$ rpki-client -vvf rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/6FEF33E05C2B11EAAE63403FC4F9AE02.roa File: 6FEF33E05C2B11EAAE63403FC4F9AE02.roa (raw, json) Hash identifier: B0MwvTpAg5W6wPRcDcSU74/8QNU8Daja2GzwEix8B2Y= Subject key identifier: 18:4E:D7:F5:EB:40:41:5A:FC:95:16:68:07:66:0A:81:01:61:EA:26 Certificate issuer: /CN=A91867F1/serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Certificate serial: 0B25 Authority key identifier: B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/6FEF33E05C2B11EAAE63403FC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:27:48 +0000 ROA not before: Tue 18 Feb 2025 20:38:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132054 IP address blocks: 103.148.224.0/23 maxlen: 23 103.148.224.0/24 maxlen: 24 103.148.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2853 (0xb25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91867F1, serialNumber=B3931B568F2EB9D2ED2CA4D64BEBC086FB9DB89A Validity Not Before: Feb 18 20:38:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a40694-fc55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:87:25:a4:f2:5d:96:11:ff:3c:63:eb:3c: b3:be:c2:1f:cb:b6:a2:10:9d:47:25:8e:82:f8:b3: a8:c6:4f:f2:3d:76:d2:40:6c:a6:ab:9a:0d:ba:cb: 20:7e:1f:f7:1f:80:8d:07:b8:b5:5d:b6:25:02:78: 76:43:b6:30:61:eb:b2:31:77:32:56:42:d5:03:5e: 24:d9:2f:98:39:f4:c1:2b:ca:51:32:48:dd:99:3b: 3b:1a:8f:66:75:39:a8:35:36:5e:8a:93:58:a5:e3: 7e:06:f2:9b:b4:35:62:a2:65:52:89:40:d3:c2:26: 53:a0:45:3c:a2:5d:54:80:f1:b7:7c:28:b5:f5:12: 50:3b:ab:b6:6d:3b:54:c0:9d:6a:4a:29:15:31:00: 31:0d:33:9d:55:34:af:c6:8a:03:40:fe:56:c9:63: 8b:a9:72:f7:b8:0f:08:df:fd:d6:8d:de:72:77:8b: 1f:9a:70:71:a8:ed:4f:be:5a:f7:f1:d3:a5:3e:34: 57:9f:0c:74:79:d0:ba:d6:4f:0e:54:f5:2b:23:53: cc:31:ce:a4:9d:86:80:d6:0e:d8:66:80:bc:3e:71: 9b:c2:84:8f:de:7d:0a:8a:58:f5:27:9e:97:29:52: 20:5b:d3:b0:09:26:d9:1c:cf:f8:2e:2c:08:8c:77: 70:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4E:D7:F5:EB:40:41:5A:FC:95:16:68:07:66:0A:81:01:61:EA:26 X509v3 Authority Key Identifier: keyid:B3:93:1B:56:8F:2E:B9:D2:ED:2C:A4:D6:4B:EB:C0:86:FB:9D:B8:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/s5MbVo8uudLtLKTWS-vAhvuduJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s5MbVo8uudLtLKTWS-vAhvuduJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91867F1/809D715C591A11EA9692AA3CC4F9AE02/6FEF33E05C2B11EAAE63403FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.224.0/23 Signature Algorithm: sha256WithRSAEncryption 79:b2:63:38:53:a7:00:5d:6a:28:1e:7b:ba:fa:06:9c:40:21: 65:5a:21:11:5a:1d:b9:67:e1:c2:24:93:db:2c:ec:16:6e:0b: f1:d4:0f:b2:f1:f5:81:31:cf:3f:d5:33:67:b8:e8:8d:c2:cc: 59:4d:ce:73:9c:8c:1b:47:bf:c8:9b:48:be:08:45:63:db:99: 27:0c:d5:a8:cb:f2:79:d3:46:9f:cf:1e:86:55:0b:24:af:c7: 0c:c1:4e:f7:57:bb:0f:42:c8:2c:fd:30:63:e4:24:0e:5c:b0: f6:3f:27:58:ea:85:34:ac:18:64:03:49:f8:93:a3:11:2f:d5: bc:45:70:b8:f5:8a:c8:61:ad:38:c9:34:42:06:d7:2f:6a:ba: c3:f9:31:96:fd:44:fc:15:7f:3d:90:40:7d:b5:37:d2:25:4e: 92:8c:a7:f4:e0:ec:f2:e7:4d:bb:72:0f:80:6a:b1:29:f6:51: ae:bc:4b:c7:bc:e2:60:1e:d5:22:e4:c4:2d:19:db:e8:a5:1e: 4d:90:ca:4c:8c:91:63:30:25:4f:02:2b:47:4f:c4:9a:7b:e7: 78:36:68:d5:54:a1:a7:fa:b1:fc:a4:89:96:5b:d9:d9:b7:31: cb:9d:74:97:b4:15:d2:c5:de:aa:7c:48:34:a1:2d:93:8d:c5: e2:fa:47:b0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY3RjExMTAvBgNVBAUTKEIzOTMxQjU2OEYyRUI5RDJFRDJDQTRENjRCRUJDMDg2 RkI5REI4OUEwHhcNMjUwMjE4MjAzODI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDY5NC1mYzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/SHJaTyXZYR/zxj6zyzvsIfy7aiEJ1HJY6C+LOoxk/yPXbSQGymq5oNussg fh/3H4CNB7i1XbYlAnh2Q7YwYeuyMXcyVkLVA14k2S+YOfTBK8pRMkjdmTs7Go9m dTmoNTZeipNYpeN+BvKbtDViomVSiUDTwiZToEU8ol1UgPG3fCi19RJQO6u2bTtU wJ1qSikVMQAxDTOdVTSvxooDQP5WyWOLqXL3uA8I3/3Wjd5yd4sfmnBxqO1Pvlr3 8dOlPjRXnwx0edC61k8OVPUrI1PMMc6knYaA1g7YZoC8PnGbwoSP3n0Kilj1J56X KVIgW9OwCSbZHM/4LiwIjHdwQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBhO1/Xr QEFa/JUWaAdmCoEBYeomMB8GA1UdIwQYMBaAFLOTG1aPLrnS7Syk1kvrwIb7nbia MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjdGMS84MDlENzE1QzU5 MUExMUVBOTY5MkFBM0NDNEY5QUUwMi9zNU1iVm84dXVkTHRMS1RXUy12QWh2dWR1 Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M1TWJWbzh1dWRMdExLVFdTLXZBaHZ1ZHVKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY3RjEvODA5RDcxNUM1OTFBMTFFQTk2OTJBQTNDQzRGOUFFMDIvNkZFRjMzRTA1 QzJCMTFFQUFFNjM0MDNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5TgMA0GCSqGSIb3DQEBCwUAA4IBAQB5smM4U6cAXWooHnu6+gac QCFlWiERWh25Z+HCJJPbLOwWbgvx1A+y8fWBMc8/1TNnuOiNwsxZTc5znIwbR7/I m0i+CEVj25knDNWoy/J500afzx6GVQskr8cMwU73V7sPQsgs/TBj5CQOXLD2PydY 6oU0rBhkA0n4k6MRL9W8RXC49YrIYa04yTRCBtcvarrD+TGW/UT8FX89kEB9tTfS JU6SjKf04Ozy5027cg+AarEp9lGuvEvHvOJgHtUi5MQtGdvopR5NkMpMjJFjMCVP AitHT8Sae+d4NmjVVKGn+rH8pImWW9nZtzHLnXSXtBXSxd6qfEg0oS2TjcXi+kew -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:30 2026 by rpki-client