$ rpki-client -vvf rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/C3CE90CEF99A11EB936CCA1EC4F9AE02.roa File: C3CE90CEF99A11EB936CCA1EC4F9AE02.roa (raw, json) Hash identifier: d8MrH6JxdvkZ8bmYCUsbjAAgnFmtKv67lKs9/PuVhBs= Subject key identifier: 8C:CE:E0:AA:6B:D2:5E:82:64:C5:75:CF:C2:14:BA:C7:74:23:EC:F3 Certificate issuer: /CN=A91C92DC/serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Certificate serial: 05CF Authority key identifier: 89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/C3CE90CEF99A11EB936CCA1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:54:14 +0000 ROA not before: Tue 20 May 2025 23:35:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9471 IP address blocks: 103.166.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C92DC, serialNumber=8970A400CCCCF010933C330C3760A1EC5DB4E0AD Validity Not Before: May 20 23:35:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a40cc6-3f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:c0:3d:36:69:fe:cb:6d:36:3c:2e:d4:11: 40:77:f2:64:2d:f9:64:f0:58:d2:17:8c:2f:a4:a1: 3a:46:72:4d:91:bd:0b:00:2e:db:3b:3d:fb:30:6f: 58:dd:ed:fa:4a:1f:c0:2c:50:00:3e:1f:ea:f3:7d: 31:ae:fe:4c:3c:96:f1:4e:36:9c:5d:08:25:79:57: 27:8b:74:ef:40:ff:84:89:0f:e6:d2:94:b6:a7:d1: dc:1e:77:ba:f4:3c:8f:9c:37:3b:85:91:17:40:89: c3:9d:b6:15:96:a1:ce:da:da:26:d9:72:a5:6c:6d: 68:91:3a:23:3f:fc:0a:f1:4a:43:b5:13:5c:ca:c1: db:6e:7d:ae:3a:ee:39:a3:d3:a8:8f:9c:bf:2f:fb: 9b:1a:db:d2:7a:04:c7:bd:da:7e:86:86:3e:8e:b8: 5a:97:2d:6e:66:ab:34:92:d9:23:b1:2e:6b:54:c9: 09:e4:96:63:0c:38:39:97:25:e6:86:ec:9c:35:e7: 02:03:90:3c:1e:30:cd:a2:60:3b:84:f2:ce:3c:d4: f9:8c:a3:ca:2e:43:f5:df:ec:2d:3d:b8:88:21:36: 70:d9:ce:01:51:23:4b:49:15:06:32:86:d1:d8:92: c9:96:69:65:42:6c:f6:18:75:6c:cf:53:1d:e3:d4: 1c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:CE:E0:AA:6B:D2:5E:82:64:C5:75:CF:C2:14:BA:C7:74:23:EC:F3 X509v3 Authority Key Identifier: keyid:89:70:A4:00:CC:CC:F0:10:93:3C:33:0C:37:60:A1:EC:5D:B4:E0:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/iXCkAMzM8BCTPDMMN2Ch7F204K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXCkAMzM8BCTPDMMN2Ch7F204K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C92DC/C60578A0F99811EB8AF49C1DC4F9AE02/C3CE90CEF99A11EB936CCA1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.70.0/23 Signature Algorithm: sha256WithRSAEncryption 10:23:d0:0f:6b:47:60:f7:bf:14:24:79:11:56:05:c8:1a:15: b3:22:78:65:9e:df:c7:76:f8:27:93:7f:a2:aa:ed:fd:63:7d: 28:f4:de:88:d5:3c:ba:6b:2c:68:b2:dd:8a:a2:1f:a9:0c:31: 1a:85:a7:5d:19:d8:da:ef:2a:9a:9d:ac:ed:b3:a0:82:2a:24: 63:24:47:d2:af:67:ca:d6:7b:c9:c0:fd:27:c4:77:2a:b8:3d: 3b:de:bd:8b:eb:51:96:95:01:e6:df:bd:be:50:69:66:c2:3d: a8:9e:7d:b1:0b:c6:da:d8:a1:14:9c:74:80:88:4a:ca:95:9f: 0e:21:6e:a6:83:26:65:6e:11:8e:69:dd:da:fc:c4:1b:4a:a5: 34:cf:95:40:d7:78:60:23:e5:04:3f:a8:08:d8:b3:3a:a6:6c: 9a:5d:8d:a6:e1:42:b0:78:00:cd:d5:cd:eb:de:50:90:07:0f: d3:aa:e4:cb:2f:3f:9c:75:c3:b1:c8:f8:a0:c4:8a:05:90:42: 58:ad:82:84:31:16:24:ac:cf:3b:0b:67:be:c6:b3:d4:68:71: 5a:4a:4b:3e:b9:60:f8:76:e5:bf:b4:2a:e6:81:b2:a7:c2:da: e0:2e:01:72:fa:00:e8:85:8f:dc:4f:16:e2:4a:1b:23:70:8c: 3a:c5:40:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkyREMxMTAvBgNVBAUTKDg5NzBBNDAwQ0NDQ0YwMTA5MzNDMzMwQzM3NjBBMUVD NURCNEUwQUQwHhcNMjUwNTIwMjMzNTE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGNjNi0zZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhjAPTZp/sttNjwu1BFAd/JkLflk8FjSF4wvpKE6RnJNkb0LAC7bOz37MG9Y 3e36Sh/ALFAAPh/q830xrv5MPJbxTjacXQgleVcni3TvQP+EiQ/m0pS2p9HcHne6 9DyPnDc7hZEXQInDnbYVlqHO2tom2XKlbG1okTojP/wK8UpDtRNcysHbbn2uOu45 o9Ooj5y/L/ubGtvSegTHvdp+hoY+jrhaly1uZqs0ktkjsS5rVMkJ5JZjDDg5lyXm huycNecCA5A8HjDNomA7hPLOPNT5jKPKLkP13+wtPbiIITZw2c4BUSNLSRUGMobR 2JLJlmllQmz2GHVsz1Md49QcFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIzO4Kpr 0l6CZMV1z8IUusd0I+zzMB8GA1UdIwQYMBaAFIlwpADMzPAQkzwzDDdgoexdtOCt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTJEQy9DNjA1NzhBMEY5 OTgxMUVCOEFGNDlDMURDNEY5QUUwMi9pWENrQU16TThCQ1RQRE1NTjJDaDdGMjA0 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYQ2tBTXpNOEJDVFBETU1OMkNoN0YyMDRLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkyREMvQzYwNTc4QTBGOTk4MTFFQjhBRjQ5QzFEQzRGOUFFMDIvQzNDRTkwQ0VG OTlBMTFFQjkzNkNDQTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6ZGMA0GCSqGSIb3DQEBCwUAA4IBAQAQI9APa0dg978UJHkRVgXI GhWzInhlnt/Hdvgnk3+iqu39Y30o9N6I1Ty6ayxost2Koh+pDDEahaddGdja7yqa nazts6CCKiRjJEfSr2fK1nvJwP0nxHcquD073r2L61GWlQHm372+UGlmwj2onn2x C8ba2KEUnHSAiErKlZ8OIW6mgyZlbhGOad3a/MQbSqU0z5VA13hgI+UEP6gI2LM6 pmyaXY2m4UKweADN1c3r3lCQBw/TquTLLz+cdcOxyPigxIoFkEJYrYKEMRYkrM87 C2e+xrPUaHFaSks+uWD4duW/tCrmgbKnwtrgLgFy+gDohY/cTxbiShsjcIw6xUAs -----END CERTIFICATE-----Generated at Mon Mar 2 07:07:54 2026 by rpki-client