$ rpki-client -vvf rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/836B482A0F7911F1809984312C3D8C67.roa File: 836B482A0F7911F1809984312C3D8C67.roa (raw, json) Hash identifier: TwW5dd+M0PGrRvNWJtYRZ8DHnqNKe/MUb3Dt0nluACA= Subject key identifier: 1A:21:7E:F3:4F:70:D7:AA:33:0E:70:34:D5:33:CE:28:36:1D:7F:FC Certificate issuer: /CN=A91F78E2/serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D Certificate serial: 15 Authority key identifier: A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/836B482A0F7911F1809984312C3D8C67.roa Signing time: Mon 02 Mar 2026 14:34:54 +0000 ROA not before: Sat 21 Feb 2026 23:03:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 7545 IP address blocks: 103.102.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 08:18:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F78E2, serialNumber=A346648B4ADF4FC5B477C7DA2CF05B168437DB5D Validity Not Before: Feb 21 23:03:20 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5a00e-c500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:cd:cf:c3:cb:c2:10:fc:bd:73:c5:e1:d0: f5:88:c5:91:16:50:e2:00:36:52:af:18:2a:06:dd: 75:46:d2:4b:05:1b:52:e1:b4:10:ae:10:2d:3a:39: 0e:be:f3:50:aa:f6:7a:6d:39:d2:b5:1d:a2:bd:34: 80:8d:91:59:84:46:5c:39:4f:44:e5:49:6e:86:55: fe:be:a9:63:cf:be:e5:6f:08:63:94:a4:ab:e7:2f: 60:dd:cc:08:c3:f4:61:4a:44:2a:29:4a:3e:e1:d0: 49:5c:24:a4:41:01:7c:60:27:ea:f1:9f:d9:fe:52: 0d:b2:16:b9:28:98:0f:1e:ed:09:7f:5e:30:39:db: cd:6e:60:1f:14:a8:bc:6c:44:19:a9:ad:ce:52:7d: 46:8c:79:d2:85:ab:88:11:2d:16:4f:c3:cf:e9:5d: 03:0b:6c:b5:18:4e:cd:84:1b:1b:d4:de:a7:94:e8: 11:98:ae:b2:6e:e7:66:f5:a6:25:c6:09:e6:98:06: 79:97:9f:83:32:e1:61:27:7a:46:8e:31:6e:e0:d3: ef:0e:72:b7:76:b9:a1:ad:43:73:b5:9e:c9:4f:30: 45:73:82:eb:4e:93:04:f3:d5:06:3f:c6:46:87:45: 73:6b:59:75:72:e6:a2:47:89:59:69:06:6e:55:ba: ef:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:7E:F3:4F:70:D7:AA:33:0E:70:34:D5:33:CE:28:36:1D:7F:FC X509v3 Authority Key Identifier: keyid:A3:46:64:8B:4A:DF:4F:C5:B4:77:C7:DA:2C:F0:5B:16:84:37:DB:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/o0Zki0rfT8W0d8faLPBbFoQ3210.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0Zki0rfT8W0d8faLPBbFoQ3210.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F78E2/C8F4A8E2079911F1A5AE9A1B0E3D8C67/836B482A0F7911F1809984312C3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.102.232.0/23 Signature Algorithm: sha256WithRSAEncryption 35:84:b4:a7:18:32:11:42:33:8b:a1:42:7f:63:88:1f:1a:38: 06:d5:87:25:61:59:77:ee:d1:3c:ad:f9:14:ca:a3:5e:c6:80: c9:9e:fe:11:f3:cb:86:10:f0:e0:d4:b7:bd:04:3e:e8:db:9a: 68:16:ef:59:46:31:12:4b:50:16:25:58:56:65:4a:09:a2:b1: 37:35:e8:5c:ec:13:ea:47:af:12:43:97:ca:db:76:af:d1:a8: 6c:b0:5c:7c:da:0b:f1:8f:a8:31:18:68:f5:8c:cb:69:8d:a0: bb:b9:d5:35:37:be:f8:7e:ad:f6:bd:a8:ee:a4:71:10:a6:39: c8:78:b6:e3:3b:bd:1b:36:6e:1e:a0:75:a0:54:c3:62:c6:a9: eb:1a:d9:92:8a:19:15:c8:cc:68:b7:38:bc:c8:de:b7:10:da: 7f:a5:2b:b4:d2:4b:10:fc:f0:0c:3b:48:aa:5b:69:a2:a2:b9: 70:15:ca:71:3a:2d:a2:3a:ac:3d:99:1f:b7:c1:8a:09:04:14: 1b:94:bd:76:1e:ba:83:de:5e:7c:7a:47:35:d3:f1:8d:5e:1f: 35:a3:31:53:07:02:17:e9:39:97:38:5f:fd:c0:c2:27:38:71: f3:28:fd:0c:85:c4:16:37:12:d3:13:d8:c0:6e:76:8d:6c:62: f9:b1:ab:8e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NzhFMjExMC8GA1UEBRMoQTM0NjY0OEI0QURGNEZDNUI0NzdDN0RBMkNGMDVCMTY4 NDM3REI1RDAeFw0yNjAyMjEyMzAzMjBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTVhMDBlLWM1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7983Pw8vCEPy9c8Xh0PWIxZEWUOIANlKvGCoG3XVG0ksFG1LhtBCuEC06OQ6+ 81Cq9nptOdK1HaK9NICNkVmERlw5T0TlSW6GVf6+qWPPvuVvCGOUpKvnL2DdzAjD 9GFKRCopSj7h0ElcJKRBAXxgJ+rxn9n+Ug2yFrkomA8e7Ql/XjA5281uYB8UqLxs RBmprc5SfUaMedKFq4gRLRZPw8/pXQMLbLUYTs2EGxvU3qeU6BGYrrJu52b1piXG CeaYBnmXn4My4WEnekaOMW7g0+8Ocrd2uaGtQ3O1nslPMEVzgutOkwTz1QY/xkaH RXNrWXVy5qJHiVlpBm5Vuu9bAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUGiF+809w 16ozDnA01TPOKDYdf/wwHwYDVR0jBBgwFoAUo0Zki0rfT8W0d8faLPBbFoQ3210w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY3OEUyL0M4RjRBOEUyMDc5 OTExRjFBNUFFOUExQjBFM0Q4QzY3L28wWmtpMHJmVDhXMGQ4ZmFMUEJiRm9RMzIx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbzBaa2kwcmZUOFcwZDhmYUxQQmJGb1EzMjEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzhFMi9DOEY0QThFMjA3OTkxMUYxQTVBRTlBMUIwRTNEOEM2Ny84MzZCNDgyQTBG NzkxMUYxODA5OTg0MzEyQzNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnZugwDQYJKoZIhvcNAQELBQADggEBADWEtKcYMhFCM4uhQn9jiB8a OAbVhyVhWXfu0Tyt+RTKo17GgMme/hHzy4YQ8ODUt70EPujbmmgW71lGMRJLUBYl WFZlSgmisTc16FzsE+pHrxJDl8rbdq/RqGywXHzaC/GPqDEYaPWMy2mNoLu51TU3 vvh+rfa9qO6kcRCmOch4tuM7vRs2bh6gdaBUw2LGqesa2ZKKGRXIzGi3OLzI3rcQ 2n+lK7TSSxD88Aw7SKpbaaKiuXAVynE6LaI6rD2ZH7fBigkEFBuUvXYeuoPeXnx6 RzXT8Y1eHzWjMVMHAhfpOZc4X/3Awic4cfMo/QyFxBY3EtMT2MBudo1sYvmxq44= -----END CERTIFICATE-----Generated at Sat Mar 7 17:25:13 2026 by rpki-client