$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/60820A4271AC11EDAA89DE61C4F9AE02.roa File: 60820A4271AC11EDAA89DE61C4F9AE02.roa (raw, json) Hash identifier: AF+OSPPeJ/k4cpuI6pm2/IpiY0n6OFKaOYlrZAsamTo= Subject key identifier: 52:67:8A:3A:D0:6D:5C:27:B0:F6:9D:55:99:D3:BA:E4:E7:3B:CD:A0 Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Certificate serial: 0271 Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/60820A4271AC11EDAA89DE61C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:19:25 +0000 ROA not before: Thu 13 Nov 2025 00:47:20 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133752 IP address blocks: 103.21.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 625 (0x271) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D Validity Not Before: Nov 13 00:47:20 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a43cdc-3bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:7f:17:3b:00:73:ab:7d:f1:16:6d:be:b8: d0:be:3e:5d:de:da:2c:8e:29:a9:38:7b:1b:ce:ac: 1a:b3:12:1b:5c:52:a9:03:57:b4:ac:5d:33:1e:aa: e4:e6:64:24:d8:4b:1d:3f:15:49:28:74:be:91:d1: 20:9b:85:7c:dc:6d:a7:5d:29:e0:7e:a3:4f:b8:47: 91:60:9c:0c:c8:41:6d:38:b2:96:b6:b6:06:d8:d8: 7c:33:6e:e0:98:37:4d:a4:61:e3:9e:a0:39:95:64: d3:c0:5b:a4:56:5c:b3:95:d3:30:3c:99:8d:45:19: 92:37:f2:d1:94:7f:ab:0f:bc:7b:98:b7:de:62:8c: a3:f8:62:24:8a:ba:51:72:f2:cf:28:65:2b:ef:2c: 9a:24:42:28:f2:75:93:f3:06:f9:6f:ab:16:a6:a8: e7:05:8c:ec:69:22:be:75:d2:82:2e:65:1b:a8:95: f3:98:29:96:85:f1:a1:b7:d9:7d:b0:5f:7a:5f:05: 8d:64:95:f1:42:34:8a:c2:c1:71:d0:98:2e:c3:c3: 86:80:d1:e0:27:b0:1d:f5:97:a2:a7:aa:4c:8c:d8: ff:53:47:41:f2:7c:12:70:6b:1c:96:a2:82:68:ec: 29:fa:60:70:24:ab:bf:46:84:03:d5:df:05:a0:2d: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:67:8A:3A:D0:6D:5C:27:B0:F6:9D:55:99:D3:BA:E4:E7:3B:CD:A0 X509v3 Authority Key Identifier: keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/60820A4271AC11EDAA89DE61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.21.220.0/24 Signature Algorithm: sha256WithRSAEncryption a6:8f:9f:78:95:5f:c0:08:b9:8e:87:f5:1c:be:9a:01:31:35: 90:0e:0b:dc:09:bf:71:87:60:da:d7:8a:8f:85:a6:07:1f:7a: c9:ed:b5:3a:52:10:d3:f9:c0:e9:d4:c0:6f:bd:ec:e1:e3:aa: 45:04:a2:92:42:e1:55:bf:7d:a8:11:44:13:79:46:1e:55:7e: 4f:01:21:81:8b:7e:5e:38:d6:99:80:9e:83:1d:7e:14:1b:dd: 80:64:7b:54:b4:9e:6f:f5:fb:63:11:43:26:24:78:39:ad:05: b8:c8:95:a5:b0:3a:df:d2:f1:e6:f2:d9:df:29:10:e4:fe:ce: 0a:0b:11:ce:f4:dc:2a:92:cd:ec:b9:fd:11:ef:85:a3:c8:e2: af:9a:29:9e:2e:82:9d:2d:9d:cf:4a:1c:04:08:c5:1a:83:1a: b4:6d:0a:b3:6d:59:1a:6a:f2:2c:f4:20:29:ed:b5:52:5c:81: 76:6c:a9:f6:91:75:2b:7a:43:7e:85:8a:46:01:78:59:50:15: 91:35:b0:e4:78:df:e8:a2:e3:e0:ce:84:5f:8d:2a:ef:25:e5: 56:fb:ce:a8:4d:61:fd:ac:09:c4:09:17:76:f5:e1:08:7d:af: a9:da:b1:3b:a7:67:09:08:54:ac:10:d6:22:2f:e5:ab:f1:dd: 8f:b6:14:75 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2RTMxMTAvBgNVBAUTKEJCQUJEM0YxNkUxMDBGRDlDOTVENDc0ODg0RTREQTlD QjZGQTc2OEQwHhcNMjUxMTEzMDA0NzIwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2NkYy0zYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9l/FzsAc6t98RZtvrjQvj5d3tosjimpOHsbzqwasxIbXFKpA1e0rF0zHqrk 5mQk2EsdPxVJKHS+kdEgm4V83G2nXSngfqNPuEeRYJwMyEFtOLKWtrYG2Nh8M27g mDdNpGHjnqA5lWTTwFukVlyzldMwPJmNRRmSN/LRlH+rD7x7mLfeYoyj+GIkirpR cvLPKGUr7yyaJEIo8nWT8wb5b6sWpqjnBYzsaSK+ddKCLmUbqJXzmCmWhfGht9l9 sF96XwWNZJXxQjSKwsFx0Jguw8OGgNHgJ7Ad9Zeip6pMjNj/U0dB8nwScGsclqKC aOwp+mBwJKu/RoQD1d8FoC2fOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFJnijrQ bVwnsPadVZnTuuTnO82gMB8GA1UdIwQYMBaAFLur0/FuEA/ZyV1HSITk2py2+naN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZFMy8xMjQ3Qjg2MDY2 OTIxMUVEODJCRTcxMzNDNEY5QUUwMi91NnZUOFc0UUQ5bkpYVWRJaE9UYW5MYjZk bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2dlQ4VzRRRDluSlhVZEloT1RhbkxiNmRvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg2RTMvMTI0N0I4NjA2NjkyMTFFRDgyQkU3MTMzQzRGOUFFMDIvNjA4MjBBNDI3 MUFDMTFFREFBODlERTYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZxXcMA0GCSqGSIb3DQEBCwUAA4IBAQCmj594lV/ACLmOh/UcvpoB MTWQDgvcCb9xh2Da14qPhaYHH3rJ7bU6UhDT+cDp1MBvvezh46pFBKKSQuFVv32o EUQTeUYeVX5PASGBi35eONaZgJ6DHX4UG92AZHtUtJ5v9ftjEUMmJHg5rQW4yJWl sDrf0vHm8tnfKRDk/s4KCxHO9Nwqks3suf0R74WjyOKvmimeLoKdLZ3PShwECMUa gxq0bQqzbVkaavIs9CAp7bVSXIF2bKn2kXUrekN+hYpGAXhZUBWRNbDkeN/oouPg zoRfjSrvJeVW+86oTWH9rAnECRd29eEIfa+p2rE7p2cJCFSsENYiL+Wr8d2PthR1 -----END CERTIFICATE-----Generated at Mon Mar 2 14:38:46 2026 by rpki-client