$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa File: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (raw, json) Hash identifier: vysf+JOpL7OvntYiYikMIsDz8nEsAs8IBD8OzimL+Fg= Subject key identifier: 04:8A:7E:36:43:29:8A:FB:17:C8:5F:45:B6:71:71:AE:3E:89:D8:2F Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Certificate serial: 02B2 Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa Signing time: Sun 29 Mar 2026 01:35:38 +0000 ROA not before: Sun 29 Mar 2026 01:35:38 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 18119 IP address blocks: 103.5.156.0/22 maxlen: 22 202.49.144.0/24 maxlen: 24 202.126.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C Validity Not Before: Mar 29 01:35:38 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c881ea-0868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:29:73:18:9c:26:9d:b8:9e:73:78:fa:05: 23:7e:7a:c4:27:a6:5b:b3:ff:ad:5b:4a:ad:72:c8: 65:ec:67:f9:10:ae:4d:72:02:08:65:26:09:43:f0: cd:4c:20:cf:28:1b:de:22:7e:db:4d:52:ec:0e:b1: 61:5d:4d:f7:c6:65:7c:da:15:61:ec:10:b6:1e:81: dd:bc:c7:21:03:2b:f9:99:41:38:0f:a4:3a:35:5c: 03:bb:45:23:59:09:cb:c8:e2:5f:b7:03:39:a4:d4: 21:ea:c4:f7:5b:39:75:bc:d1:02:39:af:4c:2c:9a: 60:3d:00:19:d2:a3:d1:31:3d:54:d8:f1:10:0d:93: 54:39:4f:c2:a9:79:ee:df:b0:a1:0d:b0:74:7f:27: a2:06:62:44:aa:99:bc:ca:b2:8f:9d:dc:ee:67:eb: 89:59:cc:74:56:0c:62:ef:d1:c5:e2:f2:90:e0:a1: da:8b:37:82:f5:41:d3:e2:76:37:4b:ac:27:92:a7: b8:aa:80:45:61:05:25:46:e5:f6:7e:c1:e4:05:05: 6c:09:e5:aa:a4:3e:79:1f:01:f2:f7:32:ca:c3:2d: 80:d0:2f:df:c1:c8:48:92:96:3d:a1:42:81:58:0c: 85:84:43:11:d2:82:15:d4:75:c1:fb:f2:1f:16:40: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:7E:36:43:29:8A:FB:17:C8:5F:45:B6:71:71:AE:3E:89:D8:2F X509v3 Authority Key Identifier: keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/0B3B85D63A1B11EDAE662B14C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.156.0/22 202.49.144.0/24 202.126.80.0/21 Signature Algorithm: sha256WithRSAEncryption 75:4a:1f:cf:9a:6f:b9:0a:d8:32:65:01:25:f5:2d:ce:37:db: 7f:f2:f2:8e:fe:c4:4d:7d:94:e5:9a:2e:7d:a8:60:f2:10:e4: 81:f7:75:8d:a1:00:0d:1d:97:9c:f0:19:fe:b4:a5:d4:b9:2a: c4:30:3e:35:78:57:93:0c:a5:5f:9c:93:41:c0:4d:f4:f9:34: e6:c6:63:bd:a5:10:70:a3:8d:c2:76:3d:eb:04:bd:6a:5d:8d: f3:ca:de:11:3f:38:e9:a6:3c:a2:c9:86:de:b9:b1:c5:1c:de: d9:64:de:37:97:c3:ea:b2:e8:50:dd:a5:f1:a3:89:87:36:25: e4:65:72:96:a4:5f:5f:17:bc:46:0b:d9:0f:1e:6e:df:2f:8e: d5:98:d0:e7:4c:81:2c:a7:d5:6a:d4:d0:10:66:74:77:09:d6: 29:92:3f:78:06:b5:18:c6:56:70:7a:36:c9:66:a3:7b:13:24: 98:28:8d:54:a4:bf:01:6c:ec:3b:c5:e9:ea:05:00:e1:51:bf: de:8f:01:af:de:4d:07:3e:51:5d:70:85:55:54:b9:95:df:f6: 6d:20:2a:d8:78:38:67:56:79:d5:1b:4d:5b:2d:cf:05:34:3e: 65:ee:98:95:12:67:87:6b:50:fc:89:5f:13:14:ea:de:06:88: 5c:5b:6b:24 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwM0ExMTAvBgNVBAUTKDhCNDZGQTExRUE2RUUyMzUwOTlFNDg0MzNDODI0OTdB MTk3QjlEN0MwHhcNMjYwMzI5MDEzNTM4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM4ODFlYS0wODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGEpcxicJp24nnN4+gUjfnrEJ6Zbs/+tW0qtcshl7Gf5EK5NcgIIZSYJQ/DN TCDPKBveIn7bTVLsDrFhXU33xmV82hVh7BC2HoHdvMchAyv5mUE4D6Q6NVwDu0Uj WQnLyOJftwM5pNQh6sT3Wzl1vNECOa9MLJpgPQAZ0qPRMT1U2PEQDZNUOU/CqXnu 37ChDbB0fyeiBmJEqpm8yrKPndzuZ+uJWcx0Vgxi79HF4vKQ4KHaizeC9UHT4nY3 S6wnkqe4qoBFYQUlRuX2fsHkBQVsCeWqpD55HwHy9zLKwy2A0C/fwchIkpY9oUKB WAyFhEMR0oIV1HXB+/IfFkDBqwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFASKfjZD KYr7F8hfRbZxca4+idgvMB8GA1UdIwQYMBaAFItG+hHqbuI1CZ5IQzyCSXoZe518 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjAzQS9ERkM2OEQ2NDNB MTYxMUVEOTE1MkJGMEVDNEY5QUUwMi9pMGI2RWVwdTRqVUpua2hEUElKSmVobDdu WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kwYjZFZXB1NGpVSm5raERQSUpKZWhsN25Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkIwM0EvREZDNjhENjQzQTE2MTFFRDkxNTJCRjBFQzRGOUFFMDIvMEIzQjg1RDYz QTFCMTFFREFFNjYyQjE0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZwWcAwQAyjGQAwQDyn5QMA0GCSqGSIb3DQEBCwUAA4IBAQB1Sh/P mm+5CtgyZQEl9S3ON9t/8vKO/sRNfZTlmi59qGDyEOSB93WNoQANHZec8Bn+tKXU uSrEMD41eFeTDKVfnJNBwE30+TTmxmO9pRBwo43Cdj3rBL1qXY3zyt4RPzjppjyi yYbeubHFHN7ZZN43l8PqsuhQ3aXxo4mHNiXkZXKWpF9fF7xGC9kPHm7fL47VmNDn TIEsp9Vq1NAQZnR3CdYpkj94BrUYxlZwejbJZqN7EySYKI1UpL8BbOw7xenqBQDh Ub/ejwGv3k0HPlFdcIVVVLmV3/ZtICrYeDhnVnnVG01bLc8FND5l7piVEmeHa1D8 iV8TFOreBohcW2sk -----END CERTIFICATE-----Generated at Mon Apr 6 12:44:40 2026 by rpki-client