$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/AF5A6ADAC0F411EF88E4255EC4F9AE02.roa File: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (raw, json) Hash identifier: FbF3GSUAuBF+Lu9+Biww40q4aw4ohnbpizYlHh1W2WE= Subject key identifier: 2D:73:23:38:D7:F9:0D:00:4D:5D:AE:6A:B3:5F:0F:85:0A:4A:93:E0 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 0795 Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/AF5A6ADAC0F411EF88E4255EC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:11:39 +0000 ROA not before: Mon 26 Jan 2026 21:18:21 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 134505 IP address blocks: 103.161.104.0/23 maxlen: 23 103.161.104.0/24 maxlen: 24 103.161.105.0/24 maxlen: 24 2001:df4:cdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Jan 26 21:18:21 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a4491b-27df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:ab:69:6c:c6:db:14:e0:a0:6f:06:2b:ae: d4:84:78:24:7f:47:e7:d3:a6:4d:d1:1a:ec:4b:bb: 7f:36:36:ae:ae:37:2a:74:e2:5d:3d:ef:b9:ec:69: af:45:4c:ac:14:82:ed:3c:fd:c8:22:cf:2f:d1:76: 86:10:56:d8:08:7b:61:1b:41:46:6f:56:3b:3b:9b: 2f:8e:9e:73:b9:42:fa:7d:2f:3c:ea:f0:eb:2f:24: 2c:71:ed:74:91:71:ac:0e:11:b7:43:f8:c8:a1:33: 88:a8:1e:84:a0:8f:47:c5:d2:9f:2c:f5:74:78:9f: 01:78:71:e6:40:02:5a:3b:00:01:8b:ed:ae:4e:8b: 7c:c9:d5:f1:f6:e4:6b:e7:05:f9:67:a1:ca:62:89: c3:f9:d7:ac:a7:b6:61:5a:e1:21:55:bd:67:d9:35: f3:fe:68:bc:e7:48:88:f6:b3:a1:9b:81:f3:ad:0c: f7:ec:a8:87:03:13:7f:fd:63:b9:9e:04:0b:24:93: 9b:9f:71:32:4d:e6:54:c0:74:eb:cc:67:3d:82:a2: fb:02:01:56:cf:05:45:a1:cb:9b:5e:f4:96:ef:37: 68:d7:c8:49:58:48:2b:4e:60:39:46:49:14:74:b5: 82:54:9f:10:e9:44:ad:eb:2d:db:36:7d:dc:14:cc: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:73:23:38:D7:F9:0D:00:4D:5D:AE:6A:B3:5F:0F:85:0A:4A:93:E0 X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/AF5A6ADAC0F411EF88E4255EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.104.0/23 IPv6: 2001:df4:cdc0::/48 Signature Algorithm: sha256WithRSAEncryption b6:ff:ce:88:f3:08:26:99:cf:78:f4:03:6c:af:06:d2:63:b0: 8c:a5:a8:47:04:4e:2e:45:62:f4:d3:bd:93:3a:85:60:cd:19: 05:76:57:34:96:10:10:bb:75:42:18:bc:92:26:96:00:5e:a2: a3:bf:c4:a3:1a:62:a6:f5:24:ef:4e:01:0d:6f:15:cc:5e:a1: d0:2a:aa:c6:88:e0:48:1f:2c:7c:c2:30:fe:4f:7c:10:5d:1c: 55:5b:46:87:ed:a1:4a:35:c4:2e:53:02:bf:a2:4d:1b:d9:68: 67:c4:44:5d:ca:c3:d4:6c:f0:ee:26:7a:aa:1e:4f:c8:8c:a0: 35:75:15:6f:e9:d0:b1:45:79:56:11:8f:f2:3b:1c:0f:e4:f5: f2:7c:d9:dc:a1:87:43:67:37:fb:7e:be:f5:70:f1:0b:c2:05: 0c:a4:01:c9:4a:68:ae:b4:e3:99:3c:e9:b5:75:73:c2:58:3e: 56:6e:e0:55:31:b3:6f:fc:6f:9c:79:12:5d:a3:c4:2f:31:db: b6:ad:08:9f:7a:e1:61:30:ea:35:bb:a4:6a:49:fd:25:7d:37: 47:9f:2e:d0:a9:82:8c:2e:db:74:5c:bd:b2:cd:a0:cd:13:c9: 36:21:ee:6e:3f:01:69:a4:00:92:d5:59:af:a2:de:05:cb:c3: aa:aa:44:ce -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjYwMTI2MjExODIxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDkxYi0yN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZyraWzG2xTgoG8GK67UhHgkf0fn06ZN0RrsS7t/NjaurjcqdOJdPe+57Gmv RUysFILtPP3IIs8v0XaGEFbYCHthG0FGb1Y7O5svjp5zuUL6fS886vDrLyQsce10 kXGsDhG3Q/jIoTOIqB6EoI9HxdKfLPV0eJ8BeHHmQAJaOwABi+2uTot8ydXx9uRr 5wX5Z6HKYonD+desp7ZhWuEhVb1n2TXz/mi850iI9rOhm4HzrQz37KiHAxN//WO5 ngQLJJObn3EyTeZUwHTrzGc9gqL7AgFWzwVFocubXvSW7zdo18hJWEgrTmA5RkkU dLWCVJ8Q6USt6y3bNn3cFMyCCwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFC1zIzjX +Q0ATV2uarNfD4UKSpPgMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU0RkUvRkVEREMwQzA1MTEzMTFFQkFGMjhDQTBEQzRGOUFFMDIvQUY1QTZBREFD MEY0MTFFRjg4RTQyNTVFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6FoMA8EAgACMAkDBwAgAQ30zcAwDQYJKoZIhvcNAQELBQADggEB ALb/zojzCCaZz3j0A2yvBtJjsIylqEcETi5FYvTTvZM6hWDNGQV2VzSWEBC7dUIY vJImlgBeoqO/xKMaYqb1JO9OAQ1vFcxeodAqqsaI4EgfLHzCMP5PfBBdHFVbRoft oUo1xC5TAr+iTRvZaGfERF3Kw9Rs8O4meqoeT8iMoDV1FW/p0LFFeVYRj/I7HA/k 9fJ82dyhh0NnN/t+vvVw8QvCBQykAclKaK6045k86bV1c8JYPlZu4FUxs2/8b5x5 El2jxC8x27atCJ964WEw6jW7pGpJ/SV9N0efLtCpgowu23RcvbLNoM0TyTYh7m4/ AWmkAJLVWa+i3gXLw6qqRM4= -----END CERTIFICATE-----Generated at Mon Mar 2 16:07:48 2026 by rpki-client