$ rpki-client -vvf rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/CA2A06D6D5E511EE9B319A12C4F9AE02.roa File: CA2A06D6D5E511EE9B319A12C4F9AE02.roa (raw, json) Hash identifier: yIHsiGXUbr4yiSWIbyeH/+lnd1LO5enPoNYE+CObcWw= Subject key identifier: 27:04:C1:C6:5C:43:4F:D0:BC:8E:A0:FA:48:25:65:BB:8A:57:4B:CD Certificate issuer: /CN=A91C38CC/serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Certificate serial: 018C Authority key identifier: CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/CA2A06D6D5E511EE9B319A12C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:15:47 +0000 ROA not before: Wed 31 Dec 2025 03:23:06 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 2713 IP address blocks: 61.245.96.0/21 maxlen: 21 103.117.21.0/24 maxlen: 24 103.118.123.0/24 maxlen: 24 103.118.154.0/23 maxlen: 23 210.79.173.0/24 maxlen: 24 2001:df3:3b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C38CC, serialNumber=CBC0AD1965851641F66111E8E2902698A9B9ED80 Validity Not Before: Dec 31 03:23:06 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47443-4fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:19:e5:d1:08:f6:b1:46:87:6c:7e:e6:f3: 61:3a:04:ef:a8:da:e6:46:72:ab:2c:21:99:7f:7e: ca:21:95:87:73:18:df:44:38:fe:10:d0:0b:f5:3d: fc:81:e7:e5:c1:15:82:04:16:f5:61:9e:e5:5b:fa: 5f:d1:48:fb:2f:a2:49:f2:d4:dc:c9:0a:4c:40:e7: 00:68:63:c8:ec:a7:16:07:7d:cf:21:81:23:71:99: 80:3b:f1:c8:8b:8b:67:64:82:e4:b1:31:c4:15:18: 21:54:8b:84:d9:3d:ab:89:7d:fe:17:ba:bd:c2:83: cb:48:70:f1:28:61:47:1c:0b:5a:c3:b9:0b:5f:fb: 03:3c:24:82:ff:78:65:6e:6a:d9:34:f1:0f:6e:91: bc:76:fc:1f:96:1c:e4:8a:bb:60:12:05:b7:94:f4: a5:3d:63:e9:75:8c:02:eb:dd:fd:13:6b:18:9b:83: 5c:ed:75:7f:ea:4d:ba:b0:c8:11:14:4e:cf:78:7b: aa:b9:02:be:f0:93:06:ad:80:fa:c4:c3:93:22:ff: 21:45:02:43:84:bc:c7:e1:5d:e4:3e:d8:56:8e:0e: 97:8d:39:53:4e:e4:54:f0:e7:30:ab:62:16:e1:6e: 59:59:e6:50:d0:84:d2:ec:aa:a3:0a:f5:9f:46:a1: d1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:04:C1:C6:5C:43:4F:D0:BC:8E:A0:FA:48:25:65:BB:8A:57:4B:CD X509v3 Authority Key Identifier: keyid:CB:C0:AD:19:65:85:16:41:F6:61:11:E8:E2:90:26:98:A9:B9:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/y8CtGWWFFkH2YRHo4pAmmKm57YA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y8CtGWWFFkH2YRHo4pAmmKm57YA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C38CC/3AC57C8CD5E511EEB779223EC4F9AE02/CA2A06D6D5E511EE9B319A12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 61.245.96.0/21 103.117.21.0/24 103.118.123.0/24 103.118.154.0/23 210.79.173.0/24 IPv6: 2001:df3:3b40::/48 Signature Algorithm: sha256WithRSAEncryption d4:9c:ba:8f:67:45:bf:69:44:ad:c9:38:e2:f2:b6:7a:a6:00: ad:f0:b7:97:3b:4c:e8:6c:e3:58:bb:98:aa:74:c5:9b:fe:80: 39:bb:cf:2c:ad:c2:cf:8c:b9:a7:0e:42:df:fd:50:c6:e3:a7: 4c:e0:c5:ec:05:8f:78:b6:d8:8e:cd:5d:e7:8f:e9:07:49:c9: 51:ab:a4:94:c4:26:ed:9a:f7:df:d2:f7:95:05:e1:5f:2d:cb: 71:a5:44:ca:f6:0b:a6:51:92:ca:32:fb:56:46:32:95:6c:32: 7c:a5:da:26:5e:9b:cb:c8:32:5c:af:cc:a7:74:b9:2b:e9:d5: 56:11:19:3e:20:cc:7d:4b:62:ab:20:3c:fb:7c:eb:cd:dd:42: 68:b7:fb:9e:7c:30:1f:6c:c7:e3:35:58:ab:ad:fd:55:86:07: 2f:b9:26:02:f1:01:ea:94:bd:6b:c5:34:77:5f:10:a4:7d:e2: 44:fc:1c:9f:08:db:aa:89:86:d1:f2:05:4d:2b:c7:fa:ad:c4: 32:b5:60:d0:47:2c:ef:57:90:75:c8:e3:ed:15:3b:c9:86:15: cd:b9:a6:0d:27:5c:5e:33:25:2c:21:4d:43:f3:8c:0e:17:19: 89:78:7b:d1:b8:1c:cc:9e:57:0f:65:90:c7:72:0f:6c:ca:6b: c4:c8:60:d1 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4Q0MxMTAvBgNVBAUTKENCQzBBRDE5NjU4NTE2NDFGNjYxMTFFOEUyOTAyNjk4 QTlCOUVEODAwHhcNMjUxMjMxMDMyMzA2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzQ0My00ZmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlysZ5dEI9rFGh2x+5vNhOgTvqNrmRnKrLCGZf37KIZWHcxjfRDj+ENAL9T38 geflwRWCBBb1YZ7lW/pf0Uj7L6JJ8tTcyQpMQOcAaGPI7KcWB33PIYEjcZmAO/HI i4tnZILksTHEFRghVIuE2T2riX3+F7q9woPLSHDxKGFHHAtaw7kLX/sDPCSC/3hl bmrZNPEPbpG8dvwflhzkirtgEgW3lPSlPWPpdYwC6939E2sYm4Nc7XV/6k26sMgR FE7PeHuquQK+8JMGrYD6xMOTIv8hRQJDhLzH4V3kPthWjg6XjTlTTuRU8Ocwq2IW 4W5ZWeZQ0ITS7KqjCvWfRqHRAQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFCcEwcZc Q0/QvI6g+kglZbuKV0vNMB8GA1UdIwQYMBaAFMvArRllhRZB9mER6OKQJpipue2A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzhDQy8zQUM1N0M4Q0Q1 RTUxMUVFQjc3OTIyM0VDNEY5QUUwMi95OEN0R1dXRkZrSDJZUkhvNHBBbW1LbTU3 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k4Q3RHV1dGRmtIMllSSG80cEFtbUttNTdZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzM4Q0MvM0FDNTdDOENENUU1MTFFRUI3NzkyMjNFQzRGOUFFMDIvQ0EyQTA2RDZE NUU1MTFFRTlCMzE5QTEyQzRGOUFFMDIucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAk BAIAATAeAwQDPfVgAwQAZ3UVAwQAZ3Z7AwQBZ3aaAwQA0k+tMA8EAgACMAkDBwAg AQ3zO0AwDQYJKoZIhvcNAQELBQADggEBANScuo9nRb9pRK3JOOLytnqmAK3wt5c7 TOhs41i7mKp0xZv+gDm7zyytws+MuacOQt/9UMbjp0zgxewFj3i22I7NXeeP6QdJ yVGrpJTEJu2a99/S95UF4V8ty3GlRMr2C6ZRksoy+1ZGMpVsMnyl2iZem8vIMlyv zKd0uSvp1VYRGT4gzH1LYqsgPPt8683dQmi3+558MB9sx+M1WKut/VWGBy+5JgLx AeqUvWvFNHdfEKR94kT8HJ8I26qJhtHyBU0rx/qtxDK1YNBHLO9XkHXI4+0VO8mG Fc25pg0nXF4zJSwhTUPzjA4XGYl4e9G4HMyeVw9lkMdyD2zKa8TIYNE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:51:08 2026 by rpki-client