$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa File: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (raw, json) Hash identifier: sCd8YpYXTrhz/KrIm2hV5w11vNISMpR4aptT/iO1D7w= Subject key identifier: 15:AB:81:76:B7:E5:DA:F1:46:E3:C7:CD:EC:33:3D:9C:FC:7D:23:B1 Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Certificate serial: 0679 Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:36:14 +0000 ROA not before: Mon 12 Jan 2026 05:38:01 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 63923 IP address blocks: 103.44.76.0/22 maxlen: 22 103.44.76.0/24 maxlen: 24 103.44.77.0/24 maxlen: 24 103.44.78.0/24 maxlen: 24 103.44.79.0/24 maxlen: 24 2001:df1:8400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C Validity Not Before: Jan 12 05:38:01 2026 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69a432be-c5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:5c:63:cf:da:00:59:65:7c:42:e6:e0:9e: 14:ac:44:c2:70:65:19:24:75:2b:ba:b2:65:13:d2: ee:ee:dd:9c:ce:4d:81:44:8b:2a:12:51:8a:38:48: df:88:59:dc:da:aa:77:63:19:96:d4:ae:89:16:2e: 2e:89:da:85:68:6f:2d:bb:e3:cd:84:6c:b4:dd:68: 31:04:85:4b:b2:a4:2a:09:2a:0d:95:1a:3f:cb:d7: 84:75:17:48:15:90:8e:31:4a:d1:9d:e2:48:c2:7f: 76:dd:42:d2:7a:26:7a:ba:19:3d:6d:dc:b9:05:5a: 85:31:47:a4:1d:ea:d7:09:b3:6d:66:43:ca:76:37: b1:b7:02:48:a9:d4:25:d9:9e:36:da:27:8c:36:ab: 03:0e:5a:b5:c2:7a:00:78:1e:58:98:2d:9d:fc:0b: 88:c6:45:05:7c:04:5a:e1:a7:fc:09:b5:b0:24:90: 75:1e:f6:10:7d:c4:6b:bd:c4:2e:2a:1a:7d:68:74: 46:1b:59:ac:f0:75:35:16:b5:81:ee:67:8b:c7:09: 6a:1d:a0:82:c5:b3:e5:90:b1:12:1f:ca:33:0d:ad: 95:b3:72:af:e7:47:42:fd:f8:f6:63:0e:7c:12:bc: a8:c0:a3:f2:f1:bc:9e:53:cb:5a:e8:02:fb:cb:12: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AB:81:76:B7:E5:DA:F1:46:E3:C7:CD:EC:33:3D:9C:FC:7D:23:B1 X509v3 Authority Key Identifier: keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/C8AE3C40B93811EBAC80A46DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.44.76.0/22 IPv6: 2001:df1:8400::/48 Signature Algorithm: sha256WithRSAEncryption 9d:4d:cb:28:ac:68:c2:39:90:c9:7e:1c:61:b6:e4:3f:37:dd: 88:94:20:43:d6:34:ae:f9:ce:63:c0:75:e4:a6:96:63:89:77: a4:63:24:cc:65:8a:fe:9a:c0:4e:f0:6b:a8:58:db:bb:0b:f5: 10:bd:2c:26:45:b1:3c:b8:bb:ed:38:da:78:bc:73:75:11:8c: d3:cf:3e:14:60:d5:d2:33:d3:a2:6c:44:cb:50:b1:4e:7e:dc: b3:2e:8b:c7:10:e7:c4:a4:28:94:12:e0:8e:34:4b:0f:29:4e: 22:0c:7f:d8:19:52:b2:ef:1f:30:90:8e:d5:45:6a:4e:f4:6c: 31:81:0c:c3:b6:2d:0a:74:ca:07:90:14:04:0a:f3:d0:fb:78: 63:87:05:db:12:a6:d8:ed:0f:18:a4:9b:5a:98:f5:f7:36:13: 86:9c:df:8e:de:fd:57:a3:eb:ff:e8:ec:1b:41:62:c4:5d:97: b4:d3:83:e2:e4:62:b5:f6:d4:8f:2f:4c:75:03:8f:88:84:9c: 38:78:49:2e:91:1b:bc:cd:27:75:32:2e:16:bc:99:11:1d:2e: 59:d8:06:b4:02:36:5a:62:fb:40:bf:e1:38:b9:3b:5d:36:b7: d6:a5:95:0a:45:d6:dc:40:b5:9a:03:27:34:21:97:09:ff:55: bc:ad:99:e9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE1RjIxMTAvBgNVBAUTKDYzODJCNTEzMzQ4MzE1RDVBRjNGMTMwRUM1NEMxREE4 NjcyODhDMkMwHhcNMjYwMTEyMDUzODAxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzJiZS1jNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhjRcY8/aAFllfELm4J4UrETCcGUZJHUrurJlE9Lu7t2czk2BRIsqElGKOEjf iFnc2qp3YxmW1K6JFi4uidqFaG8tu+PNhGy03WgxBIVLsqQqCSoNlRo/y9eEdRdI FZCOMUrRneJIwn923ULSeiZ6uhk9bdy5BVqFMUekHerXCbNtZkPKdjextwJIqdQl 2Z422ieMNqsDDlq1wnoAeB5YmC2d/AuIxkUFfARa4af8CbWwJJB1HvYQfcRrvcQu Khp9aHRGG1ms8HU1FrWB7meLxwlqHaCCxbPlkLESH8ozDa2Vs3Kv50dC/fj2Yw58 EryowKPy8byeU8ta6AL7yxI/hwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBWrgXa3 5drxRuPHzewzPZz8fSOxMB8GA1UdIwQYMBaAFGOCtRM0gxXVrz8TDsVMHahnKIws MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTVGMi81NjMyMkQ5OEI4 OTgxMUVCQUQ2QzFENDhDNEY5QUUwMi9ZNEsxRXpTREZkV3ZQeE1PeFV3ZHFHY29q Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1k0SzFFelNERmRXdlB4TU94VXdkcUdjb2pDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE1RjIvNTYzMjJEOThCODk4MTFFQkFENkMxRDQ4QzRGOUFFMDIvQzhBRTNDNDBC OTM4MTFFQkFDODBBNDZEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZyxMMA8EAgACMAkDBwAgAQ3xhAAwDQYJKoZIhvcNAQELBQADggEB AJ1NyyisaMI5kMl+HGG25D833YiUIEPWNK75zmPAdeSmlmOJd6RjJMxliv6awE7w a6hY27sL9RC9LCZFsTy4u+042ni8c3URjNPPPhRg1dIz06JsRMtQsU5+3LMui8cQ 58SkKJQS4I40Sw8pTiIMf9gZUrLvHzCQjtVFak70bDGBDMO2LQp0ygeQFAQK89D7 eGOHBdsSptjtDxikm1qY9fc2E4ac347e/Vej6//o7BtBYsRdl7TTg+LkYrX21I8v THUDj4iEnDh4SS6RG7zNJ3UyLha8mREdLlnYBrQCNlpi+0C/4Ti5O102t9allQpF 1txAtZoDJzQhlwn/Vbytmek= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:04 2026 by rpki-client