$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa File: 083000C22A6F11EC9AD38840C4F9AE02.roa (raw, json) Hash identifier: caAFkHTlhWluO59jeavUVW/7IbtAmxOVURoDRMIZiDc= Subject key identifier: CF:05:08:C8:7F:3A:00:F8:D0:5E:E6:3D:32:90:6A:C3:E7:B7:16:FA Certificate issuer: /CN=A91DF1D9/serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Certificate serial: 0551 Authority key identifier: 43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:56:46 +0000 ROA not before: Wed 25 Jun 2025 00:04:31 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142547 IP address blocks: 103.168.224.0/23 maxlen: 23 103.168.224.0/24 maxlen: 24 103.168.225.0/24 maxlen: 24 2001:df6:e080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:04:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1361 (0x551) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF1D9, serialNumber=43E4A81DD594673051E8C7E0B1ADBD31C483B653 Validity Not Before: Jun 25 00:04:31 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40d5e-d1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:e9:88:40:18:0c:7e:a8:39:b9:fa:fd:4a: c6:84:eb:02:22:03:44:a2:53:6e:c5:e7:14:8d:3d: a1:c5:2c:a1:f1:97:96:e0:cd:ea:16:88:16:bc:b0: a9:b8:d9:b7:bc:c3:32:7c:6c:d5:8b:59:c4:25:1a: 20:42:21:c5:bd:48:90:a6:07:c3:41:8a:6d:69:e3: 04:e7:1c:ee:7f:e9:31:14:cd:9f:b9:37:9f:5c:1e: b3:df:5d:85:bf:24:40:33:f6:f8:b7:32:d3:bf:f3: ab:7b:4a:5c:fd:f6:a9:08:79:74:75:64:cf:0e:dc: b3:07:a8:87:d1:ca:82:05:43:be:2d:5b:c1:b3:8e: dd:e5:6b:2d:96:2c:12:3d:6c:e8:c8:6f:91:a8:6b: 6f:a2:84:78:7e:e2:42:ed:81:f2:c2:87:b6:70:26: bf:db:1b:ef:a2:77:21:32:63:8b:da:38:6f:be:cf: 6b:40:2f:7f:ea:75:ac:fd:5f:c9:b3:e9:7a:87:aa: c7:72:95:9f:5a:ba:b5:41:f9:32:35:d0:ac:2b:69: 4c:9a:3f:ce:97:5d:8a:85:af:39:6b:f7:7f:80:c9: 82:95:d9:ff:e8:5a:50:d2:7c:ce:ac:1a:ca:65:91: 2d:1e:c1:92:47:f0:0b:f7:0e:21:8e:a8:40:21:ce: c9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:05:08:C8:7F:3A:00:F8:D0:5E:E6:3D:32:90:6A:C3:E7:B7:16:FA X509v3 Authority Key Identifier: keyid:43:E4:A8:1D:D5:94:67:30:51:E8:C7:E0:B1:AD:BD:31:C4:83:B6:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/Q-SoHdWUZzBR6Mfgsa29McSDtlM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-SoHdWUZzBR6Mfgsa29McSDtlM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF1D9/E37F13822A6C11EC95EB263FC4F9AE02/083000C22A6F11EC9AD38840C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.168.224.0/23 IPv6: 2001:df6:e080::/48 Signature Algorithm: sha256WithRSAEncryption bd:74:07:75:e7:66:65:a6:bf:07:d3:02:43:33:5d:4a:b6:0f: 22:42:ed:07:21:65:09:02:e5:d4:96:a3:af:42:65:d4:f2:4d: 5b:34:a1:0e:2d:f4:80:2a:5e:33:24:c4:1e:18:fc:17:0b:dd: ca:a0:6e:fc:59:ec:cc:59:0d:77:8e:66:6e:71:ce:a5:b5:1c: 74:05:d4:44:69:d0:3e:e2:b5:de:5d:da:0c:64:43:b8:1e:a5: 2e:d8:e4:f5:95:2b:5e:bc:d9:bd:f6:2a:6e:c3:ce:b3:83:49: 8b:1e:c3:7b:d1:25:61:ae:6e:5c:ed:3c:03:87:d7:59:9b:ce: d7:c8:82:89:91:40:91:f9:89:1d:c7:34:2d:64:42:56:75:46: 7f:ea:a6:51:79:0c:19:91:1d:54:2c:aa:d8:49:e6:0d:cf:4c: 89:31:ca:c5:71:c5:48:87:d7:b1:1d:da:b4:42:47:32:85:af: 53:ce:cc:cb:f7:d2:a4:22:d9:db:a0:f8:52:55:54:af:da:23: aa:9c:c3:fa:3a:86:e8:53:a8:62:00:6f:55:0b:80:73:3a:8f: de:7b:fd:f8:5b:1b:f3:c2:bc:06:fe:91:5c:e5:bf:eb:c4:d1: d8:42:b5:f8:9a:de:cf:c0:be:13:70:87:80:de:fe:db:f0:87: 5f:37:eb:fb -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYxRDkxMTAvBgNVBAUTKDQzRTRBODFERDU5NDY3MzA1MUU4QzdFMEIxQURCRDMx QzQ4M0I2NTMwHhcNMjUwNjI1MDAwNDMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGQ1ZS1kMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3XpiEAYDH6oObn6/UrGhOsCIgNEolNuxecUjT2hxSyh8ZeW4M3qFogWvLCp uNm3vMMyfGzVi1nEJRogQiHFvUiQpgfDQYptaeME5xzuf+kxFM2fuTefXB6z312F vyRAM/b4tzLTv/Ore0pc/fapCHl0dWTPDtyzB6iH0cqCBUO+LVvBs47d5WstliwS PWzoyG+RqGtvooR4fuJC7YHywoe2cCa/2xvvonchMmOL2jhvvs9rQC9/6nWs/V/J s+l6h6rHcpWfWrq1QfkyNdCsK2lMmj/Ol12Kha85a/d/gMmCldn/6FpQ0nzOrBrK ZZEtHsGSR/AL9w4hjqhAIc7JJwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM8FCMh/ OgD40F7mPTKQasPntxb6MB8GA1UdIwQYMBaAFEPkqB3VlGcwUejH4LGtvTHEg7ZT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjFEOS9FMzdGMTM4MjJB NkMxMUVDOTVFQjI2M0ZDNEY5QUUwMi9RLVNvSGRXVVp6QlI2TWZnc2EyOU1jU0R0 bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtU29IZFdVWnpCUjZNZmdzYTI5TWNTRHRsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REYxRDkvRTM3RjEzODIyQTZDMTFFQzk1RUIyNjNGQzRGOUFFMDIvMDgzMDAwQzIy QTZGMTFFQzlBRDM4ODQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6jgMA8EAgACMAkDBwAgAQ324IAwDQYJKoZIhvcNAQELBQADggEB AL10B3XnZmWmvwfTAkMzXUq2DyJC7QchZQkC5dSWo69CZdTyTVs0oQ4t9IAqXjMk xB4Y/BcL3cqgbvxZ7MxZDXeOZm5xzqW1HHQF1ERp0D7itd5d2gxkQ7gepS7Y5PWV K1682b32Km7DzrODSYsew3vRJWGublztPAOH11mbztfIgomRQJH5iR3HNC1kQlZ1 Rn/qplF5DBmRHVQsqthJ5g3PTIkxysVxxUiH17Ed2rRCRzKFr1POzMv30qQi2dug +FJVVK/aI6qcw/o6huhTqGIAb1ULgHM6j957/fhbG/PCvAb+kVzlv+vE0dhCtfia 3s/AvhNwh4De/tvwh1836/s= -----END CERTIFICATE-----Generated at Thu Mar 26 08:58:20 2026 by rpki-client