$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3B8DEBA06FD511F0BF33C829C4F9AE02.roa File: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (raw, json) Hash identifier: onDMrjjQ14icCq/5REdHdzngDzUao5E9MVfp/qWaZvc= Subject key identifier: 1C:D0:39:BA:88:9B:15:29:33:72:C2:15:7C:7E:25:28:A6:1A:A0:7E Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 01EB Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3B8DEBA06FD511F0BF33C829C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:17:37 +0000 ROA not before: Sat 02 Aug 2025 19:16:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 22616 IP address blocks: 167.103.148.0/24 maxlen: 24 167.103.149.0/24 maxlen: 24 167.103.150.0/24 maxlen: 24 167.103.151.0/24 maxlen: 24 167.103.152.0/24 maxlen: 24 167.103.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 03:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Aug 2 19:16:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a474b1-38ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:1b:c2:fa:af:d7:b7:05:88:00:ee:56:26:99: bf:82:3b:19:dd:38:a3:ae:bc:34:e4:18:e8:a9:e7: 4d:2f:47:ea:5f:2d:b2:4d:59:70:14:f3:43:c3:2d: 3e:ef:ba:94:ee:55:9d:fb:27:e1:ac:40:bb:69:5c: 32:17:0d:e5:81:28:6e:f7:e8:72:7b:03:60:c9:79: 37:ef:d2:be:11:cc:d9:05:8e:a4:50:1b:02:94:bd: bc:31:22:93:5d:89:44:1f:b4:27:14:69:6b:5a:d5: e6:c6:32:f1:20:7b:c4:37:97:3c:99:fd:d0:10:b8: f5:66:80:d2:1f:ce:00:d0:ec:1c:0b:28:cf:73:a4: c7:67:84:e2:91:ff:a4:59:b6:cc:ef:55:de:e0:7e: 0f:d0:0d:1d:fb:22:dc:af:f6:e4:f5:94:7f:54:00: 7f:fb:84:f4:d6:39:a2:0a:70:b1:e4:86:45:ba:18: 35:d4:94:d8:2c:b5:0f:18:1f:45:c0:c0:9a:ba:85: 8b:c6:51:8d:cf:bf:af:46:a0:f3:5a:c3:40:05:9a: b8:0b:4e:d7:39:2a:92:1c:fb:a6:92:4c:f0:81:58: cc:b0:39:be:55:5a:cf:bd:eb:72:7d:f8:a6:70:02: ee:80:73:b5:5f:38:5d:f4:db:08:a5:51:d0:6e:9c: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D0:39:BA:88:9B:15:29:33:72:C2:15:7C:7E:25:28:A6:1A:A0:7E X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/3B8DEBA06FD511F0BF33C829C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 167.103.148.0-167.103.153.255 Signature Algorithm: sha256WithRSAEncryption 8a:2b:f5:3b:80:8d:79:d4:9c:b7:09:38:0b:e1:94:7e:5a:62: d8:32:19:41:e1:9b:5f:f6:0f:1d:1e:f9:30:c8:8c:e0:e8:f2: 38:71:b9:3a:18:f9:85:80:5c:de:4f:87:aa:36:65:25:6b:e8: 90:97:b9:39:be:29:15:60:39:18:61:87:40:25:68:99:87:3d: 70:10:10:45:42:a6:53:e8:ae:2d:19:37:47:48:51:8b:9b:12: 82:62:c7:f2:fc:fb:d5:c5:62:3f:85:dc:31:d1:97:e3:6e:b9: 0d:56:a9:66:3c:12:06:24:54:ad:4b:55:7f:78:76:27:86:5a: 48:0f:54:b3:5a:9b:70:f7:c7:41:cb:17:41:b1:5f:9b:26:cd: 2c:21:d1:22:f6:1c:d5:22:84:e8:a6:e7:f1:4e:ff:10:90:63: 7f:2d:d8:5d:7d:ca:0e:28:92:50:b5:22:05:f8:14:92:80:b9: 8c:ea:bc:02:c8:c0:d9:2c:b5:3b:5f:a5:0e:39:3c:de:5b:09: 8f:5c:a6:03:87:fe:6d:05:f6:66:dc:8a:3a:0a:be:92:08:a9: 23:5e:58:5b:98:9f:9f:3b:cc:00:21:7e:1c:f7:d8:88:2e:a6: c7:64:91:7e:ae:c3:0e:32:26:f5:7b:d8:ab:58:68:fc:49:d7: 4d:9e:3f:ae -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwODAyMTkxNjQ3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRiMS0zOGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+BvC+q/XtwWIAO5WJpm/gjsZ3Tijrrw05BjoqedNL0fqXy2yTVlwFPNDwy0+ 77qU7lWd+yfhrEC7aVwyFw3lgShu9+hyewNgyXk379K+EczZBY6kUBsClL28MSKT XYlEH7QnFGlrWtXmxjLxIHvEN5c8mf3QELj1ZoDSH84A0OwcCyjPc6THZ4Tikf+k WbbM71Xe4H4P0A0d+yLcr/bk9ZR/VAB/+4T01jmiCnCx5IZFuhg11JTYLLUPGB9F wMCauoWLxlGNz7+vRqDzWsNABZq4C07XOSqSHPumkkzwgVjMsDm+VVrPvetyffim cALugHO1Xzhd9NsIpVHQbpwX6QIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFBzQObqI mxUpM3LCFXx+JSimGqB+MB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTcxNjkvNjIzM0REM0VFQkFFMTFFRThBMEVEOTY0QzRGOUFFMDIvM0I4REVCQTA2 RkQ1MTFGMEJGMzNDODI5QzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAKnZ5QDBAGnZ5gwDQYJKoZIhvcNAQELBQADggEBAIor9TuAjXnU nLcJOAvhlH5aYtgyGUHhm1/2Dx0e+TDIjODo8jhxuToY+YWAXN5Ph6o2ZSVr6JCX uTm+KRVgORhhh0AlaJmHPXAQEEVCplPori0ZN0dIUYubEoJix/L8+9XFYj+F3DHR l+NuuQ1WqWY8EgYkVK1LVX94dieGWkgPVLNam3D3x0HLF0GxX5smzSwh0SL2HNUi hOim5/FO/xCQY38t2F19yg4oklC1IgX4FJKAuYzqvALIwNkstTtfpQ45PN5bCY9c pgOH/m0F9mbcijoKvpIIqSNeWFuYn587zAAhfhz32IgupsdkkX6uww4yJvV72KtY aPxJ102eP64= -----END CERTIFICATE-----Generated at Thu Mar 12 20:09:30 2026 by rpki-client