$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/06CD7DF074F211F09D01EA15C4F9AE02.roa File: 06CD7DF074F211F09D01EA15C4F9AE02.roa (raw, json) Hash identifier: w0Ye2OyPtt1IGX1lChpvNypV2Tkw2qxt2TeDVBCk0eU= Subject key identifier: 98:06:BF:8E:C1:85:BA:90:08:04:4D:E4:4E:40:2C:D8:19:EE:F5:61 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 0256 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/06CD7DF074F211F09D01EA15C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:07:02 +0000 ROA not before: Fri 09 Jan 2026 02:21:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 398478 IP address blocks: 103.88.188.0/22 maxlen: 22 116.204.236.0/22 maxlen: 22 116.204.236.0/24 maxlen: 24 116.204.237.0/24 maxlen: 24 116.204.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Jan 9 02:21:45 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a45616-8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:72:f2:22:c8:24:6b:16:07:3c:cd:e2:94: 91:bd:b6:59:bd:36:0e:56:29:99:f4:c5:96:ed:b6: 9f:e3:e6:ea:89:64:de:f9:75:f5:68:de:f3:16:30: 54:60:36:49:5a:d3:f7:81:10:03:78:e4:e2:ef:70: 84:a1:41:3b:00:54:a1:70:e2:2c:0e:c1:cb:31:2f: 30:ef:3f:07:c9:a7:93:fd:7c:57:76:0b:a3:e5:89: 0e:f5:99:aa:90:03:2b:6f:8f:16:db:8a:8f:a2:69: ca:40:4f:dd:4f:13:79:ae:1b:f2:0f:59:e3:58:78: 27:31:a4:45:36:5d:f3:65:87:a9:55:2c:7d:b4:45: ed:65:7b:57:5b:e8:06:b7:3a:45:46:35:b7:1d:a2: 67:2b:79:92:05:4b:75:f8:d1:fe:c4:59:ad:20:aa: ac:31:7a:d7:1d:5d:3c:21:eb:33:c5:b2:8e:64:3f: 0c:0b:8b:df:33:1d:1f:35:65:ab:d3:72:96:d0:ef: 11:4f:bb:c6:4b:72:02:da:53:df:58:51:59:93:af: 21:ad:8c:89:31:6c:7b:71:70:b7:f8:3a:8f:59:50: 1d:a8:99:a1:7b:fa:28:ef:47:f6:b4:e4:8d:64:f0: ca:65:57:e2:43:72:81:13:af:56:0d:46:b5:ed:41: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:06:BF:8E:C1:85:BA:90:08:04:4D:E4:4E:40:2C:D8:19:EE:F5:61 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/06CD7DF074F211F09D01EA15C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.188.0/22 116.204.236.0/22 Signature Algorithm: sha256WithRSAEncryption 40:f3:68:36:60:08:27:54:7f:4f:82:2a:0d:d1:e0:e4:8c:90: 27:fc:cf:41:6b:b7:95:db:25:c2:4e:d8:ce:2d:20:25:2b:a6: 0c:0a:0c:f7:08:b9:b0:90:e2:af:66:11:14:cd:eb:9d:de:f6: c6:97:23:45:b5:59:4c:1a:4f:21:93:1c:0e:79:95:ef:d8:89: 75:f7:b8:00:93:83:68:39:1b:71:e5:e0:04:1c:26:0d:87:d0: 66:43:59:fb:73:b3:70:27:fc:f1:c8:46:c7:44:71:28:f1:cd: 28:35:b7:d1:bd:4b:31:44:b8:cf:02:7c:92:5b:af:a3:10:7a: d9:2e:48:3e:04:62:e3:a2:7a:96:93:c6:7c:cf:e3:41:5e:bf: c8:ef:df:5f:f7:2d:2d:6c:41:09:fd:54:8d:c5:b9:a2:3e:af: 57:ae:fd:cc:1f:70:7d:71:28:28:12:b4:09:dc:2e:1d:38:f2: 1a:74:d6:6e:f8:95:e8:a8:6f:36:9a:1e:05:bf:8d:8e:27:14: 2e:4e:9f:cd:43:30:4e:52:85:3c:14:33:f1:63:c7:cb:dd:cf: 4e:bb:b7:13:b0:3c:f4:73:dc:77:ee:7f:bb:84:c2:65:99:a2: 03:5e:3f:56:61:2e:9a:f7:f4:cb:b2:0b:86:70:29:ac:56:aa: 03:1f:61:23 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjYwMTA5MDIyMTQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTYxNi04ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUxy8iLIJGsWBzzN4pSRvbZZvTYOVimZ9MWW7baf4+bqiWTe+XX1aN7zFjBU YDZJWtP3gRADeOTi73CEoUE7AFShcOIsDsHLMS8w7z8HyaeT/XxXdguj5YkO9Zmq kAMrb48W24qPomnKQE/dTxN5rhvyD1njWHgnMaRFNl3zZYepVSx9tEXtZXtXW+gG tzpFRjW3HaJnK3mSBUt1+NH+xFmtIKqsMXrXHV08IeszxbKOZD8MC4vfMx0fNWWr 03KW0O8RT7vGS3IC2lPfWFFZk68hrYyJMWx7cXC3+DqPWVAdqJmhe/oo70f2tOSN ZPDKZVfiQ3KBE69WDUa17UEeawIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJgGv47B hbqQCARN5E5ALNgZ7vVhMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYyQ0QvNEZDQkFDMDBENDRDMTFFRDg2MjcxNTgyQzRGOUFFMDIvMDZDRDdERjA3 NEYyMTFGMDlEMDFFQTE1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ1i8AwQCdMzsMA0GCSqGSIb3DQEBCwUAA4IBAQBA82g2YAgnVH9P gioN0eDkjJAn/M9Ba7eV2yXCTtjOLSAlK6YMCgz3CLmwkOKvZhEUzeud3vbGlyNF tVlMGk8hkxwOeZXv2Il197gAk4NoORtx5eAEHCYNh9BmQ1n7c7NwJ/zxyEbHRHEo 8c0oNbfRvUsxRLjPAnySW6+jEHrZLkg+BGLjonqWk8Z8z+NBXr/I799f9y0tbEEJ /VSNxbmiPq9Xrv3MH3B9cSgoErQJ3C4dOPIadNZu+JXoqG82mh4Fv42OJxQuTp/N QzBOUoU8FDPxY8fL3c9Ou7cTsDz0c9x37n+7hMJlmaIDXj9WYS6a9/TLsguGcCms VqoDH2Ej -----END CERTIFICATE-----Generated at Mon Mar 2 03:17:50 2026 by rpki-client