$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/ED685B8CDFA511EF8CC2890BC4F9AE02.roa File: ED685B8CDFA511EF8CC2890BC4F9AE02.roa (raw, json) Hash identifier: mKIcN9YFRQiDKnYwlenKjFkKtn7bW7/hgN2WOBRtlaY= Subject key identifier: 64:81:8D:71:11:92:E9:43:18:B2:17:E8:02:BE:B9:CD:D0:3D:85:99 Certificate issuer: /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Certificate serial: 0293 Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/ED685B8CDFA511EF8CC2890BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:51:48 +0000 ROA not before: Thu 11 Dec 2025 00:09:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 47172 IP address blocks: 103.104.245.0/24 maxlen: 24 103.104.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB8C9, serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C Validity Not Before: Dec 11 00:09:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46ea4-18b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:00:fe:c5:27:9d:5e:42:df:7c:5a:52:34: 96:26:99:31:76:89:43:89:7c:78:ab:fc:4c:c2:e7: f5:09:59:cb:6a:46:e2:a4:c0:43:8f:ec:96:ee:53: 0f:1b:75:5d:ca:fa:ec:36:a1:1a:23:3e:61:76:c2: 9c:ef:dd:93:a6:3d:49:93:69:ae:92:82:52:7e:8b: 75:8d:fe:29:09:45:8c:bc:33:75:85:99:7c:4a:de: cf:45:b0:b1:06:49:5e:2a:b7:8c:7c:f6:2c:df:83: d5:c8:90:6b:8c:52:ff:02:77:18:5b:09:e1:e7:9e: e5:f2:9f:88:72:ac:b3:35:34:66:d1:75:ba:ea:9e: f9:e8:52:87:f3:d9:93:ac:1f:59:e0:45:fb:01:76: da:f7:3f:da:6a:99:9c:89:a8:88:13:dd:a8:55:e7: 2d:70:69:4a:c8:66:02:53:b0:ab:f5:b1:8c:d7:95: 37:f9:a7:d0:a3:94:a2:82:8e:5c:95:d4:b4:4f:37: 90:29:bd:2b:eb:2c:e2:32:58:e9:99:09:95:6d:89: e6:d2:88:12:21:41:b8:35:1c:dd:2d:1c:60:ec:a7: ef:cd:55:ed:9c:4e:d2:4b:84:a0:49:e1:ca:f7:ee: 5f:d1:46:d0:e7:8f:71:63:18:e4:47:ce:42:f6:2d: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:81:8D:71:11:92:E9:43:18:B2:17:E8:02:BE:B9:CD:D0:3D:85:99 X509v3 Authority Key Identifier: keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/ED685B8CDFA511EF8CC2890BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.245.0-103.104.246.255 Signature Algorithm: sha256WithRSAEncryption 8a:bd:d7:15:ce:59:da:6f:f8:b7:5f:9d:e4:6e:ef:09:96:07: ff:67:8b:e9:b8:96:dd:88:0c:6d:68:0d:f4:e4:e8:4e:83:b1: 88:49:13:55:b4:d1:67:d1:a7:7c:89:9c:d9:cf:43:6c:35:1f: f2:f1:95:6d:1b:3e:ca:57:90:c7:c3:93:af:5b:f9:47:7e:9a: 02:07:cb:21:ac:e7:f5:61:9f:b7:9a:e8:0b:c3:b7:3c:b9:27: e7:20:8d:8a:98:54:8c:05:c2:d5:1d:9f:f9:7d:ee:ff:4e:8d: ed:9c:84:ce:46:bc:0a:44:47:4a:4c:24:ae:21:e1:68:c1:4a: 34:7b:a9:bb:e4:8d:74:f0:b8:6d:3b:bc:0b:be:33:76:e6:3f: df:9b:2f:3e:53:d6:24:a5:81:1f:b9:72:34:d0:94:92:2f:11: 6e:4c:16:87:d4:e6:2b:6c:3c:14:82:a9:13:c2:1c:04:27:b0: f7:10:c3:3e:49:85:92:e8:1e:06:86:6c:45:79:f7:7b:1f:91: 55:8d:d5:1c:4a:ee:e7:d4:a7:cc:37:c4:3a:94:7a:c5:dc:e0: 4e:a9:58:55:84:2b:2e:20:41:e2:a4:4d:1f:ce:16:36:e2:32: ba:cf:c5:1a:a9:cc:fe:c7:79:4e:ed:e1:82:7e:a4:25:2c:df: d9:6f:d9:c3 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICApMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4QzkxMTAvBgNVBAUTKDI1MzgwMEVEMTZFRDBGRjMzN0Y3MDQwRDBFM0RGMTE0 MUMxNjE2MUMwHhcNMjUxMjExMDAwOTQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmVhNC0xOGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFcA/sUnnV5C33xaUjSWJpkxdolDiXx4q/xMwuf1CVnLakbipMBDj+yW7lMP G3VdyvrsNqEaIz5hdsKc792Tpj1Jk2mukoJSfot1jf4pCUWMvDN1hZl8St7PRbCx BkleKreMfPYs34PVyJBrjFL/AncYWwnh557l8p+IcqyzNTRm0XW66p756FKH89mT rB9Z4EX7AXba9z/aapmciaiIE92oVectcGlKyGYCU7Cr9bGM15U3+afQo5Sigo5c ldS0TzeQKb0r6yziMljpmQmVbYnm0ogSIUG4NRzdLRxg7KfvzVXtnE7SS4SgSeHK 9+5f0UbQ549xYxjkR85C9i1jcQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFGSBjXER kulDGLIX6AK+uc3QPYWZMB8GA1UdIwQYMBaAFCU4AO0W7Q/zN/cEDQ498RQcFhYc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjhDOS8yMTk3QjA5MjU4 M0YxMUVEODE4MUU1N0JDNEY5QUUwMi9KVGdBN1JidERfTTM5d1FORGozeEZCd1dG aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pUZ0E3UmJ0RF9NMzl3UU5EajN4RkJ3V0Zody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI4QzkvMjE5N0IwOTI1ODNGMTFFRDgxODFFNTdCQzRGOUFFMDIvRUQ2ODVCOENE RkE1MTFFRjhDQzI4OTBCQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBABnaPUDBABnaPYwDQYJKoZIhvcNAQELBQADggEBAIq91xXOWdpv +LdfneRu7wmWB/9ni+m4lt2IDG1oDfTk6E6DsYhJE1W00WfRp3yJnNnPQ2w1H/Lx lW0bPspXkMfDk69b+Ud+mgIHyyGs5/Vhn7ea6AvDtzy5J+cgjYqYVIwFwtUdn/l9 7v9Oje2chM5GvApER0pMJK4h4WjBSjR7qbvkjXTwuG07vAu+M3bmP9+bLz5T1iSl gR+5cjTQlJIvEW5MFofU5itsPBSCqRPCHAQnsPcQwz5JhZLoHgaGbEV593sfkVWN 1RxK7ufUp8w3xDqUesXc4E6pWFWEKy4gQeKkTR/OFjbiMrrPxRqpzP7HeU7t4YJ+ pCUs39lv2cM= -----END CERTIFICATE-----Generated at Thu Mar 26 11:10:49 2026 by rpki-client