$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/0D09EE14D79411EC955CCA68C4F9AE02.roa File: 0D09EE14D79411EC955CCA68C4F9AE02.roa (raw, json) Hash identifier: l5eDnWVvvZlf84IjmEjoAxyefCJGwblf1w9vPN/tkqI= Subject key identifier: 9F:91:74:F2:44:E2:29:39:FA:22:B9:F8:0B:45:FD:35:11:CD:19:B7 Certificate issuer: /CN=A91DD112/serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Certificate serial: 0391 Authority key identifier: 36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/0D09EE14D79411EC955CCA68C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:59:10 +0000 ROA not before: Thu 03 Jul 2025 01:36:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149831 IP address blocks: 103.187.124.0/23 maxlen: 23 103.187.124.0/24 maxlen: 24 103.187.125.0/24 maxlen: 24 2001:df0:bcc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD112, serialNumber=36E4E359E20DDA65133E121A92D6D6ACB1E53123 Validity Not Before: Jul 3 01:36:40 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ffdd-b783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:c6:72:fd:29:db:5c:4b:2c:52:91:ec:9a: 9e:6e:c1:88:69:08:05:db:70:d0:f2:86:35:5a:ea: 60:f4:60:96:3a:56:e9:ba:5e:94:55:24:45:f3:33: 96:ff:9d:da:80:d3:a7:43:ea:6c:a2:5f:93:ff:b6: 32:93:60:8a:07:ae:df:f2:17:8b:33:96:fe:f8:1b: 60:6c:06:68:67:64:4b:7d:07:93:ba:ee:be:8d:f6: 67:44:07:6b:2c:5b:8c:39:d7:b4:66:73:45:90:1d: 51:11:4b:f3:ba:51:c6:3d:0d:af:1c:d1:b8:8b:64: ac:22:a4:3e:7d:2c:8d:a8:49:31:19:41:c6:da:78: 92:20:3c:c5:02:7f:1d:8d:d7:4f:8e:37:92:55:c7: 02:86:23:3a:37:92:17:a6:69:03:f5:94:0d:e0:24: b8:43:8e:11:75:f3:bd:53:b2:03:0f:47:e1:58:18: 12:71:1c:9d:84:8f:73:85:83:f2:1c:a7:0c:8a:89: f4:50:1d:81:df:03:cd:94:a6:b5:df:9b:36:16:2b: 07:e9:5a:07:0f:76:02:a5:47:b9:0b:8b:f8:01:1e: 36:eb:30:22:db:05:95:90:da:e4:e6:b9:22:ad:cc: 77:ff:c3:a1:51:0e:53:c5:62:f4:1b:52:3a:97:0d: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:91:74:F2:44:E2:29:39:FA:22:B9:F8:0B:45:FD:35:11:CD:19:B7 X509v3 Authority Key Identifier: keyid:36:E4:E3:59:E2:0D:DA:65:13:3E:12:1A:92:D6:D6:AC:B1:E5:31:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/NuTjWeIN2mUTPhIaktbWrLHlMSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NuTjWeIN2mUTPhIaktbWrLHlMSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD112/DABAB5DCD78F11EC97B59E62C4F9AE02/0D09EE14D79411EC955CCA68C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.187.124.0/23 IPv6: 2001:df0:bcc0::/48 Signature Algorithm: sha256WithRSAEncryption c6:c1:d0:e9:51:4f:9a:db:5e:3b:8f:cb:55:49:59:e7:6e:2b: 06:62:6f:6d:dc:a0:f4:13:e8:72:c5:e1:9d:98:f9:e4:2b:cf: 93:b9:6e:87:7a:5c:f5:19:81:d6:3b:a0:6f:01:16:d5:dc:ab: 26:15:6a:ac:54:a0:73:6e:4c:0b:7e:06:dc:16:68:16:3e:13: 05:ce:63:ac:e2:8c:7e:e3:e6:82:fb:01:00:d1:59:45:a9:95: 73:54:85:e8:86:8f:3c:96:ff:de:32:73:fa:b7:e5:5e:62:72: 07:b8:92:01:d3:84:53:0a:d7:c2:be:dc:f5:95:48:dc:43:35: d6:0f:ba:7d:df:d8:db:6c:00:72:ae:4d:ab:b3:91:96:e0:f7: 01:a4:23:c9:37:5a:df:3a:55:6b:15:af:54:9d:9c:7d:dc:82: c5:6d:1c:74:bc:b3:bf:2c:2c:15:44:28:72:8d:a5:c8:17:6f: e5:59:90:c8:01:dd:3b:8f:f1:80:9e:4f:08:f6:9f:9f:9d:fb: e0:7b:29:e9:03:b1:c1:0f:19:67:81:f2:b0:c7:76:0e:6f:8e: b9:34:9e:b0:9d:78:cc:10:03:66:63:91:93:a3:45:47:ff:01: d0:63:2c:87:8f:9f:93:3b:7e:42:20:d3:3a:0b:da:a2:cf:5d: ed:09:3d:1c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMTIxMTAvBgNVBAUTKDM2RTRFMzU5RTIwRERBNjUxMzNFMTIxQTkyRDZENkFD QjFFNTMxMjMwHhcNMjUwNzAzMDEzNjQwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmZkZC1iNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1L7Gcv0p21xLLFKR7JqebsGIaQgF23DQ8oY1Wupg9GCWOlbpul6UVSRF8zOW /53agNOnQ+psol+T/7Yyk2CKB67f8heLM5b++BtgbAZoZ2RLfQeTuu6+jfZnRAdr LFuMOde0ZnNFkB1REUvzulHGPQ2vHNG4i2SsIqQ+fSyNqEkxGUHG2niSIDzFAn8d jddPjjeSVccChiM6N5IXpmkD9ZQN4CS4Q44RdfO9U7IDD0fhWBgScRydhI9zhYPy HKcMion0UB2B3wPNlKa135s2FisH6VoHD3YCpUe5C4v4AR426zAi2wWVkNrk5rki rcx3/8OhUQ5TxWL0G1I6lw2ZWQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJ+RdPJE 4ik5+iK5+AtF/TURzRm3MB8GA1UdIwQYMBaAFDbk41niDdplEz4SGpLW1qyx5TEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDExMi9EQUJBQjVEQ0Q3 OEYxMUVDOTdCNTlFNjJDNEY5QUUwMi9OdVRqV2VJTjJtVVRQaElha3RiV3JMSGxN U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL051VGpXZUlOMm1VVFBoSWFrdGJXckxIbE1TTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQxMTIvREFCQUI1RENENzhGMTFFQzk3QjU5RTYyQzRGOUFFMDIvMEQwOUVFMTRE Nzk0MTFFQzk1NUNDQTY4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7t8MA8EAgACMAkDBwAgAQ3wvMAwDQYJKoZIhvcNAQELBQADggEB AMbB0OlRT5rbXjuPy1VJWeduKwZib23coPQT6HLF4Z2Y+eQrz5O5bod6XPUZgdY7 oG8BFtXcqyYVaqxUoHNuTAt+BtwWaBY+EwXOY6zijH7j5oL7AQDRWUWplXNUheiG jzyW/94yc/q35V5icge4kgHThFMK18K+3PWVSNxDNdYPun3f2NtsAHKuTauzkZbg 9wGkI8k3Wt86VWsVr1SdnH3cgsVtHHS8s78sLBVEKHKNpcgXb+VZkMgB3TuP8YCe Twj2n5+d++B7KekDscEPGWeB8rDHdg5vjrk0nrCdeMwQA2ZjkZOjRUf/AdBjLIeP n5M7fkIg0zoL2qLPXe0JPRw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:27 2026 by rpki-client