$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/3285ADDAA9D911EF9F30DA47C4F9AE02.roa File: 3285ADDAA9D911EF9F30DA47C4F9AE02.roa (raw, json) Hash identifier: vWSMncIbSdA4KIGZrugD99DnKmAynQ5wQcd5AMkh+3k= Subject key identifier: 56:90:7B:CE:CA:DC:80:B8:6F:18:CE:E4:84:3A:D4:E1:D3:14:F9:CE Certificate issuer: /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Certificate serial: 0191 Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/3285ADDAA9D911EF9F30DA47C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:54:11 +0000 ROA not before: Sat 17 May 2025 05:56:23 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152698 IP address blocks: 103.14.23.0/24 maxlen: 24 2001:df3:ad40::/48 maxlen: 48 2001:df3:ad41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33 Validity Not Before: May 17 05:56:23 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a57a63-ee5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:55:5c:94:57:7c:c3:c0:9e:6a:81:dd:5d: 43:da:87:ad:ce:9b:0c:81:29:9d:98:af:71:1b:60: c0:98:aa:fa:ea:df:66:37:22:e1:83:e7:6a:84:1b: 24:f0:c4:5a:b7:43:0d:bc:22:9c:f8:3b:f1:16:6a: 75:5d:48:c4:87:27:7b:7b:05:6e:f5:db:75:f9:c3: 65:63:3b:f5:88:50:9f:85:f4:8f:51:fc:95:dc:aa: 36:a0:7b:22:e9:b7:52:70:cb:32:90:69:59:ac:57: 76:3a:b0:b6:7c:0e:96:68:72:4f:55:de:b1:77:70: 1d:96:4c:8b:46:b7:ac:f2:b8:df:3a:0b:b5:75:df: e2:96:1c:4b:62:d5:cd:7e:32:1f:65:2b:4b:88:2c: 94:1f:d3:81:2b:ae:cf:63:d9:87:2c:0c:1e:6f:c2: 73:c9:f8:9b:d5:d0:12:4c:e5:ef:bc:c8:b1:5d:0c: 1c:05:24:58:0f:e5:89:4c:3d:83:40:c7:a6:63:a5: b0:24:01:ed:e9:55:a0:f8:a9:2e:c8:7e:a6:c0:e6: ea:ac:fc:09:c5:6c:8f:27:63:6e:f3:04:4a:e5:7f: 82:ea:b8:62:af:74:0a:2d:03:a5:a6:69:3c:44:27: 25:31:98:d1:8d:d7:f7:6d:5f:d2:35:a8:b5:2e:62: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:90:7B:CE:CA:DC:80:B8:6F:18:CE:E4:84:3A:D4:E1:D3:14:F9:CE X509v3 Authority Key Identifier: keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/3285ADDAA9D911EF9F30DA47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.14.23.0/24 IPv6: 2001:df3:ad40::/47 Signature Algorithm: sha256WithRSAEncryption 44:c4:a9:6a:79:a5:67:85:6f:86:5d:9e:fa:ae:7b:92:1b:eb: 69:80:3b:60:c0:ff:21:dc:ca:8d:ae:dc:28:ed:3b:cc:30:ac: 0f:5a:34:24:e5:80:00:32:69:42:6d:16:8b:6c:bb:29:8b:64: a2:41:5c:eb:52:18:01:20:d9:5d:3b:fe:b7:3f:7f:1f:43:e3: 7a:10:b9:90:08:17:16:dd:0a:94:90:21:e4:64:d2:86:63:c3: 33:5b:f1:d4:ef:3c:bd:99:db:41:17:7e:a6:07:91:42:8e:49: e5:fc:0a:6a:31:87:cf:5a:c7:4c:3c:6e:16:d0:46:35:d6:fe: a4:0b:95:c5:9d:6c:59:8b:14:0e:e2:6f:68:86:5a:4a:ef:7c: 17:91:df:4b:14:d6:74:b2:47:f3:4d:1e:3d:51:43:66:70:07: b5:52:ba:9d:be:98:2f:76:63:70:0c:90:95:34:ca:1a:cd:be: 77:95:50:09:b4:39:46:6e:18:a4:9f:db:df:4c:c5:25:1c:92: dc:b3:1a:42:36:19:3f:16:b9:0b:70:86:90:0d:2c:be:5c:f9: 03:85:89:66:4a:47:90:af:3d:21:9a:43:ef:f5:b2:b0:d1:64: 16:da:f2:0b:76:85:71:f5:ed:1a:51:c9:90:eb:42:60:a8:55: 53:c8:7e:9f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkzNTMxMTAvBgNVBAUTKEFDRDA0N0QwRDg4RTI2NTdFMTJDRjkxMzAxQzE2MEYx RDNDRDJGMzMwHhcNMjUwNTE3MDU1NjIzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1N2E2My1lZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rlVXJRXfMPAnmqB3V1D2oetzpsMgSmdmK9xG2DAmKr66t9mNyLhg+dqhBsk 8MRat0MNvCKc+DvxFmp1XUjEhyd7ewVu9dt1+cNlYzv1iFCfhfSPUfyV3Ko2oHsi 6bdScMsykGlZrFd2OrC2fA6WaHJPVd6xd3AdlkyLRres8rjfOgu1dd/ilhxLYtXN fjIfZStLiCyUH9OBK67PY9mHLAweb8Jzyfib1dASTOXvvMixXQwcBSRYD+WJTD2D QMemY6WwJAHt6VWg+KkuyH6mwObqrPwJxWyPJ2Nu8wRK5X+C6rhir3QKLQOlpmk8 RCclMZjRjdf3bV/SNai1LmLORwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFaQe87K 3IC4bxjO5IQ61OHTFPnOMB8GA1UdIwQYMBaAFKzQR9DYjiZX4Sz5EwHBYPHTzS8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTM1My8wODc1RTY0ODA1 QzYxMUVGODk2MjBBMjZDNEY5QUUwMi9yTkJIME5pT0psZmhMUGtUQWNGZzhkUE5M ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOQkgwTmlPSmxmaExQa1RBY0ZnOGRQTkx6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjkzNTMvMDg3NUU2NDgwNUM2MTFFRjg5NjIwQTI2QzRGOUFFMDIvMzI4NUFEREFB OUQ5MTFFRjlGMzBEQTQ3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZw4XMA8EAgACMAkDBwEgAQ3zrUAwDQYJKoZIhvcNAQELBQADggEB AETEqWp5pWeFb4Zdnvque5Ib62mAO2DA/yHcyo2u3CjtO8wwrA9aNCTlgAAyaUJt FotsuymLZKJBXOtSGAEg2V07/rc/fx9D43oQuZAIFxbdCpSQIeRk0oZjwzNb8dTv PL2Z20EXfqYHkUKOSeX8Cmoxh89ax0w8bhbQRjXW/qQLlcWdbFmLFA7ib2iGWkrv fBeR30sU1nSyR/NNHj1RQ2ZwB7VSup2+mC92Y3AMkJU0yhrNvneVUAm0OUZuGKSf 299MxSUcktyzGkI2GT8WuQtwhpANLL5c+QOFiWZKR5CvPSGaQ+/1srDRZBba8gt2 hXH17RpRyZDrQmCoVVPIfp8= -----END CERTIFICATE-----Generated at Thu Mar 26 05:40:26 2026 by rpki-client