$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa File: 42DAE250C8C711F08A7B6740C4F9AE02.roa (raw, json) Hash identifier: tHNQzy8hGbC74qvfPySY/DdlrWAoieO3qDg8gWPCkbw= Subject key identifier: 46:6B:7C:AB:1D:BC:FD:D2:18:9B:8B:13:B0:69:04:E5:3B:BA:0D:31 Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 357F Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:11:03 +0000 ROA not before: Sun 23 Nov 2025 23:58:02 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 1299 IP address blocks: 103.112.36.0/22 maxlen: 24 180.189.160.0/20 maxlen: 24 2405:1f00::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:42:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13695 (0x357f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Nov 23 23:58:02 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a48137-ac55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e9:92:f8:9c:8c:14:3b:d6:8b:d5:c5:6c:f5: ba:9e:a4:83:50:73:53:c2:f7:46:64:87:e0:ff:88: 7c:a0:f0:4d:24:a7:ef:53:17:43:43:40:aa:5a:ee: 96:e5:63:ec:6d:b6:02:ac:73:17:8c:8d:fe:70:29: 79:22:7b:1b:bb:a8:4d:9d:70:3b:85:9b:1e:a6:45: d5:7b:dd:ba:3b:5d:05:f8:dd:e4:91:36:2c:81:0b: 64:b4:71:e6:d3:cc:f0:91:00:f4:d9:32:a8:2e:46: 3f:4c:f1:c9:df:42:64:e2:db:a8:1b:87:ac:ad:81: b2:0d:45:6f:49:81:9a:b3:4b:c0:f5:79:b7:dc:55: 99:de:cf:27:15:0e:8b:5d:ba:8a:17:3b:a9:3a:dc: d1:0c:92:ec:9c:be:aa:1c:7b:36:e0:39:96:51:02: ff:26:dc:1d:b1:fc:ba:de:6b:11:06:72:7d:0e:11: 84:6f:ed:d6:ac:0b:9c:89:6b:51:d3:25:13:3c:d3: c8:81:5e:97:d8:5d:39:4d:25:45:df:9a:9b:9e:f2: 5b:bb:51:1f:eb:55:29:ce:9a:ee:55:11:ca:3c:5a: f2:04:80:4c:7d:85:f6:0d:ef:9e:1d:3a:5c:09:d2: 61:c8:7f:e2:aa:af:a7:25:cf:6c:72:aa:0d:65:c8: 73:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6B:7C:AB:1D:BC:FD:D2:18:9B:8B:13:B0:69:04:E5:3B:BA:0D:31 X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/42DAE250C8C711F08A7B6740C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.36.0/22 180.189.160.0/20 IPv6: 2405:1f00::/32 Signature Algorithm: sha256WithRSAEncryption 46:33:24:fc:e3:24:88:57:79:65:51:93:1d:09:75:90:65:57: 88:69:3e:85:a1:b6:32:08:f5:4e:31:8d:e6:36:4e:db:a3:ef: 87:c6:9a:0e:48:ed:73:30:9e:ca:5e:75:5c:5d:0f:bc:b8:13: 7f:28:38:e1:23:ec:0d:a3:3f:cc:4c:ed:e8:df:b3:81:43:ca: af:66:d5:b1:30:82:36:1d:64:d0:94:8c:e3:99:55:26:ac:aa: 43:f3:f4:78:c2:1b:95:28:94:59:57:a5:11:98:61:bb:e4:41: 34:e7:8f:96:ef:8e:fa:5f:34:96:10:e7:49:cf:d3:39:0f:9b: 0a:fa:79:53:2f:be:02:bb:ab:48:16:4a:71:00:ee:72:38:96: 7b:67:75:9d:be:93:5b:7b:54:49:42:8f:1c:f6:fe:8f:55:ec: e3:e0:de:80:71:ee:fc:13:5a:34:95:b1:0f:27:9e:e4:2a:7d: 51:94:5c:46:9c:46:b6:45:b6:90:aa:ca:45:39:ca:b6:00:57: e2:25:d1:c9:cd:c6:09:d8:46:35:34:d6:b8:14:6f:8f:df:d7: f8:e3:e5:f5:7b:a2:da:d2:04:03:90:6b:b0:61:a8:7a:c8:67: e2:95:db:26:95:ee:6e:c2:38:6a:29:82:f8:65:03:f2:d7:28: be:96:43:d9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICNX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjUxMTIzMjM1ODAyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODEzNy1hYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+mS+JyMFDvWi9XFbPW6nqSDUHNTwvdGZIfg/4h8oPBNJKfvUxdDQ0CqWu6W 5WPsbbYCrHMXjI3+cCl5Insbu6hNnXA7hZsepkXVe926O10F+N3kkTYsgQtktHHm 08zwkQD02TKoLkY/TPHJ30Jk4tuoG4esrYGyDUVvSYGas0vA9Xm33FWZ3s8nFQ6L XbqKFzupOtzRDJLsnL6qHHs24DmWUQL/Jtwdsfy63msRBnJ9DhGEb+3WrAuciWtR 0yUTPNPIgV6X2F05TSVF35qbnvJbu1Ef61UpzpruVRHKPFryBIBMfYX2De+eHTpc CdJhyH/iqq+nJc9scqoNZchztQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEZrfKsd vP3SGJuLE7BpBOU7ug0xMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThEMjIvMjUyNjk3OTgxRDkyMTFFMkI2MThDQUY0MDhCMDJDRDIvNDJEQUUyNTBD OEM3MTFGMDhBN0I2NzQwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ3AkAwQEtL2gMA0EAgACMAcDBQAkBR8AMA0GCSqGSIb3DQEBCwUA A4IBAQBGMyT84ySIV3llUZMdCXWQZVeIaT6FobYyCPVOMY3mNk7bo++HxpoOSO1z MJ7KXnVcXQ+8uBN/KDjhI+wNoz/MTO3o37OBQ8qvZtWxMII2HWTQlIzjmVUmrKpD 8/R4whuVKJRZV6URmGG75EE054+W7476XzSWEOdJz9M5D5sK+nlTL74Cu6tIFkpx AO5yOJZ7Z3WdvpNbe1RJQo8c9v6PVezj4N6Ace78E1o0lbEPJ57kKn1RlFxGnEa2 RbaQqspFOcq2AFfiJdHJzcYJ2EY1NNa4FG+P39f44+X1e6La0gQDkGuwYah6yGfi ldsmle5uwjhqKYL4ZQPy1yi+lkPZ -----END CERTIFICATE-----Generated at Sat Mar 7 11:16:48 2026 by rpki-client