$ rpki-client -vvf rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/005C6D6EC17A11EEB919C476C4F9AE02.roa File: 005C6D6EC17A11EEB919C476C4F9AE02.roa (raw, json) Hash identifier: x74beNv2bckC9kjbYSqsfhvkgGA3DJlDz0+S6jQZlEk= Subject key identifier: 00:B0:5F:7A:74:C2:FE:38:D0:A2:8F:F4:8D:3D:34:BA:16:8A:C4:B8 Certificate issuer: /CN=A91A64F6/serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Certificate serial: 01B7 Authority key identifier: 8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/005C6D6EC17A11EEB919C476C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:27:17 +0000 ROA not before: Sun 25 Jan 2026 03:22:48 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133217 IP address blocks: 103.127.120.0/22 maxlen: 22 103.127.123.0/24 maxlen: 24 2404:1fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A64F6, serialNumber=8CC3043D4B46C48F126C06E82970EBB48B6463C8 Validity Not Before: Jan 25 03:22:48 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a41485-9661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7d:1e:88:92:72:8a:f8:fd:ac:2c:ff:fa:cb: 79:d7:39:d2:4f:95:66:ce:66:25:63:dc:b3:f7:57: 83:76:51:c8:af:83:78:05:ed:e7:29:e2:ed:1f:fa: 76:6f:86:97:da:c7:f4:86:0d:be:00:3c:b2:52:01: 49:8f:ca:d0:a7:6f:a7:37:82:e8:dc:8d:6c:4f:48: a0:00:7a:22:ce:3b:42:d4:97:a1:3e:9a:33:d5:21: e2:de:2d:44:44:9f:2d:72:27:5b:eb:01:91:df:4b: 03:4d:3f:d3:0a:bf:67:e8:48:5d:2d:a7:48:65:6c: 47:55:f7:82:36:1b:f6:f5:b7:39:79:72:54:f7:82: c2:aa:66:12:d3:a2:18:84:c9:4e:ab:96:72:46:22: 1b:94:98:a3:5e:10:ab:96:6f:dc:c7:60:3e:40:75: c0:46:0a:31:e0:f3:cb:cb:f5:db:a4:31:99:06:d6: dd:a0:0d:80:19:59:e5:27:21:04:a5:5f:9b:b7:8e: 6e:06:e7:d1:45:14:d9:ea:f8:d0:15:89:96:a9:0d: a1:fd:81:9b:ca:45:c1:86:6b:0c:74:9f:4a:8e:4e: 72:00:a5:15:46:c5:bf:b8:cc:ee:43:b0:d7:29:8e: a6:e1:ec:30:fd:d2:95:b6:5e:cb:55:8d:ee:13:0e: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B0:5F:7A:74:C2:FE:38:D0:A2:8F:F4:8D:3D:34:BA:16:8A:C4:B8 X509v3 Authority Key Identifier: keyid:8C:C3:04:3D:4B:46:C4:8F:12:6C:06:E8:29:70:EB:B4:8B:64:63:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/jMMEPUtGxI8SbAboKXDrtItkY8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jMMEPUtGxI8SbAboKXDrtItkY8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A64F6/E1CF3C5690DB11EEB9CD2A76C4F9AE02/005C6D6EC17A11EEB919C476C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.127.120.0/22 IPv6: 2404:1fc0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:01:77:b0:61:60:b1:de:bf:87:bd:5e:d3:eb:4b:8d:39:17: 58:bf:79:d8:83:23:48:ac:e1:53:81:48:6d:c7:9d:c6:55:4d: 0c:9d:bc:ce:15:5c:1d:3c:ca:98:2f:5c:57:39:d2:74:5e:3c: 01:9e:48:40:c2:91:05:3b:f6:c7:13:4e:e0:b8:ed:7d:4d:98: eb:b4:f5:6b:1b:58:2c:64:88:ec:34:ea:13:47:4d:fa:fb:e6: b5:95:43:47:8d:9b:65:be:3c:20:b1:36:40:a2:b1:c9:db:e9: f1:45:be:ad:5f:34:aa:cb:3c:41:b4:ac:7d:0c:c1:b0:d7:71: 5a:46:02:4d:c0:93:e3:84:7a:70:e8:51:44:d1:4c:d8:52:85: 52:98:38:77:37:01:97:82:0f:61:89:4c:4a:6d:9a:37:ff:89: 08:86:24:f0:df:ca:e3:24:6b:01:ab:b2:a1:29:03:4e:e2:e1: e9:48:71:f3:65:47:dc:a7:14:bd:e4:9a:81:8d:59:ba:e0:7b: c1:87:2f:32:b9:2d:1c:da:78:f7:95:66:6a:b5:81:7b:62:16: c8:47:8d:53:9b:02:5f:c0:a5:71:45:25:88:f8:3e:80:3b:d5: 41:61:fc:c6:4e:9f:23:65:80:1e:18:e5:14:29:a3:53:80:6b: 8b:0d:0e:b5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY0RjYxMTAvBgNVBAUTKDhDQzMwNDNENEI0NkM0OEYxMjZDMDZFODI5NzBFQkI0 OEI2NDYzQzgwHhcNMjYwMTI1MDMyMjQ4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTQ4NS05NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnH0eiJJyivj9rCz/+st51znST5VmzmYlY9yz91eDdlHIr4N4Be3nKeLtH/p2 b4aX2sf0hg2+ADyyUgFJj8rQp2+nN4Lo3I1sT0igAHoizjtC1JehPpoz1SHi3i1E RJ8tcidb6wGR30sDTT/TCr9n6EhdLadIZWxHVfeCNhv29bc5eXJU94LCqmYS06IY hMlOq5ZyRiIblJijXhCrlm/cx2A+QHXARgox4PPLy/XbpDGZBtbdoA2AGVnlJyEE pV+bt45uBufRRRTZ6vjQFYmWqQ2h/YGbykXBhmsMdJ9Kjk5yAKUVRsW/uMzuQ7DX KY6m4eww/dKVtl7LVY3uEw4ztQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFACwX3p0 wv440KKP9I09NLoWisS4MB8GA1UdIwQYMBaAFIzDBD1LRsSPEmwG6Clw67SLZGPI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjRGNi9FMUNGM0M1Njkw REIxMUVFQjlDRDJBNzZDNEY5QUUwMi9qTU1FUFV0R3hJOFNiQWJvS1hEcnRJdGtZ OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNTUVQVXRHeEk4U2JBYm9LWERydEl0a1k4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTY0RjYvRTFDRjNDNTY5MERCMTFFRUI5Q0QyQTc2QzRGOUFFMDIvMDA1QzZENkVD MTdBMTFFRUI5MTlDNDc2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ394MA0EAgACMAcDBQAkBB/AMA0GCSqGSIb3DQEBCwUAA4IBAQAs AXewYWCx3r+HvV7T60uNORdYv3nYgyNIrOFTgUhtx53GVU0MnbzOFVwdPMqYL1xX OdJ0XjwBnkhAwpEFO/bHE07guO19TZjrtPVrG1gsZIjsNOoTR036++a1lUNHjZtl vjwgsTZAorHJ2+nxRb6tXzSqyzxBtKx9DMGw13FaRgJNwJPjhHpw6FFE0UzYUoVS mDh3NwGXgg9hiUxKbZo3/4kIhiTw38rjJGsBq7KhKQNO4uHpSHHzZUfcpxS95JqB jVm64HvBhy8yuS0c2nj3lWZqtYF7YhbIR41TmwJfwKVxRSWI+D6AO9VBYfzGTp8j ZYAeGOUUKaNTgGuLDQ61 -----END CERTIFICATE-----Generated at Mon Mar 2 03:45:29 2026 by rpki-client