$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa File: 345AD30E1E1311EE846A3261C4F9AE02.roa (raw, json) Hash identifier: rGtM/ZIyGfCd8XkroEzfUOelWmAwZh3Hbyh+PxmqDAY= Subject key identifier: 05:B3:E2:6F:76:08:4A:B1:DC:04:81:08:0C:96:E4:0E:4F:7C:DC:37 Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Certificate serial: 024D Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa Signing time: Tue 11 Aug 2026 02:52:15 +0000 ROA not before: Tue 11 Aug 2026 02:52:15 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151488 IP address blocks: 103.234.16.0/23 maxlen: 23 103.234.16.0/25 maxlen: 25 103.234.16.128/25 maxlen: 25 103.234.17.0/25 maxlen: 25 103.234.17.128/25 maxlen: 25 2001:df2:a7c0::/48 maxlen: 48 2001:df2:a7c0::/64 maxlen: 64 2001:df2:a7c0:1::/64 maxlen: 64 2001:df2:a7c0:2::/64 maxlen: 64 2001:df2:a7c0:3::/64 maxlen: 64 2001:df2:a7c0:4::/64 maxlen: 64 2001:df2:a7c0:5::/64 maxlen: 64 2001:df2:a7c0:6::/64 maxlen: 64 2001:df2:a7c0:7::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5 Validity Not Before: Aug 11 02:52:15 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7a8e5e-4c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:c0:3b:a9:88:55:56:d3:a9:6f:13:27:9c: 3a:d0:22:e8:ad:ae:6d:b8:18:5f:35:7f:b4:ae:c2: 7b:09:de:f8:d0:f4:8f:c1:c5:2a:21:9c:c9:15:9a: da:d6:1e:33:4a:c9:af:64:24:48:39:1a:c3:0b:e7: 26:a7:63:90:99:48:58:ed:6e:4b:7e:a1:6d:48:a0: a0:60:c8:07:0b:1b:90:3b:41:fb:33:13:b8:68:54: 85:21:3d:af:ab:d2:d0:6a:e7:7d:d6:d0:35:d6:00: d4:ca:bb:e3:a8:e6:1b:2f:38:08:08:94:db:f2:38: a1:63:4a:86:24:17:75:de:e6:ff:ee:c9:5d:ae:ec: e7:c5:ff:29:6b:2c:ca:a8:77:3d:c1:9d:cd:ef:3f: 23:57:44:64:73:fb:b8:e8:43:d0:e2:e1:75:b5:0f: 8a:ed:2b:67:42:88:28:15:ea:66:a6:4d:19:ca:33: ef:cf:5b:51:98:bf:08:59:c9:42:a4:ac:d3:5a:41: 16:fa:4c:70:2e:5b:54:0a:97:b8:30:19:e0:09:a8: 05:2a:5b:c9:72:06:bd:1b:ff:4b:af:4a:f7:2f:a6: 70:d1:0c:c0:86:06:fe:12:08:29:38:ea:2d:38:5a: c2:97:87:8a:59:a4:c7:ff:1a:a0:20:86:74:cc:1f: 7e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B3:E2:6F:76:08:4A:B1:DC:04:81:08:0C:96:E4:0E:4F:7C:DC:37 X509v3 Authority Key Identifier: keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/345AD30E1E1311EE846A3261C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.234.16.0/23 IPv6: 2001:df2:a7c0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:0d:8d:33:43:14:47:aa:98:b6:a7:57:f4:78:09:d3:bf:9d: 10:bf:e8:c7:0a:e0:c2:c6:98:a8:fd:b5:b5:45:a7:5a:a1:c0: 33:18:2e:26:94:9d:f5:3b:42:fb:0d:dc:85:21:d3:54:09:71: 9c:fd:37:5a:65:2b:74:9e:91:3b:f3:44:2b:02:86:d8:63:73: 4a:14:38:09:1c:96:85:7c:91:95:07:5b:c8:0a:d3:e2:e7:8d: 06:e0:91:30:41:2b:23:a8:44:23:27:e4:82:30:b4:73:71:e6: 41:82:9b:94:e7:07:e0:ad:84:79:96:92:7e:55:85:8d:b5:50: 86:72:02:56:7c:4a:69:d0:14:46:5b:58:45:cf:fd:99:5b:86: 4d:42:ac:f7:2a:dc:22:d0:7f:52:d2:51:43:38:32:fe:e7:8a: 52:d2:8a:cd:54:6c:98:e3:e1:01:b4:75:83:ea:cc:ce:64:d3: 2e:b5:57:42:b3:e2:76:6b:47:5d:73:9e:cd:fd:d9:b7:5e:c9: 08:bf:37:a3:de:46:ad:b8:91:13:02:90:48:de:b8:71:0b:ca: dd:51:db:3c:69:92:af:f5:2f:a4:a4:74:6a:5f:be:7c:cd:5f: 2a:15:f8:d3:c9:ec:85:de:1d:71:64:dc:9e:97:6e:e1:c4:2f: a2:3f:39:0d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2RTQxMTAvBgNVBAUTKDkxRTJBNDk3MDMzOThGQjIwMEFDMEU5RkE0NzY2OTE1 RDc0QkY5RTUwHhcNMjYwODExMDI1MjE1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdhOGU1ZS00YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvvAO6mIVVbTqW8TJ5w60CLora5tuBhfNX+0rsJ7Cd740PSPwcUqIZzJFZra 1h4zSsmvZCRIORrDC+cmp2OQmUhY7W5LfqFtSKCgYMgHCxuQO0H7MxO4aFSFIT2v q9LQaud91tA11gDUyrvjqOYbLzgICJTb8jihY0qGJBd13ub/7sldruznxf8payzK qHc9wZ3N7z8jV0Rkc/u46EPQ4uF1tQ+K7StnQogoFepmpk0ZyjPvz1tRmL8IWclC pKzTWkEW+kxwLltUCpe4MBngCagFKlvJcga9G/9Lr0r3L6Zw0QzAhgb+EggpOOot OFrCl4eKWaTH/xqgIIZ0zB9+bQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAWz4m92 CEqx3ASBCAyW5A5PfNw3MB8GA1UdIwQYMBaAFJHipJcDOY+yAKwOn6R2aRXXS/nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDZFNC9BQkU3RTA1NjFF MEUxMUVFOTE3MEY0MjlDNEY5QUUwMi9rZUtrbHdNNWo3SUFyQTZmcEhacEZkZEwt ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlS2tsd001ajdJQXJBNmZwSFpwRmRkTC1lVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQ2RTQvQUJFN0UwNTYxRTBFMTFFRTkxNzBGNDI5QzRGOUFFMDIvMzQ1QUQzMEUx RTEzMTFFRTg0NkEzMjYxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ+oQMA8EAgACMAkDBwAgAQ3yp8AwDQYJKoZIhvcNAQELBQADggEB AF4NjTNDFEeqmLanV/R4CdO/nRC/6McK4MLGmKj9tbVFp1qhwDMYLiaUnfU7QvsN 3IUh01QJcZz9N1plK3SekTvzRCsChthjc0oUOAkcloV8kZUHW8gK0+LnjQbgkTBB KyOoRCMn5IIwtHNx5kGCm5TnB+CthHmWkn5VhY21UIZyAlZ8SmnQFEZbWEXP/Zlb hk1CrPcq3CLQf1LSUUM4Mv7nilLSis1UbJjj4QG0dYPqzM5k0y61V0Kz4nZrR11z ns392bdeyQi/N6PeRq24kRMCkEjeuHELyt1R2zxpkq/1L6SkdGpfvnzNXyoV+NPJ 7IXeHXFk3J6XbuHEL6I/OQ0= -----END CERTIFICATE-----Generated at Tue Oct 6 19:56:38 2026 by rpki-client