$ rpki-client -vvf rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/0D086D9476BA11EDB6CB335CC4F9AE02.roa File: 0D086D9476BA11EDB6CB335CC4F9AE02.roa (raw, json) Hash identifier: ySHcIoYi69/klx1xfZit6p/PRcBh2GhqWocAom0vCPo= Subject key identifier: 49:4B:AF:12:36:3C:F0:8E:95:07:79:E8:9E:DB:33:3D:7D:6D:34:86 Certificate issuer: /CN=A91126F4/serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Certificate serial: 0266 Authority key identifier: B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/0D086D9476BA11EDB6CB335CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:56:24 +0000 ROA not before: Fri 23 Jan 2026 01:21:56 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150665 IP address blocks: 103.108.82.0/24 maxlen: 24 2001:df1:a4c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91126F4, serialNumber=B66A92770F98ED6759C8E457E8F03F104D975606 Validity Not Before: Jan 23 01:21:56 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43778-e97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:b9:c8:d8:71:3a:c2:ba:42:53:2d:d7:7f: 01:96:24:0b:82:5a:8e:e3:87:7a:1b:a5:27:f6:52: 43:8d:c3:db:61:7b:0b:f9:7b:e4:67:49:83:27:a7: b2:75:ba:e4:8a:13:25:ab:81:e0:aa:77:e2:f1:d6: fb:04:a5:db:63:bc:1b:96:05:28:5c:0c:ab:8f:03: 9e:a3:91:d1:2e:16:a0:d0:75:4e:f9:09:9c:f2:28: 25:e8:f1:66:79:03:b4:12:35:8a:0d:29:48:6d:6a: c3:10:84:f2:62:1c:24:b7:9c:fc:9a:c7:79:38:c5: 1f:d0:aa:24:46:31:00:5f:65:66:82:0b:f1:93:94: 56:12:16:9f:c5:71:eb:47:40:78:5b:1e:5c:6d:2b: 99:bd:35:f1:d6:f0:a7:9c:f9:48:b4:58:3c:86:f1: 3d:58:82:a3:30:75:99:3d:d0:a6:8d:2d:ac:ae:0b: 9c:c3:e4:f1:43:df:1c:72:c2:34:5e:2d:ce:97:a9: 28:9d:3e:6c:78:5d:1b:74:cd:5d:e3:73:d4:80:cd: 0d:be:f5:5a:78:0f:d5:84:fa:d5:fa:ed:6a:d8:9e: e0:7c:15:e6:fa:21:fa:5d:39:2b:ad:88:bf:19:53: 1c:8f:3b:77:09:69:34:fd:67:a2:62:c7:ad:e5:c9: 75:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:AF:12:36:3C:F0:8E:95:07:79:E8:9E:DB:33:3D:7D:6D:34:86 X509v3 Authority Key Identifier: keyid:B6:6A:92:77:0F:98:ED:67:59:C8:E4:57:E8:F0:3F:10:4D:97:56:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/tmqSdw-Y7WdZyORX6PA_EE2XVgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmqSdw-Y7WdZyORX6PA_EE2XVgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126F4/3B8E02E476B711EDB6ED5B5AC4F9AE02/0D086D9476BA11EDB6CB335CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.108.82.0/24 IPv6: 2001:df1:a4c0::/48 Signature Algorithm: sha256WithRSAEncryption 78:d7:7d:f9:b0:e6:32:3a:86:bf:29:14:fd:fa:f3:ff:e7:f1: d0:37:2c:4d:53:0d:5b:3f:e7:c0:4c:7b:77:77:33:92:77:43: 3b:f6:42:08:1a:ee:47:05:46:fa:e2:9d:e7:ea:28:8c:84:18: 05:41:3a:58:ea:6d:f1:b7:af:8c:aa:c5:9b:e6:60:5b:eb:f4: 13:5a:a2:b4:f8:a8:fb:11:26:2c:1d:ac:29:49:0a:13:f4:26: d1:65:86:9d:1e:88:6d:cf:94:e6:cd:51:6e:89:22:aa:c6:33: 85:a7:46:96:f2:5f:97:44:fc:5c:df:47:98:94:9b:d2:de:38: 7d:18:6f:a3:4f:1e:2e:16:b2:c2:e3:d8:6c:fc:3c:8d:13:5c: f9:7f:82:cc:82:3d:00:a1:be:09:2a:9c:fd:1a:63:ab:50:1b: f6:99:56:19:29:08:d3:53:be:2b:79:b9:72:01:f3:9d:8d:8c: 18:2c:6e:65:55:4a:3d:7c:cb:de:30:d8:e7:60:5c:c8:30:6c: f0:ba:0a:c4:d0:da:44:58:d5:6c:b2:04:33:92:1f:89:9f:c3: 75:58:30:4f:b7:3c:9f:82:e2:da:ae:57:c6:77:1f:db:7a:9f: 0c:a0:5d:bb:3d:ea:69:44:cb:05:8a:94:d9:51:67:71:39:80: ac:ae:72:ad -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI2RjQxMTAvBgNVBAUTKEI2NkE5Mjc3MEY5OEVENjc1OUM4RTQ1N0U4RjAzRjEw NEQ5NzU2MDYwHhcNMjYwMTIzMDEyMTU2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzc3OC1lOTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp125yNhxOsK6QlMt138BliQLglqO44d6G6Un9lJDjcPbYXsL+XvkZ0mDJ6ey dbrkihMlq4Hgqnfi8db7BKXbY7wblgUoXAyrjwOeo5HRLhag0HVO+Qmc8igl6PFm eQO0EjWKDSlIbWrDEITyYhwkt5z8msd5OMUf0KokRjEAX2Vmggvxk5RWEhafxXHr R0B4Wx5cbSuZvTXx1vCnnPlItFg8hvE9WIKjMHWZPdCmjS2srgucw+TxQ98ccsI0 Xi3Ol6konT5seF0bdM1d43PUgM0NvvVaeA/VhPrV+u1q2J7gfBXm+iH6XTkrrYi/ GVMcjzt3CWk0/WeiYset5cl12QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFElLrxI2 PPCOlQd56J7bMz19bTSGMB8GA1UdIwQYMBaAFLZqkncPmO1nWcjkV+jwPxBNl1YG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjZGNC8zQjhFMDJFNDc2 QjcxMUVEQjZFRDVCNUFDNEY5QUUwMi90bXFTZHctWTdXZFp5T1JYNlBBX0VFMlhW Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtcVNkdy1ZN1dkWnlPUlg2UEFfRUUyWFZnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI2RjQvM0I4RTAyRTQ3NkI3MTFFREI2RUQ1QjVBQzRGOUFFMDIvMEQwODZEOTQ3 NkJBMTFFREI2Q0IzMzVDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ2xSMA8EAgACMAkDBwAgAQ3xpMAwDQYJKoZIhvcNAQELBQADggEB AHjXffmw5jI6hr8pFP368//n8dA3LE1TDVs/58BMe3d3M5J3Qzv2Qgga7kcFRvri nefqKIyEGAVBOljqbfG3r4yqxZvmYFvr9BNaorT4qPsRJiwdrClJChP0JtFlhp0e iG3PlObNUW6JIqrGM4WnRpbyX5dE/FzfR5iUm9LeOH0Yb6NPHi4WssLj2Gz8PI0T XPl/gsyCPQChvgkqnP0aY6tQG/aZVhkpCNNTvit5uXIB852NjBgsbmVVSj18y94w 2OdgXMgwbPC6CsTQ2kRY1WyyBDOSH4mfw3VYME+3PJ+C4tquV8Z3H9t6nwygXbs9 6mlEywWKlNlRZ3E5gKyucq0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:17:52 2026 by rpki-client