$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/2CB68FE8943211F0B1116B74C4F9AE02.roa File: 2CB68FE8943211F0B1116B74C4F9AE02.roa (raw, json) Hash identifier: 3MyKsLacs+jSNFLg0g6siYMmeYjfiDOjgCzdQeB8N4A= Subject key identifier: 12:21:D9:22:94:6E:D6:11:35:C2:0E:DC:78:40:36:54:3C:99:EC:EA Certificate issuer: /CN=A91E9EA9/serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Certificate serial: 06CB Authority key identifier: 99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/2CB68FE8943211F0B1116B74C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:14:35 +0000 ROA not before: Thu 30 Oct 2025 22:42:51 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 9304 IP address blocks: 103.143.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1739 (0x6cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9EA9, serialNumber=994D9B2D97CBCCB5D5244DE0A7E539741F888A23 Validity Not Before: Oct 30 22:42:51 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a449cb-06df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:13:cc:0e:45:28:b5:9f:99:d0:7c:55:38:61: 23:7c:e2:b7:a4:b0:c9:57:cf:82:da:71:cd:da:67: 8f:73:e2:05:ce:69:6c:67:03:da:65:17:6d:98:01: e9:bd:19:8a:3c:48:88:b7:5f:43:49:be:d5:5c:6c: 76:13:d7:b6:b1:9d:39:58:2b:24:b9:05:1d:96:19: f4:6e:91:5b:8e:b2:4c:db:79:54:d4:ce:05:33:62: b1:98:87:16:e3:b0:02:65:45:6e:ac:8c:a5:63:ed: 31:c9:48:d0:d1:10:2c:02:2f:28:e3:0a:98:2b:7d: 39:fe:e8:4c:81:af:fd:f3:5e:bd:62:41:27:2a:08: 16:40:df:a2:d8:a6:37:f2:3e:60:9c:24:b2:68:b0: 11:77:1c:f5:f8:99:4a:5f:ea:aa:01:2c:e6:c5:78: 79:c2:04:0b:99:3d:e5:72:3c:aa:54:7d:a5:e4:59: 81:83:5b:18:e0:49:ec:b6:99:c9:05:43:39:da:6c: 3f:c4:93:65:36:95:5c:72:db:a7:b8:61:3d:d3:f4: 32:7c:e4:8d:84:1a:98:7d:e4:0d:6d:12:35:38:26: 9c:d2:33:d1:14:f3:49:7e:e5:ec:ae:90:59:78:8b: 23:e8:f7:04:dc:5a:77:ed:52:c7:38:3a:cb:c2:22: 8e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:21:D9:22:94:6E:D6:11:35:C2:0E:DC:78:40:36:54:3C:99:EC:EA X509v3 Authority Key Identifier: keyid:99:4D:9B:2D:97:CB:CC:B5:D5:24:4D:E0:A7:E5:39:74:1F:88:8A:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/mU2bLZfLzLXVJE3gp-U5dB-IiiM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mU2bLZfLzLXVJE3gp-U5dB-IiiM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EA9/E646BF1E968011EBAA64FA56C4F9AE02/2CB68FE8943211F0B1116B74C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.143.13.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:e1:5d:0e:e0:ae:2a:e7:ba:7d:28:b4:ef:9b:36:b3:2e:b0: 98:3a:a5:c7:45:69:7a:56:0f:aa:9e:9e:cb:fd:c4:c0:48:91: 48:78:21:50:16:54:aa:f3:60:e9:0a:71:3f:77:31:42:78:cc: 2e:c1:f0:6a:d9:4c:7b:85:39:5d:f1:89:b0:c0:0a:10:1d:10: 9d:f2:c3:ab:bd:68:7b:db:e1:34:3b:4c:96:7f:03:4a:94:a3: 93:51:8d:28:81:be:cd:98:e9:50:97:08:4c:d6:1c:44:d0:d5: f6:09:c7:d3:6d:5a:4e:28:70:9d:12:d1:80:8a:11:3f:7d:09: 89:59:83:ca:6e:d3:d9:85:a7:77:b4:15:1c:21:f1:ad:cd:db: 84:c6:84:ea:91:6f:6e:58:a3:3e:37:12:11:b2:e4:de:19:ab: 0b:ca:eb:12:4e:dc:c5:c0:4f:2a:ca:88:b4:a5:bb:da:90:ea: 19:11:66:f3:92:12:bb:c1:6d:27:59:1c:b5:bb:66:36:1a:0b: c7:2c:e8:1e:a6:17:47:0e:fb:e5:c3:b0:8d:be:7a:54:e1:07: 85:36:18:44:98:5f:60:46:1a:01:b3:26:fa:50:b4:46:1a:95: 18:6a:98:cc:ae:1a:de:a3:7a:c5:a4:88:ea:ed:44:cf:18:94: 4f:9f:5f:e4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlFQTkxMTAvBgNVBAUTKDk5NEQ5QjJEOTdDQkNDQjVENTI0NERFMEE3RTUzOTc0 MUY4ODhBMjMwHhcNMjUxMDMwMjI0MjUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDljYi0wNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhPMDkUotZ+Z0HxVOGEjfOK3pLDJV8+C2nHN2mePc+IFzmlsZwPaZRdtmAHp vRmKPEiIt19DSb7VXGx2E9e2sZ05WCskuQUdlhn0bpFbjrJM23lU1M4FM2KxmIcW 47ACZUVurIylY+0xyUjQ0RAsAi8o4wqYK305/uhMga/98169YkEnKggWQN+i2KY3 8j5gnCSyaLARdxz1+JlKX+qqASzmxXh5wgQLmT3lcjyqVH2l5FmBg1sY4EnstpnJ BUM52mw/xJNlNpVcctunuGE90/QyfOSNhBqYfeQNbRI1OCac0jPRFPNJfuXsrpBZ eIsj6PcE3Fp37VLHODrLwiKOVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBIh2SKU btYRNcIO3HhANlQ8mezqMB8GA1UdIwQYMBaAFJlNmy2Xy8y11SRN4KflOXQfiIoj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUVBOS9FNjQ2QkYxRTk2 ODAxMUVCQUE2NEZBNTZDNEY5QUUwMi9tVTJiTFpmTHpMWFZKRTNncC1VNWRCLUlp aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21VMmJMWmZMekxYVkpFM2dwLVU1ZEItSWlpTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlFQTkvRTY0NkJGMUU5NjgwMTFFQkFBNjRGQTU2QzRGOUFFMDIvMkNCNjhGRTg5 NDMyMTFGMEIxMTE2Qjc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ48NMA0GCSqGSIb3DQEBCwUAA4IBAQBO4V0O4K4q57p9KLTvmzaz LrCYOqXHRWl6Vg+qnp7L/cTASJFIeCFQFlSq82DpCnE/dzFCeMwuwfBq2Ux7hTld 8YmwwAoQHRCd8sOrvWh72+E0O0yWfwNKlKOTUY0ogb7NmOlQlwhM1hxE0NX2CcfT bVpOKHCdEtGAihE/fQmJWYPKbtPZhad3tBUcIfGtzduExoTqkW9uWKM+NxIRsuTe GasLyusSTtzFwE8qyoi0pbvakOoZEWbzkhK7wW0nWRy1u2Y2GgvHLOgephdHDvvl w7CNvnpU4QeFNhhEmF9gRhoBsyb6ULRGGpUYapjMrhreo3rFpIjq7UTPGJRPn1/k -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:43 2026 by rpki-client