$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/8D9A6E1246CC11E8B5408617C4F9AE02.roa File: 8D9A6E1246CC11E8B5408617C4F9AE02.roa (raw, json) Hash identifier: woWWlhiIVJ9ohD8MTES+C7vTuy8pGL9beam7gJLiz9U= Subject key identifier: A4:9A:FA:5C:F2:E0:0D:F3:96:4A:80:0D:D1:6B:70:27:40:1A:10:68 Certificate issuer: /CN=A91BE8F6/serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Certificate serial: 15BB Authority key identifier: 4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/8D9A6E1246CC11E8B5408617C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:17:04 +0000 ROA not before: Fri 16 May 2025 17:09:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9541 IP address blocks: 103.213.108.0/22 maxlen: 24 192.140.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5563 (0x15bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE8F6, serialNumber=4A388DAD13DF69C2D0E9EA16B98B0C23358FDB03 Validity Not Before: May 16 17:09:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a40410-450b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:54:19:f9:e1:53:77:41:1e:66:fe:c7:78:5f: 2c:9b:b0:e8:36:91:58:c2:2e:b7:06:c9:da:7d:e0: b3:ae:d9:25:3c:6c:06:11:15:d9:da:33:c2:70:29: 43:72:54:df:6f:92:27:d6:2a:23:13:35:cb:53:16: 79:1b:4d:05:6f:1c:b6:53:77:11:3f:2c:3e:cb:36: 7b:cf:d7:61:1b:51:c3:f6:0e:1c:ab:cb:55:34:e9: 36:1d:b9:0d:26:67:3a:aa:d0:14:0b:19:9a:0f:ed: 5d:2c:dd:73:26:1f:c9:24:0c:cd:e0:2a:f7:36:8a: 3b:cb:54:16:6f:14:8d:f0:bf:ef:a2:47:8e:cb:79: 5b:ef:8d:c7:19:85:d2:22:e7:57:22:d2:17:35:2f: 9a:1e:dc:cf:f7:ec:32:03:f7:ee:60:36:82:76:a3: cb:e4:6d:64:44:e9:10:48:f6:62:83:bf:1e:df:50: bd:6a:3d:a7:86:65:b1:f3:cd:70:df:aa:46:03:e1: ce:8d:56:52:df:7a:07:dd:82:59:bd:2f:85:9f:70: c7:39:aa:2b:e5:cf:67:8f:4e:0b:9b:28:f0:d0:33: 16:d8:1e:14:25:ef:fb:16:5a:8e:f1:5f:2e:3b:f8: d0:9b:08:e7:12:63:e7:6f:eb:83:a4:a1:d2:2e:00: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9A:FA:5C:F2:E0:0D:F3:96:4A:80:0D:D1:6B:70:27:40:1A:10:68 X509v3 Authority Key Identifier: keyid:4A:38:8D:AD:13:DF:69:C2:D0:E9:EA:16:B9:8B:0C:23:35:8F:DB:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/SjiNrRPfacLQ6eoWuYsMIzWP2wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SjiNrRPfacLQ6eoWuYsMIzWP2wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE8F6/B26E5F2E46CB11E8842B4B16C4F9AE02/8D9A6E1246CC11E8B5408617C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.213.108.0/22 192.140.144.0/22 Signature Algorithm: sha256WithRSAEncryption 95:cd:4c:46:15:47:32:1d:d6:88:c0:23:af:db:2f:b2:c3:27: df:98:70:e5:2f:92:23:45:3c:37:17:8c:9f:a2:81:a8:5a:cc: 02:29:3f:b3:f6:82:c2:f3:97:d5:2d:16:c1:f1:bb:37:1e:3c: 9c:9d:e1:8f:fd:7a:05:13:ea:26:91:cb:0a:36:17:80:77:8d: 42:d5:fa:37:57:3a:fa:9d:d8:5b:54:7b:ac:0c:e5:f4:83:0d: 6d:e2:97:b6:95:9b:17:f8:f8:bf:76:a4:a4:3b:c2:17:7f:b8: 48:09:51:77:f1:d4:9a:25:48:c1:4d:73:47:f9:e1:d6:ba:da: 82:d6:71:7b:24:c5:3a:0e:d3:f8:d0:32:4b:be:b6:be:e5:32: f5:57:2b:da:de:c8:2b:fb:61:84:be:7d:67:90:13:6d:96:6b: 49:43:ab:5e:0f:86:f8:50:15:61:d0:bf:65:d3:c5:93:52:d5: ef:ae:0e:02:ef:1a:90:84:1e:9b:4c:48:70:54:fe:d5:5d:fa: 5d:1a:67:aa:20:01:f4:ff:75:0f:9b:ca:f2:d6:f3:2d:5f:9d: 84:73:7c:66:97:40:f7:78:9a:11:6b:78:07:8d:de:df:a7:b2: 18:4b:eb:26:4e:d9:d8:4f:3d:3f:6e:69:3d:7e:c6:2a:ff:d4: 03:d7:73:c0 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICFbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4RjYxMTAvBgNVBAUTKDRBMzg4REFEMTNERjY5QzJEMEU5RUExNkI5OEIwQzIz MzU4RkRCMDMwHhcNMjUwNTE2MTcwOTA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDQxMC00NTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFQZ+eFTd0EeZv7HeF8sm7DoNpFYwi63BsnafeCzrtklPGwGERXZ2jPCcClD clTfb5In1iojEzXLUxZ5G00Fbxy2U3cRPyw+yzZ7z9dhG1HD9g4cq8tVNOk2HbkN Jmc6qtAUCxmaD+1dLN1zJh/JJAzN4Cr3Noo7y1QWbxSN8L/vokeOy3lb743HGYXS IudXItIXNS+aHtzP9+wyA/fuYDaCdqPL5G1kROkQSPZig78e31C9aj2nhmWx881w 36pGA+HOjVZS33oH3YJZvS+Fn3DHOaor5c9nj04Lmyjw0DMW2B4UJe/7FlqO8V8u O/jQmwjnEmPnb+uDpKHSLgD5CwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKSa+lzy 4A3zlkqADdFrcCdAGhBoMB8GA1UdIwQYMBaAFEo4ja0T32nC0OnqFrmLDCM1j9sD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRThGNi9CMjZFNUYyRTQ2 Q0IxMUU4ODQyQjRCMTZDNEY5QUUwMi9TamlOclJQZmFjTFE2ZW9XdVlzTUl6V1Ay d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NqaU5yUlBmYWNMUTZlb1d1WXNNSXpXUDJ3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkU4RjYvQjI2RTVGMkU0NkNCMTFFODg0MkI0QjE2QzRGOUFFMDIvOEQ5QTZFMTI0 NkNDMTFFOEI1NDA4NjE3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ9VsAwQCwIyQMA0GCSqGSIb3DQEBCwUAA4IBAQCVzUxGFUcyHdaI wCOv2y+ywyffmHDlL5IjRTw3F4yfooGoWswCKT+z9oLC85fVLRbB8bs3HjycneGP /XoFE+omkcsKNheAd41C1fo3Vzr6ndhbVHusDOX0gw1t4pe2lZsX+Pi/dqSkO8IX f7hICVF38dSaJUjBTXNH+eHWutqC1nF7JMU6DtP40DJLvra+5TL1Vyva3sgr+2GE vn1nkBNtlmtJQ6teD4b4UBVh0L9l08WTUtXvrg4C7xqQhB6bTEhwVP7VXfpdGmeq IAH0/3UPm8ry1vMtX52Ec3xml0D3eJoRa3gHjd7fp7IYS+smTtnYTz0/bmk9fsYq /9QD13PA -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:59 2026 by rpki-client