$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa File: 1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa (raw, json) Hash identifier: J5IwXqeQPT+ieCiG4+/ZaMKcQBJLgNCp/5huQ6vysRk= Subject key identifier: 42:17:43:DB:B1:E0:11:2C:FD:D5:F8:4C:B8:90:C5:E4:0B:B7:77:AB Certificate issuer: /CN=A91BDE68/serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Certificate serial: 16D5 Authority key identifier: 26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:42:29 +0000 ROA not before: Sat 10 Jan 2026 14:36:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137080 IP address blocks: 103.104.28.0/22 maxlen: 24 103.106.146.0/23 maxlen: 24 2401:ff40::/32 maxlen: 32 2401:ff40:5000::/44 maxlen: 44 2401:ff40:5010::/44 maxlen: 44 2401:ff40:5020::/44 maxlen: 44 2401:ff40:5040::/44 maxlen: 44 2401:ff40:6000::/44 maxlen: 44 2401:ff40:d000::/40 maxlen: 40 2401:ff40:d000::/44 maxlen: 44 2401:ff40:e000::/44 maxlen: 44 2401:ff40:e040::/44 maxlen: 44 2401:ff40:f000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5845 (0x16d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDE68, serialNumber=2688D48E342192B5FDA8DB6DAD62CC15C87503FA Validity Not Before: Jan 10 14:36:54 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46c75-f4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:c2:59:d5:bb:e8:bd:0c:d4:44:8f:a9:64: fd:99:49:9c:2f:8d:4e:d8:f4:62:5d:10:95:bd:97: 19:1b:67:3f:d5:3c:a9:a1:1b:00:2b:86:dc:b1:18: 83:83:28:74:21:cd:de:42:f2:c5:b2:b9:45:1b:e3: 76:06:77:dd:09:e8:c2:bf:11:4b:20:9a:54:ed:81: 59:da:5e:55:58:f6:1c:8a:2a:d8:02:dd:28:51:a5: 8f:76:35:fd:b7:a4:6e:bc:7c:62:9a:04:9a:0a:fd: 45:c7:aa:d1:ae:bb:ea:db:ad:9e:ab:61:13:73:68: 3c:a6:be:6f:2f:16:f1:d5:fa:9a:e5:65:a7:99:86: 28:f7:c3:4d:b4:dd:d2:8b:4a:59:b8:bb:ae:ba:f3: db:22:3c:42:23:c4:05:5b:d5:90:c4:31:ed:b7:2a: 85:71:39:9e:b2:0f:24:33:a4:fe:e1:d5:8a:8b:42: 16:2a:29:e6:02:f0:2a:5a:b0:84:5c:81:c2:97:0f: 16:80:a4:9f:3f:b3:24:40:b2:0b:20:3c:78:2e:d9: fb:83:75:7d:ce:3c:02:f7:94:66:38:75:fa:12:b0: 38:fe:13:68:3f:30:90:a1:3f:de:fe:ed:e5:47:b3: af:37:f6:82:f0:5e:36:6a:94:4a:73:84:03:86:e7: 8e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:17:43:DB:B1:E0:11:2C:FD:D5:F8:4C:B8:90:C5:E4:0B:B7:77:AB X509v3 Authority Key Identifier: keyid:26:88:D4:8E:34:21:92:B5:FD:A8:DB:6D:AD:62:CC:15:C8:75:03:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/JojUjjQhkrX9qNttrWLMFch1A_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JojUjjQhkrX9qNttrWLMFch1A_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDE68/80B2F3F815EA11E8A7353613C4F9AE02/1F8AECC6EF8411EBB4E00D4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.104.28.0/22 103.106.146.0/23 IPv6: 2401:ff40::/32 Signature Algorithm: sha256WithRSAEncryption b9:ab:8c:94:62:cc:75:38:32:40:b0:47:d5:3b:f9:00:e7:8b: 64:86:51:f0:03:de:95:3d:96:d6:c8:1e:1b:a1:2d:72:5d:58: c5:d7:f0:dd:f8:d9:b1:38:d6:69:ca:df:ae:3d:67:95:50:55: 41:06:7b:bf:7c:0b:61:07:98:47:f5:bf:b4:2a:82:77:4b:33: 11:1e:84:1e:25:8a:64:c8:2f:66:55:b8:a6:8d:36:60:be:43: b5:be:57:86:f9:f6:60:ce:bc:f2:3f:39:61:9d:09:23:7d:1a: 79:1c:28:1b:d4:c1:56:ab:85:76:cd:5e:38:af:d7:80:18:ab: 0c:24:4a:ed:17:84:3f:dd:de:e4:0a:53:c9:0a:1e:2b:3d:71: ac:a2:9c:e4:3f:22:ff:b6:f9:18:ef:97:b8:b7:99:5a:30:4e: 54:7e:af:77:fe:b0:92:87:99:65:30:02:0a:1f:6e:b5:1c:b3: da:be:f6:ba:f1:13:16:8c:e2:78:37:b6:b8:d1:4c:f0:78:01: 9f:a3:29:34:3d:b3:8a:79:5c:1e:19:66:65:a4:5f:4f:97:6c: a1:96:91:91:c5:2c:52:e9:20:d6:35:69:3b:e8:06:43:e9:b5: 25:23:45:40:a6:37:4c:47:ed:aa:a6:ef:5c:6c:bb:75:74:21: 0a:4a:43:19 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICFtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFNjgxMTAvBgNVBAUTKDI2ODhENDhFMzQyMTkyQjVGREE4REI2REFENjJDQzE1 Qzg3NTAzRkEwHhcNMjYwMTEwMTQzNjU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmM3NS1mNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydDCWdW76L0M1ESPqWT9mUmcL41O2PRiXRCVvZcZG2c/1TypoRsAK4bcsRiD gyh0Ic3eQvLFsrlFG+N2BnfdCejCvxFLIJpU7YFZ2l5VWPYciirYAt0oUaWPdjX9 t6RuvHximgSaCv1Fx6rRrrvq262eq2ETc2g8pr5vLxbx1fqa5WWnmYYo98NNtN3S i0pZuLuuuvPbIjxCI8QFW9WQxDHttyqFcTmesg8kM6T+4dWKi0IWKinmAvAqWrCE XIHClw8WgKSfP7MkQLILIDx4Ltn7g3V9zjwC95RmOHX6ErA4/hNoPzCQoT/e/u3l R7OvN/aC8F42apRKc4QDhueOJQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFEIXQ9ux 4BEs/dX4TLiQxeQLt3erMB8GA1UdIwQYMBaAFCaI1I40IZK1/ajbba1izBXIdQP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREU2OC84MEIyRjNGODE1 RUExMUU4QTczNTM2MTNDNEY5QUUwMi9Kb2pVampRaGtyWDlxTnR0cldMTUZjaDFB X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pvalVqalFoa3JYOXFOdHRyV0xNRmNoMUFfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRFNjgvODBCMkYzRjgxNUVBMTFFOEE3MzUzNjEzQzRGOUFFMDIvMUY4QUVDQzZF Rjg0MTFFQkI0RTAwRDREQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ2gcAwQBZ2qSMA0EAgACMAcDBQAkAf9AMA0GCSqGSIb3DQEBCwUA A4IBAQC5q4yUYsx1ODJAsEfVO/kA54tkhlHwA96VPZbWyB4boS1yXVjF1/Dd+Nmx ONZpyt+uPWeVUFVBBnu/fAthB5hH9b+0KoJ3SzMRHoQeJYpkyC9mVbimjTZgvkO1 vleG+fZgzrzyPzlhnQkjfRp5HCgb1MFWq4V2zV44r9eAGKsMJErtF4Q/3d7kClPJ Ch4rPXGsopzkPyL/tvkY75e4t5laME5Ufq93/rCSh5llMAIKH261HLPavva68RMW jOJ4N7a40UzweAGfoyk0PbOKeVweGWZlpF9Pl2yhlpGRxSxS6SDWNWk76AZD6bUl I0VApjdMR+2qpu9cbLt1dCEKSkMZ -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:24 2026 by rpki-client