$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/870C2B58B47811E788EC7E65C4F9AE02.roa File: 870C2B58B47811E788EC7E65C4F9AE02.roa (raw, json) Hash identifier: 6xlKJ/tgCn9Gr5JUQHkedm0+Y56LHFXTYQ4StdZJ2Gk= Subject key identifier: 24:C9:31:4F:70:24:96:ED:B6:9C:0D:C9:2E:0C:3A:B0:08:9D:C1:0C Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Certificate serial: 18A2 Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/870C2B58B47811E788EC7E65C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:15:52 +0000 ROA not before: Thu 06 Mar 2025 16:35:09 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136404 IP address blocks: 103.86.184.0/22 maxlen: 22 103.86.184.0/24 maxlen: 24 103.86.185.0/24 maxlen: 24 103.86.186.0/24 maxlen: 24 103.86.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6306 (0x18a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Validity Not Before: Mar 6 16:35:09 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a403c7-060a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:0c:ef:6c:b4:93:73:3e:a0:04:27:35:84: ce:56:57:98:1e:36:94:81:34:5e:16:7a:6a:27:f2: cf:05:74:8d:8c:91:11:b9:ae:a3:94:6c:f3:e0:39: 5a:02:07:b1:07:f5:01:eb:25:9a:e1:b0:2e:49:0f: f4:0a:a4:25:c2:07:1f:d9:60:04:f3:a2:f7:77:c9: 0f:a2:a2:ef:05:04:da:48:6b:89:32:17:47:e5:19: 4a:55:cc:2c:be:7d:1f:d0:d6:56:57:db:46:2d:05: 61:d4:77:12:a9:1b:8b:9a:8a:33:50:6d:35:d6:34: 3b:f1:fa:78:81:fc:61:e6:33:b5:c3:99:ef:ec:ec: 3e:7d:6e:96:c5:c4:1e:46:b5:b3:5e:ad:9f:6c:08: c3:a9:d8:67:3c:5e:73:42:79:a4:70:85:3f:7d:93: c5:25:40:89:0b:35:cf:75:d6:7b:67:76:51:a1:9f: 97:3a:62:49:01:87:63:69:e0:e2:cc:55:c2:67:10: e1:40:c2:04:84:ea:98:aa:be:b8:78:be:c7:3f:0e: 92:36:d5:57:a0:5d:54:e6:b9:6c:70:1b:ae:a7:ec: 39:01:cc:87:f1:b1:4e:40:3a:97:eb:c6:91:27:d7: 27:8c:a0:64:73:8f:17:97:77:64:01:a1:4a:28:d8: c6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C9:31:4F:70:24:96:ED:B6:9C:0D:C9:2E:0C:3A:B0:08:9D:C1:0C X509v3 Authority Key Identifier: keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/870C2B58B47811E788EC7E65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.184.0/22 Signature Algorithm: sha256WithRSAEncryption 93:cd:c4:92:ec:5a:70:e9:f2:5e:54:94:aa:af:1c:d5:0b:64: 01:84:2b:34:3f:3b:9f:5f:74:79:5b:e4:b2:05:fd:f9:32:45: 1e:a2:28:60:a7:77:bb:0a:45:f8:f1:b8:9f:28:bf:c0:6f:1f: 81:0f:4e:a6:50:64:65:2a:6f:07:33:cb:f2:03:b2:6a:d6:af: f7:4e:db:aa:52:21:78:97:25:cd:73:cb:67:5d:66:24:08:94: 5e:e6:f9:66:27:2a:41:b7:2e:3f:95:19:f6:37:b7:52:85:12: 7a:e2:28:d8:c7:48:82:8a:f3:5c:2d:1e:d4:a7:ad:6f:db:b0: 4e:80:ed:ce:8c:de:39:03:0e:73:cc:c5:0e:6a:9c:b8:c6:06: f5:98:3c:b4:00:09:aa:39:49:fa:98:62:a8:04:e3:f8:3d:19: 2a:e1:07:50:a5:30:6c:41:dc:96:bd:5e:9b:e9:87:b1:c1:d2: 66:b5:2b:49:78:a2:78:1f:c5:fb:e1:7c:a5:b5:e9:6e:76:48: 06:1f:04:f4:f9:4e:61:b7:a9:da:1b:d1:77:d7:35:3c:4b:e0: 0d:bc:0f:cf:b9:4b:96:3b:18:a7:3a:bf:58:92:4d:11:79:18: 1d:2c:81:54:e7:2f:7d:60:26:1f:39:84:09:85:4b:90:ee:0e: 3c:f6:77:31 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2 QTExQjQ1MDUwHhcNMjUwMzA2MTYzNTA5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDNjNy0wNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIAM72y0k3M+oAQnNYTOVleYHjaUgTReFnpqJ/LPBXSNjJERua6jlGzz4Dla AgexB/UB6yWa4bAuSQ/0CqQlwgcf2WAE86L3d8kPoqLvBQTaSGuJMhdH5RlKVcws vn0f0NZWV9tGLQVh1HcSqRuLmoozUG011jQ78fp4gfxh5jO1w5nv7Ow+fW6WxcQe RrWzXq2fbAjDqdhnPF5zQnmkcIU/fZPFJUCJCzXPddZ7Z3ZRoZ+XOmJJAYdjaeDi zFXCZxDhQMIEhOqYqr64eL7HPw6SNtVXoF1U5rlscBuup+w5AcyH8bFOQDqX68aR J9cnjKBkc48Xl3dkAaFKKNjGvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCTJMU9w JJbttpwNyS4MOrAIncEMMB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0 NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODgxRDkvRDg5QkIzMEVCNDc3MTFFN0FENTRCNjY0QzRGOUFFMDIvODcwQzJCNThC NDc4MTFFNzg4RUM3RTY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ1a4MA0GCSqGSIb3DQEBCwUAA4IBAQCTzcSS7Fpw6fJeVJSqrxzV C2QBhCs0PzufX3R5W+SyBf35MkUeoihgp3e7CkX48bifKL/Abx+BD06mUGRlKm8H M8vyA7Jq1q/3TtuqUiF4lyXNc8tnXWYkCJRe5vlmJypBty4/lRn2N7dShRJ64ijY x0iCivNcLR7Up61v27BOgO3OjN45Aw5zzMUOapy4xgb1mDy0AAmqOUn6mGKoBOP4 PRkq4QdQpTBsQdyWvV6b6YexwdJmtStJeKJ4H8X74XylteludkgGHwT0+U5ht6na G9F31zU8S+ANvA/PuUuWOxinOr9Ykk0ReRgdLIFU5y99YCYfOYQJhUuQ7g489ncx -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:07 2026 by rpki-client