$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/2B7B2500A62E11EF8FF03040C4F9AE02.roa File: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (raw, json) Hash identifier: 36EgBq1n4JNWcqkButdZG4sfZA3L8DsedoJF13m1uY8= Subject key identifier: 2A:68:DA:90:9A:30:CA:9A:85:59:E7:E0:E6:E7:19:5B:9E:A5:A0:95 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 0674 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/2B7B2500A62E11EF8FF03040C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:18:57 +0000 ROA not before: Wed 02 Apr 2025 23:25:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32402 IP address blocks: 103.136.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 22:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Apr 2 23:25:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a51dc1-b5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:db:79:52:2b:ad:1c:0a:ab:fb:51:7c:76: d3:99:9d:6a:4e:43:cc:98:b7:ce:11:36:2d:9e:45: 8b:ce:3b:39:b7:e0:54:48:9f:c2:af:78:0c:4a:28: 19:35:65:86:fd:22:5d:39:72:c2:6c:19:1c:fd:bd: c5:93:ab:b0:fb:2a:30:45:72:d1:f1:b9:ad:bf:57: f2:ea:76:e2:13:a5:3d:ef:53:ad:da:56:4e:12:59: 1d:ea:b8:17:62:c1:3a:2c:10:08:5f:54:28:57:46: 3a:88:c1:40:12:17:45:6c:7b:1a:22:91:4e:e3:b4: 01:db:b9:9f:6f:41:2e:72:7b:9c:e4:89:b3:91:49: 92:90:77:6f:73:2b:1f:f1:0d:d4:24:a6:0a:0d:d4: de:42:6b:be:2f:6d:20:65:b0:00:ee:e3:50:de:7a: 98:fd:4a:06:ec:78:b4:23:d1:e8:c8:03:ac:72:61: f8:03:16:0a:7a:1c:0b:e0:f9:06:40:ef:6d:bb:1a: 3a:e1:cf:11:06:11:bb:ad:1a:49:05:e7:58:6c:d1: 05:1a:c4:3b:41:36:b5:5c:e2:c5:af:ca:3b:40:03: 5f:fd:61:dc:3d:80:ec:c2:b6:e0:5b:83:5a:a5:da: b5:c1:5e:c1:3e:61:b0:e0:56:10:a0:48:21:35:e1: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:68:DA:90:9A:30:CA:9A:85:59:E7:E0:E6:E7:19:5B:9E:A5:A0:95 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/2B7B2500A62E11EF8FF03040C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.149.0/24 Signature Algorithm: sha256WithRSAEncryption a8:b4:77:12:e7:ae:ed:44:78:8c:fb:0b:26:87:c2:0f:5f:5d: 89:25:44:53:d0:97:53:36:a5:43:b4:9c:a5:d2:f9:b8:61:1a: ad:d3:6c:46:41:0f:ff:d7:3c:ba:f0:84:03:aa:fa:30:78:e0: eb:2a:d8:6f:81:9a:35:16:dc:13:8d:20:a9:7e:3c:2c:2b:6b: 92:dd:83:48:ef:01:3e:a8:4e:3a:92:a2:fe:94:df:45:b2:26: ce:84:85:39:14:e8:07:25:95:74:fb:2b:73:27:c6:01:cf:c6: 01:8f:b4:47:11:3c:39:56:87:3a:60:ce:39:e5:93:ac:95:21: f6:74:40:54:d3:98:ac:eb:14:3b:b5:48:53:68:b4:c9:62:a6: 16:97:d5:94:7d:23:a9:75:ad:0a:44:55:5f:c9:c5:d2:43:a2: 2f:9d:c7:b2:d8:b3:20:62:5e:08:d4:12:8f:a9:8b:55:e6:a7: 2d:1f:9e:5c:7c:50:64:aa:6e:70:0a:7d:cb:ca:fa:7e:a8:16: ac:af:73:db:6c:ee:2a:96:aa:46:c3:82:a9:42:c4:f5:eb:86: 98:ef:8e:b8:0c:d2:33:9c:51:ef:b8:4e:e9:0d:bd:3a:af:0b: 45:f8:be:21:aa:fc:c5:47:5a:6f:52:b5:cf:99:61:40:35:89: 83:ea:53:f6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNDAyMjMyNTEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWRjMS1iNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5/beVIrrRwKq/tRfHbTmZ1qTkPMmLfOETYtnkWLzjs5t+BUSJ/Cr3gMSigZ NWWG/SJdOXLCbBkc/b3Fk6uw+yowRXLR8bmtv1fy6nbiE6U971Ot2lZOElkd6rgX YsE6LBAIX1QoV0Y6iMFAEhdFbHsaIpFO47QB27mfb0Eucnuc5ImzkUmSkHdvcysf 8Q3UJKYKDdTeQmu+L20gZbAA7uNQ3nqY/UoG7Hi0I9HoyAOscmH4AxYKehwL4PkG QO9tuxo64c8RBhG7rRpJBedYbNEFGsQ7QTa1XOLFr8o7QANf/WHcPYDswrbgW4Na pdq1wV7BPmGw4FYQoEghNeGOsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCpo2pCa MMqahVnn4ObnGVuepaCVMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IwOUUvNDcxMTlEMDBEMDBCMTFFQkI1ODkwRTdCQzRGOUFFMDIvMkI3QjI1MDBB NjJFMTFFRjhGRjAzMDQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4iVMA0GCSqGSIb3DQEBCwUAA4IBAQCotHcS567tRHiM+wsmh8IP X12JJURT0JdTNqVDtJyl0vm4YRqt02xGQQ//1zy68IQDqvoweODrKthvgZo1FtwT jSCpfjwsK2uS3YNI7wE+qE46kqL+lN9FsibOhIU5FOgHJZV0+ytzJ8YBz8YBj7RH ETw5Voc6YM455ZOslSH2dEBU05is6xQ7tUhTaLTJYqYWl9WUfSOpda0KRFVfycXS Q6Ivncey2LMgYl4I1BKPqYtV5qctH55cfFBkqm5wCn3Lyvp+qBasr3PbbO4qlqpG w4KpQsT164aY7464DNIznFHvuE7pDb06rwtF+L4hqvzFR1pvUrXPmWFANYmD6lP2 -----END CERTIFICATE-----Generated at Tue Mar 10 06:11:25 2026 by rpki-client