$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/CBD4FE1208B611EDACE57065C4F9AE02.roa File: CBD4FE1208B611EDACE57065C4F9AE02.roa (raw, json) Hash identifier: 9y7l5xDl3TqzqRPu7NQw/yrhqKT6b0rd979dT8z29Lw= Subject key identifier: FC:70:50:DB:A2:81:F0:51:A8:A6:75:F2:D1:D1:A1:CD:B1:AF:E0:CA Certificate issuer: /CN=A91C5CB1/serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Certificate serial: 0318 Authority key identifier: 00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/CBD4FE1208B611EDACE57065C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:03:46 +0000 ROA not before: Tue 05 Aug 2025 02:09:41 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 136513 IP address blocks: 103.152.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5CB1, serialNumber=00A10083FDB016C303D4E619EC61AB6583800D27 Validity Not Before: Aug 5 02:09:41 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a400f2-96ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:e1:19:3f:98:6a:b3:9e:08:81:ea:d9:3a: 46:4d:7c:ea:ea:5f:5d:c2:90:92:85:25:60:4a:0c: b1:4e:f8:7b:12:24:59:27:1f:21:fd:0f:98:3f:73: dc:8f:06:e9:2c:30:d1:2e:7d:f1:45:3b:04:ba:de: fb:61:78:8d:c0:0f:04:cc:38:2d:cd:9d:7d:9d:87: 00:c6:ef:08:ce:b6:10:86:55:be:1a:80:20:45:b1: 9e:7c:5f:ea:2a:c9:f2:67:c7:3e:05:01:bd:f9:f3: e7:20:8c:15:b7:e0:a2:2e:0f:e1:82:62:1d:30:c3: e4:bc:f7:32:ae:11:06:20:07:b7:7f:2b:c6:66:85: fd:c3:49:1e:74:c6:49:5a:9c:89:4c:eb:22:63:ff: 2d:36:04:88:9f:73:68:b0:8b:45:88:a5:7d:28:bc: 70:89:18:65:7c:e0:f9:8f:7d:70:48:17:c6:1c:e6: 25:06:4e:43:9d:b9:8a:ed:7c:ab:90:39:c7:b1:11: 09:fc:d9:c4:09:7a:3e:e7:31:a5:77:2e:46:33:c3: 0c:aa:86:7d:6f:32:f0:bc:3a:6f:92:ce:d0:83:66: fd:d1:e5:0e:66:53:5f:30:45:6a:25:39:44:cb:35: d4:1a:0b:51:35:60:21:fc:25:a0:a8:c4:d4:5f:67: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:70:50:DB:A2:81:F0:51:A8:A6:75:F2:D1:D1:A1:CD:B1:AF:E0:CA X509v3 Authority Key Identifier: keyid:00:A1:00:83:FD:B0:16:C3:03:D4:E6:19:EC:61:AB:65:83:80:0D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/AKEAg_2wFsMD1OYZ7GGrZYOADSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKEAg_2wFsMD1OYZ7GGrZYOADSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CB1/11672C2007F911ED8227E572C4F9AE02/CBD4FE1208B611EDACE57065C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.86.0/23 Signature Algorithm: sha256WithRSAEncryption 99:62:a4:aa:80:da:79:4a:07:df:ee:cf:40:55:58:5d:80:2d: 1e:7d:3f:5a:17:bf:f3:0c:03:6f:0c:d6:ac:0d:f4:74:13:ad: 77:79:d2:39:f7:43:8a:e6:ac:3b:34:36:77:ef:a3:61:cc:a6: fc:ea:a4:5f:5d:03:d7:01:3c:39:07:74:e6:9f:8c:c6:b7:b1: e8:0f:a8:50:53:fb:43:c1:08:17:a3:0a:77:09:ca:cb:00:b9: 7e:ce:ec:2a:3c:5e:35:6c:cd:73:7f:49:3c:ed:f5:06:25:2f: 93:05:8a:f4:35:17:a1:6e:cf:36:6c:87:c4:29:39:29:5b:32: 19:56:d9:43:c0:2c:6b:ee:85:86:96:0e:a3:c7:4d:d0:e8:a0: 12:59:85:9c:ec:44:9f:22:4a:96:74:88:e7:75:3d:fa:94:18: 5c:03:7a:66:3a:18:92:de:9b:c7:93:e3:ac:a0:6e:f9:fb:40: 34:5b:06:78:96:13:f2:ce:21:a7:37:2d:33:47:b7:3f:b7:e4: 1a:4d:d2:91:0e:3a:29:b9:5f:4f:df:c3:6a:39:5f:af:33:00: cb:e7:fe:f8:4f:c4:f6:fa:21:55:47:87:46:8b:95:bd:50:4a: 1a:dc:ce:ae:ef:66:7e:38:55:d3:89:ad:c6:24:fe:14:1e:43: aa:2c:75:6b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVDQjExMTAvBgNVBAUTKDAwQTEwMDgzRkRCMDE2QzMwM0Q0RTYxOUVDNjFBQjY1 ODM4MDBEMjcwHhcNMjUwODA1MDIwOTQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDBmMi05NmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR3hGT+YarOeCIHq2TpGTXzq6l9dwpCShSVgSgyxTvh7EiRZJx8h/Q+YP3Pc jwbpLDDRLn3xRTsEut77YXiNwA8EzDgtzZ19nYcAxu8IzrYQhlW+GoAgRbGefF/q KsnyZ8c+BQG9+fPnIIwVt+CiLg/hgmIdMMPkvPcyrhEGIAe3fyvGZoX9w0kedMZJ WpyJTOsiY/8tNgSIn3NosItFiKV9KLxwiRhlfOD5j31wSBfGHOYlBk5DnbmK7Xyr kDnHsREJ/NnECXo+5zGldy5GM8MMqoZ9bzLwvDpvks7Qg2b90eUOZlNfMEVqJTlE yzXUGgtRNWAh/CWgqMTUX2ddNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPxwUNui gfBRqKZ18tHRoc2xr+DKMB8GA1UdIwQYMBaAFAChAIP9sBbDA9TmGexhq2WDgA0n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNCMS8xMTY3MkMyMDA3 RjkxMUVEODIyN0U1NzJDNEY5QUUwMi9BS0VBZ18yd0ZzTUQxT1laN0dHclpZT0FE U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLRUFnXzJ3RnNNRDFPWVo3R0dyWllPQURTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzVDQjEvMTE2NzJDMjAwN0Y5MTFFRDgyMjdFNTcyQzRGOUFFMDIvQ0JENEZFMTIw OEI2MTFFREFDRTU3MDY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5hWMA0GCSqGSIb3DQEBCwUAA4IBAQCZYqSqgNp5Sgff7s9AVVhd gC0efT9aF7/zDANvDNasDfR0E613edI590OK5qw7NDZ376NhzKb86qRfXQPXATw5 B3Tmn4zGt7HoD6hQU/tDwQgXowp3CcrLALl+zuwqPF41bM1zf0k87fUGJS+TBYr0 NRehbs82bIfEKTkpWzIZVtlDwCxr7oWGlg6jx03Q6KASWYWc7ESfIkqWdIjndT36 lBhcA3pmOhiS3pvHk+OsoG75+0A0WwZ4lhPyziGnNy0zR7c/t+QaTdKRDjopuV9P 38NqOV+vMwDL5/74T8T2+iFVR4dGi5W9UEoa3M6u72Z+OFXTia3GJP4UHkOqLHVr -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:07 2026 by rpki-client