$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa File: 6B096E780B8511EA97C80D52C4F9AE02.roa (raw, json) Hash identifier: 510GpCnNhZrFSfKUYJRjGWFtGydNMPzOMZZI1kU8Y5E= Subject key identifier: 34:61:5B:59:C6:F3:96:34:29:D7:5A:38:2C:33:DA:39:F8:2A:7E:07 Certificate issuer: /CN=A91B3AD7/serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Certificate serial: 0CD4 Authority key identifier: 9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:29:09 +0000 ROA not before: Fri 19 Dec 2025 07:33:16 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138346 IP address blocks: 103.123.168.0/22 maxlen: 22 103.123.168.0/23 maxlen: 23 103.123.168.0/24 maxlen: 24 103.123.169.0/24 maxlen: 24 103.123.170.0/24 maxlen: 24 103.123.171.0/24 maxlen: 24 2403:a540::/32 maxlen: 32 2403:a540::/33 maxlen: 33 2403:a540::/34 maxlen: 34 2403:a540::/40 maxlen: 40 2403:a540::/48 maxlen: 48 2403:a540:2::/48 maxlen: 48 2403:a540:3::/48 maxlen: 48 2403:a540:4::/48 maxlen: 48 2403:a540:5::/48 maxlen: 48 2403:a540:6::/48 maxlen: 48 2403:a540:7::/48 maxlen: 48 2403:a540:8::/48 maxlen: 48 2403:a540:9::/48 maxlen: 48 2403:a540:a::/48 maxlen: 48 2403:a540:b::/48 maxlen: 48 2403:a540:204::/48 maxlen: 48 2403:a540:20f::/48 maxlen: 48 2403:a540:21f::/48 maxlen: 48 2403:a540:4000::/34 maxlen: 34 2403:a540:8000::/33 maxlen: 33 2403:a540:8000::/34 maxlen: 34 2403:a540:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3AD7, serialNumber=9DE78A090B6E082C9FB00CAA5E2C913256C3C876 Validity Not Before: Dec 19 07:33:16 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46955-5ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:dd:a7:e6:16:05:fe:d7:07:ad:4c:4f:4c: 30:81:90:55:52:5d:ed:a0:ed:19:fe:cf:24:04:49: cb:b5:46:9a:45:60:cb:2a:de:11:75:4d:98:c5:23: 47:9e:7f:36:21:af:66:96:9e:c8:cd:3a:ac:9e:13: e5:af:a4:3c:7f:16:3d:53:1c:fb:93:e7:14:c7:f3: 61:7f:32:83:6b:8a:4b:ae:42:59:e1:17:21:87:9f: da:ee:67:fa:9d:20:d8:3d:f5:22:56:f8:62:73:a4: dc:89:8a:bf:28:e2:41:16:28:4d:cf:44:f2:fd:85: 8a:aa:b7:ce:09:ba:10:06:13:b1:a5:bf:5b:2b:35: 9f:7c:5d:65:a6:b0:7d:b5:dd:86:5f:4a:3d:a3:8a: a1:e7:9a:2b:48:0e:12:0c:7f:3b:61:e6:48:40:78: 7f:1a:55:0b:a1:e3:04:e0:30:09:d5:97:39:b9:8c: b0:cf:77:de:31:5b:eb:f2:0e:af:13:4f:c4:12:8e: dd:54:0c:eb:d2:2c:82:a9:33:53:ef:8e:4f:51:c8: b2:88:aa:26:44:ba:74:65:2b:4f:de:7f:ab:7b:d3: a6:42:97:04:f6:e4:f5:30:b5:b0:b6:79:2b:5d:c1: 2b:22:70:a1:7c:57:cb:0f:75:38:f5:38:08:f1:34: 1d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:61:5B:59:C6:F3:96:34:29:D7:5A:38:2C:33:DA:39:F8:2A:7E:07 X509v3 Authority Key Identifier: keyid:9D:E7:8A:09:0B:6E:08:2C:9F:B0:0C:AA:5E:2C:91:32:56:C3:C8:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/neeKCQtuCCyfsAyqXiyRMlbDyHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neeKCQtuCCyfsAyqXiyRMlbDyHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3AD7/07CF8D7A0B8411EAA216784FC4F9AE02/6B096E780B8511EA97C80D52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.123.168.0/22 IPv6: 2403:a540::/32 Signature Algorithm: sha256WithRSAEncryption 8c:82:92:9b:a6:5f:a0:68:08:a3:0a:12:a2:6a:03:bb:1f:6c: 0f:49:cc:d1:57:23:40:56:0a:98:3c:f6:46:be:ac:02:6a:e5: e2:56:8b:54:9d:60:9c:1f:d4:69:55:04:e9:1f:a4:06:7b:a7: 7e:f5:4d:ce:4a:03:21:99:0e:8d:57:6b:45:eb:6d:15:d3:16: 17:9d:6f:4b:45:46:ee:4f:a2:67:4d:17:b8:a6:05:1f:25:53: 0c:9c:fe:e4:2f:46:30:62:dd:4f:1e:01:e5:63:20:8d:9d:23: 36:51:d6:b8:7f:a1:0f:fc:28:17:82:dc:0a:49:34:ca:80:a2: 40:33:c5:e3:c8:cf:74:96:1e:fd:19:6e:25:be:a5:59:1f:b6: 05:0e:a5:46:40:a7:91:4e:a4:6a:20:b0:76:a9:30:2e:97:5c: 9a:03:19:fb:07:97:62:d3:6c:5e:d5:b2:9a:4b:47:b3:0b:7e: 87:da:38:3e:8f:bf:df:18:1c:d9:18:2c:55:29:78:ee:46:34: 16:7c:3a:47:af:aa:ab:4f:74:16:c4:ec:84:9f:ed:c7:bd:28: 0e:76:f5:77:4a:83:bc:5c:15:e0:14:f6:9d:2f:ca:23:7b:db: 8b:92:b0:39:10:f9:a9:60:fc:0f:c9:a0:bd:cc:3b:3a:a3:dc: af:be:12:75 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNBRDcxMTAvBgNVBAUTKDlERTc4QTA5MEI2RTA4MkM5RkIwMENBQTVFMkM5MTMy NTZDM0M4NzYwHhcNMjUxMjE5MDczMzE2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njk1NS01ZWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA61rdp+YWBf7XB61MT0wwgZBVUl3toO0Z/s8kBEnLtUaaRWDLKt4RdU2YxSNH nn82Ia9mlp7IzTqsnhPlr6Q8fxY9Uxz7k+cUx/NhfzKDa4pLrkJZ4Rchh5/a7mf6 nSDYPfUiVvhic6TciYq/KOJBFihNz0Ty/YWKqrfOCboQBhOxpb9bKzWffF1lprB9 td2GX0o9o4qh55orSA4SDH87YeZIQHh/GlULoeME4DAJ1Zc5uYywz3feMVvr8g6v E0/EEo7dVAzr0iyCqTNT745PUciyiKomRLp0ZStP3n+re9OmQpcE9uT1MLWwtnkr XcErInChfFfLD3U49TgI8TQdLwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFDRhW1nG 85Y0KddaOCwz2jn4Kn4HMB8GA1UdIwQYMBaAFJ3nigkLbggsn7AMql4skTJWw8h2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0FENy8wN0NGOEQ3QTBC ODQxMUVBQTIxNjc4NEZDNEY5QUUwMi9uZWVLQ1F0dUNDeWZzQXlxWGl5Uk1sYkR5 SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lZUtDUXR1Q0N5ZnNBeXFYaXlSTWxiRHlIWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNBRDcvMDdDRjhEN0EwQjg0MTFFQUEyMTY3ODRGQzRGOUFFMDIvNkIwOTZFNzgw Qjg1MTFFQTk3QzgwRDUyQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3uoMA0EAgACMAcDBQAkA6VAMA0GCSqGSIb3DQEBCwUAA4IBAQCM gpKbpl+gaAijChKiagO7H2wPSczRVyNAVgqYPPZGvqwCauXiVotUnWCcH9RpVQTp H6QGe6d+9U3OSgMhmQ6NV2tF620V0xYXnW9LRUbuT6JnTRe4pgUfJVMMnP7kL0Yw Yt1PHgHlYyCNnSM2Uda4f6EP/CgXgtwKSTTKgKJAM8XjyM90lh79GW4lvqVZH7YF DqVGQKeRTqRqILB2qTAul1yaAxn7B5di02xe1bKaS0ezC36H2jg+j7/fGBzZGCxV KXjuRjQWfDpHr6qrT3QWxOyEn+3HvSgOdvV3SoO8XBXgFPadL8oje9uLkrA5EPmp YPwPyaC9zDs6o9yvvhJ1 -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:01 2026 by rpki-client