$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/CFB0BEF68F7111EFBF50A331C4F9AE02.roa File: CFB0BEF68F7111EFBF50A331C4F9AE02.roa (raw, json) Hash identifier: d522JtU7ofK+iHBHN7f6Uf/7SL+MFyqmrLpi0e3t3i4= Subject key identifier: 13:08:3A:D1:FE:B7:AF:94:48:98:E8:4C:C1:9A:BE:F6:65:A5:0A:5F Certificate issuer: /CN=A91C4E62/serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Certificate serial: 01AC Authority key identifier: 65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/CFB0BEF68F7111EFBF50A331C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:07:41 +0000 ROA not before: Mon 29 Dec 2025 03:23:31 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 7545 IP address blocks: 103.42.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4E62, serialNumber=6580910B55FAE5FF60F71EB2070470A1262E343B Validity Not Before: Dec 29 03:23:31 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43a1d-94db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:ed:44:3b:06:07:7b:4a:6f:dc:8b:26:d2: 2f:bc:17:2e:0b:85:be:66:fb:1e:15:d3:e6:7c:1b: e1:f5:c9:ed:dd:c8:a6:5c:c8:71:43:89:08:59:1d: 2b:25:d0:c5:01:ba:73:57:2e:bf:90:ff:00:3e:2d: 9b:fc:f3:73:67:64:87:b9:a3:ea:67:18:16:6d:26: 60:60:12:52:05:41:98:31:ae:b9:e2:74:d6:34:46: d3:50:d9:68:7b:25:41:67:d9:a6:26:a5:a4:4b:21: f8:0a:f8:7c:e8:5d:08:03:f1:2e:d3:5b:4f:34:ba: cf:66:03:0c:51:3b:a1:d5:ed:51:77:0b:6d:db:c8: 47:59:79:15:15:dd:27:cb:de:2e:77:ed:cc:61:81: 0b:09:e2:9f:c9:d8:2d:64:27:25:fd:c7:39:2f:86: 58:72:49:8c:b2:54:83:53:a4:0c:c3:94:b6:fe:43: 40:eb:e1:bf:54:94:a0:ce:cd:b1:dc:53:8d:b8:72: 55:d6:65:da:b9:69:53:b9:f8:c6:46:46:fe:c6:4a: 99:63:9e:9e:b0:31:f4:77:c7:51:97:74:48:90:09: 50:70:11:e4:76:b9:08:33:77:7b:05:07:19:b9:95: 24:a7:7a:00:f3:49:fd:8a:4b:dc:77:70:c9:22:11: 89:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:08:3A:D1:FE:B7:AF:94:48:98:E8:4C:C1:9A:BE:F6:65:A5:0A:5F X509v3 Authority Key Identifier: keyid:65:80:91:0B:55:FA:E5:FF:60:F7:1E:B2:07:04:70:A1:26:2E:34:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/ZYCRC1X65f9g9x6yBwRwoSYuNDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZYCRC1X65f9g9x6yBwRwoSYuNDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4E62/702A028CC99F11EEA8158E79C4F9AE02/CFB0BEF68F7111EFBF50A331C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.42.62.0/24 Signature Algorithm: sha256WithRSAEncryption 09:cf:b9:49:ca:b8:db:03:fd:be:47:b2:41:d3:a3:3f:a0:4e: 23:4f:83:69:af:66:d0:50:a5:36:7d:b4:9c:95:0c:17:2c:73: 22:bf:a2:52:3b:42:e5:c7:17:d3:5b:5d:ce:86:8f:56:24:53: d3:f4:26:80:46:b0:a8:c2:dc:a2:ef:37:03:0c:bc:07:e6:4b: b8:6a:f5:35:d3:96:85:0e:5e:84:29:31:88:4d:6f:fa:9e:fc: a3:ac:bf:03:c4:85:3a:cc:5d:df:c6:eb:aa:ae:9b:6a:27:0d: f8:2d:17:53:67:ee:9e:5c:64:02:11:6d:55:64:7d:6a:13:1a: 6e:58:c3:1d:13:d0:37:4f:c7:71:8a:1d:92:3b:1f:f9:76:67: 29:d0:c1:4c:b6:9f:2a:96:f9:33:82:77:82:fe:26:c2:4a:b7: 8e:83:01:34:ba:b3:e4:11:02:c0:e4:64:b6:14:49:3d:e7:f0: 99:ba:50:86:a9:4d:21:a3:bb:95:ce:d1:47:f0:b7:b3:ef:02: df:42:1a:d3:71:4f:e7:85:76:19:bb:58:68:71:f8:ff:cd:17: 81:af:61:20:93:c2:fb:04:85:ff:e4:aa:5a:70:da:2c:2b:07: 72:b9:ee:79:5f:3c:6a:46:9f:59:b0:66:f3:f3:7d:d2:bf:7a: 9f:f6:34:20 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFNjIxMTAvBgNVBAUTKDY1ODA5MTBCNTVGQUU1RkY2MEY3MUVCMjA3MDQ3MEEx MjYyRTM0M0IwHhcNMjUxMjI5MDMyMzMxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2ExZC05NGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZbtRDsGB3tKb9yLJtIvvBcuC4W+ZvseFdPmfBvh9cnt3cimXMhxQ4kIWR0r JdDFAbpzVy6/kP8APi2b/PNzZ2SHuaPqZxgWbSZgYBJSBUGYMa654nTWNEbTUNlo eyVBZ9mmJqWkSyH4Cvh86F0IA/Eu01tPNLrPZgMMUTuh1e1Rdwtt28hHWXkVFd0n y94ud+3MYYELCeKfydgtZCcl/cc5L4ZYckmMslSDU6QMw5S2/kNA6+G/VJSgzs2x 3FONuHJV1mXauWlTufjGRkb+xkqZY56esDH0d8dRl3RIkAlQcBHkdrkIM3d7BQcZ uZUkp3oA80n9ikvcd3DJIhGJ1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBMIOtH+ t6+USJjoTMGavvZlpQpfMB8GA1UdIwQYMBaAFGWAkQtV+uX/YPcesgcEcKEmLjQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEU2Mi83MDJBMDI4Q0M5 OUYxMUVFQTgxNThFNzlDNEY5QUUwMi9aWUNSQzFYNjVmOWc5eDZ5QndSd29TWXVO RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pZQ1JDMVg2NWY5Zzl4NnlCd1J3b1NZdU5Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRFNjIvNzAyQTAyOENDOTlGMTFFRUE4MTU4RTc5QzRGOUFFMDIvQ0ZCMEJFRjY4 RjcxMTFFRkJGNTBBMzMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZyo+MA0GCSqGSIb3DQEBCwUAA4IBAQAJz7lJyrjbA/2+R7JB06M/ oE4jT4Npr2bQUKU2fbSclQwXLHMiv6JSO0LlxxfTW13Oho9WJFPT9CaARrCowtyi 7zcDDLwH5ku4avU105aFDl6EKTGITW/6nvyjrL8DxIU6zF3fxuuqrptqJw34LRdT Z+6eXGQCEW1VZH1qExpuWMMdE9A3T8dxih2SOx/5dmcp0MFMtp8qlvkzgneC/ibC SreOgwE0urPkEQLA5GS2FEk95/CZulCGqU0ho7uVztFH8Lez7wLfQhrTcU/nhXYZ u1hocfj/zReBr2Egk8L7BIX/5KpacNosKwdyue55XzxqRp9ZsGbz833Sv3qf9jQg -----END CERTIFICATE-----Generated at Mon Mar 2 05:40:11 2026 by rpki-client