$ rpki-client -vvf rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/908E69B20D4311F0B83AB36BC4F9AE02.roa File: 908E69B20D4311F0B83AB36BC4F9AE02.roa (raw, json) Hash identifier: 0rCihLa1R/JwK4jlGINRooaKzW7UBmX+YQfpTQsJlgY= Subject key identifier: 0C:A2:BC:5C:E4:43:25:13:0D:1B:42:7F:B7:2E:70:F3:4A:03:5A:96 Certificate issuer: /CN=A911ED2C/serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Certificate serial: 0202 Authority key identifier: 9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/908E69B20D4311F0B83AB36BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:58:57 +0000 ROA not before: Sat 03 Jan 2026 03:25:49 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 215384 IP address blocks: 103.79.76.0/22 maxlen: 22 103.79.76.0/24 maxlen: 24 103.79.77.0/24 maxlen: 24 103.79.78.0/24 maxlen: 24 103.79.79.0/24 maxlen: 24 103.79.118.0/24 maxlen: 24 103.91.144.0/24 maxlen: 24 103.91.145.0/24 maxlen: 24 202.91.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 03:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ED2C, serialNumber=9D3414283B227B8F512F305F2ACDB43CDE9E4D12 Validity Not Before: Jan 3 03:25:49 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47e61-6489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:55:3b:e6:bf:94:51:6f:a8:a4:bc:d6:8c: d4:30:60:64:30:a1:3b:d3:a4:62:b9:98:94:27:f0: db:ee:18:5b:04:ac:a7:80:74:86:10:1b:f6:b1:a8: 8a:65:b1:cb:d3:39:82:ab:57:d0:d9:04:83:80:5a: 11:50:ed:8a:8d:63:4a:0b:86:55:b9:08:b4:08:f7: b5:69:35:c4:c1:92:81:36:12:dc:20:5a:a2:87:3c: ec:94:7c:34:ff:e9:5a:d2:3d:4b:ae:01:48:9e:25: 26:70:5d:f8:f5:97:d7:7f:d9:80:d2:c5:a3:ce:d4: 75:f4:db:30:05:3c:42:11:98:e2:fc:44:ca:cc:a7: 61:4c:b8:53:cb:78:ec:00:3f:3f:0b:92:66:5d:78: 4e:05:0f:f5:2a:d2:14:12:ff:9f:63:b2:92:74:ce: 3d:38:64:a0:ae:05:17:2a:d8:16:cc:f7:6b:42:83: 8f:c4:c5:78:51:a0:3a:c0:0b:4c:e4:65:aa:4c:ee: bc:db:fe:3d:51:d8:ef:3c:01:1d:3a:75:5f:77:37: 04:29:64:6d:08:dc:ac:5c:52:1f:20:7d:46:28:36: 46:11:04:8a:88:a7:7f:99:e2:09:2f:ca:33:be:ee: 58:97:e1:e4:6d:72:dd:48:09:99:1f:60:da:64:9c: 31:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A2:BC:5C:E4:43:25:13:0D:1B:42:7F:B7:2E:70:F3:4A:03:5A:96 X509v3 Authority Key Identifier: keyid:9D:34:14:28:3B:22:7B:8F:51:2F:30:5F:2A:CD:B4:3C:DE:9E:4D:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/nTQUKDsie49RLzBfKs20PN6eTRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTQUKDsie49RLzBfKs20PN6eTRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ED2C/00373C6C9BBC11EE851ADD50C4F9AE02/908E69B20D4311F0B83AB36BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.79.76.0/22 103.79.118.0/24 103.91.144.0/23 202.91.32.0/24 Signature Algorithm: sha256WithRSAEncryption a4:db:88:4c:24:b6:cc:20:eb:51:31:9e:d9:47:fb:37:8c:ac: a3:c4:04:9b:7f:ab:5c:c2:97:85:28:56:0c:f2:a5:b0:d3:48: 81:a1:72:8e:12:15:ce:3d:32:ae:29:00:38:6b:4a:89:35:11: 89:72:d4:1c:b1:db:5c:d2:cb:8d:14:85:d6:d9:e4:f5:3f:53: 97:33:81:f3:0f:8e:a5:44:46:2e:01:69:7f:8c:38:9c:d6:65: f0:dd:8c:61:23:68:ce:0d:a5:34:28:5a:68:6a:6b:d4:51:4a: 84:d5:1d:a8:9d:69:a1:a1:bb:75:ac:c0:2c:7f:48:38:1c:90: e5:d1:b5:bd:86:c0:df:57:e6:de:81:69:d4:78:fa:6f:ca:28: 27:84:3b:b5:da:4f:38:c1:c6:85:d2:e4:20:d3:29:c3:ca:97: 9e:8f:f0:d5:cb:04:ca:c3:c1:d9:d3:46:56:31:b4:24:20:29: eb:d2:38:1f:ef:ed:f6:2e:ef:13:b3:bd:b5:e0:a6:2b:fa:2f: 9e:89:96:a3:e4:de:d1:7f:df:bc:95:7f:48:23:13:db:b8:bb: d8:12:5d:38:25:4c:9e:bb:d0:0d:5a:ca:cf:36:a6:a5:44:96: 48:9c:7a:80:8b:ae:c8:c7:16:d2:1d:58:bb:f6:1d:53:71:65: ce:e5:78:61 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVEMkMxMTAvBgNVBAUTKDlEMzQxNDI4M0IyMjdCOEY1MTJGMzA1RjJBQ0RCNDND REU5RTREMTIwHhcNMjYwMTAzMDMyNTQ5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2U2MS02NDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9RVO+a/lFFvqKS81ozUMGBkMKE706RiuZiUJ/Db7hhbBKyngHSGEBv2saiK ZbHL0zmCq1fQ2QSDgFoRUO2KjWNKC4ZVuQi0CPe1aTXEwZKBNhLcIFqihzzslHw0 /+la0j1LrgFIniUmcF349ZfXf9mA0sWjztR19NswBTxCEZji/ETKzKdhTLhTy3js AD8/C5JmXXhOBQ/1KtIUEv+fY7KSdM49OGSgrgUXKtgWzPdrQoOPxMV4UaA6wAtM 5GWqTO682/49UdjvPAEdOnVfdzcEKWRtCNysXFIfIH1GKDZGEQSKiKd/meIJL8oz vu5Yl+HkbXLdSAmZH2DaZJwxuQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFAyivFzk QyUTDRtCf7cucPNKA1qWMB8GA1UdIwQYMBaAFJ00FCg7InuPUS8wXyrNtDzenk0S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUQyQy8wMDM3M0M2QzlC QkMxMUVFODUxQURENTBDNEY5QUUwMi9uVFFVS0RzaWU0OVJMekJmS3MyMFBONmVU UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25UUVVLRHNpZTQ5Ukx6QmZLczIwUE42ZVRSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUVEMkMvMDAzNzNDNkM5QkJDMTFFRTg1MUFERDUwQzRGOUFFMDIvOTA4RTY5QjIw RDQzMTFGMEI4M0FCMzZCQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQCZ09MAwQAZ092AwQBZ1uQAwQAylsgMA0GCSqGSIb3DQEBCwUAA4IB AQCk24hMJLbMIOtRMZ7ZR/s3jKyjxASbf6tcwpeFKFYM8qWw00iBoXKOEhXOPTKu KQA4a0qJNRGJctQcsdtc0suNFIXW2eT1P1OXM4HzD46lREYuAWl/jDic1mXw3Yxh I2jODaU0KFpoamvUUUqE1R2onWmhobt1rMAsf0g4HJDl0bW9hsDfV+begWnUePpv yignhDu12k84wcaF0uQg0ynDypeej/DVywTKw8HZ00ZWMbQkICnr0jgf7+32Lu8T s7214KYr+i+eiZaj5N7Rf9+8lX9IIxPbuLvYEl04JUyeu9ANWsrPNqalRJZInHqA i67IxxbSHVi79h1TcWXO5Xhh -----END CERTIFICATE-----Generated at Tue Mar 17 17:59:25 2026 by rpki-client