$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa File: A606B22CA65211EDB3A5967CC4F9AE02.roa (raw, json) Hash identifier: EtKZ8ADY4AfiufSG+H9sA6J51pbknKZXnniWJ36m+Bg= Subject key identifier: DD:9D:EE:18:F6:EA:A2:26:EF:75:D6:F6:7D:87:E8:9D:15:56:6A:0D Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 0251 Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:16:33 +0000 ROA not before: Sun 01 Mar 2026 03:23:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134663 IP address blocks: 103.72.138.0/24 maxlen: 24 103.72.139.0/24 maxlen: 24 2001:df2:4440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Mar 1 03:23:05 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3f5e0-811e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:39:93:a1:c9:4f:45:47:48:1a:63:40:6f: 05:d2:e8:01:e9:0b:46:ae:29:2a:c9:c4:2a:76:85: b6:a2:3f:c5:4d:c9:d9:42:da:39:bb:63:9d:2c:4a: e5:1b:ee:e7:f9:7e:01:42:f5:54:50:7c:b8:29:c8: 5e:04:c2:14:8a:8b:c3:7c:17:47:a0:e1:47:bf:94: fc:da:7a:24:90:37:dc:35:a8:4a:c6:1c:f1:34:00: 8f:7c:33:94:ac:9c:f9:1c:79:99:f5:dd:e1:ee:c7: ee:21:45:17:c0:96:61:eb:6d:7b:65:60:2e:aa:ee: 3f:e0:de:c6:1e:fb:c6:64:dc:07:d4:4a:b0:6e:47: 84:14:11:b6:08:74:7d:b4:f8:13:13:60:b1:ff:79: 33:0a:39:d3:25:45:f0:3f:92:10:0a:12:92:ef:96: 54:ae:f3:f7:7b:71:06:13:3c:50:68:91:35:e7:0a: db:a5:13:15:4f:4f:45:b6:88:da:55:b3:32:ac:2f: 74:52:5b:14:05:cf:8a:e1:9f:58:26:db:35:e0:56: 96:1a:98:c3:62:89:15:07:c7:28:2c:17:8b:46:2b: bc:ba:ee:0c:5b:50:5b:e5:1b:83:1c:33:1c:4b:75: fb:9b:54:b2:03:01:2f:d1:05:03:67:15:8e:6d:cc: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9D:EE:18:F6:EA:A2:26:EF:75:D6:F6:7D:87:E8:9D:15:56:6A:0D X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.138.0/23 IPv6: 2001:df2:4440::/48 Signature Algorithm: sha256WithRSAEncryption 70:96:2c:db:27:ad:f8:82:de:24:b0:86:c8:ae:d8:9f:2b:5f: 77:c7:22:10:c7:71:3b:86:23:e3:6e:c9:67:ee:6c:6d:9a:46: 16:7f:12:ee:28:7a:7d:ce:51:ed:51:e0:2a:04:82:3a:28:3a: 46:c7:0e:70:cd:89:fa:99:82:d6:19:ba:59:9a:23:a2:11:03: 2b:79:fb:9b:2e:94:8c:37:23:f3:0d:d2:99:a9:48:e9:00:1f: a1:fd:05:8d:a1:40:bc:f5:b8:ee:53:ee:75:18:57:b2:f2:3a: 17:7c:d3:53:bc:96:b2:5b:23:67:bf:35:6b:6f:5e:1c:c4:5f: 0c:54:14:02:e0:dc:8c:fa:fa:87:3d:ea:bc:d4:d7:12:4b:8d: 36:aa:61:af:cf:05:71:27:29:89:83:32:8b:10:de:07:7f:f5: 6a:f9:7e:92:d7:93:4f:4f:07:5a:46:e2:98:26:40:d6:41:af: c3:a1:2a:26:91:7f:49:63:84:e6:e2:25:1e:d0:f8:cc:63:56: 4f:41:04:e9:ac:78:8e:39:dc:d8:b7:01:48:9e:a9:33:95:3e: 30:b1:21:1f:c1:ee:a4:a5:b4:f8:52:71:75:1b:b2:03:42:49: 54:50:9d:4e:4c:11:3f:cf:a9:2b:c9:8e:19:0d:37:24:f7:fe: c1:00:ff:44 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjYwMzAxMDMyMzA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjVlMC04MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQo5k6HJT0VHSBpjQG8F0ugB6QtGrikqycQqdoW2oj/FTcnZQto5u2OdLErl G+7n+X4BQvVUUHy4KcheBMIUiovDfBdHoOFHv5T82nokkDfcNahKxhzxNACPfDOU rJz5HHmZ9d3h7sfuIUUXwJZh6217ZWAuqu4/4N7GHvvGZNwH1EqwbkeEFBG2CHR9 tPgTE2Cx/3kzCjnTJUXwP5IQChKS75ZUrvP3e3EGEzxQaJE15wrbpRMVT09Ftoja VbMyrC90UlsUBc+K4Z9YJts14FaWGpjDYokVB8coLBeLRiu8uu4MW1Bb5RuDHDMc S3X7m1SyAwEv0QUDZxWObcx4kwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFN2d7hj2 6qIm73XW9n2H6J0VVmoNMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JCMUIvMkFEMTM5ODZBNjRGMTFFRDk4MDJDQTc2QzRGOUFFMDIvQTYwNkIyMkNB NjUyMTFFREIzQTU5NjdDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ0iKMA8EAgACMAkDBwAgAQ3yREAwDQYJKoZIhvcNAQELBQADggEB AHCWLNsnrfiC3iSwhsiu2J8rX3fHIhDHcTuGI+NuyWfubG2aRhZ/Eu4oen3OUe1R 4CoEgjooOkbHDnDNifqZgtYZulmaI6IRAyt5+5sulIw3I/MN0pmpSOkAH6H9BY2h QLz1uO5T7nUYV7LyOhd801O8lrJbI2e/NWtvXhzEXwxUFALg3Iz6+oc96rzU1xJL jTaqYa/PBXEnKYmDMosQ3gd/9Wr5fpLXk09PB1pG4pgmQNZBr8OhKiaRf0ljhObi JR7Q+MxjVk9BBOmseI453Ni3AUieqTOVPjCxIR/B7qSltPhScXUbsgNCSVRQnU5M ET/PqSvJjhkNNyT3/sEA/0Q= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:32 2026 by rpki-client