$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa File: AA5D86B2381311EA998E103FC4F9AE02.roa (raw, json) Hash identifier: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM= Subject key identifier: 13:A6:5C:74:9E:4C:D8:FC:30:E3:AF:2A:FC:54:B3:F5:64:19:37:2A Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0CE1 Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:53:13 +0000 ROA not before: Thu 18 Dec 2025 18:15:57 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136145 IP address blocks: 103.79.224.0/24 maxlen: 24 103.79.225.0/24 maxlen: 24 103.79.226.0/24 maxlen: 24 103.79.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3297 (0xce1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Dec 18 18:15:57 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a444c8-8d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:13:d5:90:78:6c:64:60:15:94:b9:1f:da: 87:f5:9a:f6:b9:d2:ca:46:20:cd:0c:aa:14:04:cf: 3f:ba:6e:ea:99:ae:a5:92:c4:c7:66:b6:b0:3d:5d: b5:92:80:ca:db:34:e7:73:be:98:42:9c:55:d7:59: d0:d6:56:e3:74:57:46:bf:aa:02:ad:9c:b5:fc:47: 0d:25:19:c8:02:96:0a:b9:a4:4d:60:2c:37:7e:a7: 51:a6:97:15:7c:75:41:87:af:21:9e:06:93:17:68: df:0f:0d:2b:c9:89:c0:4f:45:46:1d:d7:27:b4:52: 68:2e:b2:01:59:34:9d:76:9e:e6:ce:26:05:b9:46: be:6e:da:7b:86:7e:7f:a1:1d:31:41:6a:a2:b5:a9: 2b:06:7d:c9:e3:12:e0:ba:07:c0:79:f5:ff:56:da: 02:a1:51:e9:1f:9a:f4:bb:ae:9c:63:29:42:61:dd: a5:24:06:82:9c:b2:c6:d6:05:33:2b:ce:f1:1b:a7: a9:00:de:66:98:f1:85:7a:fa:83:98:ab:a3:35:d1: 58:9c:96:5f:95:dc:78:17:06:77:2c:4d:9b:7f:24: 95:b3:a3:7e:14:b3:05:76:5d:c4:ef:87:a6:18:2a: 39:94:61:a6:45:29:8d:df:0c:23:e0:2a:ed:aa:0f: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A6:5C:74:9E:4C:D8:FC:30:E3:AF:2A:FC:54:B3:F5:64:19:37:2A X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/AA5D86B2381311EA998E103FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.79.224.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:7a:04:45:1d:0f:3e:af:a7:8b:d1:89:8a:f4:3a:7d:63:e9: 9c:d6:bd:74:d5:34:35:d3:bc:a8:de:4f:29:c6:ea:13:44:41: 6f:68:84:9a:bd:af:dc:88:79:1b:ce:7a:ae:ec:64:55:6f:34: a4:01:46:55:00:2f:e6:3e:d7:6c:f8:b6:d0:6f:91:47:6a:c4: b4:54:16:36:85:d1:14:10:d8:12:26:ce:18:5d:c3:b1:82:0d: 16:a8:d6:1b:c7:81:44:a3:e9:1b:ab:8e:15:3b:61:3f:a1:a5: c5:47:f8:91:95:f3:f4:da:b2:05:64:4b:c7:b5:1b:e9:9e:da: 14:53:b9:f4:cf:5a:cf:3e:fe:23:0d:e5:db:1b:f8:fb:7c:7d: a2:e5:c8:29:e3:dd:4b:34:9d:44:a8:26:02:5b:57:76:06:b6: 6b:9e:99:4d:97:cf:29:ca:60:e6:8b:6f:2b:95:c3:f5:ff:82: 05:81:fb:d0:6c:45:59:f2:46:50:05:2a:97:e6:91:bd:2c:30: 15:bc:23:d2:1e:ae:fe:7e:74:3d:93:a7:e7:3e:66:74:f8:74: 79:fa:c0:2f:79:62:db:e7:b3:65:d9:ab:7f:d0:eb:e2:8d:7c: 9f:73:64:03:c4:d2:81:f0:96:ee:92:36:29:14:f1:cc:f7:14: 62:66:62:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUxMjE4MTgxNTU3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDRjOC04ZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3IT1ZB4bGRgFZS5H9qH9Zr2udLKRiDNDKoUBM8/um7qma6lksTHZrawPV21 koDK2zTnc76YQpxV11nQ1lbjdFdGv6oCrZy1/EcNJRnIApYKuaRNYCw3fqdRppcV fHVBh68hngaTF2jfDw0ryYnAT0VGHdcntFJoLrIBWTSddp7mziYFuUa+btp7hn5/ oR0xQWqitakrBn3J4xLgugfAefX/VtoCoVHpH5r0u66cYylCYd2lJAaCnLLG1gUz K87xG6epAN5mmPGFevqDmKujNdFYnJZfldx4FwZ3LE2bfySVs6N+FLMFdl3E74em GCo5lGGmRSmN3wwj4Crtqg80tQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBOmXHSe TNj8MOOvKvxUs/VkGTcqMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQzOEEvOUFFRjE3QkUwNUY0MTFFQTg4NkEzQzIzQzRGOUFFMDIvQUE1RDg2QjIz ODEzMTFFQTk5OEUxMDNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ0/gMA0GCSqGSIb3DQEBCwUAA4IBAQBqegRFHQ8+r6eL0YmK9Dp9 Y+mc1r101TQ107yo3k8pxuoTREFvaISava/ciHkbznqu7GRVbzSkAUZVAC/mPtds +LbQb5FHasS0VBY2hdEUENgSJs4YXcOxgg0WqNYbx4FEo+kbq44VO2E/oaXFR/iR lfP02rIFZEvHtRvpntoUU7n0z1rPPv4jDeXbG/j7fH2i5cgp491LNJ1EqCYCW1d2 BrZrnplNl88pymDmi28rlcP1/4IFgfvQbEVZ8kZQBSqX5pG9LDAVvCPSHq7+fnQ9 k6fnPmZ0+HR5+sAveWLb57Nl2at/0OvijXyfc2QDxNKB8JbukjYpFPHM9xRiZmJv -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:16 2026 by rpki-client