$ rpki-client -vvf rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa File: 2F5ED8E43E1711EA9A272644C4F9AE02.roa (raw, json) Hash identifier: PFnTC09cAoqCoBorNAGMNJ3mW6exO1vhuxEz+nu9KcI= Subject key identifier: 9C:01:5F:3B:95:1F:A0:47:0B:20:E8:97:EE:50:52:42:05:54:34:8B Certificate issuer: /CN=A91B171C/serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Certificate serial: 0BC1 Authority key identifier: 3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:57:58 +0000 ROA not before: Thu 14 Aug 2025 19:59:15 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 58890 IP address blocks: 103.116.180.0/23 maxlen: 24 103.116.182.0/23 maxlen: 24 2402:fec0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B171C, serialNumber=3FB6F6D06658386C237B8D140DAD15B2838BB5CA Validity Not Before: Aug 14 19:59:15 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a445e6-162c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:57:29:de:59:d6:f8:4f:36:77:78:43:38:a1: de:3f:df:05:6d:86:2e:9e:7e:67:a0:60:5d:79:71: 34:e1:b5:57:06:1f:ea:cc:20:86:55:d0:eb:3b:4f: b7:ab:2e:1d:b4:15:30:ef:e4:5e:92:3a:e2:15:46: e6:66:99:fa:78:5e:13:fa:c9:32:87:9e:07:b8:da: d3:06:73:9b:f0:ec:51:83:c9:b5:fb:16:0f:a8:db: 95:f5:d2:6b:9f:a8:a4:83:10:fc:34:dc:33:db:00: 74:62:57:98:19:dc:b5:93:d6:e7:6f:50:79:24:23: 50:28:8a:6f:d1:89:52:e3:92:17:d8:b3:85:c5:81: 41:dd:bc:50:4d:50:36:67:6c:2f:e5:65:a2:4b:1d: 50:33:e1:54:80:73:18:b5:86:e1:ce:7c:c1:89:43: 3d:3f:e0:16:68:85:c4:84:a3:ce:83:86:f7:d7:08: b0:37:1f:4a:b6:4d:af:a3:45:4e:10:e8:de:17:8a: f2:6a:89:17:a8:47:b8:24:0d:07:e9:57:e7:a5:7b: ad:23:cf:21:24:47:ce:58:88:54:66:8d:13:4b:fa: 01:b1:8a:b9:9c:9e:fa:90:b6:7f:b8:bd:9e:de:6a: 23:3a:69:fb:37:c2:82:b3:6f:a0:ca:03:53:22:c9: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:5F:3B:95:1F:A0:47:0B:20:E8:97:EE:50:52:42:05:54:34:8B X509v3 Authority Key Identifier: keyid:3F:B6:F6:D0:66:58:38:6C:23:7B:8D:14:0D:AD:15:B2:83:8B:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/P7b20GZYOGwje40UDa0VsoOLtco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7b20GZYOGwje40UDa0VsoOLtco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B171C/E7EF08363E1511EAB371A541C4F9AE02/2F5ED8E43E1711EA9A272644C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.116.180.0/22 IPv6: 2402:fec0::/32 Signature Algorithm: sha256WithRSAEncryption 5e:c7:00:31:46:9c:71:21:df:30:0e:0d:18:cb:19:f3:9a:49: c5:ec:69:b1:7e:c6:00:5b:21:d0:b8:ff:a3:fe:4b:cb:8f:a5: e4:41:86:43:db:e9:49:f6:2b:6f:e7:ba:af:e7:e9:bc:ef:76: 45:b6:12:ba:35:63:d5:88:e7:d7:a6:eb:c6:c4:c9:4e:51:00: df:08:fc:3f:30:03:50:ad:64:e1:b0:15:61:21:09:3f:84:17: 90:dc:b1:1f:79:1c:6a:e7:d7:3f:66:7f:57:02:d6:81:2c:4f: b3:25:84:6d:66:a9:7d:92:43:3b:bc:ce:5b:9b:8f:89:21:1b: 87:b2:fc:83:65:7b:2b:fc:71:6b:e0:27:3c:eb:1c:2f:31:fa: f4:e6:13:b9:2e:d7:cd:4a:3d:37:69:66:eb:52:3c:f2:22:00: 7c:d9:62:8a:0f:9c:f6:ee:1f:ed:49:a9:a8:5f:fd:54:58:4a: ba:4e:d2:d6:fe:a5:c3:49:bb:6d:b1:c0:8d:02:68:da:42:a2: e3:91:ee:bd:38:d0:e0:bf:ca:dc:81:01:1e:6b:83:a7:9b:17: bf:03:99:22:2c:96:b1:f0:cf:dc:88:73:86:68:b7:36:69:09: 29:7c:ab:3b:64:3f:5d:bf:7a:6b:2f:99:d3:93:a6:a5:3d:87: 86:9f:aa:b1 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE3MUMxMTAvBgNVBAUTKDNGQjZGNkQwNjY1ODM4NkMyMzdCOEQxNDBEQUQxNUIy ODM4QkI1Q0EwHhcNMjUwODE0MTk1OTE1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDVlNi0xNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Vcp3lnW+E82d3hDOKHeP98FbYYunn5noGBdeXE04bVXBh/qzCCGVdDrO0+3 qy4dtBUw7+RekjriFUbmZpn6eF4T+skyh54HuNrTBnOb8OxRg8m1+xYPqNuV9dJr n6ikgxD8NNwz2wB0YleYGdy1k9bnb1B5JCNQKIpv0YlS45IX2LOFxYFB3bxQTVA2 Z2wv5WWiSx1QM+FUgHMYtYbhznzBiUM9P+AWaIXEhKPOg4b31wiwNx9Ktk2vo0VO EOjeF4ryaokXqEe4JA0H6VfnpXutI88hJEfOWIhUZo0TS/oBsYq5nJ76kLZ/uL2e 3mojOmn7N8KCs2+gygNTIsmJ1QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJwBXzuV H6BHCyDol+5QUkIFVDSLMB8GA1UdIwQYMBaAFD+29tBmWDhsI3uNFA2tFbKDi7XK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTcxQy9FN0VGMDgzNjNF MTUxMUVBQjM3MUE1NDFDNEY5QUUwMi9QN2IyMEdaWU9Hd2plNDBVRGEwVnNvT0x0 Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3YjIwR1pZT0d3amU0MFVEYTBWc29PTHRjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjE3MUMvRTdFRjA4MzYzRTE1MTFFQUIzNzFBNTQxQzRGOUFFMDIvMkY1RUQ4RTQz RTE3MTFFQTlBMjcyNjQ0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3S0MA0EAgACMAcDBQAkAv7AMA0GCSqGSIb3DQEBCwUAA4IBAQBe xwAxRpxxId8wDg0YyxnzmknF7GmxfsYAWyHQuP+j/kvLj6XkQYZD2+lJ9itv57qv 5+m873ZFthK6NWPViOfXpuvGxMlOUQDfCPw/MANQrWThsBVhIQk/hBeQ3LEfeRxq 59c/Zn9XAtaBLE+zJYRtZql9kkM7vM5bm4+JIRuHsvyDZXsr/HFr4Cc86xwvMfr0 5hO5LtfNSj03aWbrUjzyIgB82WKKD5z27h/tSamoX/1UWEq6TtLW/qXDSbttscCN AmjaQqLjke69ONDgv8rcgQEea4Onmxe/A5kiLJax8M/ciHOGaLc2aQkpfKs7ZD9d v3prL5nTk6alPYeGn6qx -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:46 2026 by rpki-client