$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/91BCF5D08E0811EE91C7BD62C4F9AE02.roa File: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (raw, json) Hash identifier: McXWsXXcIZmHr1+c7MXfi1yOdfqnkuMIhVjsAcxCbA0= Subject key identifier: 3A:B8:96:00:C7:D7:A3:1F:CA:E1:E0:45:60:BE:51:FF:4F:DB:8B:75 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 01B5 Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/91BCF5D08E0811EE91C7BD62C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:12:29 +0000 ROA not before: Wed 28 Jan 2026 07:46:41 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 150382 IP address blocks: 103.24.70.0/23 maxlen: 24 111.88.76.0/24 maxlen: 24 111.88.79.0/24 maxlen: 24 111.88.184.0/24 maxlen: 24 111.88.185.0/24 maxlen: 24 111.88.186.0/24 maxlen: 24 111.88.187.0/24 maxlen: 24 111.88.188.0/24 maxlen: 24 111.88.189.0/24 maxlen: 24 111.88.190.0/24 maxlen: 24 111.88.191.0/24 maxlen: 24 115.186.64.0/24 maxlen: 24 115.186.65.0/24 maxlen: 24 115.186.66.0/24 maxlen: 24 115.186.67.0/24 maxlen: 24 115.186.68.0/24 maxlen: 24 115.186.69.0/24 maxlen: 24 115.186.70.0/24 maxlen: 24 115.186.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Jan 28 07:46:41 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4656d-8f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:75:89:86:fc:a5:0a:1e:14:59:40:c0:11: 36:80:32:06:9e:c4:86:4e:2d:8e:76:69:a0:99:ff: ba:2c:06:09:c8:c8:1a:e5:7e:23:79:61:4b:b3:4a: 0c:42:24:0a:58:e2:47:6e:93:22:97:96:d7:57:b9: fa:9e:85:72:0a:1e:80:0e:72:b4:92:2f:59:1a:52: 95:91:fb:1c:4b:c4:6b:31:d4:6d:92:1e:c3:f2:a3: b3:93:ae:6d:d7:98:cf:aa:59:74:3c:89:a5:9b:7b: b3:6f:19:98:13:35:5b:73:f0:98:3e:01:a7:3e:61: d1:7f:06:56:ba:95:c1:7b:b2:f4:d3:47:e1:bf:1c: 68:02:1c:8e:79:c0:25:e3:9f:c0:02:d5:37:ba:92: 65:d3:33:4a:ca:7f:91:79:82:38:41:82:44:8f:0f: 45:3b:1d:0a:73:44:d1:28:92:72:e9:bd:e8:45:c6: a3:4d:18:5c:5d:cb:17:37:68:eb:ae:b7:f8:0f:f1: 05:65:78:17:69:c5:90:04:b7:4a:b6:0d:ef:e9:81: 3d:03:6a:49:e7:02:9f:02:3c:e9:f8:37:f0:8c:4c: 7c:0b:bf:75:67:9b:10:1d:43:db:12:d3:74:17:7d: fd:83:0a:87:e0:1e:90:7e:72:e7:e4:83:6b:2f:75: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B8:96:00:C7:D7:A3:1F:CA:E1:E0:45:60:BE:51:FF:4F:DB:8B:75 X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/91BCF5D08E0811EE91C7BD62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.70.0/23 111.88.76.0/24 111.88.79.0/24 111.88.184.0/21 115.186.64.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:d4:95:ec:fe:94:a5:6b:7c:cd:62:2c:46:79:3b:74:0d:3a: 31:d4:b2:48:4a:e3:d8:54:93:c7:fc:b2:96:e0:34:90:1f:4d: 39:90:8b:8f:aa:6a:4f:44:86:05:a2:1d:ee:6a:d6:d9:84:e7: 66:67:3d:f2:78:f6:db:1d:52:9e:bf:b5:bf:50:4f:f8:e1:37: f1:53:ac:72:2f:f2:d0:36:6c:8b:04:fb:d7:48:48:1f:a6:e0: 06:c0:fc:67:26:e7:29:26:ca:7e:91:2a:95:ca:61:11:e0:64: cd:60:38:d0:9f:a3:8b:95:c5:9f:1e:5c:96:1e:5f:6c:12:1d: ff:a4:84:81:27:3d:0e:92:af:d3:3b:e9:6c:f3:96:86:21:91: 7c:01:be:8d:d3:83:74:9f:6e:72:3c:a7:05:93:6c:94:4b:60: 0a:7b:48:79:15:c0:d4:0a:14:97:75:7d:8e:8f:49:8d:f1:53: 8f:ef:66:3a:a3:a2:f2:1d:03:c1:7d:04:51:7e:e7:5b:2f:94: d4:7e:6d:3b:31:e3:13:c6:a7:45:07:6b:28:e1:c9:6a:30:f2: 70:f9:28:e7:05:67:78:e7:d9:76:8d:b3:14:c7:54:fb:a3:8f: 3c:84:22:e8:a4:d0:46:77:3a:cc:78:cf:5c:7e:62:3a:fe:5a: 38:6d:63:45 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjYwMTI4MDc0NjQxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjU2ZC04ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1J1iYb8pQoeFFlAwBE2gDIGnsSGTi2Odmmgmf+6LAYJyMga5X4jeWFLs0oM QiQKWOJHbpMil5bXV7n6noVyCh6ADnK0ki9ZGlKVkfscS8RrMdRtkh7D8qOzk65t 15jPqll0PImlm3uzbxmYEzVbc/CYPgGnPmHRfwZWupXBe7L000fhvxxoAhyOecAl 45/AAtU3upJl0zNKyn+ReYI4QYJEjw9FOx0Kc0TRKJJy6b3oRcajTRhcXcsXN2jr rrf4D/EFZXgXacWQBLdKtg3v6YE9A2pJ5wKfAjzp+DfwjEx8C791Z5sQHUPbEtN0 F339gwqH4B6QfnLn5INrL3UsXQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFDq4lgDH 16MfyuHgRWC+Uf9P24t1MB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQ0MEIvNDYyNkJCMUE4RTA4MTFFRTlDOURFNDYxQzRGOUFFMDIvOTFCQ0Y1RDA4 RTA4MTFFRTkxQzdCRDYyQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBZxhGAwQAb1hMAwQAb1hPAwQDb1i4AwQDc7pAMA0GCSqGSIb3DQEB CwUAA4IBAQA61JXs/pSla3zNYixGeTt0DTox1LJISuPYVJPH/LKW4DSQH005kIuP qmpPRIYFoh3uatbZhOdmZz3yePbbHVKev7W/UE/44TfxU6xyL/LQNmyLBPvXSEgf puAGwPxnJucpJsp+kSqVymER4GTNYDjQn6OLlcWfHlyWHl9sEh3/pISBJz0Okq/T O+ls85aGIZF8Ab6N04N0n25yPKcFk2yUS2AKe0h5FcDUChSXdX2Oj0mN8VOP72Y6 o6LyHQPBfQRRfudbL5TUfm07MeMTxqdFB2so4clqMPJw+SjnBWd459l2jbMUx1T7 o488hCLopNBGdzrMeM9cfmI6/lo4bWNF -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:35 2026 by rpki-client