$ rpki-client -vvf rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/349ACBB2450811F09650FF5FC4F9AE02.roa File: 349ACBB2450811F09650FF5FC4F9AE02.roa (raw, json) Hash identifier: ElTWkHinF5kZlSpWnOacvfk821L7f3zWiiILDU+FV5g= Subject key identifier: 71:1B:65:DF:AD:D4:28:32:B4:83:1C:0E:8B:17:F8:6E:31:DA:39:04 Certificate issuer: /CN=A91D243F/serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Certificate serial: 0109 Authority key identifier: 18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/349ACBB2450811F09650FF5FC4F9AE02.roa Signing time: Sun 03 May 2026 07:39:31 +0000 ROA not before: Sun 03 May 2026 07:39:31 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 401701 IP address blocks: 103.117.136.0/22 maxlen: 24 103.121.92.0/22 maxlen: 24 103.186.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D243F, serialNumber=18967DCDB724A84A71711E678AAB1D2E72215D6C Validity Not Before: May 3 07:39:31 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69f6fbb3-ab76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:f6:c6:96:5c:6d:7f:4f:a7:30:c3:26:3c: 4a:78:1f:00:b2:b4:29:08:87:c4:f9:6d:e1:08:8c: 05:0a:ca:dd:6e:0b:d7:9a:06:48:76:19:54:ed:37: b3:20:f1:a1:f4:18:00:bf:cf:4b:63:83:04:c3:b2: b3:63:11:06:73:a8:f5:70:e5:e5:e3:46:aa:c3:aa: 6b:50:cb:02:33:96:a5:a3:8a:e3:49:ec:0f:1c:ba: 49:fc:3a:3d:07:b4:03:0f:6f:e5:4a:86:6f:01:d7: 62:f8:08:06:26:2a:9a:5e:64:46:75:20:c5:c6:2e: 7e:9f:cc:e9:12:d1:ef:23:a5:99:a2:00:e1:b6:0a: 80:e2:52:7a:53:70:aa:07:58:03:72:74:af:a5:c6: ac:b8:8d:8a:b2:4a:ff:12:31:eb:cf:e8:a0:d0:89: 90:23:a7:73:a5:75:cc:4b:aa:1f:26:3a:08:cc:3b: c2:94:89:6f:51:67:b7:cf:b8:a4:e6:de:75:d0:b4: 50:c4:56:8a:20:22:8a:ea:31:90:82:9f:90:94:1d: 39:ce:19:01:ad:5a:67:f2:44:cb:51:d8:13:e2:99: 64:1e:35:1f:ad:ae:f1:b2:52:3d:67:a2:85:70:d2: 32:b4:b2:5d:4e:7d:93:37:8c:dc:67:49:b9:5d:c4: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1B:65:DF:AD:D4:28:32:B4:83:1C:0E:8B:17:F8:6E:31:DA:39:04 X509v3 Authority Key Identifier: keyid:18:96:7D:CD:B7:24:A8:4A:71:71:1E:67:8A:AB:1D:2E:72:21:5D:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/GJZ9zbckqEpxcR5niqsdLnIhXWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJZ9zbckqEpxcR5niqsdLnIhXWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D243F/D684FC2E1A8B11F09CC24535C4F9AE02/349ACBB2450811F09650FF5FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.117.136.0/22 103.121.92.0/22 103.186.214.0/23 Signature Algorithm: sha256WithRSAEncryption 18:8a:9c:d6:ae:65:16:b4:92:b4:20:78:34:ab:c5:26:0b:6c: 52:c5:7e:99:1e:26:29:41:f0:3a:18:00:9c:77:12:c3:97:cf: c0:38:e3:b8:91:71:f7:53:d7:60:74:1c:cf:a4:dd:27:1c:e2: 7b:31:6c:4a:90:d0:ea:69:d2:28:31:86:14:fe:2f:8b:2e:6e: af:dc:95:d8:7b:9d:52:78:90:dc:f9:f7:42:6a:84:5e:0a:12: d2:ff:60:77:f4:4a:e5:5c:d2:0f:3c:33:44:0d:d0:57:24:fb: 43:a7:ad:b7:6b:01:4f:bf:61:03:06:ed:e4:b8:8c:69:9a:9d: 80:a7:d0:b1:c2:66:82:a2:31:aa:f9:e0:ee:e6:f4:2f:3c:15: 04:a5:ce:c9:eb:cf:69:02:49:2e:4c:d0:ee:f3:b5:c2:7f:62: 5d:86:66:b9:03:57:c2:a1:ce:00:8f:a0:fc:35:88:81:24:43: b3:33:a8:d8:45:5f:76:27:d1:1d:7f:48:c5:ce:31:d6:ff:16: cc:b8:65:ff:83:dd:e6:db:03:66:67:cd:41:b7:42:13:36:4f: a8:1c:08:77:4b:66:9c:81:d2:08:07:79:5d:61:16:f8:44:a5: 86:df:7e:4a:92:4d:ae:66:cc:4c:2d:38:5f:ae:0e:9b:e5:28: c2:a2:c8:9a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI0M0YxMTAvBgNVBAUTKDE4OTY3RENEQjcyNEE4NEE3MTcxMUU2NzhBQUIxRDJF NzIyMTVENkMwHhcNMjYwNTAzMDczOTMxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2ZmJiMy1hYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/z2xpZcbX9PpzDDJjxKeB8AsrQpCIfE+W3hCIwFCsrdbgvXmgZIdhlU7Tez IPGh9BgAv89LY4MEw7KzYxEGc6j1cOXl40aqw6prUMsCM5alo4rjSewPHLpJ/Do9 B7QDD2/lSoZvAddi+AgGJiqaXmRGdSDFxi5+n8zpEtHvI6WZogDhtgqA4lJ6U3Cq B1gDcnSvpcasuI2Kskr/EjHrz+ig0ImQI6dzpXXMS6ofJjoIzDvClIlvUWe3z7ik 5t510LRQxFaKICKK6jGQgp+QlB05zhkBrVpn8kTLUdgT4plkHjUfra7xslI9Z6KF cNIytLJdTn2TN4zcZ0m5XcRddQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHEbZd+t 1CgytIMcDosX+G4x2jkEMB8GA1UdIwQYMBaAFBiWfc23JKhKcXEeZ4qrHS5yIV1s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjQzRi9ENjg0RkMyRTFB OEIxMUYwOUNDMjQ1MzVDNEY5QUUwMi9HSlo5emJja3FFcHhjUjVuaXFzZExuSWhY V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dKWjl6YmNrcUVweGNSNW5pcXNkTG5JaFhXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI0M0YvRDY4NEZDMkUxQThCMTFGMDlDQzI0NTM1QzRGOUFFMDIvMzQ5QUNCQjI0 NTA4MTFGMDk2NTBGRjVGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ3WIAwQCZ3lcAwQBZ7rWMA0GCSqGSIb3DQEBCwUAA4IBAQAYipzW rmUWtJK0IHg0q8UmC2xSxX6ZHiYpQfA6GACcdxLDl8/AOOO4kXH3U9dgdBzPpN0n HOJ7MWxKkNDqadIoMYYU/i+LLm6v3JXYe51SeJDc+fdCaoReChLS/2B39ErlXNIP PDNEDdBXJPtDp623awFPv2EDBu3kuIxpmp2Ap9CxwmaCojGq+eDu5vQvPBUEpc7J 689pAkkuTNDu87XCf2Jdhma5A1fCoc4Aj6D8NYiBJEOzM6jYRV92J9Edf0jFzjHW /xbMuGX/g93m2wNmZ81Bt0ITNk+oHAh3S2acgdIIB3ldYRb4RKWG335Kkk2uZsxM LThfrg6b5SjCosia -----END CERTIFICATE-----Generated at Wed May 6 04:07:24 2026 by rpki-client