$ rpki-client -vvf rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa File: DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa (raw, json) Hash identifier: FFWol5YnwfZP+TKiyDIT69Kx3yIeCa0SCkT1OePuq3I= Subject key identifier: B1:63:45:9B:4B:78:03:5E:A6:52:84:E1:49:0A:0A:7F:FA:13:51:E4 Certificate issuer: /CN=A91570C9/serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Certificate serial: 020A Authority key identifier: 8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:16:28 +0000 ROA not before: Sat 17 May 2025 03:42:20 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 151359 IP address blocks: 103.160.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91570C9, serialNumber=8E146A47FE62D09A3266CE083A579CAD13A58066 Validity Not Before: May 17 03:42:20 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3f5db-596b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:2d:e0:99:33:26:ed:fc:4a:3f:c4:ac:ef: 63:70:e1:32:05:b7:f2:b0:28:d6:f6:a1:d4:41:5f: b3:97:50:0a:8e:3a:5a:ad:fe:3c:bd:5e:43:a0:cc: ea:bd:0e:48:e2:b1:58:2e:e8:2e:61:de:d0:a1:0c: 17:0e:46:dc:6e:d9:0f:c2:c6:06:5d:06:ad:23:10: 9a:5b:c8:63:f3:86:14:d1:83:41:11:2d:0d:ea:89: f9:46:93:2d:c0:7e:cd:92:7c:95:bc:05:d9:c0:86: 6b:95:9e:33:c2:ab:56:02:67:3e:f9:2f:d1:60:3a: aa:d3:af:7f:cf:1e:d4:a3:ee:b7:af:b3:59:7e:a1: b5:da:37:07:44:8f:63:34:17:4d:b4:77:a5:4f:e3: 22:f1:f4:fd:c6:7b:a4:a8:bc:14:31:00:49:d6:67: 1a:da:ea:a5:c1:3a:bf:da:cb:c2:aa:bb:85:50:e7: 26:63:68:58:3c:bc:09:27:21:04:05:89:89:75:84: 86:48:6c:10:ea:90:43:12:44:b6:b0:bd:e9:ad:f5: 46:e1:93:29:c6:a3:21:01:d4:6d:bb:24:0c:4c:ce: 7f:eb:2e:bf:2f:95:00:cf:74:eb:ec:e8:ef:fd:a3: 51:f8:32:be:ca:82:47:17:40:2c:66:84:5f:70:f2: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:63:45:9B:4B:78:03:5E:A6:52:84:E1:49:0A:0A:7F:FA:13:51:E4 X509v3 Authority Key Identifier: keyid:8E:14:6A:47:FE:62:D0:9A:32:66:CE:08:3A:57:9C:AD:13:A5:80:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/jhRqR_5i0JoyZs4IOlecrROlgGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhRqR_5i0JoyZs4IOlecrROlgGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91570C9/0227B9AEFA2511EDA7027010C4F9AE02/DFFEC4ECFA2B11ED89B90A2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.160.0.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:6a:2f:f1:e0:5e:4f:8a:4a:c4:22:7e:0f:7d:27:c2:09:61: d3:94:e3:31:07:70:33:d4:6d:5e:0a:92:46:8f:9c:62:ba:88: 96:47:22:f2:dd:ec:46:c0:34:85:ce:13:e1:49:b6:57:3f:2b: 1b:2f:a0:4b:5e:cc:f8:db:11:f5:59:ec:ef:7b:83:59:86:a7: 50:cc:43:93:6c:0d:5e:dd:ec:a7:e8:a0:cf:b9:b2:de:f6:cb: 1e:29:e7:76:55:87:8e:33:9f:6c:30:28:ff:15:ac:a2:b4:e2: a2:89:e1:0a:79:5e:64:4c:cd:13:2d:61:69:4b:a3:ba:54:24: 26:9d:8c:4d:63:b5:cf:aa:9a:68:11:97:7c:78:ad:86:b0:6a: bd:c1:b2:b9:64:e0:d9:7f:fa:63:4f:10:67:06:63:80:1c:7a: 83:4d:38:3d:11:a0:c3:6d:8e:29:b6:82:a3:a5:9a:89:dc:6c: 82:d1:25:65:55:18:8d:bf:0c:e8:39:30:32:78:95:60:58:8b: 7d:3e:81:6f:82:17:2f:15:33:8e:33:2f:93:18:fc:de:85:34: a1:8a:a9:7b:f8:39:1f:14:cb:35:8d:86:b6:b8:a1:38:b2:68: 9a:23:58:d7:a4:e0:60:cd:75:71:1c:18:04:d6:5c:a5:61:e5: 87:c8:43:fa -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTcwQzkxMTAvBgNVBAUTKDhFMTQ2QTQ3RkU2MkQwOUEzMjY2Q0UwODNBNTc5Q0FE MTNBNTgwNjYwHhcNMjUwNTE3MDM0MjIwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjVkYi01OTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx7It4JkzJu38Sj/ErO9jcOEyBbfysCjW9qHUQV+zl1AKjjparf48vV5DoMzq vQ5I4rFYLuguYd7QoQwXDkbcbtkPwsYGXQatIxCaW8hj84YU0YNBES0N6on5RpMt wH7NknyVvAXZwIZrlZ4zwqtWAmc++S/RYDqq069/zx7Uo+63r7NZfqG12jcHRI9j NBdNtHelT+Mi8fT9xnukqLwUMQBJ1mca2uqlwTq/2svCqruFUOcmY2hYPLwJJyEE BYmJdYSGSGwQ6pBDEkS2sL3prfVG4ZMpxqMhAdRtuyQMTM5/6y6/L5UAz3Tr7Ojv /aNR+DK+yoJHF0AsZoRfcPJd4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLFjRZtL eANeplKE4UkKCn/6E1HkMB8GA1UdIwQYMBaAFI4Uakf+YtCaMmbOCDpXnK0TpYBm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzBDOS8wMjI3QjlBRUZB MjUxMUVEQTcwMjcwMTBDNEY5QUUwMi9qaFJxUl81aTBKb3laczRJT2xlY3JST2xn R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2poUnFSXzVpMEpveVpzNElPbGVjclJPbGdHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTcwQzkvMDIyN0I5QUVGQTI1MTFFREE3MDI3MDEwQzRGOUFFMDIvREZGRUM0RUNG QTJCMTFFRDg5QjkwQTJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6AAMA0GCSqGSIb3DQEBCwUAA4IBAQA6ai/x4F5PikrEIn4PfSfC CWHTlOMxB3Az1G1eCpJGj5xiuoiWRyLy3exGwDSFzhPhSbZXPysbL6BLXsz42xH1 Wezve4NZhqdQzEOTbA1e3eyn6KDPubLe9sseKed2VYeOM59sMCj/FayitOKiieEK eV5kTM0TLWFpS6O6VCQmnYxNY7XPqppoEZd8eK2GsGq9wbK5ZODZf/pjTxBnBmOA HHqDTTg9EaDDbY4ptoKjpZqJ3GyC0SVlVRiNvwzoOTAyeJVgWIt9PoFvghcvFTOO My+TGPzehTShiql7+DkfFMs1jYa2uKE4smiaI1jXpOBgzXVxHBgE1lylYeWHyEP6 -----END CERTIFICATE-----Generated at Mon Mar 2 20:15:20 2026 by rpki-client