$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/1D0BA0FC57EB11F096357F7CC4F9AE02.roa File: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (raw, json) Hash identifier: qYnHpPQuWWyQUppUZeSoLqg0pl5Eo+MYWVanyVnMZyM= Subject key identifier: BC:94:3E:42:13:2F:00:3D:FF:40:E2:A2:8E:6F:22:F7:C8:8A:B3:A5 Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Certificate serial: 0694 Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/1D0BA0FC57EB11F096357F7CC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:14:55 +0000 ROA not before: Sun 22 Feb 2026 22:19:18 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 395793 IP address blocks: 103.146.208.0/24 maxlen: 24 103.146.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F Validity Not Before: Feb 22 22:19:18 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a449df-e44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:42:2d:5c:1e:48:01:fb:53:4b:d0:c4:98: 49:77:a4:23:32:4b:ee:32:a3:47:1f:47:f5:f8:b3: 8f:96:c4:15:0a:64:60:25:08:69:cd:d1:07:87:cb: 08:60:cd:d4:57:cb:04:99:24:3a:80:37:fb:0e:c3: 83:68:98:1c:f2:c6:59:cc:84:22:78:fb:ff:19:40: aa:78:ad:00:fb:5c:76:be:10:34:ab:f1:41:01:9c: ce:1a:b0:19:52:9f:10:49:3d:82:82:50:fb:9e:78: dd:8e:eb:d7:a6:01:cf:d3:b9:b3:9d:e5:31:f4:4c: 1d:69:9c:a2:41:a0:05:97:b9:33:13:ee:03:d5:3b: 00:7c:6a:8a:c6:1e:44:2f:4a:96:7d:8b:27:6b:13: 7c:01:a1:ec:41:07:93:cd:1c:05:11:0a:89:bc:25: be:c6:ea:4c:90:14:59:cb:f3:cd:aa:df:70:05:f0: 87:70:5a:ee:8a:87:48:2e:4e:b5:fd:95:a7:b8:fd: 1c:02:eb:c1:e1:0b:05:6e:8f:98:c8:cf:80:97:44: 91:b1:8e:0c:a3:2c:b0:b3:9c:6a:ec:d9:88:8d:76: 76:61:55:11:f2:88:b0:b2:da:ce:9c:5d:30:10:a3: e6:d1:77:4a:29:e3:1b:bc:67:62:89:59:5f:2c:ea: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:94:3E:42:13:2F:00:3D:FF:40:E2:A2:8E:6F:22:F7:C8:8A:B3:A5 X509v3 Authority Key Identifier: keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/1D0BA0FC57EB11F096357F7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.208.0/23 Signature Algorithm: sha256WithRSAEncryption 19:85:bf:0a:c9:bc:04:17:d8:99:c8:59:cf:8b:43:f6:c0:7b: 9f:d8:eb:45:26:37:9e:87:62:f6:f2:df:e8:f5:a5:53:33:34: 0a:b5:78:a2:1a:ff:e8:2a:1d:60:2c:db:fc:60:51:72:0c:62: 8c:a5:ba:e0:23:d2:d9:82:a1:19:b4:27:a8:1e:61:57:cb:46: e4:36:c0:41:9c:78:78:0c:5f:11:44:f1:2b:95:df:e4:52:d4: 82:04:d6:cf:4d:94:ee:f8:12:3f:2f:74:10:6e:51:0c:a9:44: 0c:7e:da:b5:f6:b2:69:35:f5:7a:2b:88:85:38:53:37:aa:af: ac:24:4b:55:7a:6a:b0:5f:d5:39:df:56:53:97:5a:ae:3b:71: d1:02:38:8c:88:f6:b9:a7:6a:fc:db:7b:18:b9:e5:9a:4b:93: 2b:d4:07:cf:48:df:af:66:da:15:a0:6b:cf:6b:90:b5:05:5f: f7:39:31:33:40:91:a4:e1:86:5a:5e:ec:00:82:f5:92:ab:b1: dc:f4:95:94:57:f6:8c:c7:de:ed:f4:61:ce:a3:16:12:e6:7a: 6c:fe:14:e7:77:dd:90:73:99:a8:df:71:b7:05:10:55:7a:44: 21:f0:c9:34:48:db:9d:3f:81:a7:34:a5:ab:5b:4e:1e:61:b5: 19:b0:66:b4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF RDM4N0ExNkYwHhcNMjYwMjIyMjIxOTE4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDlkZi1lNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCxCLVweSAH7U0vQxJhJd6QjMkvuMqNHH0f1+LOPlsQVCmRgJQhpzdEHh8sI YM3UV8sEmSQ6gDf7DsODaJgc8sZZzIQiePv/GUCqeK0A+1x2vhA0q/FBAZzOGrAZ Up8QST2CglD7nnjdjuvXpgHP07mzneUx9EwdaZyiQaAFl7kzE+4D1TsAfGqKxh5E L0qWfYsnaxN8AaHsQQeTzRwFEQqJvCW+xupMkBRZy/PNqt9wBfCHcFruiodILk61 /ZWnuP0cAuvB4QsFbo+YyM+Al0SRsY4Moyyws5xq7NmIjXZ2YVUR8oiwstrOnF0w EKPm0XdKKeMbvGdiiVlfLOoiTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLyUPkIT LwA9/0Dioo5vIvfIirOlMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjg2MUQvRDI5OTdGNjBBQkUzMTFFQjlDMkIxMTU2QzRGOUFFMDIvMUQwQkEwRkM1 N0VCMTFGMDk2MzU3RjdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5LQMA0GCSqGSIb3DQEBCwUAA4IBAQAZhb8KybwEF9iZyFnPi0P2 wHuf2OtFJjeeh2L28t/o9aVTMzQKtXiiGv/oKh1gLNv8YFFyDGKMpbrgI9LZgqEZ tCeoHmFXy0bkNsBBnHh4DF8RRPErld/kUtSCBNbPTZTu+BI/L3QQblEMqUQMftq1 9rJpNfV6K4iFOFM3qq+sJEtVemqwX9U531ZTl1quO3HRAjiMiPa5p2r823sYueWa S5Mr1AfPSN+vZtoVoGvPa5C1BV/3OTEzQJGk4YZaXuwAgvWSq7Hc9JWUV/aMx97t 9GHOoxYS5nps/hTnd92Qc5mo33G3BRBVekQh8Mk0SNudP4GnNKWrW04eYbUZsGa0 -----END CERTIFICATE-----Generated at Mon Mar 2 03:41:28 2026 by rpki-client