$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/3E9C9BD81D0011F1815CC9FC023D8C67.roa File: 3E9C9BD81D0011F1815CC9FC023D8C67.roa (raw, json) Hash identifier: Kukv8kreY+EmOCja9CqHGkg79ZkBLsRsG81g8wr1j8A= Subject key identifier: C0:4C:10:F0:D0:FE:2B:28:B1:E8:90:8E:85:22:D3:AF:AE:86:15:6B Certificate issuer: /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Certificate serial: 02 Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/3E9C9BD81D0011F1815CC9FC023D8C67.roa Signing time: Wed 11 Mar 2026 04:10:31 +0000 ROA not before: Wed 11 Mar 2026 04:10:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17819 IP address blocks: 103.19.60.0/22 maxlen: 22 2407:d300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Validity Not Before: Mar 11 04:10:31 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69b0eb37-a0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:83:ae:2a:54:40:3f:e8:e4:fe:81:23:e6:03: c5:ab:4e:e0:2f:02:e2:fb:50:88:3b:d0:a3:fe:26: 37:50:a7:e9:39:97:3c:c2:e5:d0:32:2b:51:cd:4a: b1:bd:46:51:0d:13:96:b2:46:e4:dd:f4:84:55:34: ef:fc:bb:8a:df:f1:02:c8:9c:d2:5a:18:5e:08:a9: ed:1f:85:86:59:c3:d0:cb:04:70:e2:95:c1:13:8b: 75:67:ed:cb:ce:d2:43:ee:3c:16:38:5d:ac:0e:78: 69:36:fa:6f:95:f1:3a:ed:e0:90:31:bd:d8:28:93: 9f:d1:49:af:1b:0d:ba:5f:7c:ea:63:e7:66:9d:e9: c0:4c:a4:ca:f9:e3:fc:60:d5:59:fb:19:18:c5:7c: 60:93:ec:f9:e9:20:d5:82:53:ec:97:6e:0b:4d:9b: 96:da:50:d0:54:d2:0c:11:38:7e:fe:4d:8d:63:c3: 40:04:ae:ab:71:c5:56:2e:12:2f:44:d8:8f:bd:3a: 6c:f4:a5:26:6a:ac:89:da:0e:07:49:43:1a:38:ca: 32:71:ed:df:71:42:23:0e:83:c2:6a:23:63:72:1b: 8d:55:4b:df:34:21:a0:5e:ec:38:9f:8f:8e:9f:13: 56:d6:7c:d6:30:8c:f7:ea:85:5a:c1:29:e6:94:17: 59:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4C:10:F0:D0:FE:2B:28:B1:E8:90:8E:85:22:D3:AF:AE:86:15:6B X509v3 Authority Key Identifier: keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/3E9C9BD81D0011F1815CC9FC023D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.19.60.0/22 IPv6: 2407:d300::/32 Signature Algorithm: sha256WithRSAEncryption b1:ab:cd:ac:8e:0b:f0:46:7e:af:f4:e3:fc:1c:04:8b:d5:4a: 42:88:a4:41:59:05:7e:9c:23:2c:7c:dc:e0:fd:ed:13:46:dd: 43:e5:2b:4f:fa:f4:d3:c1:5e:a3:7b:6c:2b:bc:e5:55:ec:04: 2b:c4:fc:88:c0:e4:61:05:27:37:0e:ca:81:60:d2:a7:50:ee: b6:20:b8:53:00:00:22:2d:ef:57:fc:5d:86:a9:1b:f2:e3:65: 2f:19:90:e8:c2:fc:e4:9d:5a:85:ea:35:af:f6:9e:0b:ee:3d: aa:f9:7e:32:29:bc:f3:2d:9c:58:b4:2c:05:6c:a4:02:4d:56: 9a:5f:5a:4c:87:56:4f:59:ae:41:dd:fd:b2:0d:62:d4:4b:3e: be:05:84:3e:7a:83:23:1e:e4:4e:da:e0:07:4f:02:82:4e:eb: aa:53:2b:0d:8a:b5:03:2f:2f:6b:3c:34:df:95:b8:18:aa:73: e4:7a:5d:c6:1d:02:e7:f3:f7:7c:9f:9a:72:47:1b:59:8a:fc: 22:dc:9c:98:50:07:43:7d:bf:f2:cc:13:6d:dd:02:50:f6:68: fb:d4:5e:71:c8:2e:dc:fa:23:30:24:c3:f2:33:e7:fb:5e:4c: 56:c9:3d:eb:5a:2a:dd:88:d3:3f:bf:d2:97:6c:0d:dc:d5:d3: 78:51:0b:f3 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB Q0E1MjVEQTAeFw0yNjAzMTEwNDEwMzFaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjBlYjM3LWEwZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEg64qVEA/6OT+gSPmA8WrTuAvAuL7UIg70KP+JjdQp+k5lzzC5dAyK1HNSrG9 RlENE5ayRuTd9IRVNO/8u4rf8QLInNJaGF4Iqe0fhYZZw9DLBHDilcETi3Vn7cvO 0kPuPBY4XawOeGk2+m+V8Trt4JAxvdgok5/RSa8bDbpffOpj52ad6cBMpMr54/xg 1Vn7GRjFfGCT7PnpINWCU+yXbgtNm5baUNBU0gwROH7+TY1jw0AErqtxxVYuEi9E 2I+9Omz0pSZqrInaDgdJQxo4yjJx7d9xQiMOg8JqI2NyG41VS980IaBe7Difj46f E1bWfNYwjPfqhVrBKeaUF1mFAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUwEwQ8ND+ Kyix6JCOhSLTr66GFWswHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDA2NC9EMTJCMUM3ODFDRkYxMUYxQTY5RTUwRjk0MTNEOEM2Ny8zRTlDOUJEODFE MDAxMUYxODE1Q0M5RkMwMjNEOEM2Ny5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAJnEzwwDQQCAAIwBwMFACQH0wAwDQYJKoZIhvcNAQELBQADggEBALGr zayOC/BGfq/04/wcBIvVSkKIpEFZBX6cIyx83OD97RNG3UPlK0/69NPBXqN7bCu8 5VXsBCvE/IjA5GEFJzcOyoFg0qdQ7rYguFMAACIt71f8XYapG/LjZS8ZkOjC/OSd WoXqNa/2ngvuPar5fjIpvPMtnFi0LAVspAJNVppfWkyHVk9ZrkHd/bINYtRLPr4F hD56gyMe5E7a4AdPAoJO66pTKw2KtQMvL2s8NN+VuBiqc+R6XcYdAufz93yfmnJH G1mK/CLcnJhQB0N9v/LME23dAlD2aPvUXnHILtz6IzAkw/Iz5/teTFbJPetaKt2I 0z+/0pdsDdzV03hRC/M= -----END CERTIFICATE-----Generated at Thu Mar 26 16:54:32 2026 by rpki-client