$ rpki-client -vvf rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa File: B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa (raw, json) Hash identifier: 145MNVXkN1NCb/lHfvK7TOxcT8rHdAXVTu1hEwZJ0U4= Subject key identifier: 82:4A:62:C7:B8:76:90:37:DE:53:8F:C6:3A:27:44:F1:E1:02:14:57 Certificate issuer: /CN=A91228BC/serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Certificate serial: 0639 Authority key identifier: 98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:38:16 +0000 ROA not before: Wed 13 Aug 2025 00:05:58 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 142559 IP address blocks: 103.169.98.0/24 maxlen: 24 103.169.99.0/24 maxlen: 24 2001:df6:f580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1593 (0x639) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91228BC, serialNumber=98B5C6147618FCB64C214DCCC0777413087E9770 Validity Not Before: Aug 13 00:05:58 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a43338-2470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:41:5c:25:ef:ac:f7:e2:2b:b7:67:88:84: 71:69:f9:fa:64:f4:90:b2:6b:e2:ea:18:4d:18:ac: 67:a5:12:1d:54:1f:b1:5a:56:8a:6c:29:4d:ad:b9: 59:b8:f0:2e:16:46:5f:b8:a8:66:58:1d:7e:ac:13: 79:8f:d3:6e:d2:f3:89:f4:7a:8a:70:10:db:42:f7: 2d:ea:2d:d2:36:3e:c8:96:c1:64:1e:f4:d0:0b:ad: cd:5d:8d:24:84:40:df:4e:11:39:92:da:1e:0a:36: b4:c6:b9:1a:3d:ae:a9:fb:70:75:04:e0:83:63:02: c0:44:a5:f1:cd:4f:e9:71:65:be:49:2b:05:b6:fe: ad:b5:aa:98:09:00:4e:80:ae:fa:48:8a:28:67:80: 5e:ad:b5:13:e0:64:b8:9f:db:0a:3c:93:c9:70:b7: a4:99:fc:82:38:ef:6d:6e:8c:08:34:00:70:c1:4b: b5:b1:d0:cd:ef:c1:2f:ed:68:29:25:31:1d:2b:fa: 0a:0d:ee:a0:62:ef:4d:2f:51:ac:fb:ec:f0:fe:30: b6:bd:5c:57:8e:f9:48:02:bd:01:6f:33:75:11:f9: 3b:55:b5:5a:70:da:0d:10:9a:49:35:54:d1:45:44: 95:b5:3c:34:1b:33:cf:ce:17:29:76:9d:90:87:f9: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:62:C7:B8:76:90:37:DE:53:8F:C6:3A:27:44:F1:E1:02:14:57 X509v3 Authority Key Identifier: keyid:98:B5:C6:14:76:18:FC:B6:4C:21:4D:CC:C0:77:74:13:08:7E:97:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLXGFHYY_LZMIU3MwHd0Ewh-l3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91228BC/0E7D64D6DF0D11EBB1130D81C4F9AE02/B2C8CBDE5EDA11EFBFA8A226C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.169.98.0/23 IPv6: 2001:df6:f580::/48 Signature Algorithm: sha256WithRSAEncryption a5:3d:31:81:c7:23:20:f1:cd:dc:01:67:43:f5:0b:51:19:7f: 4b:32:20:aa:1c:3f:e6:e4:4b:db:71:44:43:90:98:f1:06:80: 2e:c6:0c:2d:81:b7:f3:ce:9a:24:e6:dc:46:c5:48:c5:41:4a: 10:72:35:06:d2:6f:7c:0c:12:dd:cc:a0:ee:ff:98:18:31:d9: 79:01:d1:c8:a1:87:50:68:8b:19:24:81:0e:d1:77:ea:a7:a4: 02:e4:e9:bf:de:83:f0:7b:14:b7:6f:84:19:a5:56:fc:65:83: 8c:46:b0:4e:60:0d:c0:d8:66:53:4a:3c:73:08:5d:27:20:c5: 7d:87:95:f3:9e:e8:e4:9a:c4:0c:a9:a0:ed:10:23:24:9e:bd: d1:35:16:f1:29:b9:99:d3:28:2d:ef:e1:9d:65:7c:4f:0f:40: 55:d0:2a:38:de:a2:bd:bb:da:80:1f:ef:56:ae:dd:af:0d:8c: 1d:e3:1f:e6:73:18:31:b8:89:b3:ce:33:1e:7c:74:d4:5a:0c: 98:5c:6c:68:85:01:ce:a6:d5:35:85:6a:8f:a1:d5:bc:31:c2: ca:27:9f:c5:eb:ef:ad:4b:ff:77:77:ae:6e:89:45:f2:0d:79: 79:3c:03:66:ee:09:70:94:a6:52:fb:b8:f2:61:28:cf:8a:90: ee:c9:c1:56 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI4QkMxMTAvBgNVBAUTKDk4QjVDNjE0NzYxOEZDQjY0QzIxNERDQ0MwNzc3NDEz MDg3RTk3NzAwHhcNMjUwODEzMDAwNTU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzMzOC0yNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHRBXCXvrPfiK7dniIRxafn6ZPSQsmvi6hhNGKxnpRIdVB+xWlaKbClNrblZ uPAuFkZfuKhmWB1+rBN5j9Nu0vOJ9HqKcBDbQvct6i3SNj7IlsFkHvTQC63NXY0k hEDfThE5ktoeCja0xrkaPa6p+3B1BOCDYwLARKXxzU/pcWW+SSsFtv6ttaqYCQBO gK76SIooZ4BerbUT4GS4n9sKPJPJcLekmfyCOO9tbowINABwwUu1sdDN78Ev7Wgp JTEdK/oKDe6gYu9NL1Gs++zw/jC2vVxXjvlIAr0BbzN1Efk7VbVacNoNEJpJNVTR RUSVtTw0GzPPzhcpdp2Qh/mWoQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIJKYse4 dpA33lOPxjonRPHhAhRXMB8GA1UdIwQYMBaAFJi1xhR2GPy2TCFNzMB3dBMIfpdw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjhCQy8wRTdENjRENkRG MEQxMUVCQjExMzBEODFDNEY5QUUwMi9tTFhHRkhZWV9MWk1JVTNNd0hkMEV3aC1s M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21MWEdGSFlZX0xaTUlVM013SGQwRXdoLWwzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI4QkMvMEU3RDY0RDZERjBEMTFFQkIxMTMwRDgxQzRGOUFFMDIvQjJDOENCREU1 RURBMTFFRkJGQThBMjI2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6liMA8EAgACMAkDBwAgAQ329YAwDQYJKoZIhvcNAQELBQADggEB AKU9MYHHIyDxzdwBZ0P1C1EZf0syIKocP+bkS9txREOQmPEGgC7GDC2Bt/POmiTm 3EbFSMVBShByNQbSb3wMEt3MoO7/mBgx2XkB0cihh1BoixkkgQ7Rd+qnpALk6b/e g/B7FLdvhBmlVvxlg4xGsE5gDcDYZlNKPHMIXScgxX2HlfOe6OSaxAypoO0QIySe vdE1FvEpuZnTKC3v4Z1lfE8PQFXQKjjeor272oAf71au3a8NjB3jH+ZzGDG4ibPO Mx58dNRaDJhcbGiFAc6m1TWFao+h1bwxwsonn8Xr761L/3d3rm6JRfINeXk8A2bu CXCUplL7uPJhKM+KkO7JwVY= -----END CERTIFICATE-----Generated at Mon Mar 2 06:06:37 2026 by rpki-client