$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa File: B966D678C0C611EE8F5F0458C4F9AE02.roa (raw, json) Hash identifier: BSe/xrmnbVtCYEoOzBEdpUE2pH3SuWmeYFTTZjAJbc8= Subject key identifier: 4E:AC:B5:B6:D4:A0:48:7A:28:40:0C:84:78:BF:11:4E:65:8F:9F:D9 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 0259 Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:08:39 +0000 ROA not before: Fri 23 Jan 2026 01:22:18 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 150715 IP address blocks: 103.66.230.0/23 maxlen: 23 103.66.230.0/24 maxlen: 24 103.66.231.0/24 maxlen: 24 2001:df1:ce40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 601 (0x259) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Jan 23 01:22:18 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41027-4007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:79:40:c2:a3:eb:0a:22:be:8e:8c:66:5d: 6e:86:3a:3d:94:3c:7a:c4:3c:d8:80:1e:fa:0b:9d: a3:c2:16:57:2c:3c:e5:7c:a7:66:7d:09:a8:1d:3c: c9:45:7c:60:fd:b0:94:de:db:86:be:0f:5a:a6:a7: fe:15:91:4f:02:1c:40:5a:32:8e:12:01:f1:20:ac: dc:47:a2:5a:82:75:d6:11:67:c1:0e:fd:54:bd:31: 41:73:05:21:34:4e:69:7c:29:5d:e7:ca:cb:b8:89: 27:56:4c:c4:38:c2:d4:81:35:9a:32:6f:d0:a3:c9: d3:2c:a0:0c:4f:5c:52:b4:bc:c7:d4:86:93:04:f3: 4a:69:12:1a:4c:56:cd:73:0a:f0:39:f7:1a:b8:b3: 1c:63:6b:b0:ed:8b:14:52:0e:9d:51:7f:50:8a:3f: 7d:e6:93:d5:95:5e:04:18:91:f7:fe:14:60:aa:cc: 7b:b3:80:55:88:65:e4:26:9d:66:66:4c:a3:c2:57: af:3f:f5:6b:82:fa:f0:8d:02:f5:7a:20:fe:bd:43: f4:56:ea:89:27:2c:6f:77:8f:ce:26:59:4a:b8:be: 7e:3c:28:f9:f2:fb:30:bb:a8:4e:4d:5b:f3:73:5e: 55:db:1b:7d:1c:c8:12:dc:2d:4c:68:13:35:4e:23: 93:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AC:B5:B6:D4:A0:48:7A:28:40:0C:84:78:BF:11:4E:65:8F:9F:D9 X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/B966D678C0C611EE8F5F0458C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.66.230.0/23 IPv6: 2001:df1:ce40::/48 Signature Algorithm: sha256WithRSAEncryption 98:d0:9a:d2:97:1f:73:07:4c:69:8a:08:3e:47:44:16:4d:6c: 11:b3:b4:d3:1f:47:6c:34:f7:f0:1e:da:1e:d7:72:0b:79:54: ab:ec:ef:45:4c:cd:5b:65:88:91:db:f5:02:62:3c:26:bc:1c: 90:52:d7:48:f0:35:b8:8a:03:c0:de:9f:d2:b5:27:77:eb:a6: b6:59:91:c7:02:4a:f6:4e:5e:c0:9e:6b:d8:cc:d1:81:b3:f0: 47:f9:e1:61:cb:37:82:ad:29:c3:2a:d9:ab:f1:51:f1:07:0b: cc:60:68:7c:32:cb:44:4a:46:e4:6f:42:de:11:d0:ab:2e:47: c7:de:de:32:bf:4e:25:02:c4:53:63:10:d0:e2:f9:ea:c3:42: ba:ce:6b:79:6b:8e:ef:02:3a:d9:6b:62:9a:be:ae:50:1c:05: e6:c0:6d:21:ce:24:da:48:81:13:c8:62:95:7f:1b:38:45:aa: a1:44:6e:b7:99:c4:f7:bb:b1:e9:50:9a:46:38:00:ca:d3:24: 3c:b3:6e:15:cb:91:79:59:e7:09:cc:f4:74:d0:fb:31:47:e5: 92:7e:5f:c3:78:16:93:f1:18:c9:62:cf:dc:b6:49:12:25:c7: 80:3a:f3:81:6f:b0:fc:7e:b9:4f:29:87:65:26:7a:0c:aa:46: 16:f7:43:b0 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjYwMTIzMDEyMjE4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTAyNy00MDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3h5QMKj6woivo6MZl1uhjo9lDx6xDzYgB76C52jwhZXLDzlfKdmfQmoHTzJ RXxg/bCU3tuGvg9apqf+FZFPAhxAWjKOEgHxIKzcR6JagnXWEWfBDv1UvTFBcwUh NE5pfCld58rLuIknVkzEOMLUgTWaMm/Qo8nTLKAMT1xStLzH1IaTBPNKaRIaTFbN cwrwOfcauLMcY2uw7YsUUg6dUX9Qij995pPVlV4EGJH3/hRgqsx7s4BViGXkJp1m ZkyjwlevP/VrgvrwjQL1eiD+vUP0VuqJJyxvd4/OJllKuL5+PCj58vswu6hOTVvz c15V2xt9HMgS3C1MaBM1TiOTUQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFE6stbbU oEh6KEAMhHi/EU5lj5/ZMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMwQjgvRjFGODkwRjA5NjU5MTFFRDhDQzc4QTYwQzRGOUFFMDIvQjk2NkQ2NzhD MEM2MTFFRThGNUYwNDU4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ0LmMA8EAgACMAkDBwAgAQ3xzkAwDQYJKoZIhvcNAQELBQADggEB AJjQmtKXH3MHTGmKCD5HRBZNbBGztNMfR2w09/Ae2h7Xcgt5VKvs70VMzVtliJHb 9QJiPCa8HJBS10jwNbiKA8Den9K1J3frprZZkccCSvZOXsCea9jM0YGz8Ef54WHL N4KtKcMq2avxUfEHC8xgaHwyy0RKRuRvQt4R0KsuR8fe3jK/TiUCxFNjENDi+erD QrrOa3lrju8COtlrYpq+rlAcBebAbSHOJNpIgRPIYpV/GzhFqqFEbreZxPe7selQ mkY4AMrTJDyzbhXLkXlZ5wnM9HTQ+zFH5ZJ+X8N4FpPxGMliz9y2SRIlx4A684Fv sPx+uU8ph2UmegyqRhb3Q7A= -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:25 2026 by rpki-client