$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/2A766EA23A3411EDA1B7D863C4F9AE02.roa File: 2A766EA23A3411EDA1B7D863C4F9AE02.roa (raw, json) Hash identifier: 4HjNDDfKFJrgWK5K6rpjz8dvflAC5Isd+SEG9GMgXhw= Subject key identifier: DA:B3:1A:8A:D0:A6:55:06:65:26:ED:DA:AE:42:EE:EC:50:C2:C1:B7 Certificate issuer: /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Certificate serial: 029A Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/2A766EA23A3411EDA1B7D863C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:08:53 +0000 ROA not before: Thu 09 Oct 2025 01:59:10 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141152 IP address blocks: 103.155.88.0/23 maxlen: 23 103.155.88.0/24 maxlen: 24 103.155.89.0/24 maxlen: 24 2406:6a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9 Validity Not Before: Oct 9 01:59:10 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a42c54-0275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:87:71:19:25:e1:60:7e:f7:63:8f:4e:43: 92:6b:e3:2a:4b:d5:0e:ba:c4:2a:af:30:ad:44:97: 6b:d0:22:68:96:b1:b4:97:da:1e:c1:22:99:fd:25: 34:67:83:10:91:fc:c8:4d:0d:d2:0a:c8:38:04:7d: 1e:8a:1c:c8:20:d2:af:fd:84:b6:43:dc:db:8d:36: e6:8b:2f:34:29:ee:ff:0f:5e:28:9b:a7:01:95:06: c4:1b:86:7e:9b:60:4b:ab:73:d2:fd:d0:e6:90:62: 1b:bf:5a:3c:1e:86:79:d1:9e:46:4e:d0:7f:d2:98: 6f:02:2e:95:ff:59:02:63:f4:e6:c6:cc:94:1b:80: 23:e5:a0:e0:e6:67:c4:a5:01:b8:af:f9:2a:dd:d1: 2b:31:02:ff:21:c1:a3:23:8e:fe:17:1c:fd:2b:3e: 7a:c1:a6:d8:e6:31:72:fd:b5:0d:21:46:86:e1:18: ea:0c:8f:45:db:d9:97:bb:ff:53:6e:36:67:08:38: 36:2e:a7:2b:39:21:d1:6f:81:90:5a:07:77:55:2d: cc:ff:3a:8a:a4:4c:43:73:2d:7b:78:66:81:f7:8e: ac:ec:06:58:87:d8:0e:ef:af:a4:0f:40:cb:c3:ff: 7d:8b:e4:71:c4:80:ef:84:b7:3a:d7:b3:d2:74:38: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B3:1A:8A:D0:A6:55:06:65:26:ED:DA:AE:42:EE:EC:50:C2:C1:B7 X509v3 Authority Key Identifier: keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/2A766EA23A3411EDA1B7D863C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.155.88.0/23 IPv6: 2406:6a40::/32 Signature Algorithm: sha256WithRSAEncryption 7d:ad:13:0b:cd:86:7a:de:58:b4:e1:13:78:75:03:87:e5:aa: fb:24:75:00:68:e7:0b:24:d1:48:e0:0a:4c:95:a4:b4:4b:a5: 5e:d6:b7:12:aa:73:74:40:d5:9d:d0:0c:95:22:88:00:77:19: 01:54:ee:05:ad:89:60:b4:47:30:1a:6a:c5:64:e5:35:62:35: f4:6c:d2:8d:f1:86:87:42:4b:d2:2a:25:6f:5a:77:ab:c2:f4: 2b:0f:e7:c1:15:d4:f9:06:7b:32:97:40:05:dd:d1:7f:b4:4d: ce:ff:88:fe:f8:48:1e:bb:bd:41:15:62:d0:4d:9c:09:65:6c: d6:2a:8a:97:b5:82:96:f8:93:84:72:52:be:6f:50:b0:2c:cb: 7d:23:97:ed:fd:db:06:c5:71:25:a5:f9:22:46:08:a2:fb:2a: a9:59:9d:4f:e6:b0:ba:c4:20:51:c9:d0:70:dd:49:19:37:5d: 5c:b3:76:5b:c4:dc:3c:55:46:fd:0c:f8:cf:35:8b:99:ec:7f: ef:e6:5a:c1:06:62:30:bc:27:d3:d5:15:45:9d:02:bb:a9:27: 98:89:10:c8:9e:d1:27:66:c6:a0:87:38:b6:7c:02:ba:ab:fb: b1:35:8f:4f:b1:0a:b5:d2:f1:13:7b:16:c4:d3:fc:13:2d:20: b8:94:84:16 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhGNjgxMTAvBgNVBAUTKEEzREMxODhGMkQ1NTVCNDE1QTcxNUYyNTkwMzZBMUE2 MEZGQ0I4RDkwHhcNMjUxMDA5MDE1OTEwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmM1NC0wMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyoiHcRkl4WB+92OPTkOSa+MqS9UOusQqrzCtRJdr0CJolrG0l9oewSKZ/SU0 Z4MQkfzITQ3SCsg4BH0eihzIINKv/YS2Q9zbjTbmiy80Ke7/D14om6cBlQbEG4Z+ m2BLq3PS/dDmkGIbv1o8HoZ50Z5GTtB/0phvAi6V/1kCY/TmxsyUG4Aj5aDg5mfE pQG4r/kq3dErMQL/IcGjI47+Fxz9Kz56wabY5jFy/bUNIUaG4RjqDI9F29mXu/9T bjZnCDg2LqcrOSHRb4GQWgd3VS3M/zqKpExDcy17eGaB946s7AZYh9gO76+kD0DL w/99i+RxxIDvhLc617PSdDhOoQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFNqzGorQ plUGZSbt2q5C7uxQwsG3MB8GA1UdIwQYMBaAFKPcGI8tVVtBWnFfJZA2oaYP/LjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEY2OC82QjYwQkZCQTNB MzExMUVEQTEwQ0E3NjFDNEY5QUUwMi9vOXdZankxVlcwRmFjVjhsa0RhaHBnXzh1 TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285d1lqeTFWVzBGYWNWOGxrRGFocGdfOHVOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhGNjgvNkI2MEJGQkEzQTMxMTFFREExMENBNzYxQzRGOUFFMDIvMkE3NjZFQTIz QTM0MTFFREExQjdEODYzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5tYMA0EAgACMAcDBQAkBmpAMA0GCSqGSIb3DQEBCwUAA4IBAQB9 rRMLzYZ63li04RN4dQOH5ar7JHUAaOcLJNFI4ApMlaS0S6Ve1rcSqnN0QNWd0AyV IogAdxkBVO4FrYlgtEcwGmrFZOU1YjX0bNKN8YaHQkvSKiVvWnerwvQrD+fBFdT5 Bnsyl0AF3dF/tE3O/4j++Egeu71BFWLQTZwJZWzWKoqXtYKW+JOEclK+b1CwLMt9 I5ft/dsGxXElpfkiRgii+yqpWZ1P5rC6xCBRydBw3UkZN11cs3ZbxNw8VUb9DPjP NYuZ7H/v5lrBBmIwvCfT1RVFnQK7qSeYiRDIntEnZsaghzi2fAK6q/uxNY9PsQq1 0vETexbE0/wTLSC4lIQW -----END CERTIFICATE-----Generated at Tue Mar 3 00:58:15 2026 by rpki-client