$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/1CF68346F0BF11EEA1A0B559C4F9AE02.roa File: 1CF68346F0BF11EEA1A0B559C4F9AE02.roa (raw, json) Hash identifier: PEFUWPuuL2vMfvcqlcYxIw9blVOMpnd6Xf7lxivGVE4= Subject key identifier: F0:87:52:07:05:A5:1D:B7:8D:D8:FF:27:7F:B9:D1:EC:31:85:AE:5F Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Certificate serial: 043F Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/1CF68346F0BF11EEA1A0B559C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:04:00 +0000 ROA not before: Thu 29 Jan 2026 00:20:24 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134697 IP address blocks: 45.248.48.0/22 maxlen: 24 103.205.28.0/23 maxlen: 24 103.214.220.0/22 maxlen: 24 103.216.190.0/23 maxlen: 24 144.48.164.0/22 maxlen: 24 203.7.236.0/22 maxlen: 24 203.12.0.0/23 maxlen: 24 203.12.2.0/23 maxlen: 24 203.12.4.0/23 maxlen: 24 203.12.6.0/23 maxlen: 23 203.12.6.0/24 maxlen: 24 203.12.7.0/24 maxlen: 24 203.12.8.0/23 maxlen: 24 203.12.10.0/23 maxlen: 24 203.12.12.0/23 maxlen: 24 203.12.14.0/23 maxlen: 24 2404:e80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1087 (0x43f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C Validity Not Before: Jan 29 00:20:24 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a58ac0-25b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:80:48:59:a2:98:e5:41:aa:79:7d:50:d9:14: 5f:0d:59:1b:23:6d:e9:83:74:06:d9:17:aa:ef:54: d5:e3:ae:c0:f2:82:77:7c:ad:7e:1e:2f:b1:45:6e: 52:79:f5:9f:8f:c2:92:7c:d7:c3:f0:d0:8a:6c:7f: 4a:d3:1d:f5:00:64:77:1e:b8:9a:63:7a:8a:be:4c: ca:75:1c:61:4d:7e:44:63:57:1d:66:66:2d:46:e0: 93:d9:93:39:a7:f2:61:b9:be:ef:42:e8:ae:12:49: a6:41:1c:ce:8f:1b:ef:b7:f8:c5:13:c8:c1:61:0c: 2c:9c:0a:e0:53:3b:0f:bd:90:47:a9:50:ce:4d:74: 79:c1:77:08:9a:8c:8d:94:b1:9b:ed:12:f1:d6:eb: 81:cb:06:39:b8:e7:15:16:81:42:c9:40:8c:e5:6b: 3b:c9:47:ad:59:53:44:24:7a:03:fe:8b:55:bb:56: f9:a0:b7:5f:6e:5c:db:52:36:ed:22:2a:e9:59:20: 23:bb:b0:83:be:24:e1:c8:69:15:c1:84:20:e1:91: 33:98:72:ad:8a:91:6e:4f:69:f6:ba:6b:5e:8d:9e: f5:f1:b2:1e:98:e9:c8:f4:18:ad:db:93:e0:c7:14: 75:ed:91:8e:7a:e9:08:f9:e4:f3:c3:a6:0d:b3:ea: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:87:52:07:05:A5:1D:B7:8D:D8:FF:27:7F:B9:D1:EC:31:85:AE:5F X509v3 Authority Key Identifier: keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/1CF68346F0BF11EEA1A0B559C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.248.48.0/22 103.205.28.0/23 103.214.220.0/22 103.216.190.0/23 144.48.164.0/22 203.7.236.0/22 203.12.0.0/20 IPv6: 2404:e80::/32 Signature Algorithm: sha256WithRSAEncryption 37:2f:99:a7:53:e9:9d:b9:e8:f0:e2:f9:2a:e3:b1:c3:d5:cb: ed:f8:f3:0a:62:30:2e:bc:ab:4c:f4:80:2f:6a:b0:cb:be:ae: 51:4e:6c:2b:5d:99:39:d3:42:ea:e1:4e:42:af:9a:52:74:4c: 14:a5:fc:1a:c3:dd:1e:88:cf:40:17:7b:e6:ca:88:fc:fa:83: d9:2d:36:95:a0:5a:08:6a:c0:8c:68:ba:bb:56:15:0e:b0:c9: cc:ce:16:23:bc:64:48:1f:37:27:1a:1c:61:08:20:c8:f4:e0: d9:3b:61:d0:51:b4:58:af:c0:95:89:f6:c4:bc:e3:c6:8d:67: 8b:26:ec:cb:f0:24:8f:f8:7a:11:1a:8b:58:21:09:b7:d9:91: b8:70:1d:07:99:32:77:73:4f:ac:d7:28:35:9f:22:05:4f:fe: 00:78:4c:6c:fd:a7:ed:a4:a2:d1:44:1d:52:31:cd:5a:68:f8: 4b:6b:bc:2a:94:58:af:1c:12:30:07:4b:da:cd:d4:f6:27:65: 9c:f7:53:2d:2d:78:de:05:08:3f:d6:4d:df:1f:1f:23:72:b8: d8:a3:e5:27:ff:02:5d:a7:8f:1f:68:da:80:dc:dd:b2:a0:d8: 24:0e:46:e5:df:8b:16:59:bc:48:df:62:69:41:52:39:7a:3a: 1d:39:b2:bd -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgICBD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc1Q0MxMTAvBgNVBAUTKDBCQUM0Mjk4NkU5QUJEQjdDRUUyQ0RGQjJBOUZFOEQ2 RDAyQUFCNUMwHhcNMjYwMTI5MDAyMDI0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGFjMC0yNWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYBIWaKY5UGqeX1Q2RRfDVkbI23pg3QG2Req71TV467A8oJ3fK1+Hi+xRW5S efWfj8KSfNfD8NCKbH9K0x31AGR3HriaY3qKvkzKdRxhTX5EY1cdZmYtRuCT2ZM5 p/Jhub7vQuiuEkmmQRzOjxvvt/jFE8jBYQwsnArgUzsPvZBHqVDOTXR5wXcImoyN lLGb7RLx1uuBywY5uOcVFoFCyUCM5Ws7yUetWVNEJHoD/otVu1b5oLdfblzbUjbt IirpWSAju7CDviThyGkVwYQg4ZEzmHKtipFuT2n2umtejZ718bIemOnI9Bit25Pg xxR17ZGOeukI+eTzw6YNs+r7pwIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFPCHUgcF pR23jdj/J3+50ewxha5fMB8GA1UdIwQYMBaAFAusQphumr23zuLN+yqf6NbQKqtc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzVDQy8xRUEzNDNFMkFG RTMxMUVDQTJDQjA2NkRDNEY5QUUwMi9DNnhDbUc2YXZiZk80czM3S3BfbzF0QXFx MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2eENtRzZhdmJmTzRzMzdLcF9vMXRBcXExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTc1Q0MvMUVBMzQzRTJBRkUzMTFFQ0EyQ0IwNjZEQzRGOUFFMDIvMUNGNjgzNDZG MEJGMTFFRUExQTBCNTU5QzRGOUFFMDIucm9hMFIGCCsGAQUFBwEHAQH/BEMwQTAw BAIAATAqAwQCLfgwAwQBZ80cAwQCZ9bcAwQBZ9i+AwQCkDCkAwQCywfsAwQEywwA MA0EAgACMAcDBQAkBA6AMA0GCSqGSIb3DQEBCwUAA4IBAQA3L5mnU+mduejw4vkq 47HD1cvt+PMKYjAuvKtM9IAvarDLvq5RTmwrXZk500Lq4U5Cr5pSdEwUpfwaw90e iM9AF3vmyoj8+oPZLTaVoFoIasCMaLq7VhUOsMnMzhYjvGRIHzcnGhxhCCDI9ODZ O2HQUbRYr8CVifbEvOPGjWeLJuzL8CSP+HoRGotYIQm32ZG4cB0HmTJ3c0+s1yg1 nyIFT/4AeExs/aftpKLRRB1SMc1aaPhLa7wqlFivHBIwB0vazdT2J2Wc91MtLXje BQg/1k3fHx8jcrjYo+Un/wJdp48faNqA3N2yoNgkDkbl34sWWbxI32JpQVI5ejod ObK9 -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:52 2026 by rpki-client