$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/98D205F01A4611ECAD279D86C4F9AE02.roa File: 98D205F01A4611ECAD279D86C4F9AE02.roa (raw, json) Hash identifier: TcJqJMLyitHMRzo+ia1HKGUBnUj/DR0JYAjrm+jDeHA= Subject key identifier: 92:87:0A:B4:0B:0B:A4:0D:10:01:41:80:EC:B7:75:3F:B9:B5:51:F2 Certificate issuer: /CN=A91A6BBA/serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Certificate serial: 06E9 Authority key identifier: 3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/98D205F01A4611ECAD279D86C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:44:57 +0000 ROA not before: Sun 16 Feb 2025 23:51:34 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 142015 IP address blocks: 103.164.232.0/23 maxlen: 23 103.164.232.0/24 maxlen: 24 103.164.233.0/24 maxlen: 24 2407:41c0::/32 maxlen: 32 2407:41c0:10::/48 maxlen: 48 2407:41c0:11::/48 maxlen: 48 2407:41c0:12::/48 maxlen: 48 2407:41c0:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1769 (0x6e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6BBA, serialNumber=3ED99D2AA680861D0A7B59C6D1BB2A5BF4CB2E6E Validity Not Before: Feb 16 23:51:34 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a3fc89-1252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:f2:a1:5d:ba:de:74:1d:05:2b:e9:9a:c3: 0d:86:65:79:76:1b:38:90:ce:cb:9e:42:b9:97:14: c6:54:7b:fd:3f:bf:2d:26:e7:15:eb:80:13:73:d4: 24:51:b3:cb:b2:51:b0:ee:fc:5d:3e:9b:14:0d:9f: 3a:d9:14:0c:65:86:0a:97:4c:5c:7e:fd:4b:ad:a3: d2:9c:48:2d:bb:1d:5c:16:62:45:34:a8:de:85:9a: 2c:6b:8d:59:73:b0:8a:6a:5e:04:10:22:2f:44:51: 98:06:98:43:f5:91:36:45:0a:47:2c:80:b4:f7:f6: 0b:dd:04:d3:88:5a:ea:a7:22:af:08:bb:3f:53:c6: cd:41:98:4a:c5:0f:dd:8d:d9:7f:de:f7:01:1d:ef: 7d:8c:7a:a0:37:5d:20:44:31:95:eb:f2:1c:3c:cf: d7:dc:67:b4:70:e6:56:77:c6:e8:8f:43:e3:97:a5: 54:22:d4:26:61:00:6d:1d:8d:3e:0d:9b:72:29:87: 71:bf:48:0c:03:f6:24:8c:fe:ad:2d:1e:c3:b7:d3: 6c:ce:b1:26:84:62:a1:8b:e6:e8:ab:25:4f:08:05: 5a:15:78:6d:24:bb:2e:b9:6d:8f:06:75:3e:b2:1c: 50:45:fc:df:08:91:6e:e4:a4:2e:20:ab:b2:0e:2e: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:87:0A:B4:0B:0B:A4:0D:10:01:41:80:EC:B7:75:3F:B9:B5:51:F2 X509v3 Authority Key Identifier: keyid:3E:D9:9D:2A:A6:80:86:1D:0A:7B:59:C6:D1:BB:2A:5B:F4:CB:2E:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtmdKqaAhh0Ke1nG0bsqW_TLLm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BBA/BDFECDC28D7911EBA8436C3BC4F9AE02/98D205F01A4611ECAD279D86C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.164.232.0/23 IPv6: 2407:41c0::/32 Signature Algorithm: sha256WithRSAEncryption 25:45:ad:29:4b:e1:d4:02:1d:18:cd:8b:86:ed:8b:24:05:25: 48:6b:80:cc:7a:91:43:b0:88:04:34:ea:c4:1e:d2:20:a6:d1: ba:08:1b:7f:83:8c:99:94:1f:5a:ad:d7:e8:4e:91:14:4e:57: 90:32:df:6d:5e:d5:d2:ef:89:1b:09:68:00:cf:78:ff:0d:de: 7d:33:a5:67:84:1e:ce:31:c3:c5:95:43:64:54:58:1e:fe:98: f4:15:87:df:b3:4e:66:7d:3b:af:eb:fe:42:88:92:54:e2:b3: 25:45:8d:7c:0b:c0:e2:64:ea:b4:88:44:ba:c5:67:aa:fc:d5: d0:40:c9:93:a1:dc:24:fe:d2:63:4d:4c:67:3f:4e:2d:b0:e8: 28:6d:a9:12:84:59:ed:cb:a8:4d:8b:31:59:e3:f1:89:57:65: 3e:ed:68:da:e5:b1:03:b2:90:e0:1e:6c:88:ba:c3:e2:30:f1: ad:64:b7:50:51:34:42:24:5e:1b:c9:aa:d0:f0:f5:7e:e4:68: 41:99:a8:33:36:5d:90:4e:41:65:33:c0:88:4a:52:d5:80:04: 5b:8a:61:d4:fd:67:0f:f6:c3:b5:d6:3d:b8:7d:35:af:9b:2b: 61:01:c4:aa:c5:8a:a1:6f:7d:69:84:45:a1:6b:27:ab:aa:d4: dc:82:24:f6 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCQkExMTAvBgNVBAUTKDNFRDk5RDJBQTY4MDg2MUQwQTdCNTlDNkQxQkIyQTVC RjRDQjJFNkUwHhcNMjUwMjE2MjM1MTM0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmM4OS0xMjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkY7yoV263nQdBSvpmsMNhmV5dhs4kM7LnkK5lxTGVHv9P78tJucV64ATc9Qk UbPLslGw7vxdPpsUDZ862RQMZYYKl0xcfv1LraPSnEgtux1cFmJFNKjehZosa41Z c7CKal4EECIvRFGYBphD9ZE2RQpHLIC09/YL3QTTiFrqpyKvCLs/U8bNQZhKxQ/d jdl/3vcBHe99jHqgN10gRDGV6/IcPM/X3Ge0cOZWd8boj0Pjl6VUItQmYQBtHY0+ DZtyKYdxv0gMA/YkjP6tLR7Dt9NszrEmhGKhi+boqyVPCAVaFXhtJLsuuW2PBnU+ shxQRfzfCJFu5KQuIKuyDi5buQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJKHCrQL C6QNEAFBgOy3dT+5tVHyMB8GA1UdIwQYMBaAFD7ZnSqmgIYdCntZxtG7Klv0yy5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkJCQS9CREZFQ0RDMjhE NzkxMUVCQTg0MzZDM0JDNEY5QUUwMi9QdG1kS3FhQWhoMEtlMW5HMGJzcVdfVExM bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B0bWRLcWFBaGgwS2UxbkcwYnNxV19UTExtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTZCQkEvQkRGRUNEQzI4RDc5MTFFQkE4NDM2QzNCQzRGOUFFMDIvOThEMjA1RjAx QTQ2MTFFQ0FEMjc5RDg2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6ToMA0EAgACMAcDBQAkB0HAMA0GCSqGSIb3DQEBCwUAA4IBAQAl Ra0pS+HUAh0YzYuG7YskBSVIa4DMepFDsIgENOrEHtIgptG6CBt/g4yZlB9ardfo TpEUTleQMt9tXtXS74kbCWgAz3j/Dd59M6VnhB7OMcPFlUNkVFge/pj0FYffs05m fTuv6/5CiJJU4rMlRY18C8DiZOq0iES6xWeq/NXQQMmTodwk/tJjTUxnP04tsOgo bakShFnty6hNizFZ4/GJV2U+7Wja5bEDspDgHmyIusPiMPGtZLdQUTRCJF4byarQ 8PV+5GhBmagzNl2QTkFlM8CISlLVgARbimHU/WcP9sO11j24fTWvmythAcSqxYqh b31phEWhayerqtTcgiT2 -----END CERTIFICATE-----Generated at Mon Mar 2 10:37:23 2026 by rpki-client