$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa File: 10EB4F2CC04811ECA5D31D72C4F9AE02.roa (raw, json) Hash identifier: rF6+hURTOzes9FserUNEs4wO+p+fOpfX6o4DC0YkZnU= Subject key identifier: 5D:0D:3F:E4:83:46:F4:9E:6E:83:C3:BF:6F:17:59:5A:AF:0C:BC:0E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DBD Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:15:13 +0000 ROA not before: Thu 28 Aug 2025 14:52:40 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131401 IP address blocks: 103.228.20.0/22 maxlen: 24 2001:df0:8380::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23997 (0x5dbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:40 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60bf1-b0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:ba:f4:a4:95:b1:b3:e0:ff:df:cf:f8:9d: 7c:f8:c4:62:72:bd:9c:d3:bc:25:27:10:4c:ba:2f: 11:38:9b:ff:64:5e:f5:c4:d3:17:d9:3e:50:6d:da: 6f:7f:2a:14:09:ec:28:72:23:36:72:c3:0d:33:94: 0a:93:2e:e4:fb:a7:be:f8:1c:d4:91:10:d5:d9:0b: 74:13:e2:ab:30:03:4f:ae:35:44:87:b5:e9:92:0e: e3:f6:75:f9:8f:e9:5c:77:69:16:e8:4b:4f:7e:28: c4:ca:b6:b2:14:67:cb:2d:65:50:00:8f:ce:64:09: f1:32:43:e5:7f:3e:87:63:67:bc:de:6e:0e:77:b0: 02:32:64:23:f5:82:cd:ff:b3:18:ac:4e:19:cf:b7: e6:97:67:43:b7:ff:a5:65:c3:c1:d4:7a:5a:58:17: 7b:28:6f:1a:bb:54:c4:66:f9:ed:fa:f6:f5:c5:55: d2:62:16:bc:69:70:c3:11:a6:c8:da:a0:d2:fd:b9: 1c:fe:c7:d6:3e:86:6a:f4:88:ff:20:49:89:74:25: fb:49:26:8f:64:2f:87:63:76:37:e6:e0:63:23:08: cd:16:6a:c8:87:f4:ef:37:e2:c0:85:ca:16:34:04: 36:94:b7:7e:ff:43:ec:d9:3d:dc:41:b4:81:8b:69: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0D:3F:E4:83:46:F4:9E:6E:83:C3:BF:6F:17:59:5A:AF:0C:BC:0E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/10EB4F2CC04811ECA5D31D72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.228.20.0/22 IPv6: 2001:df0:8380::/48 Signature Algorithm: sha256WithRSAEncryption 3b:b4:d0:c3:7b:e4:3d:77:3d:e7:a3:b0:da:37:af:9e:4b:e9: f9:69:86:ea:d6:c1:ff:9c:c2:9b:d6:79:7a:6f:ad:90:0d:bb: 98:91:c7:27:05:1f:35:92:7e:fe:da:9a:70:52:51:66:42:f6: fd:03:bd:4b:82:29:6f:50:a6:28:7b:52:de:dd:bc:fd:a0:e7: 24:06:48:7b:68:4d:4a:15:e2:75:44:72:57:08:3e:c6:7f:06: 27:ad:c4:ec:77:0c:12:49:a3:28:b3:04:19:ec:76:28:54:27: 2d:3a:69:96:43:e2:db:5b:78:37:f8:2b:9f:8a:2d:c2:1f:05: 74:4d:3a:3f:48:08:82:74:f0:ba:7f:9a:d5:6d:83:88:98:30: 46:cd:b1:80:1a:39:f5:7c:4a:3c:03:4e:f6:db:58:4c:e1:0d: 66:a9:34:38:47:24:8f:43:b3:d0:2c:48:2b:df:83:2a:a0:2d: a7:a9:19:dd:8d:b3:fa:0d:f1:a5:8f:e8:7d:8d:3a:6e:fe:0f: af:ee:63:18:8a:e0:d2:8f:d9:37:c5:ac:05:0b:84:da:91:4f: c1:ab:f7:44:73:40:40:d8:33:95:53:4b:91:ff:f1:ee:23:e2: 01:56:80:16:de:fd:07:1d:0b:08:8d:13:ee:90:6e:2a:a6:e2: a0:e5:60:01 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICXb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjQwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGJmMS1iMGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlg+69KSVsbPg/9/P+J18+MRicr2c07wlJxBMui8ROJv/ZF71xNMX2T5Qbdpv fyoUCewociM2csMNM5QKky7k+6e++BzUkRDV2Qt0E+KrMANPrjVEh7Xpkg7j9nX5 j+lcd2kW6EtPfijEyrayFGfLLWVQAI/OZAnxMkPlfz6HY2e83m4Od7ACMmQj9YLN /7MYrE4Zz7fml2dDt/+lZcPB1HpaWBd7KG8au1TEZvnt+vb1xVXSYha8aXDDEabI 2qDS/bkc/sfWPoZq9Ij/IEmJdCX7SSaPZC+HY3Y35uBjIwjNFmrIh/TvN+LAhcoW NAQ2lLd+/0Ps2T3cQbSBi2n1ywIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFF0NP+SD RvSeboPDv28XWVqvDLwOMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTBFQjRGMkND MDQ4MTFFQ0E1RDMxRDcyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ+QUMA8EAgACMAkDBwAgAQ3wg4AwDQYJKoZIhvcNAQELBQADggEB ADu00MN75D13PeejsNo3r55L6flphurWwf+cwpvWeXpvrZANu5iRxycFHzWSfv7a mnBSUWZC9v0DvUuCKW9Qpih7Ut7dvP2g5yQGSHtoTUoV4nVEclcIPsZ/BietxOx3 DBJJoyizBBnsdihUJy06aZZD4ttbeDf4K5+KLcIfBXRNOj9ICIJ08Lp/mtVtg4iY MEbNsYAaOfV8SjwDTvbbWEzhDWapNDhHJI9Ds9AsSCvfgyqgLaepGd2Ns/oN8aWP 6H2NOm7+D6/uYxiK4NKP2TfFrAULhNqRT8Gr90RzQEDYM5VTS5H/8e4j4gFWgBbe /QcdCwiNE+6Qbiqm4qDlYAE= -----END CERTIFICATE-----Generated at Sat Mar 7 22:43:02 2026 by rpki-client