$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/8B1BDC14EA3911EDB91E190BC4F9AE02.roa File: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (raw, json) Hash identifier: IRQ+OR5t+v1uxAMW20q5TYiXjn6EFNEgE2VqHO9rI/w= Subject key identifier: B1:E1:DF:A2:FF:3F:DC:E6:DF:93:AD:93:09:71:56:69:50:3B:2B:DD Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 021E Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/8B1BDC14EA3911EDB91E190BC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:00:00 +0000 ROA not before: Wed 25 Feb 2026 02:23:11 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 10143 IP address blocks: 103.67.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: Feb 25 02:23:11 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a43850-d0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:e6:24:0c:fe:80:f6:50:2a:a0:40:47:34: 4a:9b:cf:81:21:87:fb:8d:27:73:f7:bf:01:df:9d: 2a:f8:5b:a9:fa:d2:d2:44:4a:51:85:4c:7d:0b:a6: 49:83:d7:d7:c1:0b:f2:02:83:17:1d:17:07:74:1a: 95:9e:e5:6f:62:9b:c9:a4:70:cf:68:af:64:d6:55: b3:90:9f:37:1f:98:96:f5:a6:3d:c6:95:5c:d9:4c: 21:84:d3:3e:32:2e:73:e5:d5:15:39:ba:86:79:92: db:f3:c0:c7:d7:57:c1:e1:50:e3:be:4d:ba:f9:67: ec:22:6d:fc:7d:e6:2b:1b:0d:38:b1:be:14:57:24: a5:b9:95:44:04:35:dd:d9:83:cf:23:81:90:c9:14: a9:72:bd:b0:8b:a9:09:20:6b:08:7d:86:99:38:4e: e8:4e:22:25:44:e0:2c:e5:70:24:3d:cc:7b:87:09: 10:bb:f0:07:c4:1d:a9:24:c5:e0:4d:82:ba:f9:82: 42:95:0a:bf:77:5a:ce:6e:f4:2c:e5:aa:7e:62:ec: 7b:ae:ce:d7:d7:ac:07:ed:e6:18:93:05:5f:23:ae: 2b:a8:75:6e:96:34:e2:2c:6a:02:ef:97:ef:e8:0d: e3:e8:15:4a:fe:94:63:48:3c:72:8d:b5:ca:c3:4c: 75:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E1:DF:A2:FF:3F:DC:E6:DF:93:AD:93:09:71:56:69:50:3B:2B:DD X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/8B1BDC14EA3911EDB91E190BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.67.21.0/24 Signature Algorithm: sha256WithRSAEncryption 69:6b:cb:0f:b0:0c:c6:e5:47:f0:f6:e0:54:39:6a:b3:c0:27: 84:17:89:22:e2:ce:09:49:42:fd:37:38:e1:f5:68:55:ff:32: 4b:b4:30:c3:67:9c:96:a6:1d:93:8c:21:f0:79:2b:20:3a:1d: ba:dc:e9:25:c6:0f:ad:69:f8:ac:df:70:97:5b:39:20:ad:0d: 84:56:b5:77:dc:ba:bb:74:44:f0:15:c6:85:62:0d:2d:db:52: f7:f5:e8:5b:52:04:c1:43:29:fd:35:94:a7:c1:51:20:80:de: 2e:3b:96:86:da:b7:60:b8:79:32:46:f3:1a:a1:4f:19:55:d1: 5b:3c:80:66:ca:97:bc:3d:8f:c0:c2:40:27:8f:2c:35:ab:16: b8:43:e6:f1:a6:66:76:41:b4:8c:31:83:94:2c:7f:40:b3:08: ed:8c:e2:37:dc:e9:c3:a7:57:61:2e:97:da:b7:7b:ec:22:0e: 0b:88:68:46:d0:3e:e2:6a:81:96:f7:2b:3c:55:28:cf:59:16: 92:06:42:12:e7:4b:8f:44:f1:3e:29:21:a0:76:6c:2a:e2:4c: 12:b7:b9:b8:d4:9f:5e:c8:dd:cd:32:57:9e:ca:b1:57:91:68: d3:05:a2:94:e5:1e:49:73:dc:35:65:45:59:53:5a:58:b4:d7: 51:8a:4e:6e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjYwMjI1MDIyMzExWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzg1MC1kMGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJHmJAz+gPZQKqBARzRKm8+BIYf7jSdz978B350q+Fup+tLSREpRhUx9C6ZJ g9fXwQvyAoMXHRcHdBqVnuVvYpvJpHDPaK9k1lWzkJ83H5iW9aY9xpVc2UwhhNM+ Mi5z5dUVObqGeZLb88DH11fB4VDjvk26+WfsIm38feYrGw04sb4UVySluZVEBDXd 2YPPI4GQyRSpcr2wi6kJIGsIfYaZOE7oTiIlROAs5XAkPcx7hwkQu/AHxB2pJMXg TYK6+YJClQq/d1rObvQs5ap+Yux7rs7X16wH7eYYkwVfI64rqHVuljTiLGoC75fv 6A3j6BVK/pRjSDxyjbXKw0x1yQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLHh36L/ P9zm35OtkwlxVmlQOyvdMB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFENDMvODkyOURGREVFQTI4MTFFREI3REQwMTE4QzRGOUFFMDIvOEIxQkRDMTRF QTM5MTFFREI5MUUxOTBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ0MVMA0GCSqGSIb3DQEBCwUAA4IBAQBpa8sPsAzG5Ufw9uBUOWqz wCeEF4ki4s4JSUL9Nzjh9WhV/zJLtDDDZ5yWph2TjCHweSsgOh263Oklxg+tafis 33CXWzkgrQ2EVrV33Lq7dETwFcaFYg0t21L39ehbUgTBQyn9NZSnwVEggN4uO5aG 2rdguHkyRvMaoU8ZVdFbPIBmype8PY/AwkAnjyw1qxa4Q+bxpmZ2QbSMMYOULH9A swjtjOI33OnDp1dhLpfat3vsIg4LiGhG0D7iaoGW9ys8VSjPWRaSBkIS50uPRPE+ KSGgdmwq4kwSt7m41J9eyN3NMleeyrFXkWjTBaKU5R5Jc9w1ZUVZU1pYtNdRik5u -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:14 2026 by rpki-client