$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa File: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (raw, json) Hash identifier: KrGSfeFezfMBfirneaLIWiJ6P58/fqAvRIXr1XydAtM= Subject key identifier: A2:BF:80:F8:33:6B:D8:15:29:D0:ED:1F:49:83:9B:32:4F:75:18:00 Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 0434 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:23:51 +0000 ROA not before: Wed 11 Feb 2026 00:20:43 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133201 IP address blocks: 103.233.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Feb 11 00:20:43 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a58f67-71f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:8e:b0:c6:9c:18:d6:7b:ec:ed:3e:78:f1: 9d:0a:83:2a:43:5b:b7:a1:9c:20:ef:5c:ff:a0:a1: 92:9d:64:da:c6:82:61:81:eb:f1:c4:15:fe:41:bf: 79:8c:a3:f0:b9:aa:ae:09:7e:2e:46:c2:66:85:82: 79:dc:ed:52:5a:65:9d:23:5c:52:eb:e0:2c:5a:06: 25:ea:f2:d5:ed:ad:ef:08:8f:84:38:a9:e3:7a:93: 67:0f:7f:da:b9:2c:5a:d2:36:f6:dc:3c:bc:fd:f5: d6:56:98:f8:a2:80:d3:59:cb:b3:4d:34:04:97:5a: 47:aa:3c:e8:de:a3:1e:79:2b:82:55:c6:75:52:dd: 1a:bf:2b:bb:d0:6d:80:c5:47:c1:bf:32:7e:d9:5d: 41:22:ce:77:c1:f1:ec:d0:7f:4c:62:70:8e:c4:2d: e5:eb:67:35:2e:43:f7:8c:3d:ac:8c:da:a8:6e:d0: ea:2a:f7:1a:58:7d:b7:27:f8:3c:4d:6f:71:ef:5c: 22:8f:a1:cb:d6:40:34:36:9b:58:ee:1e:d1:c9:e5: a6:f1:b4:5d:5a:f8:60:0b:2c:e9:6d:0e:9b:b1:7b: ab:90:61:f3:d8:bc:ec:26:2f:99:0e:62:0c:19:95: 3a:a6:7d:ea:77:2b:cf:5b:b2:78:d0:29:2e:71:ce: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BF:80:F8:33:6B:D8:15:29:D0:ED:1F:49:83:9B:32:4F:75:18:00 X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/CD22C9C8DC0D11ECA064B94CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.233.8.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:cc:a4:24:1f:cb:34:2c:bb:43:96:d4:98:10:6e:a1:5d:5e: 56:17:bd:fe:12:ad:2c:7c:3d:d9:39:4f:a3:22:59:63:03:7a: 86:bc:c1:a4:50:7b:67:d9:5f:b9:6b:fe:02:7a:6a:75:a8:a5: 70:ab:cc:d3:c9:39:c0:81:49:d8:ff:a2:5b:e2:f7:e6:47:a9: 85:f1:e3:7d:bb:ab:b0:33:38:6b:a5:4e:41:c2:4a:7d:25:79: 3c:26:45:41:3c:07:3f:33:36:ac:c9:65:44:d5:7d:00:29:a3: b8:9c:fc:f5:0e:12:e1:c7:8e:f7:63:fc:9d:6e:73:00:17:dd: 25:02:aa:1d:9c:43:ca:f6:76:be:87:5d:e1:76:eb:88:c6:ae: de:e5:ab:8f:06:0b:39:0e:a9:a9:aa:7f:54:93:49:bd:a0:54: c9:d4:c2:ec:df:4b:1b:76:e5:cc:94:93:38:66:05:2d:18:3e: 36:c4:3f:59:a0:3e:cf:24:5d:5b:b0:6b:e7:c5:64:3a:7d:c9: 32:12:a0:db:fc:d6:8c:12:7f:b2:ba:55:61:7c:38:7c:84:59: cf:c5:61:c0:fa:6a:12:1e:ce:ae:b2:e1:a3:47:5a:b2:94:2d: 52:31:0d:ff:4e:77:6b:ac:f0:49:f7:00:44:3c:bc:64:74:62: 5e:8b:21:35 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjYwMjExMDAyMDQzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGY2Ny03MWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstqOsMacGNZ77O0+ePGdCoMqQ1u3oZwg71z/oKGSnWTaxoJhgevxxBX+Qb95 jKPwuaquCX4uRsJmhYJ53O1SWmWdI1xS6+AsWgYl6vLV7a3vCI+EOKnjepNnD3/a uSxa0jb23Dy8/fXWVpj4ooDTWcuzTTQEl1pHqjzo3qMeeSuCVcZ1Ut0avyu70G2A xUfBvzJ+2V1BIs53wfHs0H9MYnCOxC3l62c1LkP3jD2sjNqobtDqKvcaWH23J/g8 TW9x71wij6HL1kA0NptY7h7RyeWm8bRdWvhgCyzpbQ6bsXurkGHz2LzsJi+ZDmIM GZU6pn3qdyvPW7J40Ckucc7ZNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKK/gPgz a9gVKdDtH0mDmzJPdRgAMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU3RDkvMDcxN0U5RUU5RjVEMTFFQ0JCQ0E5NjE4QzRGOUFFMDIvQ0QyMkM5QzhE QzBEMTFFQ0EwNjRCOTRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ+kIMA0GCSqGSIb3DQEBCwUAA4IBAQAfzKQkH8s0LLtDltSYEG6h XV5WF73+Eq0sfD3ZOU+jIlljA3qGvMGkUHtn2V+5a/4Cemp1qKVwq8zTyTnAgUnY /6Jb4vfmR6mF8eN9u6uwMzhrpU5Bwkp9JXk8JkVBPAc/MzasyWVE1X0AKaO4nPz1 DhLhx473Y/ydbnMAF90lAqodnEPK9na+h13hduuIxq7e5auPBgs5Dqmpqn9Uk0m9 oFTJ1MLs30sbduXMlJM4ZgUtGD42xD9ZoD7PJF1bsGvnxWQ6fckyEqDb/NaMEn+y ulVhfDh8hFnPxWHA+moSHs6usuGjR1qylC1SMQ3/TndrrPBJ9wBEPLxkdGJeiyE1 -----END CERTIFICATE-----Generated at Thu Mar 26 16:35:24 2026 by rpki-client