$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/008B17CEC2B611EB80F1B27EC4F9AE02.roa File: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (raw, json) Hash identifier: OJhgtnyBtvNgNFE2yR8f0UuKA46Eiv6iy340sUTMaq4= Subject key identifier: DD:EE:23:BE:D9:D6:69:7F:66:C2:93:DA:0F:FE:9D:47:A7:83:B6:AC Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Certificate serial: 0652 Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/008B17CEC2B611EB80F1B27EC4F9AE02.roa Signing time: Sat 28 Feb 2026 23:19:37 +0000 ROA not before: Sat 28 Feb 2026 23:19:37 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133929 IP address blocks: 103.162.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 23:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1618 (0x652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C Validity Not Before: Feb 28 23:19:37 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a37808-3b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6f:79:30:e3:ba:b5:dc:3d:0f:6b:4a:cf:ee: ca:26:ed:4d:d6:68:84:ee:2b:15:9b:4f:2e:a9:fe: 39:d9:09:85:c5:f8:8c:21:28:53:1f:09:31:92:da: 5a:6f:6f:1f:db:d1:91:39:44:03:c4:74:94:2f:43: 82:a9:85:ad:90:15:b8:60:fd:25:3e:1d:9f:16:ed: e8:b3:a3:af:21:e6:04:34:47:74:29:23:08:d3:f2: 43:c8:29:38:61:89:4e:72:e2:dd:68:ac:65:c7:df: 5f:18:13:cc:a6:a6:68:f4:e6:89:9a:1c:dc:2d:f1: 4a:78:74:f3:20:f7:00:5a:45:5e:69:dd:73:82:5e: a9:54:84:b5:0a:a1:7c:c9:26:ef:1a:de:20:c2:e7: a3:e2:55:40:2b:de:27:fb:1a:58:9d:51:7e:da:a0: ce:11:ed:06:38:9c:21:ba:16:5a:6f:83:b1:c4:9f: 37:66:ba:c3:70:d4:33:da:1a:5f:4a:0e:35:e1:b5: 53:50:18:61:74:15:9d:4c:c5:e0:bc:08:e3:24:ea: dc:f9:3a:b4:00:d5:d8:e1:82:cb:12:39:08:c7:7f: bf:9d:b9:72:ef:b2:1b:33:b1:63:96:27:53:8c:04: f7:8e:07:b3:da:17:3a:a2:ea:b6:b2:ad:0b:23:ef: fc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:23:BE:D9:D6:69:7F:66:C2:93:DA:0F:FE:9D:47:A7:83:B6:AC X509v3 Authority Key Identifier: keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/008B17CEC2B611EB80F1B27EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.162.172.0/23 Signature Algorithm: sha256WithRSAEncryption a5:15:45:a2:0c:64:9b:6e:39:52:97:82:dc:61:3a:39:32:76: 0a:e5:22:0c:55:16:9b:ff:86:74:be:ce:b4:46:f1:1e:d1:25: b9:83:05:0c:ec:51:a1:34:d5:0a:2f:01:9d:9c:8c:d6:17:00: 57:56:3b:e9:5e:8e:02:6f:6e:29:83:aa:07:30:b5:d1:71:7d: bf:dc:0e:80:6f:f9:98:23:a5:45:63:ce:49:cb:ea:37:e2:9f: 33:ab:be:29:1e:41:4a:c5:2c:09:d4:7e:ff:7a:d0:ea:26:c9: 37:27:cf:d0:3d:e9:2b:d6:b2:70:f1:97:88:60:18:68:fd:39: cd:03:b5:99:9e:d0:86:46:9c:e8:bb:05:52:6f:85:3d:c7:4b: 3a:29:1b:02:a2:f0:75:50:fc:93:85:54:ba:9d:c3:3c:49:aa: b0:f5:55:38:e4:8d:62:ca:e5:f8:42:01:84:7b:33:e2:c7:55: d6:20:90:98:f6:9f:d4:2f:d4:da:9b:1f:e8:f2:e5:af:a7:ad: 05:a1:24:9b:11:53:55:5b:21:9a:a2:8d:c8:aa:45:bb:25:35: 2f:ce:60:25:0a:28:55:3f:e3:a2:df:fe:07:cc:1b:ec:72:a6: 6d:49:ae:76:55:1c:c0:74:4a:6e:23:f9:86:e9:5c:57:b5:10: 40:44:a0:10 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5 NzZGODY0NkMwHhcNMjYwMjI4MjMxOTM3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OWEzNzgwOC0zYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4m95MOO6tdw9D2tKz+7KJu1N1miE7isVm08uqf452QmFxfiMIShTHwkxktpa b28f29GROUQDxHSUL0OCqYWtkBW4YP0lPh2fFu3os6OvIeYENEd0KSMI0/JDyCk4 YYlOcuLdaKxlx99fGBPMpqZo9OaJmhzcLfFKeHTzIPcAWkVead1zgl6pVIS1CqF8 ySbvGt4gwuej4lVAK94n+xpYnVF+2qDOEe0GOJwhuhZab4OxxJ83ZrrDcNQz2hpf Sg414bVTUBhhdBWdTMXgvAjjJOrc+Tq0ANXY4YLLEjkIx3+/nbly77IbM7FjlidT jAT3jgez2hc6ouq2sq0LI+/8ewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN3uI77Z 1ml/ZsKT2g/+nUeng7asMB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzREMzcvOEFFMEY0RUNDMkIyMTFFQkI3RTdBRDY2QzRGOUFFMDIvMDA4QjE3Q0VD MkI2MTFFQjgwRjFCMjdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6KsMA0GCSqGSIb3DQEBCwUAA4IBAQClFUWiDGSbbjlSl4LcYTo5 MnYK5SIMVRab/4Z0vs60RvEe0SW5gwUM7FGhNNUKLwGdnIzWFwBXVjvpXo4Cb24p g6oHMLXRcX2/3A6Ab/mYI6VFY85Jy+o34p8zq74pHkFKxSwJ1H7/etDqJsk3J8/Q Pekr1rJw8ZeIYBho/TnNA7WZntCGRpzouwVSb4U9x0s6KRsCovB1UPyThVS6ncM8 Saqw9VU45I1iyuX4QgGEezPix1XWIJCY9p/UL9Tamx/o8uWvp60FoSSbEVNVWyGa oo3IqkW7JTUvzmAlCihVP+Oi3/4HzBvscqZtSa52VRzAdEpuI/mG6VxXtRBARKAQ -----END CERTIFICATE-----Generated at Mon Mar 2 00:08:24 2026 by rpki-client