$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/2857F2E4111A11EF86332415C4F9AE02.roa File: 2857F2E4111A11EF86332415C4F9AE02.roa (raw, json) Hash identifier: 0lBq0SGiP1c8blhjOrvjM798+Bu1Avf9FFAjpcPU9lM= Subject key identifier: 2F:71:C4:FA:2A:E5:58:67:46:8E:11:55:E4:B6:ED:59:C9:3E:1F:0B Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Certificate serial: 09F4 Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/2857F2E4111A11EF86332415C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:32:17 +0000 ROA not before: Sun 06 Apr 2025 20:30:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62240 IP address blocks: 103.112.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 19:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0 Validity Not Before: Apr 6 20:30:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a46a11-de80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:47:6d:cf:d5:1e:79:51:36:46:3c:82:53:cf: 2d:54:70:11:24:51:75:7c:e2:48:0b:f0:a6:a0:e7: 36:03:32:ab:0d:27:84:03:bf:80:41:21:bb:75:3f: 96:be:c2:1e:7d:d4:2f:32:bd:df:5e:68:2d:aa:04: 31:d5:7b:96:b5:40:b2:ce:5e:19:11:bc:82:65:79: fa:cb:97:5b:ea:3f:d7:d5:b5:06:c0:3a:63:07:b7: 60:2b:c5:5d:83:29:28:06:55:e7:d6:74:55:b2:8b: 20:31:57:d3:78:31:9e:a1:9c:fd:21:f4:32:fb:a0: 71:94:72:83:42:46:df:7f:5e:30:2c:34:17:c4:c3: 8d:3b:d4:7e:98:1e:1a:d3:1b:8f:7d:2b:4f:13:bb: 5e:06:5f:e7:47:a1:ea:0a:a9:77:55:83:27:92:01: 4c:61:f5:cf:98:2d:50:1b:7b:02:e0:98:6b:01:89: 3c:fd:3a:3e:b9:be:7a:00:08:9f:2a:9e:f2:be:66: 1c:bc:5f:a9:71:ec:f8:72:77:8c:bf:86:94:eb:1c: 87:bd:ad:a0:fe:f9:d6:25:bf:19:48:05:d3:3b:1b: a7:c0:1e:70:e8:20:c3:87:04:87:3f:e3:70:5c:97: 42:0a:f6:76:82:cc:10:a1:99:74:8b:7c:c9:b8:49: 17:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:71:C4:FA:2A:E5:58:67:46:8E:11:55:E4:B6:ED:59:C9:3E:1F:0B X509v3 Authority Key Identifier: keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/2857F2E4111A11EF86332415C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.3.0/24 Signature Algorithm: sha256WithRSAEncryption b0:14:fb:f3:3a:a8:61:b0:e8:37:d3:cd:50:c4:45:54:5b:fe: 38:db:d0:79:b4:be:9c:13:9e:ab:c2:2c:48:5a:a7:91:c8:d9: ae:cf:4a:e8:4f:c1:30:bd:64:3c:5b:ca:76:f9:71:cc:d1:c4: 51:01:bc:a0:68:6c:b7:89:20:b0:c4:a0:0f:77:6b:a8:41:d0: 3f:a9:9c:8d:b9:3a:32:26:a0:72:79:a4:4c:e9:3b:94:f7:b1: 6b:52:89:60:5c:0b:46:ba:a0:a9:51:90:49:f0:07:15:69:48: be:d5:fe:f9:ee:b7:39:af:d4:ab:e8:00:aa:df:18:a4:dd:0e: 30:2f:1b:64:f1:00:ec:11:4f:65:09:fb:51:f5:48:99:e3:06: 38:d7:fd:f8:2d:01:54:18:fd:12:b5:d4:92:37:3e:62:0a:d5: a7:a4:d2:15:56:13:b3:24:4e:88:2c:e9:0f:fe:f1:da:70:2e: 4f:3f:83:ca:f9:cf:ba:87:b7:b4:e7:8c:f9:40:c2:10:90:fe: 53:93:07:c7:70:10:d7:07:18:94:c4:dd:c3:bd:8f:68:e5:f0: 7a:98:9f:f8:11:0c:86:e8:05:04:f6:79:bb:5a:8e:29:43:66: 97:33:4e:3e:f5:6f:80:d8:70:5c:62:df:f9:f1:fe:02:45:d3: c3:f7:a6:af -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGMjcxMTAvBgNVBAUTKEQxQTM2Q0Q4RUQyMzU1MDgyNzYxQTNEQjEzRUREMzBE RkRBMkNGRDAwHhcNMjUwNDA2MjAzMDMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmExMS1kZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10dtz9UeeVE2RjyCU88tVHARJFF1fOJIC/CmoOc2AzKrDSeEA7+AQSG7dT+W vsIefdQvMr3fXmgtqgQx1XuWtUCyzl4ZEbyCZXn6y5db6j/X1bUGwDpjB7dgK8Vd gykoBlXn1nRVsosgMVfTeDGeoZz9IfQy+6BxlHKDQkbff14wLDQXxMONO9R+mB4a 0xuPfStPE7teBl/nR6HqCql3VYMnkgFMYfXPmC1QG3sC4JhrAYk8/To+ub56AAif Kp7yvmYcvF+pcez4cneMv4aU6xyHva2g/vnWJb8ZSAXTOxunwB5w6CDDhwSHP+Nw XJdCCvZ2gswQoZl0i3zJuEkXyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC9xxPoq 5VhnRo4RVeS27VnJPh8LMB8GA1UdIwQYMBaAFNGjbNjtI1UIJ2Gj2xPt0w39os/Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEYyNy83RjUyMjlBOEIw OTIxMUVBQjVEQkVDNThDNEY5QUUwMi8wYU5zMk8walZRZ25ZYVBiRS0zVERmMml6 OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBhTnMyTzBqVlFnbllhUGJFLTNURGYyaXo5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhGMjcvN0Y1MjI5QThCMDkyMTFFQUI1REJFQzU4QzRGOUFFMDIvMjg1N0YyRTQx MTFBMTFFRjg2MzMyNDE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ3ADMA0GCSqGSIb3DQEBCwUAA4IBAQCwFPvzOqhhsOg3081QxEVU W/4429B5tL6cE56rwixIWqeRyNmuz0roT8EwvWQ8W8p2+XHM0cRRAbygaGy3iSCw xKAPd2uoQdA/qZyNuToyJqByeaRM6TuU97FrUolgXAtGuqCpUZBJ8AcVaUi+1f75 7rc5r9Sr6ACq3xik3Q4wLxtk8QDsEU9lCftR9UiZ4wY41/34LQFUGP0StdSSNz5i CtWnpNIVVhOzJE6ILOkP/vHacC5PP4PK+c+6h7e054z5QMIQkP5TkwfHcBDXBxiU xN3DvY9o5fB6mJ/4EQyG6AUE9nm7Wo4pQ2aXM04+9W+A2HBcYt/58f4CRdPD96av -----END CERTIFICATE-----Generated at Tue Mar 10 09:19:06 2026 by rpki-client