$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa File: CDEFCF14801F11EF99206C47C4F9AE02.roa (raw, json) Hash identifier: KbTYxfFy1GT8pB5c2e56lPcyBgZokB9iBVqKo/PqazE= Subject key identifier: 8D:3C:A3:0E:81:94:D1:6C:B7:AB:DD:79:B1:A8:EA:D7:35:8B:56:BB Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0B8F Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:59:48 +0000 ROA not before: Fri 06 Feb 2026 19:16:16 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138556 IP address blocks: 103.132.224.0/24 maxlen: 24 103.132.225.0/24 maxlen: 24 103.132.226.0/24 maxlen: 24 2404:4140::/32 maxlen: 32 2404:4140::/36 maxlen: 36 2404:4140:1000::/36 maxlen: 36 2404:4140:2000::/36 maxlen: 36 2404:4140:3000::/36 maxlen: 36 2404:4140:4000::/36 maxlen: 36 2404:4140:5000::/36 maxlen: 36 2404:4140:6000::/36 maxlen: 36 2404:4140:7000::/36 maxlen: 36 2404:4140:8000::/36 maxlen: 36 2404:4140:9000::/36 maxlen: 36 2404:4140:a000::/36 maxlen: 36 2404:4140:b000::/36 maxlen: 36 2404:4140:c000::/36 maxlen: 36 2404:4140:d000::/36 maxlen: 36 2404:4140:e000::/36 maxlen: 36 2404:4140:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: Feb 6 19:16:16 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a46274-a03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:db:4a:bf:82:69:c4:0c:2e:39:d0:fd:12: 72:a0:ae:36:9a:e3:9a:f6:ac:6c:bd:ab:60:45:11: 1d:64:c1:18:1a:ef:c6:7f:e2:e5:c4:5f:fa:46:89: 6c:c3:73:87:42:d1:86:e1:de:f6:1a:60:b9:b4:0e: ce:ab:b1:03:8e:e8:e9:41:c4:e5:2e:a0:1a:be:64: 43:e0:ec:69:e0:26:00:dc:54:4c:2b:2d:c0:3e:eb: 67:d8:10:cc:1a:4c:e7:75:8e:16:12:7b:b1:3e:63: 70:a1:eb:16:be:62:f8:38:a8:1c:e9:48:22:56:ac: 0a:da:a1:0b:d9:22:ec:01:68:f6:53:3c:46:4c:fe: d0:5f:d2:ca:a7:23:5a:48:35:96:8d:bb:db:12:07: 2e:73:50:ac:0d:d8:ab:7f:f1:a3:26:21:d8:c5:12: 10:8c:e0:d3:cd:36:b5:e8:09:2f:1b:70:c2:d6:bd: 1d:90:89:16:7f:91:93:d4:73:33:0d:51:bb:9f:bd: 5f:43:74:c6:4c:09:fc:f9:b5:31:1e:06:ba:21:db: 79:35:d5:b6:67:b5:f4:49:8b:35:a3:11:db:d3:77: df:c0:a1:5f:9d:42:93:06:de:d6:44:51:6d:39:7a: 7f:4d:e2:ee:fe:20:d9:c9:b5:e7:c4:a1:72:51:f7: 19:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3C:A3:0E:81:94:D1:6C:B7:AB:DD:79:B1:A8:EA:D7:35:8B:56:BB X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.132.224.0-103.132.226.255 IPv6: 2404:4140::/32 Signature Algorithm: sha256WithRSAEncryption 78:db:dd:9d:fc:9d:85:99:78:fa:98:0e:93:65:01:fb:a9:36: 09:6f:73:86:88:77:9f:91:d8:35:09:b7:e6:a1:0f:b3:e1:42: e8:8b:12:72:9b:18:9a:f8:41:db:7b:86:d2:45:b7:6b:b7:ea: 97:99:2b:b4:97:58:17:cb:93:7b:18:96:eb:1a:c8:42:71:d2: f5:e6:9a:2e:eb:93:34:06:1d:65:35:5b:dc:0a:51:6f:36:c9: 58:3b:56:eb:40:0e:c1:8b:aa:eb:9f:75:38:f8:92:2a:c2:25: ae:f7:4c:d7:7b:77:4c:86:fe:8f:c4:67:a5:84:3d:d9:27:5c: b7:d7:fa:eb:b6:af:6a:8b:fe:d0:ec:2c:d6:fc:4d:99:3f:9f: 34:ec:f7:e9:35:28:93:52:33:37:6e:65:9e:d5:8e:6d:e4:4c: 34:54:75:ae:b7:ae:1b:88:e9:a6:a2:46:f1:f4:40:f3:5c:40: cf:76:4d:b4:e1:c3:0f:3d:36:5e:18:4a:53:07:1c:b9:12:23: 45:07:b0:00:f3:3d:27:18:16:4e:ef:f5:10:7f:68:cf:1d:13: 48:e8:28:2a:ee:c2:68:73:b7:d5:27:27:9a:b7:56:2d:27:06: 06:5a:f5:90:e7:a8:aa:13:62:07:d2:e5:b9:8d:26:34:3d:f2: 95:bf:54:7d -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjYwMjA2MTkxNjE2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjI3NC1hMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkEfbSr+CacQMLjnQ/RJyoK42muOa9qxsvatgRREdZMEYGu/Gf+LlxF/6Rols w3OHQtGG4d72GmC5tA7Oq7EDjujpQcTlLqAavmRD4Oxp4CYA3FRMKy3APutn2BDM GkzndY4WEnuxPmNwoesWvmL4OKgc6UgiVqwK2qEL2SLsAWj2UzxGTP7QX9LKpyNa SDWWjbvbEgcuc1CsDdirf/GjJiHYxRIQjODTzTa16AkvG3DC1r0dkIkWf5GT1HMz DVG7n71fQ3TGTAn8+bUxHga6Idt5NdW2Z7X0SYs1oxHb03ffwKFfnUKTBt7WRFFt OXp/TeLu/iDZybXnxKFyUfcZswIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFI08ow6B lNFst6vdebGo6tc1i1a7MB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY5MDUvMUZBN0M0NkM0OEQzMTFFQThBQUU0NjY4QzRGOUFFMDIvQ0RFRkNGMTQ4 MDFGMTFFRjk5MjA2QzQ3QzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAU BAIAATAOMAwDBAVnhOADBABnhOIwDQQCAAIwBwMFACQEQUAwDQYJKoZIhvcNAQEL BQADggEBAHjb3Z38nYWZePqYDpNlAfupNglvc4aId5+R2DUJt+ahD7PhQuiLEnKb GJr4Qdt7htJFt2u36peZK7SXWBfLk3sYlusayEJx0vXmmi7rkzQGHWU1W9wKUW82 yVg7VutADsGLquufdTj4kirCJa73TNd7d0yG/o/EZ6WEPdknXLfX+uu2r2qL/tDs LNb8TZk/nzTs9+k1KJNSMzduZZ7Vjm3kTDRUda63rhuI6aaiRvH0QPNcQM92TbTh ww89Nl4YSlMHHLkSI0UHsADzPScYFk7v9RB/aM8dE0joKCruwmhzt9UnJ5q3Vi0n BgZa9ZDnqKoTYgfS5bmNJjQ98pW/VH0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:06 2026 by rpki-client