$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/991F1FE8183A11EBB9F78E80C4F9AE02.roa File: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (raw, json) Hash identifier: azgOtcYeMQ+jRphVpaVCAHBgs8PE9LLzlZ+oLtFAePc= Subject key identifier: 19:86:30:1A:F6:3C:35:36:82:11:7F:E9:2F:D3:41:86:E0:87:C7:BF Certificate issuer: /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Certificate serial: 0837 Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/991F1FE8183A11EBB9F78E80C4F9AE02.roa Signing time: Mon 02 Mar 2026 11:29:28 +0000 ROA not before: Fri 20 Feb 2026 21:18:19 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17439 IP address blocks: 103.225.112.0/23 maxlen: 23 103.225.112.0/24 maxlen: 24 103.225.113.0/24 maxlen: 24 103.225.114.0/24 maxlen: 24 103.225.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 20:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740 Validity Not Before: Feb 20 21:18:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a57497-2a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:46:f5:38:70:4d:0e:ab:01:ff:88:85:c7: 67:a7:5b:66:44:10:49:c1:8b:aa:cb:87:e2:f6:2c: 3e:cd:45:78:07:d5:78:7d:0d:25:b8:86:12:11:cf: 08:0f:76:01:4f:b7:69:9c:2a:cd:1a:15:dd:f8:14: c4:b4:81:06:97:b4:70:60:14:78:f8:4f:eb:c1:0e: 2d:1f:66:89:d0:e5:96:25:17:9e:cf:96:bd:b5:48: 2a:c5:c2:23:63:65:ca:19:7a:e3:05:fc:0b:0d:16: ce:4a:6d:ec:03:a7:0a:5b:77:e0:ac:94:a6:39:9d: fb:f1:e2:4a:e0:40:50:81:3d:79:29:71:c2:e9:69: 01:d2:c4:ee:41:a7:31:03:bb:d5:55:fc:f7:26:92: 95:c2:72:d0:8b:08:0d:3c:63:0f:79:85:ea:be:cb: 91:6f:aa:a7:0f:e6:9c:db:0c:53:d9:b7:a5:78:c1: b1:77:3f:bb:20:ee:92:66:d8:e7:8a:b6:22:15:d9: af:06:06:01:63:19:17:ad:ee:17:61:c1:49:93:57: 71:27:c5:4b:7a:2f:f3:0b:34:6a:f2:96:29:ad:f8: 52:12:82:5e:05:07:6f:9b:d4:47:91:59:f1:98:af: 5d:87:9b:54:ba:a1:5c:3b:50:c6:56:79:86:fe:7d: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:86:30:1A:F6:3C:35:36:82:11:7F:E9:2F:D3:41:86:E0:87:C7:BF X509v3 Authority Key Identifier: keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/991F1FE8183A11EBB9F78E80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.225.112.0/22 Signature Algorithm: sha256WithRSAEncryption 27:11:2c:ca:f4:ec:10:c0:8a:fc:90:72:2d:81:44:6f:f4:48: d1:9a:93:68:19:e9:d4:41:c7:ab:50:c3:b9:6a:7e:24:35:d5: 02:14:82:96:e0:ad:e1:a5:a9:7f:fd:14:47:02:d0:c1:64:10: f9:a5:c3:25:11:bc:1d:d7:6b:31:ee:6c:fd:b4:7d:de:a2:86: 44:05:bf:91:cd:ac:73:70:da:43:ba:3c:28:39:78:0b:f9:da: 9e:8a:a4:3b:66:1d:64:1f:4b:fb:6e:f5:c2:68:9c:ea:52:9f: 0b:55:17:ac:6c:86:55:f0:5d:b8:ce:28:d2:dd:ef:93:e6:b0: fa:97:01:d3:0c:be:75:49:cf:31:af:4d:ac:40:f2:b9:1f:98: be:be:69:73:4e:8a:49:6d:be:e4:1b:50:9b:2f:41:c9:8d:16: 1e:86:bc:c5:6a:ce:bd:49:35:d5:b4:ff:24:f5:31:55:8f:89: 38:62:e9:a7:11:2b:2f:ce:43:b1:2f:5c:c8:63:f6:b8:e2:b3: c4:ae:77:0d:57:7f:e6:bb:c2:02:cb:4f:1a:2c:08:c9:61:0b: d3:3d:8a:19:cd:44:d2:f5:b4:07:b6:49:e2:ba:c8:03:67:36: f2:39:25:93:5f:59:89:b8:96:c6:98:24:1c:7c:b6:81:e3:ba: e6:fc:38:80 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI3NzkxMTAvBgNVBAUTKEJCMDNCOEQyNDQ3RUY4MTNBMzdBOTU4Nzc2NkEwMUY3 MzU5REQ3NDAwHhcNMjYwMjIwMjExODE5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzQ5Ny0yYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrZG9ThwTQ6rAf+Ihcdnp1tmRBBJwYuqy4fi9iw+zUV4B9V4fQ0luIYSEc8I D3YBT7dpnCrNGhXd+BTEtIEGl7RwYBR4+E/rwQ4tH2aJ0OWWJReez5a9tUgqxcIj Y2XKGXrjBfwLDRbOSm3sA6cKW3fgrJSmOZ378eJK4EBQgT15KXHC6WkB0sTuQacx A7vVVfz3JpKVwnLQiwgNPGMPeYXqvsuRb6qnD+ac2wxT2beleMGxdz+7IO6SZtjn irYiFdmvBgYBYxkXre4XYcFJk1dxJ8VLei/zCzRq8pYprfhSEoJeBQdvm9RHkVnx mK9dh5tUuqFcO1DGVnmG/n2WYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBmGMBr2 PDU2ghF/6S/TQYbgh8e/MB8GA1UdIwQYMBaAFLsDuNJEfvgTo3qVh3ZqAfc1nddA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjc3OS84OTAyNDk5NDE4 MzcxMUVCODA2NEIwN0FDNEY5QUUwMi91d080MGtSLS1CT2plcFdIZG1vQjl6V2Qx MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V3TzQwa1ItLUJPamVwV0hkbW9COXpXZDEwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI3NzkvODkwMjQ5OTQxODM3MTFFQjgwNjRCMDdBQzRGOUFFMDIvOTkxRjFGRTgx ODNBMTFFQkI5Rjc4RTgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ+FwMA0GCSqGSIb3DQEBCwUAA4IBAQAnESzK9OwQwIr8kHItgURv 9EjRmpNoGenUQcerUMO5an4kNdUCFIKW4K3hpal//RRHAtDBZBD5pcMlEbwd12sx 7mz9tH3eooZEBb+RzaxzcNpDujwoOXgL+dqeiqQ7Zh1kH0v7bvXCaJzqUp8LVRes bIZV8F24zijS3e+T5rD6lwHTDL51Sc8xr02sQPK5H5i+vmlzTopJbb7kG1CbL0HJ jRYehrzFas69STXVtP8k9TFVj4k4YumnESsvzkOxL1zIY/a44rPErncNV3/mu8IC y08aLAjJYQvTPYoZzUTS9bQHtkniusgDZzbyOSWTX1mJuJbGmCQcfLaB47rm/DiA -----END CERTIFICATE-----Generated at Sat Mar 7 19:26:33 2026 by rpki-client