$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/05AF21A4B71311F0B98A8D22C4F9AE02.roa File: 05AF21A4B71311F0B98A8D22C4F9AE02.roa (raw, json) Hash identifier: 1i5mKAhr45RvLXZJro2GtLR2POWmrihYrYcZVwAQkYE= Subject key identifier: B2:A4:35:66:54:26:BB:E9:AB:4F:D4:BE:98:D5:C1:39:F7:1B:F1:45 Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Certificate serial: 07E9 Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/05AF21A4B71311F0B98A8D22C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:17:58 +0000 ROA not before: Sat 01 Nov 2025 11:08:09 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134506 IP address blocks: 103.161.106.0/23 maxlen: 23 103.161.106.0/24 maxlen: 24 103.161.107.0/24 maxlen: 24 2001:df5:c180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Validity Not Before: Nov 1 11:08:09 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=69a482d6-3a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9d:14:62:ca:95:cd:06:56:2d:d8:1e:08:eb: 45:fd:45:06:22:4a:60:84:d5:a9:db:b6:77:29:8f: 06:de:7c:f4:14:ac:7e:f2:b6:ae:fc:34:c0:c7:99: 5b:75:28:03:a6:af:48:61:e1:63:c7:83:f1:79:75: cd:bc:69:73:be:de:69:df:46:07:5e:6a:2a:b6:e8: b6:b8:13:cc:7c:7c:2d:3e:e2:4e:b0:c3:51:9e:4e: e1:66:27:ae:6c:ab:11:f8:0a:3f:fc:94:de:ca:48: 58:c6:d7:26:dd:72:37:a7:38:bd:58:b5:aa:d5:ea: ba:b0:a4:ee:fd:b8:e8:4c:10:fe:d7:7d:d1:e0:60: 8d:58:21:bc:b8:d8:9d:03:1c:f9:05:93:4f:06:bf: 0e:69:3d:98:23:eb:b3:73:a6:fd:66:f3:0b:20:b1: da:bf:44:2a:ee:93:69:1c:a1:99:58:34:be:f0:4a: e5:b6:be:35:e0:63:5a:1a:d2:56:19:4f:46:fd:a8: 66:39:0d:53:88:d2:0a:28:ce:a6:9c:50:61:0a:f8: c6:cb:90:ef:ca:46:a6:81:80:97:74:b5:6f:f5:bf: dc:12:59:52:a6:a5:45:d4:b1:eb:f6:c2:d5:c4:b9: bd:32:26:fb:cf:15:ab:0e:35:d1:af:44:8d:f2:99: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A4:35:66:54:26:BB:E9:AB:4F:D4:BE:98:D5:C1:39:F7:1B:F1:45 X509v3 Authority Key Identifier: keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/05AF21A4B71311F0B98A8D22C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.106.0/23 IPv6: 2001:df5:c180::/48 Signature Algorithm: sha256WithRSAEncryption c5:25:94:b5:05:60:8f:6b:a6:59:78:18:26:b8:56:56:e4:16: 25:d1:19:61:69:76:30:40:c1:58:96:de:c2:0f:b5:15:76:e1: ce:6d:83:b3:d3:51:a0:e1:11:72:08:43:15:81:9d:c4:1a:3b: 5c:1c:d7:2a:b5:32:e3:db:2c:9f:e0:17:c3:ba:98:f5:1e:52: 25:fc:3d:2c:30:07:9f:6a:5a:14:c8:89:25:77:81:b2:34:80: e0:51:8e:96:52:97:6e:c6:2f:c8:c2:89:53:73:c8:fe:76:b9: 11:c1:3f:8e:72:97:f5:c6:40:cc:a7:3c:f6:a0:55:9f:79:95: f5:71:f0:35:c0:fd:f1:44:de:b9:5e:c5:11:4d:5c:70:29:1f: 52:fd:22:4a:14:d2:b5:68:22:0d:58:2e:83:88:23:dd:af:d5: 5a:f4:23:f9:3a:31:9b:77:96:db:78:b9:48:7b:cc:95:8e:7e: 9f:d5:da:c8:1e:91:4e:7b:a3:f5:b7:31:a3:af:95:61:9f:ff: 2f:fb:01:da:67:0d:85:4d:11:f5:7a:7f:24:3e:41:81:32:35: de:1f:65:c4:17:01:e5:31:c5:96:44:a0:dc:a5:d6:9a:77:cc: 4b:79:b1:88:9a:c3:3e:f9:2f:da:55:2f:2d:9c:91:d6:cd:2a: bf:ee:de:00 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q5OEQxMTAvBgNVBAUTKEJGRTQ2MTM3NURDMjIzRDRGN0IyNzA1NUUyQjM0NzQ1 RkU2MTAxRDQwHhcNMjUxMTAxMTEwODA5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODJkNi0zYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4p0UYsqVzQZWLdgeCOtF/UUGIkpghNWp27Z3KY8G3nz0FKx+8rau/DTAx5lb dSgDpq9IYeFjx4PxeXXNvGlzvt5p30YHXmoqtui2uBPMfHwtPuJOsMNRnk7hZieu bKsR+Ao//JTeykhYxtcm3XI3pzi9WLWq1eq6sKTu/bjoTBD+133R4GCNWCG8uNid Axz5BZNPBr8OaT2YI+uzc6b9ZvMLILHav0Qq7pNpHKGZWDS+8Erltr414GNaGtJW GU9G/ahmOQ1TiNIKKM6mnFBhCvjGy5DvykamgYCXdLVv9b/cEllSpqVF1LHr9sLV xLm9Mib7zxWrDjXRr0SN8pn+owIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFLKkNWZU Jrvpq0/UvpjVwTn3G/FFMB8GA1UdIwQYMBaAFL/kYTddwiPU97JwVeKzR0X+YQHU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDk4RC80NjE0NTdCNDUw MEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5VDNzbkJWNHJOSFJmNWhB ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YtUmhOMTNDSTlUM3NuQlY0ck5IUmY1aEFkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Q5OEQvNDYxNDU3QjQ1MDBDMTFFQkE3MkRCRTI0QzRGOUFFMDIvMDVBRjIxQTRC NzEzMTFGMEI5OEE4RDIyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6FqMA8EAgACMAkDBwAgAQ31wYAwDQYJKoZIhvcNAQELBQADggEB AMUllLUFYI9rpll4GCa4VlbkFiXRGWFpdjBAwViW3sIPtRV24c5tg7PTUaDhEXII QxWBncQaO1wc1yq1MuPbLJ/gF8O6mPUeUiX8PSwwB59qWhTIiSV3gbI0gOBRjpZS l27GL8jCiVNzyP52uRHBP45yl/XGQMynPPagVZ95lfVx8DXA/fFE3rlexRFNXHAp H1L9IkoU0rVoIg1YLoOII92v1Vr0I/k6MZt3ltt4uUh7zJWOfp/V2sgekU57o/W3 MaOvlWGf/y/7AdpnDYVNEfV6fyQ+QYEyNd4fZcQXAeUxxZZEoNyl1pp3zEt5sYia wz75L9pVLy2ckdbNKr/u3gA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:43:52 2026 by rpki-client