$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/8BCB2CFAEA3911EDB91E190BC4F9AE02.roa File: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (raw, json) Hash identifier: QhSp+pceORKO5TeSj6aanaSrz92dgNngwmylNT95Bc4= Subject key identifier: 69:A0:96:2F:35:6F:8B:19:8D:59:61:84:49:F2:93:C2:8D:CF:AC:74 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 021F Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/8BCB2CFAEA3911EDB91E190BC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:00:01 +0000 ROA not before: Wed 25 Feb 2026 02:23:12 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 45838 IP address blocks: 103.67.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: Feb 25 02:23:12 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a43851-c35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fe:ba:83:f1:c6:bc:4b:66:74:c9:7f:55:57: f5:6c:19:19:21:ad:79:ee:2e:05:a6:b9:c8:75:e0: d9:9d:3d:f3:9f:45:cc:54:df:95:b3:19:a6:97:c4: d6:1d:89:a5:d1:53:04:13:6b:ba:d6:64:e9:78:71: ab:d6:5f:10:2b:ef:4e:32:4d:13:48:2c:9d:2e:80: 75:58:e0:de:7d:6b:8c:b2:75:a4:2c:5c:2c:58:6b: 44:68:a4:fc:6e:cb:da:6d:1a:0a:d3:74:fc:eb:8d: 64:57:6a:85:7f:61:44:bf:8a:0e:25:80:03:fe:d9: 30:d3:5b:df:9b:fb:b8:99:fd:1a:69:bc:80:cb:b3: 50:d1:54:29:fd:38:d0:ec:a7:b8:1f:e7:53:77:93: b8:0a:89:63:17:1e:67:97:6c:8a:d8:d1:cc:a0:05: a0:db:7a:b1:52:41:fe:8d:f1:6b:ae:bc:4c:ae:b9: 87:18:d3:e4:be:14:76:1b:d3:23:2e:71:e9:9a:68: 94:61:d4:39:7d:1a:45:7f:d4:04:9f:87:b2:17:98: 7f:99:39:a0:c6:01:29:da:a3:2e:f0:ba:52:cb:be: ba:fb:ae:86:b9:98:bf:d2:a8:ce:ad:ea:56:29:5a: 26:0d:0f:c6:fa:86:9e:90:8b:07:e8:fd:44:c2:fe: 48:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A0:96:2F:35:6F:8B:19:8D:59:61:84:49:F2:93:C2:8D:CF:AC:74 X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/8BCB2CFAEA3911EDB91E190BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.67.20.0/24 Signature Algorithm: sha256WithRSAEncryption 96:4c:78:64:28:82:19:65:db:10:9d:6f:e7:50:aa:23:d1:9a: 1b:94:b2:ca:b3:40:32:48:68:ef:4b:d0:9c:d2:bd:0e:d9:a7: a6:cd:0c:b3:b3:48:6e:79:64:9b:e8:90:4a:d5:78:53:26:27: f1:55:a9:35:22:ff:6d:bb:61:d2:63:b9:e1:83:8b:af:8c:4a: 86:fb:4f:1d:54:f1:c5:30:c5:6f:cb:5e:6a:b3:b5:a6:34:f5: 96:45:8e:0a:8b:81:49:2b:0d:50:cc:e1:58:f7:9b:8d:d7:a8: 52:4e:d2:30:2a:5e:84:ec:df:27:84:89:ad:01:bf:dc:3c:51: 57:12:62:1e:41:d6:f2:10:04:64:83:9c:21:c7:4e:b1:27:db: 3e:8d:ec:93:3c:a7:71:69:c2:20:7f:e7:6b:da:e1:7d:2f:b7: 92:58:a3:64:2b:7b:b2:ae:06:32:d1:f4:5a:51:6a:d7:d8:d3: 2f:04:18:aa:9b:76:51:a9:c6:48:f4:c0:ef:b0:4f:0a:c4:70: bd:38:a1:72:2d:45:33:39:14:b9:fe:19:41:c0:38:81:12:ed: a8:94:97:0e:bd:30:ed:8c:8d:26:13:a7:52:ac:6a:08:89:36: 66:0d:1d:3f:a9:3b:63:22:62:fe:20:fd:c1:77:91:aa:5e:91: a0:44:e5:14 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjYwMjI1MDIyMzEyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzg1MS1jMzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxf66g/HGvEtmdMl/VVf1bBkZIa157i4FprnIdeDZnT3zn0XMVN+Vsxmml8TW HYml0VMEE2u61mTpeHGr1l8QK+9OMk0TSCydLoB1WODefWuMsnWkLFwsWGtEaKT8 bsvabRoK03T8641kV2qFf2FEv4oOJYAD/tkw01vfm/u4mf0aabyAy7NQ0VQp/TjQ 7Ke4H+dTd5O4ColjFx5nl2yK2NHMoAWg23qxUkH+jfFrrrxMrrmHGNPkvhR2G9Mj LnHpmmiUYdQ5fRpFf9QEn4eyF5h/mTmgxgEp2qMu8LpSy766+66GuZi/0qjOrepW KVomDQ/G+oaekIsH6P1Ewv5IqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGmgli81 b4sZjVlhhEnyk8KNz6x0MB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFENDMvODkyOURGREVFQTI4MTFFREI3REQwMTE4QzRGOUFFMDIvOEJDQjJDRkFF QTM5MTFFREI5MUUxOTBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ0MUMA0GCSqGSIb3DQEBCwUAA4IBAQCWTHhkKIIZZdsQnW/nUKoj 0ZoblLLKs0AySGjvS9Cc0r0O2aemzQyzs0hueWSb6JBK1XhTJifxVak1Iv9tu2HS Y7nhg4uvjEqG+08dVPHFMMVvy15qs7WmNPWWRY4Ki4FJKw1QzOFY95uN16hSTtIw Kl6E7N8nhImtAb/cPFFXEmIeQdbyEARkg5whx06xJ9s+jeyTPKdxacIgf+dr2uF9 L7eSWKNkK3uyrgYy0fRaUWrX2NMvBBiqm3ZRqcZI9MDvsE8KxHC9OKFyLUUzORS5 /hlBwDiBEu2olJcOvTDtjI0mE6dSrGoIiTZmDR0/qTtjImL+IP3Bd5GqXpGgROUU -----END CERTIFICATE-----Generated at Mon Mar 2 14:21:17 2026 by rpki-client