$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/DA61302A0F0211EDABBE3C6AC4F9AE02.roa File: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (raw, json) Hash identifier: Hn+agnNbHWKp/4kdkGVWUuDmzKEtfXbLhv2iPPzMrxE= Subject key identifier: 93:C5:84:D1:02:4B:23:86:9D:48:B7:69:0B:4F:61:0B:59:A4:2F:8A Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Certificate serial: 0309 Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/DA61302A0F0211EDABBE3C6AC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:06:08 +0000 ROA not before: Sun 01 Mar 2026 02:21:40 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 141682 IP address blocks: 103.161.244.0/23 maxlen: 23 2407:940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Validity Not Before: Mar 1 02:21:40 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a42bb0-b1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:00:3b:b9:ea:c3:c6:59:ee:3c:30:f1:a8: e3:32:33:2e:88:66:44:3b:79:92:9b:f6:0b:4d:01: c5:15:e1:92:f8:e8:b8:68:4b:3b:d9:55:84:08:92: cb:b8:bf:7e:8f:22:8b:28:76:98:48:16:ea:9e:56: 13:12:c1:51:e2:4a:14:bd:0c:ce:5f:f6:d9:d5:03: 64:b5:e3:3b:a4:cf:f1:0c:bd:46:9d:bb:86:50:8c: 34:a8:45:ac:ea:8d:5f:74:c5:63:f0:e3:9e:8f:7d: 6f:98:28:7a:aa:91:00:24:92:1b:1c:ac:32:7d:ae: 81:03:06:58:0f:c1:46:51:6b:86:c7:c5:87:9c:49: c4:4b:25:c0:09:6d:d5:24:09:ea:ad:a7:ff:4e:0d: 8c:38:b3:dd:76:3c:b6:0d:93:26:4c:b4:05:ca:7d: 30:89:08:76:30:66:f4:7d:38:6b:1d:11:a4:bb:3b: ef:14:6a:c4:6c:59:c5:bf:52:da:da:a3:ea:fd:27: 09:23:fb:b6:38:b8:4c:8f:c3:e5:c5:b1:ea:3e:ff: dc:01:e6:73:4f:b2:09:3e:ca:3b:31:c4:54:b3:2b: bb:46:c4:26:53:f3:2c:53:1f:e1:0d:1e:2e:93:2a: e0:f3:b4:fa:d4:21:cf:3b:74:b1:29:27:62:ba:ee: 25:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C5:84:D1:02:4B:23:86:9D:48:B7:69:0B:4F:61:0B:59:A4:2F:8A X509v3 Authority Key Identifier: keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/DA61302A0F0211EDABBE3C6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.244.0/23 IPv6: 2407:940::/32 Signature Algorithm: sha256WithRSAEncryption 51:42:02:73:dc:cb:31:7d:50:62:44:78:b5:ba:6a:06:3d:a6: cf:ee:a5:82:0f:1d:6f:40:ce:6f:8c:b7:6f:74:81:9c:7f:93: 74:38:f9:56:2f:73:9d:dc:54:16:13:57:cd:47:63:d2:8c:f2: b7:d9:b4:68:1a:12:be:fc:6a:2e:02:c7:78:0a:8a:28:41:5d: fe:49:67:56:78:aa:0b:a0:9e:8d:84:bc:f0:72:cf:a0:08:0a: 9f:d4:08:48:84:b1:ca:8f:fa:41:f9:dc:d1:c0:a5:08:63:e8: 02:1c:0c:b9:4e:52:86:a7:69:16:40:2c:8f:2b:cc:04:30:a4: 9a:22:1f:76:6f:0d:de:50:32:b4:80:f2:b3:ac:b4:85:76:58: c8:dd:45:50:9b:e8:0d:94:6c:b1:e3:d5:28:5d:ee:57:58:65: 6f:91:62:e0:a4:2c:7c:08:e9:b5:00:7f:c1:aa:55:d5:5d:ba: c2:e7:e1:95:76:8b:67:21:37:9f:c9:af:49:94:f3:41:e1:29: c4:bb:d2:eb:3a:8b:b0:e6:6a:9e:2d:b7:46:4e:e5:11:78:ca: bb:d4:82:1c:d0:73:c3:ad:21:be:24:8e:31:b8:81:42:3a:29: 65:7e:d7:f2:14:19:f6:ca:b1:c1:1b:29:45:7d:10:72:eb:a3: 3a:48:c3:7b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx Qzg4MzdBQzYwHhcNMjYwMzAxMDIyMTQwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmJiMC1iMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZQAO7nqw8ZZ7jww8ajjMjMuiGZEO3mSm/YLTQHFFeGS+Oi4aEs72VWECJLL uL9+jyKLKHaYSBbqnlYTEsFR4koUvQzOX/bZ1QNkteM7pM/xDL1GnbuGUIw0qEWs 6o1fdMVj8OOej31vmCh6qpEAJJIbHKwyfa6BAwZYD8FGUWuGx8WHnEnESyXACW3V JAnqraf/Tg2MOLPddjy2DZMmTLQFyn0wiQh2MGb0fThrHRGkuzvvFGrEbFnFv1La 2qPq/ScJI/u2OLhMj8PlxbHqPv/cAeZzT7IJPso7McRUsyu7RsQmU/MsUx/hDR4u kyrg87T61CHPO3SxKSdiuu4l2wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJPFhNEC SyOGnUi3aQtPYQtZpC+KMB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk1QzEvQ0JFNkJDNzQwRjAwMTFFREE3NDQwNjZBQzRGOUFFMDIvREE2MTMwMkEw RjAyMTFFREFCQkUzQzZBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6H0MA0EAgACMAcDBQAkBwlAMA0GCSqGSIb3DQEBCwUAA4IBAQBR QgJz3MsxfVBiRHi1umoGPabP7qWCDx1vQM5vjLdvdIGcf5N0OPlWL3Od3FQWE1fN R2PSjPK32bRoGhK+/GouAsd4CoooQV3+SWdWeKoLoJ6NhLzwcs+gCAqf1AhIhLHK j/pB+dzRwKUIY+gCHAy5TlKGp2kWQCyPK8wEMKSaIh92bw3eUDK0gPKzrLSFdljI 3UVQm+gNlGyx49UoXe5XWGVvkWLgpCx8COm1AH/BqlXVXbrC5+GVdotnITefya9J lPNB4SnEu9LrOouw5mqeLbdGTuUReMq71IIc0HPDrSG+JI4xuIFCOillftfyFBn2 yrHBGylFfRBy66M6SMN7 -----END CERTIFICATE-----Generated at Mon Mar 2 15:27:04 2026 by rpki-client