$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa File: C66D2D8C467B11EA9717DF7CC4F9AE02.roa (raw, json) Hash identifier: neCLfyxIjMZ9iLTUkHrvwgW7vvikcScIptIMYyahCcY= Subject key identifier: 19:32:DE:27:90:1F:71:7E:2A:83:F0:88:DE:16:80:A8:6F:AA:B6:0D Certificate issuer: /CN=A91AB384/serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Certificate serial: 0BAA Authority key identifier: 8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:44:52 +0000 ROA not before: Fri 16 Jan 2026 19:16:08 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133938 IP address blocks: 103.48.119.0/24 maxlen: 24 103.108.140.0/24 maxlen: 24 103.132.96.0/24 maxlen: 24 2404:2f40::/32 maxlen: 32 2404:2f40::/36 maxlen: 36 2404:2f40:1000::/36 maxlen: 36 2404:2f40:2000::/36 maxlen: 36 2404:2f40:3000::/36 maxlen: 36 2404:2f40:4000::/36 maxlen: 36 2404:2f40:5000::/36 maxlen: 36 2404:2f40:6000::/36 maxlen: 36 2404:2f40:7000::/36 maxlen: 36 2404:2f40:8000::/36 maxlen: 36 2404:2f40:9000::/36 maxlen: 36 2404:2f40:a000::/36 maxlen: 36 2404:2f40:b000::/36 maxlen: 36 2404:2f40:c000::/36 maxlen: 36 2404:2f40:d000::/36 maxlen: 36 2404:2f40:e000::/36 maxlen: 36 2404:2f40:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:47:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2986 (0xbaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB384, serialNumber=8C9F44077CC51DB0948FB295F0CA50FEE006254B Validity Not Before: Jan 16 19:16:08 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a450e4-e2a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:9d:00:a7:93:4c:60:e9:bf:43:cc:ee:f5: 05:ea:6d:50:6a:e4:06:e0:be:40:e7:f5:dd:cd:68: 59:56:00:9d:19:ff:2f:4a:88:f6:2e:a7:b8:58:f1: 82:28:c2:4f:92:ae:2f:52:6d:7d:52:8f:dd:a6:61: ad:bf:75:fc:69:89:a8:a9:8a:42:2b:79:87:f9:63: 1f:0e:bc:1c:b6:24:44:a0:7b:93:e0:51:07:98:ba: d4:a1:cb:28:e0:3e:df:77:f9:20:f2:f4:6a:5b:b7: 07:ae:6e:8b:98:03:80:f8:56:bf:c6:01:7d:d0:dc: 0a:e1:9f:6f:2a:69:ae:2f:46:f8:8b:07:68:a1:00: 8a:2e:4c:fe:b4:66:8b:a2:c4:d9:a9:62:b2:e8:3f: 4c:2d:72:50:8a:56:8b:1b:ca:87:cf:cc:05:68:b2: 9e:3f:c5:bc:27:1d:ac:23:b0:07:fa:40:a4:8a:57: 41:02:e5:63:63:e4:8b:8c:98:9b:15:cf:85:f7:84: 05:01:16:d9:cc:61:fd:28:49:32:6c:20:d9:5c:9b: b5:e0:35:6b:0e:d3:4c:70:1f:c0:9d:70:04:f1:23: 43:c5:ae:ad:78:bb:74:44:36:30:33:51:2a:05:5f: 0c:68:6f:98:3c:8e:64:6b:13:35:18:f5:0c:5f:15: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:DE:27:90:1F:71:7E:2A:83:F0:88:DE:16:80:A8:6F:AA:B6:0D X509v3 Authority Key Identifier: keyid:8C:9F:44:07:7C:C5:1D:B0:94:8F:B2:95:F0:CA:50:FE:E0:06:25:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJ9EB3zFHbCUj7KV8MpQ_uAGJUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB384/BF4BD458448311EA8EBC6D25C4F9AE02/C66D2D8C467B11EA9717DF7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.48.119.0/24 103.108.140.0/24 103.132.96.0/24 IPv6: 2404:2f40::/32 Signature Algorithm: sha256WithRSAEncryption 06:48:fc:8c:c8:6e:65:2a:a8:c6:a9:a9:3f:f7:a4:cd:76:32: 53:3a:f8:8e:9f:6c:be:24:e5:eb:d9:28:ab:ce:8e:b3:30:90: cc:fc:67:c3:46:b5:eb:aa:be:c8:a0:45:06:24:6d:c0:24:f7: 09:a0:d4:a1:07:97:32:9b:a0:c0:33:55:fd:02:bf:be:d6:3d: ea:4d:e0:5a:f0:e1:2c:6c:d1:c1:80:53:c2:78:c8:20:2f:d3: d1:07:7c:09:f7:55:8c:3c:b9:4a:55:ac:a4:53:11:18:91:a2: 5d:d9:50:33:ac:1f:9b:fa:ec:ab:50:1d:b5:57:e1:ce:95:09: a9:2a:76:73:c6:77:e5:56:aa:d0:e6:71:19:af:a7:9b:d1:42: a9:af:6a:c2:aa:58:31:2c:6c:cb:7a:8c:49:4a:1e:03:9d:d3: df:c3:94:d6:91:7c:97:1e:43:0b:f9:60:c2:34:95:fb:c5:4c: e1:3b:02:3d:4c:00:b3:1f:b0:94:33:a2:ca:67:34:ed:db:e6: 2e:be:cc:a7:00:06:7c:e0:51:8c:3f:76:d9:4e:bd:d1:72:58: 72:96:a8:30:8d:9f:b6:a2:f1:11:40:ed:1b:0d:f3:46:6d:c9: e6:27:b0:36:b4:b0:c7:f7:ac:16:12:6a:1a:e4:e2:af:51:be: b5:9f:04:57 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICC6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzODQxMTAvBgNVBAUTKDhDOUY0NDA3N0NDNTFEQjA5NDhGQjI5NUYwQ0E1MEZF RTAwNjI1NEIwHhcNMjYwMTE2MTkxNjA4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTBlNC1lMmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWSdAKeTTGDpv0PM7vUF6m1QauQG4L5A5/XdzWhZVgCdGf8vSoj2Lqe4WPGC KMJPkq4vUm19Uo/dpmGtv3X8aYmoqYpCK3mH+WMfDrwctiREoHuT4FEHmLrUocso 4D7fd/kg8vRqW7cHrm6LmAOA+Fa/xgF90NwK4Z9vKmmuL0b4iwdooQCKLkz+tGaL osTZqWKy6D9MLXJQilaLG8qHz8wFaLKeP8W8Jx2sI7AH+kCkildBAuVjY+SLjJib Fc+F94QFARbZzGH9KEkybCDZXJu14DVrDtNMcB/AnXAE8SNDxa6teLt0RDYwM1Eq BV8MaG+YPI5kaxM1GPUMXxWP7wIDAQABo4ICezCCAncwHQYDVR0OBBYEFBky3ieQ H3F+KoPwiN4WgKhvqrYNMB8GA1UdIwQYMBaAFIyfRAd8xR2wlI+ylfDKUP7gBiVL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjM4NC9CRjRCRDQ1ODQ0 ODMxMUVBOEVCQzZEMjVDNEY5QUUwMi9qSjlFQjN6RkhiQ1VqN0tWOE1wUV91QUdK VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pKOUVCM3pGSGJDVWo3S1Y4TXBRX3VBR0pVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIzODQvQkY0QkQ0NTg0NDgzMTFFQThFQkM2RDI1QzRGOUFFMDIvQzY2RDJEOEM0 NjdCMTFFQTk3MTdERjdDQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQAZzB3AwQAZ2yMAwQAZ4RgMA0EAgACMAcDBQAkBC9AMA0GCSqGSIb3 DQEBCwUAA4IBAQAGSPyMyG5lKqjGqak/96TNdjJTOviOn2y+JOXr2Sirzo6zMJDM /GfDRrXrqr7IoEUGJG3AJPcJoNShB5cym6DAM1X9Ar++1j3qTeBa8OEsbNHBgFPC eMggL9PRB3wJ91WMPLlKVaykUxEYkaJd2VAzrB+b+uyrUB21V+HOlQmpKnZzxnfl VqrQ5nEZr6eb0UKpr2rCqlgxLGzLeoxJSh4DndPfw5TWkXyXHkML+WDCNJX7xUzh OwI9TACzH7CUM6LKZzTt2+YuvsynAAZ84FGMP3bZTr3RclhylqgwjZ+2ovERQO0b DfNGbcnmJ7A2tLDH96wWEmoa5OKvUb61nwRX -----END CERTIFICATE-----Generated at Mon Mar 2 13:01:52 2026 by rpki-client