$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa File: AFED106A9E1511ECA4B98E73C4F9AE02.roa (raw, json) Hash identifier: N5pLAxbLKv/PfC6YhIk0Oi5t9BhybE4dFuDmSAT9hEk= Subject key identifier: B8:FF:72:DA:12:77:4C:50:0A:C8:D1:13:CF:E1:54:9E:DA:31:80:3B Certificate issuer: /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Certificate serial: 042A Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:23:58 +0000 ROA not before: Thu 05 Feb 2026 10:20:58 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 149494 IP address blocks: 103.181.50.0/24 maxlen: 24 2001:df0:6840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB Validity Not Before: Feb 5 10:20:58 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a44bfe-b7f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:77:dd:aa:4e:05:e4:7c:90:e2:58:7d:c5: 1e:e5:e0:d8:1a:1f:08:26:27:96:a9:dd:af:c6:3f: ba:f5:cb:4e:a8:49:8e:e5:be:7d:5e:cb:83:91:3c: 61:42:42:42:83:d3:32:fa:8c:7c:ba:00:84:e4:f9: 69:5c:bf:0a:a6:69:f7:b0:22:56:5c:07:79:48:6e: 3d:e3:85:71:33:24:64:13:58:1d:45:82:da:fc:3b: 3b:0e:5e:ac:de:da:9e:2b:2b:1c:c3:ee:b6:0a:da: 69:af:b4:48:87:bd:7f:6a:31:c8:d6:bb:1e:48:25: 5e:5d:93:38:d0:3c:71:b8:79:0c:3d:54:df:ee:0f: c5:cc:92:de:5a:93:16:95:48:cd:10:59:f2:33:de: ea:03:24:a1:0c:db:e0:aa:2c:80:01:29:42:b8:d6: 2f:71:ba:17:e7:09:80:96:d3:de:9c:81:26:73:30: be:99:09:7e:88:80:4c:aa:16:5d:6c:1e:3a:59:b7: 3f:9a:cf:6e:27:bb:62:93:35:fa:fc:49:f6:f9:2f: 6f:84:83:af:95:86:86:42:6e:e9:57:de:8e:d1:46: e8:a1:10:d0:cc:12:c1:aa:4d:f0:d1:2a:eb:2c:0a: b4:56:68:2a:c5:2b:e5:ad:37:22:9d:2a:46:eb:d4: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FF:72:DA:12:77:4C:50:0A:C8:D1:13:CF:E1:54:9E:DA:31:80:3B X509v3 Authority Key Identifier: keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/AFED106A9E1511ECA4B98E73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.181.50.0/24 IPv6: 2001:df0:6840::/48 Signature Algorithm: sha256WithRSAEncryption 8e:51:6b:e9:24:0c:07:3b:13:16:fc:e1:b3:e0:eb:91:83:5c: e5:ba:e3:5c:4b:a5:b7:2c:8d:fa:c8:c1:cb:84:f7:ae:07:ff: 11:de:55:f5:01:45:38:63:64:78:57:8a:cc:8d:e2:f0:75:30: 45:ad:7b:08:35:1c:bf:3a:10:7b:c1:d4:0b:4b:93:20:04:b8: 9d:58:af:3e:1c:19:9c:b4:67:d6:98:34:21:0f:b5:db:b6:6e: e1:1a:42:0e:68:2b:56:1e:43:8d:58:46:bc:f9:bf:42:d7:c1: 5d:f4:8a:dd:e0:98:fe:6f:bc:54:2c:9a:64:ed:7e:72:ee:2b: 9a:72:a7:f5:51:4e:7f:d6:10:60:81:6f:c0:c0:55:e4:fc:cf: e5:f4:86:5b:93:09:0c:21:72:6d:60:0d:9d:90:66:51:b8:27: 05:fe:d1:e1:0a:9a:44:8b:f8:83:bc:b1:51:fb:80:23:4f:a5: 70:ff:d4:86:82:e1:75:d8:a3:e8:fc:17:f9:5f:62:1b:09:12: a4:35:0e:83:08:64:4a:0f:47:0c:e6:c4:82:dc:15:d4:27:8a: 9a:a3:a2:93:02:7e:02:4f:bf:3f:c0:a0:6d:c8:cd:97:32:48: b7:50:9d:4e:13:f2:35:a5:86:05:02:bd:f2:21:77:52:9a:3e: 1e:6a:6b:14 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx QTQzMkY0REIwHhcNMjYwMjA1MTAyMDU4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGJmZS1iN2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAum133apOBeR8kOJYfcUe5eDYGh8IJieWqd2vxj+69ctOqEmO5b59XsuDkTxh QkJCg9My+ox8ugCE5PlpXL8Kpmn3sCJWXAd5SG4944VxMyRkE1gdRYLa/Ds7Dl6s 3tqeKyscw+62Ctppr7RIh71/ajHI1rseSCVeXZM40DxxuHkMPVTf7g/FzJLeWpMW lUjNEFnyM97qAyShDNvgqiyAASlCuNYvcboX5wmAltPenIEmczC+mQl+iIBMqhZd bB46Wbc/ms9uJ7tikzX6/En2+S9vhIOvlYaGQm7pV96O0UbooRDQzBLBqk3w0Srr LAq0VmgqxSvlrTcinSpG69QGZQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLj/ctoS d0xQCsjRE8/hVJ7aMYA7MB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5 TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThGOEEvNzIxOTVBRDQ5RTEzMTFFQ0IwOTFDRTcyQzRGOUFFMDIvQUZFRDEwNkE5 RTE1MTFFQ0E0Qjk4RTczQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ7UyMA8EAgACMAkDBwAgAQ3waEAwDQYJKoZIhvcNAQELBQADggEB AI5Ra+kkDAc7Exb84bPg65GDXOW641xLpbcsjfrIwcuE964H/xHeVfUBRThjZHhX isyN4vB1MEWtewg1HL86EHvB1AtLkyAEuJ1Yrz4cGZy0Z9aYNCEPtdu2buEaQg5o K1YeQ41YRrz5v0LXwV30it3gmP5vvFQsmmTtfnLuK5pyp/VRTn/WEGCBb8DAVeT8 z+X0hluTCQwhcm1gDZ2QZlG4JwX+0eEKmkSL+IO8sVH7gCNPpXD/1IaC4XXYo+j8 F/lfYhsJEqQ1DoMIZEoPRwzmxILcFdQnipqjopMCfgJPvz/AoG3IzZcySLdQnU4T 8jWlhgUCvfIhd1KaPh5qaxQ= -----END CERTIFICATE-----Generated at Mon Mar 2 15:50:24 2026 by rpki-client