$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/2BC67A2A346711EF9EEB0F52C4F9AE02.roa File: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (raw, json) Hash identifier: QKYaxLpX/SQs5/c2F5OMS0OrA2VZBlIsKBf0LDbK85o= Subject key identifier: CE:30:A6:E2:3C:18:49:A4:A0:F8:91:E1:FE:F1:0B:B9:AB:BF:9C:B3 Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Certificate serial: 0729 Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/2BC67A2A346711EF9EEB0F52C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:29:11 +0000 ROA not before: Sun 02 Nov 2025 22:11:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138995 IP address blocks: 103.101.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD Validity Not Before: Nov 2 22:11:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a47767-e75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:0f:aa:9f:9f:58:d4:b5:17:51:4b:18:67: c2:e9:78:b1:ee:7e:f6:9f:14:68:dd:e2:fe:eb:99: fe:0c:16:eb:ea:ec:0d:04:ed:df:a5:94:7e:1b:12: 21:03:fe:47:a3:38:2d:f6:bf:27:26:fa:51:48:ec: ba:cc:d3:2b:04:40:88:9a:41:39:6c:cb:47:2c:78: eb:d3:d9:34:0f:69:7a:ab:52:6d:2a:8b:f7:5a:16: 60:ec:1e:66:6d:2c:15:e7:a6:ee:65:3e:b3:45:3b: 81:2b:37:e4:21:75:8c:4c:7d:ad:f8:92:f0:a2:ad: 8b:d9:3c:47:6c:84:0b:95:4d:6d:a9:9e:15:42:95: 10:68:ea:32:91:80:58:43:bd:9e:3f:ef:7e:5e:b8: 2c:d3:ef:72:a7:68:40:83:a6:00:22:02:7c:95:d3: 93:e5:e1:bb:62:9d:82:38:a5:2e:6e:ce:0d:7f:7a: 8a:1e:4e:f0:05:0e:54:95:31:bc:15:be:9c:ce:63: 99:47:2e:70:30:f7:93:19:1f:44:1a:ed:b8:53:10: 1e:34:66:94:89:09:11:c7:e0:7f:ea:0c:45:81:96: 2a:83:ef:0e:f6:a2:4d:0d:4e:98:8c:92:ed:0e:b5: 7d:fb:96:e2:3e:ef:8b:8c:47:3b:d8:90:1a:42:63: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:30:A6:E2:3C:18:49:A4:A0:F8:91:E1:FE:F1:0B:B9:AB:BF:9C:B3 X509v3 Authority Key Identifier: keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/2BC67A2A346711EF9EEB0F52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.191.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d9:b5:e6:4e:b3:4f:12:83:f8:0e:06:a2:75:a7:1b:74:58: f3:8a:23:64:f1:28:79:f1:8d:10:54:35:97:1b:f1:80:81:0d: 44:83:e1:ed:b6:fd:1e:55:ec:78:4b:37:25:fb:5a:56:d4:96: e6:c6:2f:96:7c:62:7f:3c:5a:81:64:03:93:d2:6d:c2:e7:92: 21:f9:bf:1f:17:83:cc:bf:62:d9:bb:1e:2d:63:ee:c5:88:76: cf:41:28:2a:90:2d:6d:86:6d:fc:27:19:07:13:21:43:2b:0c: 85:27:85:e4:b2:f8:7f:a1:87:f5:db:1e:a4:57:4e:b0:b2:32: 38:5a:e2:42:d7:4d:85:13:38:56:a8:5e:0b:7e:55:33:51:34: cb:04:9b:47:3c:76:00:d7:f6:c2:8e:da:5e:46:7e:63:d3:77: da:9e:17:d9:91:12:19:f8:f9:e3:a4:de:10:e0:0d:c1:dd:3e: ce:b1:52:ec:8c:ea:28:ed:69:e8:81:ea:b1:ac:13:a7:13:b2: 0b:9a:24:65:d4:a7:33:01:b6:02:72:61:68:0e:41:2e:c7:ae: 0d:81:20:78:72:22:5e:b7:37:b7:b1:4e:43:f8:26:0d:13:fe: 1a:5d:be:cf:5b:93:40:e3:34:25:31:08:4e:95:e9:77:0b:40: 3b:03:56:ba -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1RTYxMTAvBgNVBAUTKDg4NzgyRjgzMUYzNjlFOTZGOTc5QTI1ODVDRjI3M0M5 MTZDN0I0RkQwHhcNMjUxMTAyMjIxMTU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzc2Ny1lNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuIPqp+fWNS1F1FLGGfC6Xix7n72nxRo3eL+65n+DBbr6uwNBO3fpZR+GxIh A/5Hozgt9r8nJvpRSOy6zNMrBECImkE5bMtHLHjr09k0D2l6q1JtKov3WhZg7B5m bSwV56buZT6zRTuBKzfkIXWMTH2t+JLwoq2L2TxHbIQLlU1tqZ4VQpUQaOoykYBY Q72eP+9+Xrgs0+9yp2hAg6YAIgJ8ldOT5eG7Yp2COKUubs4Nf3qKHk7wBQ5UlTG8 Fb6czmOZRy5wMPeTGR9EGu24UxAeNGaUiQkRx+B/6gxFgZYqg+8O9qJNDU6YjJLt DrV9+5biPu+LjEc72JAaQmMHJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM4wpuI8 GEmkoPiR4f7xC7mrv5yzMB8GA1UdIwQYMBaAFIh4L4MfNp6W+XmiWFzyc8kWx7T9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjVFNi84N0QxRUQwNjdB ODcxMUVCOTA4RUJENjNDNEY5QUUwMi9pSGd2Z3g4Mm5wYjVlYUpZWFBKenlSYkh0 UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lIZ3ZneDgybnBiNWVhSllYUEp6eVJiSHRQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1RTYvODdEMUVEMDY3QTg3MTFFQjkwOEVCRDYzQzRGOUFFMDIvMkJDNjdBMkEz NDY3MTFFRjlFRUIwRjUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2W/MA0GCSqGSIb3DQEBCwUAA4IBAQBB2bXmTrNPEoP4Dgaidacb dFjziiNk8Sh58Y0QVDWXG/GAgQ1Eg+Httv0eVex4Szcl+1pW1Jbmxi+WfGJ/PFqB ZAOT0m3C55Ih+b8fF4PMv2LZux4tY+7FiHbPQSgqkC1thm38JxkHEyFDKwyFJ4Xk svh/oYf12x6kV06wsjI4WuJC102FEzhWqF4LflUzUTTLBJtHPHYA1/bCjtpeRn5j 03fanhfZkRIZ+PnjpN4Q4A3B3T7OsVLsjOoo7WnogeqxrBOnE7ILmiRl1KczAbYC cmFoDkEux64NgSB4ciJetze3sU5D+CYNE/4aXb7PW5NA4zQlMQhOlel3C0A7A1a6 -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:20 2026 by rpki-client