$ rpki-client -vvf rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/41789B66CC1611EC80603209C4F9AE02.roa File: 41789B66CC1611EC80603209C4F9AE02.roa (raw, json) Hash identifier: x8CNlILI4xwGzQizPMapiMVh5w4V5MvV0nMmJ++GLls= Subject key identifier: C0:B5:12:84:86:56:70:22:FA:7B:8A:CC:DD:99:AA:AA:09:54:16:3C Certificate issuer: /CN=A91789F9/serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Certificate serial: 03B9 Authority key identifier: 5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/41789B66CC1611EC80603209C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:25:50 +0000 ROA not before: Mon 29 Sep 2025 01:28:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 58606 IP address blocks: 103.196.68.0/24 maxlen: 24 103.196.69.0/24 maxlen: 24 103.196.70.0/24 maxlen: 24 103.196.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 953 (0x3b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91789F9, serialNumber=5BA8D05DC99A9310462C63C5D0269F5E885E489D Validity Not Before: Sep 29 01:28:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44c6d-232e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:43:8f:8a:d5:66:80:62:11:ee:20:e5:3d:b5: 0d:4d:35:73:78:b7:a6:c0:88:f3:bf:ed:74:68:3f: e9:cb:90:27:51:b6:29:9c:a9:59:61:6a:7b:f8:53: 95:f4:10:bc:de:d5:e2:53:ab:35:be:b3:40:c5:e7: 07:90:21:e3:af:b9:fa:65:1d:4d:33:74:28:de:b7: 8f:7d:1b:ce:05:46:3b:0d:e0:b5:78:f8:f5:c8:da: 5c:08:b5:6e:27:31:0e:36:25:4d:d0:c9:fa:9f:40: e2:de:38:7c:08:7f:bd:f7:d9:a8:93:cf:fb:cd:ca: b2:2e:05:36:c2:34:94:8e:ea:50:8b:e2:24:6e:cc: be:05:15:89:a1:29:f0:b1:4d:57:21:0c:ab:af:29: 1a:56:f1:32:e2:84:d9:80:b7:08:7a:d8:4e:bb:6e: cd:41:fc:9f:29:40:95:97:e7:82:98:a0:84:67:f8: f3:17:eb:88:25:66:31:bd:7e:92:df:2d:0d:89:ee: 3c:0a:46:cb:f1:8a:cb:eb:84:c8:bc:4d:5a:90:7e: 74:45:6f:8f:e0:31:65:28:f0:af:3d:ea:fb:c5:70: 7a:93:f6:f7:66:d4:98:a3:ce:0f:72:40:59:39:21: aa:02:2a:35:98:8f:dc:74:30:96:f4:31:ac:2b:eb: bb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B5:12:84:86:56:70:22:FA:7B:8A:CC:DD:99:AA:AA:09:54:16:3C X509v3 Authority Key Identifier: keyid:5B:A8:D0:5D:C9:9A:93:10:46:2C:63:C5:D0:26:9F:5E:88:5E:48:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/W6jQXcmakxBGLGPF0CafXoheSJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6jQXcmakxBGLGPF0CafXoheSJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91789F9/FD806BA2CC1311EC827A2687C4F9AE02/41789B66CC1611EC80603209C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.196.68.0/22 Signature Algorithm: sha256WithRSAEncryption 16:81:75:aa:6f:ec:e1:be:88:14:ee:83:6b:b0:29:46:26:3f: 80:24:48:21:d2:bd:d5:c0:c9:4c:af:8b:7a:08:64:c7:ec:bd: 13:51:83:21:50:73:5c:a8:e9:82:92:32:7e:b9:38:94:52:b3: 8b:67:96:73:67:a7:13:e8:af:99:92:6f:55:18:bc:21:6e:74: b1:d0:8a:99:35:64:1d:eb:72:25:59:b9:5f:76:47:3a:44:a3: bd:b0:e4:8a:c6:ef:8c:2f:84:d1:28:48:85:4a:4a:25:03:84: e8:43:b8:cd:f8:e0:f1:75:b9:32:0c:6a:ca:7a:84:98:c0:7e: 7e:0e:c0:ab:50:85:bb:86:fa:b9:fe:98:c5:4e:8b:4f:5b:96: 80:53:d9:5e:f4:75:22:6f:f1:55:e0:56:f3:04:48:b1:88:29: 68:09:ad:4f:20:0f:f8:12:a2:d3:01:a7:b6:3c:1a:ae:82:1d: 86:e5:bc:90:c2:4f:61:f6:e8:ec:67:62:2c:9a:c4:83:e5:c1: 26:e5:de:25:e7:58:19:7d:e7:fe:1e:90:b0:d1:93:de:16:64: 07:30:80:b7:0a:22:24:40:08:19:e2:c3:d3:0a:d7:a4:ce:08: 60:5d:fd:02:10:92:15:46:15:01:a2:07:4b:0d:67:1c:26:35: dd:76:d1:35 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzg5RjkxMTAvBgNVBAUTKDVCQThEMDVEQzk5QTkzMTA0NjJDNjNDNUQwMjY5RjVF ODg1RTQ4OUQwHhcNMjUwOTI5MDEyODI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGM2ZC0yMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUOPitVmgGIR7iDlPbUNTTVzeLemwIjzv+10aD/py5AnUbYpnKlZYWp7+FOV 9BC83tXiU6s1vrNAxecHkCHjr7n6ZR1NM3Qo3rePfRvOBUY7DeC1ePj1yNpcCLVu JzEONiVN0Mn6n0Di3jh8CH+999mok8/7zcqyLgU2wjSUjupQi+Ikbsy+BRWJoSnw sU1XIQyrrykaVvEy4oTZgLcIethOu27NQfyfKUCVl+eCmKCEZ/jzF+uIJWYxvX6S 3y0Nie48CkbL8YrL64TIvE1akH50RW+P4DFlKPCvPer7xXB6k/b3ZtSYo84PckBZ OSGqAio1mI/cdDCW9DGsK+u7jwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMC1EoSG VnAi+nuKzN2ZqqoJVBY8MB8GA1UdIwQYMBaAFFuo0F3JmpMQRixjxdAmn16IXkid MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODlGOS9GRDgwNkJBMkND MTMxMUVDODI3QTI2ODdDNEY5QUUwMi9XNmpRWGNtYWt4QkdMR1BGMENhZlhvaGVT SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2alFYY21ha3hCR0xHUEYwQ2FmWG9oZVNKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzg5RjkvRkQ4MDZCQTJDQzEzMTFFQzgyN0EyNjg3QzRGOUFFMDIvNDE3ODlCNjZD QzE2MTFFQzgwNjAzMjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ8REMA0GCSqGSIb3DQEBCwUAA4IBAQAWgXWqb+zhvogU7oNrsClG Jj+AJEgh0r3VwMlMr4t6CGTH7L0TUYMhUHNcqOmCkjJ+uTiUUrOLZ5ZzZ6cT6K+Z km9VGLwhbnSx0IqZNWQd63IlWblfdkc6RKO9sOSKxu+ML4TRKEiFSkolA4ToQ7jN +ODxdbkyDGrKeoSYwH5+DsCrUIW7hvq5/pjFTotPW5aAU9le9HUib/FV4FbzBEix iCloCa1PIA/4EqLTAae2PBqugh2G5byQwk9h9ujsZ2IsmsSD5cEm5d4l51gZfef+ HpCw0ZPeFmQHMIC3CiIkQAgZ4sPTCtekzghgXf0CEJIVRhUBogdLDWccJjXddtE1 -----END CERTIFICATE-----Generated at Mon Mar 2 07:25:56 2026 by rpki-client