$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa File: 3D8EDEB442FB11ED8178A936C4F9AE02.roa (raw, json) Hash identifier: WOXXeMi2A6lCe08lNoBbKVDgH8Q16SCJ+3qEXN8lIRE= Subject key identifier: 7C:0C:5D:00:93:C6:F3:A4:76:A2:BC:21:93:5A:FD:EE:57:61:1E:96 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6BFF Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa Signing time: Tue 03 Mar 2026 04:03:45 +0000 ROA not before: Tue 03 Mar 2026 04:03:45 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131358 IP address blocks: 103.9.0.0/24 maxlen: 24 103.9.1.0/24 maxlen: 24 103.9.2.0/24 maxlen: 24 103.9.3.0/24 maxlen: 24 2402:4ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27647 (0x6bff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Mar 3 04:03:45 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a65da1-d8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:db:bc:0d:46:96:07:54:67:c9:4c:1d:d6:9f: ec:60:cb:70:2c:87:db:20:54:a0:37:76:93:51:5d: 5c:57:a7:65:3d:a1:09:64:fa:bf:54:bf:6f:a3:0c: 58:4d:36:83:1f:6b:5d:51:24:77:cd:80:80:d5:2a: b7:f9:7c:8d:b8:f7:ab:ee:14:4e:3b:31:80:70:08: fd:e5:f8:9c:99:53:d7:9e:18:2b:e6:82:0b:92:bf: e7:71:23:d9:f4:39:8d:85:02:8a:65:b5:a5:ee:79: 03:de:86:46:d5:e9:54:9a:8d:f8:4b:60:cb:87:fa: b7:f4:a3:cd:2f:79:22:a4:c1:bb:f5:2c:79:cd:ef: 85:73:95:17:15:17:f7:39:3a:63:c9:d9:42:47:33: ad:d9:96:28:c1:20:5a:93:f7:02:c3:52:14:2d:05: 5a:47:8c:de:c3:4d:70:1a:e4:5d:1e:96:6a:06:92: 56:6c:de:74:19:28:74:60:7e:51:11:27:08:66:6f: e0:5a:0a:67:ba:fb:3a:52:bd:df:69:0f:ec:51:f8: 6b:73:70:95:6f:d1:96:79:e3:a1:e5:d8:8d:27:54: d8:77:3c:4c:9e:c2:5e:3a:5f:13:fb:ae:f2:18:cf: 53:75:10:92:ec:4a:2e:8b:e2:15:27:14:16:1b:0a: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0C:5D:00:93:C6:F3:A4:76:A2:BC:21:93:5A:FD:EE:57:61:1E:96 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3D8EDEB442FB11ED8178A936C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.0.0/22 IPv6: 2402:4ae0::/32 Signature Algorithm: sha256WithRSAEncryption 97:95:a6:bd:1d:01:53:5d:b7:78:1d:32:52:7d:bb:b0:ca:a3: a8:78:80:5a:4e:c4:4a:6f:9b:ab:31:af:4a:b8:66:ab:91:08: 6b:09:dd:91:77:f8:3e:68:f3:8c:fd:d0:b3:b0:c1:a6:0c:2b: 43:d7:c6:b2:20:39:76:4a:7a:b0:ce:5f:e6:31:ed:bc:81:09: 8d:be:3b:b8:a6:2b:21:7f:b0:8a:70:4f:64:8a:e0:9c:ba:68: 6f:99:46:19:84:20:bc:c8:b1:cd:07:c2:05:c0:21:4a:06:31: 56:d8:b8:87:0d:0e:87:1d:90:2e:58:3a:0d:79:e9:b9:28:1b: 2b:65:42:fa:44:24:52:4b:e4:77:24:01:e4:d0:88:9d:77:56: f3:16:c0:b9:56:c5:e2:92:ed:71:8d:08:20:22:f3:c7:3c:a2: fc:de:71:8c:3e:82:d2:09:53:a9:69:d2:4c:74:da:e0:3c:42: f4:91:21:d6:24:32:69:bc:9e:41:4c:bf:26:b3:cb:62:5a:86: 10:ba:c8:0f:ca:b5:84:d1:7d:ef:a7:66:e5:91:26:53:9e:3b: dd:03:74:f7:f6:c7:f8:93:75:49:f7:44:69:88:a1:50:13:17: 1a:5c:3b:72:8d:ad:07:de:c2:af:da:f7:8d:86:18:1f:a0:a3: 95:92:91:78 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICa/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYwMzAzMDQwMzQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2NWRhMS1kOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtu8DUaWB1RnyUwd1p/sYMtwLIfbIFSgN3aTUV1cV6dlPaEJZPq/VL9vowxY TTaDH2tdUSR3zYCA1Sq3+XyNuPer7hROOzGAcAj95ficmVPXnhgr5oILkr/ncSPZ 9DmNhQKKZbWl7nkD3oZG1elUmo34S2DLh/q39KPNL3kipMG79Sx5ze+Fc5UXFRf3 OTpjydlCRzOt2ZYowSBak/cCw1IULQVaR4zew01wGuRdHpZqBpJWbN50GSh0YH5R EScIZm/gWgpnuvs6Ur3faQ/sUfhrc3CVb9GWeeOh5diNJ1TYdzxMnsJeOl8T+67y GM9TdRCS7Eoui+IVJxQWGwokFQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHwMXQCT xvOkdqK8IZNa/e5XYR6WMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvM0Q4RURFQjQ0 MkZCMTFFRDgxNzhBOTM2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZwkAMA0EAgACMAcDBQAkAkrgMA0GCSqGSIb3DQEBCwUAA4IBAQCX laa9HQFTXbd4HTJSfbuwyqOoeIBaTsRKb5urMa9KuGarkQhrCd2Rd/g+aPOM/dCz sMGmDCtD18ayIDl2Snqwzl/mMe28gQmNvju4pishf7CKcE9kiuCcumhvmUYZhCC8 yLHNB8IFwCFKBjFW2LiHDQ6HHZAuWDoNeem5KBsrZUL6RCRSS+R3JAHk0Iidd1bz FsC5VsXiku1xjQggIvPHPKL83nGMPoLSCVOpadJMdNrgPEL0kSHWJDJpvJ5BTL8m s8tiWoYQusgPyrWE0X3vp2blkSZTnjvdA3T39sf4k3VJ90RpiKFQExcaXDtyja0H 3sKv2veNhhgfoKOVkpF4 -----END CERTIFICATE-----Generated at Sat Mar 7 22:49:18 2026 by rpki-client