$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa File: DF5D49F6985611ECBE7ED328C4F9AE02.roa (raw, json) Hash identifier: iGmNhe2U/JgHU115UXZMlUMKdd/xk6VCuDolUguecP8= Subject key identifier: 07:FA:6D:F0:F2:02:0B:2B:13:B4:DE:BF:FA:A6:9E:98:B1:EA:5B:DD Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0F0B Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa Signing time: Thu 16 Apr 2026 18:21:55 +0000 ROA not before: Thu 16 Apr 2026 18:21:54 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 16509 IP address blocks: 103.85.214.0/24 maxlen: 24 103.85.215.0/24 maxlen: 24 2001:df5:6d00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3851 (0xf0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Apr 16 18:21:54 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69e128c2-67b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:30:74:68:00:78:64:67:50:12:f8:de:48: f6:da:c2:b3:e2:b9:71:4b:3a:36:c7:01:b5:c4:8d: 3d:ff:68:b6:e8:0b:51:01:55:37:2d:14:bc:3e:41: 6a:25:9e:d2:42:6f:8b:b2:37:30:c6:e2:24:ad:98: 08:3b:36:33:df:a2:c0:55:eb:3b:b3:1a:7c:26:8d: 45:4f:17:98:7a:af:be:6a:c6:23:02:29:88:e7:71: bd:7c:5b:14:74:2b:a5:34:7d:78:83:f3:4a:c5:af: a9:c9:73:b6:40:26:f9:cd:78:25:be:f4:4b:2b:e7: e8:b5:3c:d4:5f:ec:7d:2d:f8:b9:f4:58:ab:46:cc: fc:85:bf:b9:70:63:b7:a5:e9:4a:3f:7c:83:41:4a: c4:14:12:91:37:5a:7f:60:9a:01:3e:bb:18:ce:66: 26:01:57:14:84:f2:3a:5b:0b:2a:c7:c2:ff:79:03: 61:4c:93:04:41:24:8e:2d:2f:6b:dd:b6:41:f5:cc: 8a:ad:e4:bf:e7:47:8e:02:18:10:1b:51:73:d3:d6: 41:bb:b1:d2:65:8c:08:31:2e:8f:e0:ab:e4:95:8e: 3c:f6:63:78:14:6f:0f:61:c2:6b:43:24:77:52:41: 9d:d1:93:86:64:4e:6d:98:d0:65:30:8c:63:f4:2d: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:6D:F0:F2:02:0B:2B:13:B4:DE:BF:FA:A6:9E:98:B1:EA:5B:DD X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/DF5D49F6985611ECBE7ED328C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.85.214.0/23 IPv6: 2001:df5:6d00::/48 Signature Algorithm: sha256WithRSAEncryption 06:22:c7:0e:59:53:0a:be:e6:20:83:51:db:e1:76:68:eb:71: 70:02:9a:7c:48:b6:f2:2d:b2:93:53:8f:47:6c:38:34:97:f2: b5:3c:10:8e:fa:a7:66:1b:2b:8c:7e:2d:50:5c:ca:b1:6a:46: 77:cd:13:4a:c2:c0:9c:b0:ed:f5:53:35:a9:14:45:47:8d:6e: bc:22:75:0f:2e:8c:8a:79:81:28:03:b4:00:ed:11:a1:a0:f1: 54:1b:d1:79:bf:bc:ba:f4:f7:dc:9f:51:0a:8b:9f:b8:ae:3d: c9:d3:f2:90:24:89:65:70:59:48:8c:9d:6c:46:3c:0c:a4:a9: 7a:dc:f2:37:62:93:4c:a5:54:06:de:af:f0:ca:12:18:37:34: b5:b8:e8:64:14:1b:01:22:71:e1:78:d7:3f:81:c5:65:c0:9e: 0b:85:92:70:44:0c:60:10:9f:3d:5d:44:6f:a7:52:f2:d4:27: 42:af:a9:9c:87:ed:ad:01:8b:e6:07:39:d3:c2:88:f9:7c:8b: 1e:6d:ce:f0:cd:ff:7c:96:93:ef:84:0c:32:8a:35:1c:64:2b: 84:e7:7d:f1:71:b0:7f:11:09:29:eb:c9:60:42:fc:3d:59:5d: 27:5d:ad:43:0d:84:05:42:5f:53:0c:b2:01:0b:92:dc:87:9d: 65:cd:b5:08 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjYwNDE2MTgyMTU0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWUxMjhjMi02N2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEkwdGgAeGRnUBL43kj22sKz4rlxSzo2xwG1xI09/2i26AtRAVU3LRS8PkFq JZ7SQm+LsjcwxuIkrZgIOzYz36LAVes7sxp8Jo1FTxeYeq++asYjAimI53G9fFsU dCulNH14g/NKxa+pyXO2QCb5zXglvvRLK+fotTzUX+x9Lfi59FirRsz8hb+5cGO3 pelKP3yDQUrEFBKRN1p/YJoBPrsYzmYmAVcUhPI6Wwsqx8L/eQNhTJMEQSSOLS9r 3bZB9cyKreS/50eOAhgQG1Fz09ZBu7HSZYwIMS6P4KvklY489mN4FG8PYcJrQyR3 UkGd0ZOGZE5tmNBlMIxj9C0XFQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAf6bfDy AgsrE7Tev/qmnpix6lvdMB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0FBNjkvNDBFMUZDOUM5RUIwMTFFOUIwN0U3QTgyQzRGOUFFMDIvREY1RDQ5RjY5 ODU2MTFFQ0JFN0VEMzI4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ1XWMA8EAgACMAkDBwAgAQ31bQAwDQYJKoZIhvcNAQELBQADggEB AAYixw5ZUwq+5iCDUdvhdmjrcXACmnxItvItspNTj0dsODSX8rU8EI76p2YbK4x+ LVBcyrFqRnfNE0rCwJyw7fVTNakURUeNbrwidQ8ujIp5gSgDtADtEaGg8VQb0Xm/ vLr099yfUQqLn7iuPcnT8pAkiWVwWUiMnWxGPAykqXrc8jdik0ylVAber/DKEhg3 NLW46GQUGwEiceF41z+BxWXAnguFknBEDGAQnz1dRG+nUvLUJ0KvqZyH7a0Bi+YH OdPCiPl8ix5tzvDN/3yWk++EDDKKNRxkK4TnffFxsH8RCSnryWBC/D1ZXSddrUMN hAVCX1MMsgELktyHnWXNtQg= -----END CERTIFICATE-----Generated at Fri Apr 17 08:00:38 2026 by rpki-client