$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/8EB98374776E11ECA05F7133C4F9AE02.roa File: 8EB98374776E11ECA05F7133C4F9AE02.roa (raw, json) Hash identifier: 60BQUVkPwN7PgmZagFnNzoUXwo9X30Z5ovSbuJUIlzs= Subject key identifier: 6D:41:8E:84:2F:E2:63:D5:E0:CC:6E:6B:15:15:25:D0:56:C9:0E:D1 Certificate issuer: /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Certificate serial: 048B Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/8EB98374776E11ECA05F7133C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:59:46 +0000 ROA not before: Wed 27 Aug 2025 01:04:56 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133929 IP address blocks: 103.99.72.0/22 maxlen: 22 103.99.72.0/23 maxlen: 23 103.99.72.0/24 maxlen: 24 103.99.73.0/24 maxlen: 24 103.99.74.0/23 maxlen: 23 103.99.74.0/24 maxlen: 24 103.99.75.0/24 maxlen: 24 2001:df2:5100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1163 (0x48b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272 Validity Not Before: Aug 27 01:04:56 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a40e12-cbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:f5:4f:f0:72:7f:41:55:92:5d:9a:fd:58: cf:52:92:cc:51:5e:41:20:b5:3f:f3:76:ad:fd:18: 08:18:60:fd:f0:6a:20:d2:9b:7c:02:16:31:73:45: 89:aa:18:59:f8:e2:3e:ca:40:0f:5a:af:45:67:9c: 6a:f5:db:6e:e3:47:b1:fc:59:31:ba:a6:fa:5c:56: 54:9f:78:50:4b:40:9f:f7:43:e3:70:ed:cc:3d:47: dc:5c:8f:5b:4f:1d:23:8d:01:9c:58:51:34:53:df: af:c0:e4:ad:d8:14:34:50:c1:81:af:aa:50:73:67: 11:41:20:ed:95:48:10:34:e4:e3:3f:46:88:ed:be: b7:94:e7:db:48:80:5c:6b:44:45:4f:2f:40:34:45: 6f:15:b5:79:6e:cd:76:ab:00:06:1d:c4:15:59:78: d4:83:41:6e:8e:e3:9f:8a:e3:d4:6d:b6:99:64:7a: 45:ee:00:78:23:63:f0:58:b2:a0:8a:03:dd:17:f3: 0d:57:94:e1:e9:29:17:72:af:18:d0:db:0a:79:b8: a1:5c:91:c6:43:e1:0a:b6:bf:7c:8f:d3:e4:19:d0: 67:ad:83:61:e2:9c:8f:b3:3d:9d:61:25:c6:b1:35: f3:37:66:c1:6e:04:c1:b3:01:90:1a:ff:6d:08:01: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:41:8E:84:2F:E2:63:D5:E0:CC:6E:6B:15:15:25:D0:56:C9:0E:D1 X509v3 Authority Key Identifier: keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/8EB98374776E11ECA05F7133C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.72.0/22 IPv6: 2001:df2:5100::/48 Signature Algorithm: sha256WithRSAEncryption 3b:b1:ae:85:26:d9:39:5f:cd:94:ba:1e:39:49:f7:d9:27:b1: 04:3f:2d:17:56:d6:bf:93:06:5f:44:2d:f0:98:9e:43:af:94: 26:cb:c4:9a:69:d0:8b:f0:03:70:0d:16:eb:fc:b5:ca:e1:03: 9e:1a:19:d0:e1:e6:dd:83:1e:b4:e6:a1:ca:31:ab:72:12:2c: 0d:3e:33:6e:34:c0:5f:10:c0:f9:11:18:43:82:18:b7:a4:fa: 4a:f3:30:e2:1d:4b:20:fd:1d:09:db:0d:c6:58:40:b8:16:41: 8f:bb:f2:f6:9f:50:b5:ab:ea:2b:3e:8e:36:92:87:e3:f8:a9: 43:df:fa:d3:4f:f0:56:cd:78:e9:7b:90:07:82:fe:a6:0a:3b: 56:37:08:2d:3c:44:99:23:90:f3:a9:1f:10:09:d9:a5:3c:4d: f4:5c:45:87:49:0f:4f:9c:2a:ef:8b:3a:2c:57:df:04:81:8e: e1:95:3d:52:d7:5d:4d:ea:83:8a:21:e7:e3:52:bd:56:0d:1a: 1f:a4:6f:ff:03:75:ee:c5:a9:86:d0:02:6b:29:10:1c:6b:4a: 25:3f:04:0f:17:4a:1b:c4:3d:bf:1c:10:20:d8:7e:bb:08:98: 48:3d:14:64:97:4a:ca:6c:9b:27:94:0b:e8:7a:1f:e6:62:b7: ce:4b:14:68 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2 NEJENzgyNzIwHhcNMjUwODI3MDEwNDU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGUxMi1jYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPb1T/Byf0FVkl2a/VjPUpLMUV5BILU/83at/RgIGGD98Gog0pt8AhYxc0WJ qhhZ+OI+ykAPWq9FZ5xq9dtu40ex/Fkxuqb6XFZUn3hQS0Cf90PjcO3MPUfcXI9b Tx0jjQGcWFE0U9+vwOSt2BQ0UMGBr6pQc2cRQSDtlUgQNOTjP0aI7b63lOfbSIBc a0RFTy9ANEVvFbV5bs12qwAGHcQVWXjUg0FujuOfiuPUbbaZZHpF7gB4I2PwWLKg igPdF/MNV5Th6SkXcq8Y0NsKebihXJHGQ+EKtr98j9PkGdBnrYNh4pyPsz2dYSXG sTXzN2bBbgTBswGQGv9tCAFSgQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFG1BjoQv 4mPV4MxuaxUVJdBWyQ7RMB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3 NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA2Q0EvRDJFMDA4NzI3NzZDMTFFQzhFQ0E0NjMzQzRGOUFFMDIvOEVCOTgzNzQ3 NzZFMTFFQ0EwNUY3MTMzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ2NIMA8EAgACMAkDBwAgAQ3yUQAwDQYJKoZIhvcNAQELBQADggEB ADuxroUm2TlfzZS6HjlJ99knsQQ/LRdW1r+TBl9ELfCYnkOvlCbLxJpp0IvwA3AN Fuv8tcrhA54aGdDh5t2DHrTmocoxq3ISLA0+M240wF8QwPkRGEOCGLek+krzMOId SyD9HQnbDcZYQLgWQY+78vafULWr6is+jjaSh+P4qUPf+tNP8FbNeOl7kAeC/qYK O1Y3CC08RJkjkPOpHxAJ2aU8TfRcRYdJD0+cKu+LOixX3wSBjuGVPVLXXU3qg4oh 5+NSvVYNGh+kb/8Dde7FqYbQAmspEBxrSiU/BA8XShvEPb8cECDYfrsImEg9FGSX SspsmyeUC+h6H+Zit85LFGg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:24 2026 by rpki-client