$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa File: 08FFFEEAB4A811F0B6628E78C4F9AE02.roa (raw, json) Hash identifier: Jy+t2iiW6q1TvRtUSKswIvEzK+LCkTTNdcYYtc+zbi8= Subject key identifier: 80:A4:A3:80:66:A5:50:AE:3A:66:64:C1:70:9D:BC:D7:61:13:DD:5A Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0B2E Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:22:28 +0000 ROA not before: Wed 29 Oct 2025 09:17:58 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140228 IP address blocks: 103.148.212.0/23 maxlen: 23 103.148.212.0/24 maxlen: 24 103.148.213.0/24 maxlen: 24 2001:df2:ed80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Oct 29 09:17:58 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a475d4-29ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:b2:c8:f8:11:d2:2f:63:5a:b9:16:31:a4: a3:06:bf:ce:9a:a0:1b:04:02:90:36:cc:07:7f:32: a4:7b:fd:67:64:f4:5e:9f:cc:8e:04:90:18:81:9a: 8f:e6:7a:b5:45:05:6a:85:70:e9:b9:9f:b1:a0:b8: 9b:64:f2:c2:4f:aa:cc:a5:ee:50:d6:be:75:c5:33: e2:d7:3c:5e:53:d2:f0:dc:16:03:7d:28:e6:64:5a: 85:5a:1a:2c:b0:25:9e:ab:72:05:fb:6b:43:b4:06: f5:ce:a3:f7:ff:12:77:f2:f1:6d:c9:ac:57:8b:fa: 59:21:40:a7:0a:77:93:3e:1e:3a:f0:17:f9:e1:c4: 8e:21:f9:0c:56:77:d9:52:22:3f:1d:8b:97:80:75: 2e:2c:ba:11:cf:90:f7:e9:eb:bb:cf:78:8a:ea:9e: b7:1a:b8:96:75:50:c4:46:62:3d:ba:73:84:93:65: 94:5d:ac:a0:7d:88:ef:a0:9d:bc:bf:55:78:fe:c4: c0:72:74:1e:37:e6:28:06:d1:18:c2:10:7d:37:33: f3:7f:50:b1:d1:18:ea:4d:f2:ef:ff:ce:6e:a4:84: 70:cc:90:08:f6:b7:50:47:cf:6e:cd:59:c0:35:85: b5:3f:a1:57:29:8c:93:b2:d0:23:12:ba:8c:16:38: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A4:A3:80:66:A5:50:AE:3A:66:64:C1:70:9D:BC:D7:61:13:DD:5A X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/08FFFEEAB4A811F0B6628E78C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.148.212.0/23 IPv6: 2001:df2:ed80::/48 Signature Algorithm: sha256WithRSAEncryption 78:20:34:1a:85:7c:e9:90:0f:65:b7:9d:25:5c:c7:c0:ad:1c: 01:5e:2a:d4:5a:f5:a6:e8:02:1d:35:24:1a:54:23:f4:86:9a: 4d:a7:00:bd:d1:98:4f:93:60:48:fa:e0:3d:88:b1:c6:71:07: f5:b9:1a:8e:35:ba:d0:d5:a6:27:14:29:b5:8a:22:ea:36:77: d5:97:5d:42:eb:cb:fa:8d:a8:f0:17:a2:3f:90:65:62:b4:63: 92:c9:73:27:35:2d:80:b9:5e:b3:c5:79:9a:a6:3f:0e:ff:93: 67:60:5b:ea:9b:3b:07:3a:e4:ac:f9:5a:c7:02:58:29:de:8d: e3:e0:f9:ae:3e:9b:9a:fd:b3:8e:b7:0e:6b:fc:0e:64:10:7a: 11:e3:7c:02:8b:ba:9d:af:39:53:29:98:1f:f3:05:a5:9c:c3: 50:8a:e2:af:bb:b4:f0:be:ad:5f:ed:95:54:20:aa:0c:7b:62: 9e:89:de:87:fb:9b:ff:27:b2:1e:c7:b1:6e:2d:33:1c:ad:90: 5a:97:c9:aa:9b:f0:00:1a:7b:88:ba:d2:2c:f1:6b:47:f8:55: d6:0a:15:0b:30:b0:4a:a9:a7:62:63:71:8f:7c:ef:ec:a7:25: e7:8a:5b:6a:27:d5:6c:7c:24:11:e1:58:d0:61:87:2a:85:d9: d7:09:47:58 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUxMDI5MDkxNzU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzVkNC0yOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArG2yyPgR0i9jWrkWMaSjBr/OmqAbBAKQNswHfzKke/1nZPRen8yOBJAYgZqP 5nq1RQVqhXDpuZ+xoLibZPLCT6rMpe5Q1r51xTPi1zxeU9Lw3BYDfSjmZFqFWhos sCWeq3IF+2tDtAb1zqP3/xJ38vFtyaxXi/pZIUCnCneTPh468Bf54cSOIfkMVnfZ UiI/HYuXgHUuLLoRz5D36eu7z3iK6p63GriWdVDERmI9unOEk2WUXaygfYjvoJ28 v1V4/sTAcnQeN+YoBtEYwhB9NzPzf1Cx0RjqTfLv/85upIRwzJAI9rdQR89uzVnA NYW1P6FXKYyTstAjErqMFjhhKwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFICko4Bm pVCuOmZkwXCdvNdhE91aMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThDQjYvNTZBNEE2NDA1QUU2MTFFQTlDODhDQjgyQzRGOUFFMDIvMDhGRkZFRUFC NEE4MTFGMEI2NjI4RTc4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5TUMA8EAgACMAkDBwAgAQ3y7YAwDQYJKoZIhvcNAQELBQADggEB AHggNBqFfOmQD2W3nSVcx8CtHAFeKtRa9aboAh01JBpUI/SGmk2nAL3RmE+TYEj6 4D2IscZxB/W5Go41utDVpicUKbWKIuo2d9WXXULry/qNqPAXoj+QZWK0Y5LJcyc1 LYC5XrPFeZqmPw7/k2dgW+qbOwc65Kz5WscCWCnejePg+a4+m5r9s463Dmv8DmQQ ehHjfAKLup2vOVMpmB/zBaWcw1CK4q+7tPC+rV/tlVQgqgx7Yp6J3of7m/8nsh7H sW4tMxytkFqXyaqb8AAae4i60izxa0f4VdYKFQswsEqpp2JjcY987+ynJeeKW2on 1Wx8JBHhWNBhhyqF2dcJR1g= -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:05 2026 by rpki-client