$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/A30B17FAA81911EF862F3A56C4F9AE02.roa File: A30B17FAA81911EF862F3A56C4F9AE02.roa (raw, json) Hash identifier: PGZEC43Jrl4xxGDivGAOBx4e7We0intHItmZzFxukHM= Subject key identifier: 72:F7:F3:D0:A7:9F:DB:0C:ED:3B:92:DE:86:9A:BC:6C:CC:52:81:92 Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Certificate serial: F8 Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/A30B17FAA81911EF862F3A56C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:19:42 +0000 ROA not before: Wed 23 Jul 2025 07:13:18 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151358 IP address blocks: 103.151.210.0/24 maxlen: 24 2001:df5:a900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:24:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E Validity Not Before: Jul 23 07:13:18 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a5aa8e-1383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:79:24:5b:63:cd:64:8d:bc:52:5c:a4:84: 24:52:01:c5:a0:a7:46:fe:42:df:19:e3:db:5f:df: 0b:26:12:06:f0:27:5e:5e:58:55:e3:e5:99:ff:3f: df:99:f2:91:1c:e3:c7:37:11:50:07:c7:12:6a:95: 99:a7:bd:5f:1c:ca:3d:bb:f2:3d:89:aa:b3:d6:ce: ed:5e:a4:66:78:0a:74:c2:ef:95:94:c5:60:fb:b0: a8:41:04:aa:e5:89:54:1e:34:82:0f:c3:2b:ae:52: c5:4e:58:c0:21:ea:df:ec:f2:1d:ab:ad:da:50:f1: f3:24:36:0e:bc:a1:24:4a:49:2d:05:e7:4b:61:c8: ff:26:13:72:75:19:36:42:ec:38:d0:1c:f1:f1:9b: 27:dc:33:0f:41:27:02:4b:75:ff:64:70:11:7c:b4: 44:8b:b2:99:98:39:b2:fd:aa:c6:52:5e:7f:fe:9a: 21:55:73:4a:8e:1c:1c:16:43:6f:2b:8b:77:1a:b3: a4:db:a0:4b:01:fb:8e:72:49:c0:14:c4:8a:1a:20: 94:74:9a:be:37:e2:f3:67:c9:3c:6c:f1:3d:d7:2f: 89:2c:03:58:36:bd:a7:63:9f:0a:a6:4e:89:84:52: 31:ec:93:d2:78:40:e6:7d:69:63:b2:4e:e2:24:43: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F7:F3:D0:A7:9F:DB:0C:ED:3B:92:DE:86:9A:BC:6C:CC:52:81:92 X509v3 Authority Key Identifier: keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/A30B17FAA81911EF862F3A56C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.151.210.0/24 IPv6: 2001:df5:a900::/48 Signature Algorithm: sha256WithRSAEncryption 52:3a:98:c5:19:ee:c2:8d:e0:f5:6c:c9:8f:f0:1f:7f:66:28: 3d:1b:f8:9e:54:fe:53:bb:f6:f6:0b:31:a9:cb:d6:ba:13:58: 71:b8:9c:31:cd:a2:24:b8:82:11:5e:b1:ee:3c:9d:f7:ff:72: df:f8:2d:38:9b:a0:58:43:c2:f7:8e:35:f4:94:58:0d:8f:7c: 66:df:86:32:ba:48:f9:8f:b8:8e:8d:1c:54:51:6e:7b:d4:f6: f4:ed:d5:b6:7a:d2:99:7c:0b:62:0a:db:9d:c4:ea:4a:61:7c: 16:69:1e:03:60:c8:a4:81:70:19:cb:31:94:cb:ea:63:61:10: 5e:1b:10:58:2a:9b:26:89:fe:81:5b:a1:6b:9e:f9:53:4a:34: 4d:71:77:a7:e6:91:d8:46:b8:df:1e:5a:40:17:83:4a:63:6f: 29:c1:79:67:ca:a9:57:1d:6e:fc:ba:a4:b8:86:6c:04:49:44: f6:35:00:7f:ab:78:29:9e:6b:76:02:e1:3a:37:e1:6e:0d:52: 93:42:48:34:4c:bd:29:16:20:de:59:8b:24:84:98:6e:79:e7: 5c:85:34:db:50:49:b0:da:a9:5b:03:1f:7a:90:62:5c:37:d2: 1c:51:70:2c:e3:6d:b8:e4:57:43:02:78:15:19:d1:8d:84:5a: 0d:53:0c:d9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUyMEYxMTAvBgNVBAUTKEIxQkQ0REIwMjFGNTRDNzI2M0YzQzM1MzVGODgzNjg0 OUJBMkU2MEUwHhcNMjUwNzIzMDcxMzE4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWE4ZS0xMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCF5JFtjzWSNvFJcpIQkUgHFoKdG/kLfGePbX98LJhIG8CdeXlhV4+WZ/z/f mfKRHOPHNxFQB8cSapWZp71fHMo9u/I9iaqz1s7tXqRmeAp0wu+VlMVg+7CoQQSq 5YlUHjSCD8MrrlLFTljAIerf7PIdq63aUPHzJDYOvKEkSkktBedLYcj/JhNydRk2 Quw40Bzx8Zsn3DMPQScCS3X/ZHARfLREi7KZmDmy/arGUl5//pohVXNKjhwcFkNv K4t3GrOk26BLAfuOcknAFMSKGiCUdJq+N+LzZ8k8bPE91y+JLANYNr2nY58Kpk6J hFIx7JPSeEDmfWljsk7iJEOhAQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHL389Cn n9sM7TuS3oaavGzMUoGSMB8GA1UdIwQYMBaAFLG9TbAh9UxyY/PDU1+INoSbouYO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTIwRi80MUNDQkM2RUE4 MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRISmo4OE5UWDRnMmhKdWk1 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NiMU5zQ0gxVEhKajg4TlRYNGcyaEp1aTVnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUyMEYvNDFDQ0JDNkVBODE5MTFFRkI5QkRFRDcxQzRGOUFFMDIvQTMwQjE3RkFB ODE5MTFFRjg2MkYzQTU2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ5fSMA8EAgACMAkDBwAgAQ31qQAwDQYJKoZIhvcNAQELBQADggEB AFI6mMUZ7sKN4PVsyY/wH39mKD0b+J5U/lO79vYLManL1roTWHG4nDHNoiS4ghFe se48nff/ct/4LTiboFhDwveONfSUWA2PfGbfhjK6SPmPuI6NHFRRbnvU9vTt1bZ6 0pl8C2IK253E6kphfBZpHgNgyKSBcBnLMZTL6mNhEF4bEFgqmyaJ/oFboWue+VNK NE1xd6fmkdhGuN8eWkAXg0pjbynBeWfKqVcdbvy6pLiGbARJRPY1AH+reCmea3YC 4To34W4NUpNCSDRMvSkWIN5ZiySEmG5551yFNNtQSbDaqVsDH3qQYlw30hxRcCzj bbjkV0MCeBUZ0Y2EWg1TDNk= -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:38 2026 by rpki-client