$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/821CAFEE923811EC955B7A3AC4F9AE02.roa File: 821CAFEE923811EC955B7A3AC4F9AE02.roa (raw, json) Hash identifier: uqacRBrgf17S5mr4cDNfK0+9XxvVbrUBhAKriyf67Mo= Subject key identifier: 44:4C:59:FB:74:54:08:62:C6:F4:84:19:A5:E3:E1:0F:9A:53:17:DA Certificate issuer: /CN=A91B7A3F/serialNumber=576C5447C09B597107B770C101C89327F105BD33 Certificate serial: 0445 Authority key identifier: 57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/821CAFEE923811EC955B7A3AC4F9AE02.roa Signing time: Wed 25 Feb 2026 00:20:58 +0000 ROA not before: Wed 25 Feb 2026 00:20:58 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138506 IP address blocks: 103.127.90.0/24 maxlen: 24 103.152.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7A3F, serialNumber=576C5447C09B597107B770C101C89327F105BD33 Validity Not Before: Feb 25 00:20:58 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=699e406a-076b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:66:30:a5:5c:f6:7b:59:46:1b:80:f2:07: ce:a9:26:89:eb:36:00:f3:40:37:cb:51:0d:22:6a: cf:90:5f:e0:df:52:a9:e6:c8:09:9c:10:43:df:6d: ba:78:06:ed:0f:6d:53:18:8f:c1:d3:fc:1b:cc:d6: b2:6c:aa:de:1d:f1:82:87:30:9b:6c:40:80:76:f4: 61:47:22:2f:be:9a:4c:a6:1e:09:49:b3:b8:86:cd: e1:6d:d8:a8:62:be:e4:1a:22:fc:79:c1:5b:5f:1f: 9b:1b:cf:e6:e9:6a:0a:49:eb:bd:ab:00:ff:6b:9d: d7:1c:bb:14:18:25:73:a0:e0:10:31:86:db:09:95: a9:c9:9d:28:09:bf:4f:e2:98:82:8b:2b:1a:36:86: ab:2d:12:c9:db:5c:f8:04:e0:5f:fb:09:63:6f:d4: b1:77:5d:94:24:17:01:cc:29:db:6c:da:8a:38:7e: 80:1c:d1:7d:4b:d0:c5:76:8e:2d:73:e0:c9:30:4a: 0e:69:ee:7d:de:44:c4:3f:f2:c3:02:fb:92:7f:cd: eb:92:19:8b:02:d7:ef:68:3b:68:16:08:51:58:63: 9b:8d:ab:82:31:5e:8a:07:23:ed:55:ba:ae:f9:c1: 3f:ef:79:73:37:60:9e:7d:11:74:28:8e:a9:dd:77: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4C:59:FB:74:54:08:62:C6:F4:84:19:A5:E3:E1:0F:9A:53:17:DA X509v3 Authority Key Identifier: keyid:57:6C:54:47:C0:9B:59:71:07:B7:70:C1:01:C8:93:27:F1:05:BD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/V2xUR8CbWXEHt3DBAciTJ_EFvTM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V2xUR8CbWXEHt3DBAciTJ_EFvTM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A3F/64C33948923511EC96047511C4F9AE02/821CAFEE923811EC955B7A3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.127.90.0/24 103.152.8.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:d0:0f:da:cb:36:f6:16:b8:e1:5f:27:10:c6:b5:c1:5e:70: d1:cc:ca:a4:51:66:e6:21:05:a3:33:b9:86:e1:09:d9:80:ee: 1c:f8:43:eb:91:a6:8d:59:b9:a5:0d:a0:be:ad:45:1d:c2:0f: 87:41:af:4c:aa:46:25:d2:4b:57:a1:c3:0a:14:e9:8a:c1:2d: 2d:f7:62:90:c1:c7:15:26:19:d9:14:48:88:84:46:d7:95:21: ba:dd:f3:52:de:0c:34:c1:65:99:39:07:59:8e:34:ba:0f:7a: a0:8e:d9:61:1a:5e:f3:f1:7e:3f:1a:11:69:f8:75:b6:a3:43: c4:31:a9:b4:53:34:d6:2d:d7:d9:1e:58:0c:4a:63:ed:cf:e9: be:f2:0e:4a:01:12:c6:e0:19:b0:43:87:07:0d:92:44:b0:42: d8:dc:57:c5:23:ed:2d:45:89:7c:a2:59:f6:96:cb:be:88:16: a7:3a:dc:e2:ff:dc:ba:63:0e:0a:f8:09:53:18:59:06:d7:ea: 50:15:f5:3c:78:44:77:90:6d:1a:b5:99:e9:2f:bc:85:df:6f: bc:9e:03:66:67:7f:b8:49:4e:a2:9c:f1:a1:3a:5e:69:49:da: 6a:e7:45:96:fb:69:d9:c7:d4:29:87:65:ca:17:d6:42:01:e5: 53:30:5f:78 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjdBM0YxMTAvBgNVBAUTKDU3NkM1NDQ3QzA5QjU5NzEwN0I3NzBDMTAxQzg5MzI3 RjEwNUJEMzMwHhcNMjYwMjI1MDAyMDU4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTllNDA2YS0wNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FpmMKVc9ntZRhuA8gfOqSaJ6zYA80A3y1ENImrPkF/g31Kp5sgJnBBD3226 eAbtD21TGI/B0/wbzNaybKreHfGChzCbbECAdvRhRyIvvppMph4JSbO4hs3hbdio Yr7kGiL8ecFbXx+bG8/m6WoKSeu9qwD/a53XHLsUGCVzoOAQMYbbCZWpyZ0oCb9P 4piCiysaNoarLRLJ21z4BOBf+wljb9Sxd12UJBcBzCnbbNqKOH6AHNF9S9DFdo4t c+DJMEoOae593kTEP/LDAvuSf83rkhmLAtfvaDtoFghRWGObjauCMV6KByPtVbqu +cE/73lzN2CefRF0KI6p3Xdc7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFERMWft0 VAhixvSEGaXj4Q+aUxfaMB8GA1UdIwQYMBaAFFdsVEfAm1lxB7dwwQHIkyfxBb0z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EzRi82NEMzMzk0ODky MzUxMUVDOTYwNDc1MTFDNEY5QUUwMi9WMnhVUjhDYldYRUh0M0RCQWNpVEpfRUZ2 VE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1YyeFVSOENiV1hFSHQzREJBY2lUSl9FRnZUTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdBM0YvNjRDMzM5NDg5MjM1MTFFQzk2MDQ3NTExQzRGOUFFMDIvODIxQ0FGRUU5 MjM4MTFFQzk1NUI3QTNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnf1oDBABnmAgwDQYJKoZIhvcNAQELBQADggEBAJzQD9rL NvYWuOFfJxDGtcFecNHMyqRRZuYhBaMzuYbhCdmA7hz4Q+uRpo1ZuaUNoL6tRR3C D4dBr0yqRiXSS1ehwwoU6YrBLS33YpDBxxUmGdkUSIiERteVIbrd81LeDDTBZZk5 B1mONLoPeqCO2WEaXvPxfj8aEWn4dbajQ8QxqbRTNNYt19keWAxKY+3P6b7yDkoB EsbgGbBDhwcNkkSwQtjcV8Uj7S1FiXyiWfaWy76IFqc63OL/3LpjDgr4CVMYWQbX 6lAV9Tx4RHeQbRq1mekvvIXfb7yeA2Znf7hJTqKc8aE6XmlJ2mrnRZb7adnH1CmH ZcoX1kIB5VMwX3g= -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:24 2026 by rpki-client