$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa File: 01003962C9DC11ED8D68375EC4F9AE02.roa (raw, json) Hash identifier: YpkLELI+RfMgGSNxlJJxGUE0f/y0YL4bJPjpf69tlbs= Subject key identifier: 52:E5:56:CF:78:0A:7C:54:7A:66:6B:97:77:0E:35:6B:C7:72:1C:E2 Certificate issuer: /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Certificate serial: 022F Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:12:06 +0000 ROA not before: Sat 25 Oct 2025 06:16:41 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150343 IP address blocks: 103.68.105.0/24 maxlen: 24 2001:df1:5ac0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2 Validity Not Before: Oct 25 06:16:41 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a410f6-90b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:0b:a9:4a:31:a0:5e:ff:89:4f:a6:a0:5c: f9:e9:3c:c4:fb:dc:f0:47:88:a9:07:8b:c8:38:b1: 96:d7:a1:32:b4:9d:cc:01:7f:15:27:ef:47:7a:00: af:f9:61:af:8b:d2:1d:dd:88:93:9e:fe:52:68:0a: 9d:56:14:c6:c3:d3:ac:fe:84:a7:ec:51:5e:ac:25: 06:7f:74:51:fc:c4:ef:02:c2:75:0d:8e:01:8a:29: 34:e3:e0:85:ac:b6:d5:ba:82:79:cd:08:b3:98:76: d2:84:3c:f1:f4:c5:ad:4f:9a:a7:dd:75:9f:70:a3: 56:4c:1e:44:20:a0:32:b5:67:90:5a:3a:f5:61:13: 37:93:df:7a:e3:1f:fb:27:f5:5e:d3:21:a7:cb:9c: 3e:17:3d:10:4c:fb:e2:09:cb:df:3b:9a:a2:30:8a: f3:9b:ae:da:f9:61:99:17:f6:45:d1:f2:31:4f:bf: 11:79:b6:0a:ca:41:a2:a2:cf:76:4c:bd:c5:5b:9c: b9:89:38:52:a5:42:cc:b5:dd:3c:50:e1:9c:0e:52: 25:a0:7e:fb:99:04:e9:73:9b:0f:26:99:b4:6d:6b: a9:5c:a2:76:31:99:d8:09:4a:6f:d8:ab:be:85:d0: 92:cd:e0:27:72:f3:d7:ff:af:e7:c3:da:0d:8d:9e: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E5:56:CF:78:0A:7C:54:7A:66:6B:97:77:0E:35:6B:C7:72:1C:E2 X509v3 Authority Key Identifier: keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/01003962C9DC11ED8D68375EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.105.0/24 IPv6: 2001:df1:5ac0::/48 Signature Algorithm: sha256WithRSAEncryption 0c:23:eb:da:22:01:4a:b3:b8:3b:86:eb:a6:06:36:76:78:65: a0:b4:8f:1f:95:63:d3:df:78:4e:8e:34:19:05:5a:17:84:2c: 5c:f3:04:41:97:e7:08:1e:1d:5e:8f:6a:d6:19:fe:32:bb:15: 5f:2a:d4:9b:9d:c4:b5:af:62:7d:94:cf:fe:8c:dd:89:72:71: 35:e9:55:cf:d4:83:0b:1b:ee:00:58:6f:18:2b:a3:7a:29:b0: 0b:3d:59:22:ea:b7:08:2e:2f:9c:ff:8c:ec:45:d6:d3:02:ec: ff:0a:d3:4d:99:9f:08:2e:46:9e:7f:2b:3f:c6:f6:dd:ef:33: af:8b:f6:04:1e:72:71:ab:86:90:ce:c3:60:b3:b0:70:15:e8: b9:b1:da:5c:78:fa:36:0c:53:69:d2:d5:74:df:2a:3d:44:7a: 4e:98:2d:80:cc:bd:7f:f6:5d:e4:b6:cb:33:69:0b:d4:d3:5b: 28:43:43:ed:d4:30:1f:c8:66:e4:58:c9:db:72:05:ae:ee:f4: f9:1d:e4:f8:d9:44:b3:cc:d3:55:26:6c:6d:eb:88:d2:33:27: e6:2e:09:59:73:d9:de:69:29:37:77:17:a9:2f:9d:ed:fd:78: 52:27:12:5c:1a:d6:3b:1e:13:f4:14:e9:9c:24:4e:28:98:8b: 51:6b:d5:d4 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEwREMxMTAvBgNVBAUTKDEwNERFQkRCNERGQjhCOUZGRkUzQTRFRjdEQjE2NTdB RkIyREY3RTIwHhcNMjUxMDI1MDYxNjQxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTBmNi05MGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YoLqUoxoF7/iU+moFz56TzE+9zwR4ipB4vIOLGW16EytJ3MAX8VJ+9HegCv +WGvi9Id3YiTnv5SaAqdVhTGw9Os/oSn7FFerCUGf3RR/MTvAsJ1DY4Biik04+CF rLbVuoJ5zQizmHbShDzx9MWtT5qn3XWfcKNWTB5EIKAytWeQWjr1YRM3k9964x/7 J/Ve0yGny5w+Fz0QTPviCcvfO5qiMIrzm67a+WGZF/ZF0fIxT78RebYKykGios92 TL3FW5y5iThSpULMtd08UOGcDlIloH77mQTpc5sPJpm0bWupXKJ2MZnYCUpv2Ku+ hdCSzeAncvPX/6/nw9oNjZ7UawIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFLlVs94 CnxUemZrl3cONWvHchziMB8GA1UdIwQYMBaAFBBN69tN+4uf/+Ok732xZXr7Lffi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTBEQy84NUI4RTRBQUM5 RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1X180NlR2ZmJGbGV2c3Q5 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDktSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEwREMvODVCOEU0QUFDOUQ4MTFFRDk3OTc1QTJFQzRGOUFFMDIvMDEwMDM5NjJD OURDMTFFRDhENjgzNzVFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ0RpMA8EAgACMAkDBwAgAQ3xWsAwDQYJKoZIhvcNAQELBQADggEB AAwj69oiAUqzuDuG66YGNnZ4ZaC0jx+VY9PfeE6ONBkFWheELFzzBEGX5wgeHV6P atYZ/jK7FV8q1JudxLWvYn2Uz/6M3YlycTXpVc/Ugwsb7gBYbxgro3opsAs9WSLq twguL5z/jOxF1tMC7P8K002ZnwguRp5/Kz/G9t3vM6+L9gQecnGrhpDOw2CzsHAV 6Lmx2lx4+jYMU2nS1XTfKj1Eek6YLYDMvX/2XeS2yzNpC9TTWyhDQ+3UMB/IZuRY ydtyBa7u9Pkd5PjZRLPM01UmbG3riNIzJ+YuCVlz2d5pKTd3F6kvne39eFInElwa 1jseE/QU6ZwkTiiYi1Fr1dQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:23:04 2026 by rpki-client