjM0 QzYxMUVFQjRFQkIwNzBDNEY5QUUwMi9QNWxpWWFzOUh2QkJaaHM2NzMySk1yVndK amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A1bGlZYXM5SHZCQlpoczY3MzJKTXJWd0pqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMyQTkvRDhEREMxQTYzNEM2MTFFRUI0RUJCMDcwQzRGOUFFMDIvOTkwOEJEREUx Q0FBMTFFRjgwRTNCQjg3QzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAm BAIAATAgAwQCZ87sMAwDBAVygaADBANygbADBAW0tYADBALSEEQwDQQCAAIwBwMF ACQBpAAwDQYJKoZIhvcNAQELBQADggEBAC0izNe0cfgSGLmaOZpXeUKccmEPGhN2 OOBL3QcFTbLyzZGkWrMGDgfPM/98acD5q5VKvtJDScWsvujPmSRuWxzjgRDEaYB6 1Z/fpUvnMw3UmQeO/tOKXwzvF8BX4lpy6C/NGhww/KlRTxckLlt33kVIGCsqLB/U 49bEjaxBHwwK602Vzx8jdwCrnBCNGjru6i1N8mXGuqQQ0MVUaAOjXTPErcHMx0xC 4rDXp/sgHuj36cVv7bsHjANqS1iBT66NrkSVPctZ/q3sYQh1l+8Q08k+zbJF+wYs HWpDJq6hFjM8tvK/oKhi6EcckSWSUebjpZ0Ds69UbcRUQtQcqG9APXg= -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:56 2026 by rpki-client