$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/A0879902F15711EC846A5F29C4F9AE02.roa File: A0879902F15711EC846A5F29C4F9AE02.roa (raw, json) Hash identifier: DSIfNa17RdU77qIRp8z8Kzsgm5ZeTJKHenlHD4Tp8Bk= Subject key identifier: 82:B2:AA:D8:3D:77:FB:15:9E:17:7C:F7:68:97:AD:A9:4D:30:AC:49 Certificate issuer: /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Certificate serial: 03B0 Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/A0879902F15711EC846A5F29C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:58:31 +0000 ROA not before: Fri 13 Jun 2025 01:07:04 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139325 IP address blocks: 103.186.218.0/23 maxlen: 24 2001:df0:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1 Validity Not Before: Jun 13 01:07:04 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3ffb7-8c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:a8:ac:0a:c4:4f:9a:9a:d3:3c:bb:e3:f2: d7:b2:24:69:b5:cf:bf:d0:c2:ee:a6:72:b5:e1:38: 31:3d:5f:d1:31:a0:7e:06:2b:df:a3:89:33:66:54: 7f:cf:bc:8a:13:82:d5:cb:45:8c:55:49:5d:03:01: 05:f5:06:00:a9:59:c6:5b:32:d1:03:16:06:b9:78: 98:b2:b3:79:aa:44:e7:bb:bd:68:b9:f3:39:af:2d: 9b:9e:26:4c:d6:d9:1d:a5:4c:94:c1:04:ca:93:28: dd:f5:0c:5a:34:2d:3a:a3:e9:a2:59:5c:b9:c4:ee: c5:f9:0e:f2:be:5b:4e:5f:61:2e:d1:4b:cf:33:e2: 7f:17:08:12:3a:a7:e1:6e:8f:ce:67:a3:2c:1c:93: 08:b1:a0:49:d8:15:61:43:d5:86:41:0b:ed:90:29: f5:50:46:ac:ec:d1:97:8f:34:f6:d8:30:b3:fc:5c: d5:3b:bf:4f:37:1f:7f:ca:8c:4e:32:10:04:c1:e4: 69:37:33:9c:8b:1f:0f:39:d8:1a:57:e3:8b:26:22: 04:8b:6c:d4:7b:cf:d0:c4:15:43:2f:e2:28:e0:b9: 26:d2:b0:6e:8a:cb:8b:a5:80:1e:3e:cd:6a:d7:ec: 3e:cf:be:30:75:75:f1:74:2e:7f:7b:90:e4:6c:2b: 66:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B2:AA:D8:3D:77:FB:15:9E:17:7C:F7:68:97:AD:A9:4D:30:AC:49 X509v3 Authority Key Identifier: keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/A0879902F15711EC846A5F29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.186.218.0/23 IPv6: 2001:df0:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:8a:12:53:1f:61:3d:14:c4:d0:06:1c:46:e1:de:40:a1:3d: 64:b0:53:95:36:04:36:c4:e5:15:69:0f:1f:75:a9:af:fe:5a: 9c:e5:7b:c4:b2:90:15:c5:39:7c:41:aa:48:ce:57:05:02:a0: 6b:e2:e4:cf:17:8d:c0:16:c7:83:b0:d1:fc:19:b0:ff:ff:b8: a2:1b:af:e6:6d:1c:1d:2c:3d:eb:91:6b:6f:f1:85:a3:e1:13: 16:f2:1c:95:45:63:8d:47:80:43:c0:7e:54:e5:25:77:10:e8: f8:76:1c:1b:63:aa:ab:e9:88:5b:40:6e:39:7d:73:1f:80:6e: 9c:08:a0:53:5f:7f:5a:48:30:5c:df:c9:c9:f2:b2:38:47:80: 2a:0a:66:80:45:81:0f:da:a1:b8:e7:27:1c:ba:93:4e:40:a0: 42:e1:47:81:94:f2:b9:3e:7c:cb:44:c1:c0:69:50:1b:d3:7f: 16:6c:11:6a:c0:a5:c5:70:20:0a:9e:a0:b7:f7:89:a8:6e:b6: 81:22:10:92:d2:99:0e:ce:ff:38:36:c3:33:e7:3f:7e:cd:10: 20:1e:cb:93:61:da:d8:dc:b8:93:ea:d0:da:d3:5a:64:26:8d: 44:c2:67:b9:8e:c1:43:65:5f:67:6a:47:24:6c:52:58:64:c5: 5e:88:30:5c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3 QjdEOUYxQzEwHhcNMjUwNjEzMDEwNzA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmZiNy04YzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1yorArET5qa0zy74/LXsiRptc+/0MLupnK14TgxPV/RMaB+Bivfo4kzZlR/ z7yKE4LVy0WMVUldAwEF9QYAqVnGWzLRAxYGuXiYsrN5qkTnu71oufM5ry2bniZM 1tkdpUyUwQTKkyjd9QxaNC06o+miWVy5xO7F+Q7yvltOX2Eu0UvPM+J/FwgSOqfh bo/OZ6MsHJMIsaBJ2BVhQ9WGQQvtkCn1UEas7NGXjzT22DCz/FzVO79PNx9/yoxO MhAEweRpNzOcix8POdgaV+OLJiIEi2zUe8/QxBVDL+Io4Lkm0rBuisuLpYAePs1q 1+w+z74wdXXxdC5/e5DkbCtmmQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIKyqtg9 d/sVnhd892iXralNMKxJMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JFMkUvRDhBQkFGRThEMEZCMTFFQ0EyN0FGMjJGQzRGOUFFMDIvQTA4Nzk5MDJG MTU3MTFFQzg0NkE1RjI5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7raMA8EAgACMAkDBwAgAQ3wsMAwDQYJKoZIhvcNAQELBQADggEB AIeKElMfYT0UxNAGHEbh3kChPWSwU5U2BDbE5RVpDx91qa/+Wpzle8SykBXFOXxB qkjOVwUCoGvi5M8XjcAWx4Ow0fwZsP//uKIbr+ZtHB0sPeuRa2/xhaPhExbyHJVF Y41HgEPAflTlJXcQ6Ph2HBtjqqvpiFtAbjl9cx+AbpwIoFNff1pIMFzfycnysjhH gCoKZoBFgQ/aobjnJxy6k05AoELhR4GU8rk+fMtEwcBpUBvTfxZsEWrApcVwIAqe oLf3iahutoEiEJLSmQ7O/zg2wzPnP37NECAey5Nh2tjcuJPq0NrTWmQmjUTCZ7mO wUNlX2dqRyRsUlhkxV6IMFw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:12:24 2026 by rpki-client