$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/96F093D4BEA011EB8CAD965FC4F9AE02.roa File: 96F093D4BEA011EB8CAD965FC4F9AE02.roa (raw, json) Hash identifier: iGuCHDAUL0PXZn0ORHKJTEzzVOLk9UA+q1lRAx9/x7k= Subject key identifier: C9:B2:A1:E3:9A:F8:B5:9C:3D:6F:DD:6F:8A:9C:BD:4A:7C:03:40:DC Certificate issuer: /CN=A91CEA40/serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Certificate serial: 06A3 Authority key identifier: 2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/96F093D4BEA011EB8CAD965FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:15:00 +0000 ROA not before: Mon 16 Feb 2026 22:19:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 139898 IP address blocks: 43.245.56.0/22 maxlen: 24 103.25.140.0/22 maxlen: 24 103.116.88.0/23 maxlen: 24 103.146.200.0/23 maxlen: 24 125.254.50.0/23 maxlen: 24 2405:9f40::/32 maxlen: 40 2405:9f40::/41 maxlen: 48 2405:9f40:80::/41 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=2C3D235A1B219F416610900B003B8ABFDC1702A2 Validity Not Before: Feb 16 22:19:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a449e4-7860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:c2:ae:c9:e9:42:05:5f:02:bf:db:c5:31: b4:77:74:8d:13:a7:fc:9e:2c:80:31:22:f9:53:cf: 63:1a:28:f4:a0:5b:de:3e:57:cd:c1:79:b7:7a:f7: 72:ab:5f:48:38:dc:cd:c2:aa:6e:69:3e:25:67:91: 18:86:8e:b5:ec:04:18:fc:fe:0b:7c:5c:24:ba:d2: 84:84:df:35:47:52:a9:ce:6d:05:d5:42:15:90:c1: a3:71:b1:0b:cb:eb:18:cd:8f:0d:e8:93:1b:33:d1: cf:3b:df:52:b2:40:33:00:d3:10:e0:71:35:3d:d0: 05:19:7b:62:8c:15:52:f5:4f:89:c5:bd:a4:f7:94: fc:98:4a:f5:82:60:cb:63:2b:0e:d6:75:18:d4:24: f8:6e:ed:09:99:d0:22:74:6c:ff:2c:18:81:90:86: 59:c0:a5:ee:4d:d2:05:4f:1a:5b:19:2f:03:0b:90: e7:af:15:2e:02:cd:8d:ad:0a:8e:64:e5:90:4e:c4: 80:5a:90:58:8f:34:0c:e0:db:1f:71:a2:8d:fe:a3: d8:5e:e6:33:53:6e:6a:14:49:f4:1b:6e:bf:29:dc: 18:f0:12:28:24:cf:d4:60:5e:6a:58:9a:70:ce:c1: c7:b1:fd:ea:46:d1:e0:6c:a8:be:73:79:e5:fc:5b: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B2:A1:E3:9A:F8:B5:9C:3D:6F:DD:6F:8A:9C:BD:4A:7C:03:40:DC X509v3 Authority Key Identifier: keyid:2C:3D:23:5A:1B:21:9F:41:66:10:90:0B:00:3B:8A:BF:DC:17:02:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/LD0jWhshn0FmEJALADuKv9wXAqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LD0jWhshn0FmEJALADuKv9wXAqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/8E964BCEAF7911EB84217A58C4F9AE02/96F093D4BEA011EB8CAD965FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.245.56.0/22 103.25.140.0/22 103.116.88.0/23 103.146.200.0/23 125.254.50.0/23 IPv6: 2405:9f40::/32 Signature Algorithm: sha256WithRSAEncryption 6f:ac:b9:4e:94:81:4a:5c:03:eb:fa:b1:f1:31:fa:e4:de:90: 3d:25:7a:43:77:b4:79:e8:d6:0f:58:54:a1:dc:76:4d:a2:c7: a6:fd:b2:3c:bc:a2:30:2b:70:b8:73:2e:67:94:a6:79:d5:f5: 20:c0:be:bf:a3:0d:a1:76:d0:e0:a5:10:64:97:21:11:a0:a9: 57:15:c0:c2:4c:ed:0e:c4:e4:ac:49:7d:89:d9:f0:7c:8e:ac: 6f:4e:23:13:53:1d:65:59:65:6b:39:98:30:2d:f6:33:d3:69: 5e:53:80:f9:2b:05:df:27:ba:3b:01:cf:4b:eb:52:81:49:4e: c3:aa:47:f8:4b:fd:f1:c4:bb:07:76:ac:ee:2d:4f:bb:e2:cc: 03:d6:f8:9d:f2:39:98:4b:18:f8:02:4c:51:44:a5:75:3b:ce: 43:67:43:19:bf:91:d5:a5:e5:13:f2:cb:41:f3:09:ec:fb:80: 2c:65:b9:57:d0:28:d4:df:be:6d:59:87:84:76:30:4d:d2:c6: b6:49:20:47:fb:66:10:08:8e:66:9f:f5:dc:17:74:63:5b:e5: 38:d8:ae:ca:e1:65:59:00:38:50:d2:99:70:b2:7d:92:ae:bc: f1:29:e2:e3:b6:b8:7c:81:9c:09:d1:f8:ff:8b:c6:d0:a2:8f: b9:c6:40:a3 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBNDAxMTAvBgNVBAUTKDJDM0QyMzVBMUIyMTlGNDE2NjEwOTAwQjAwM0I4QUJG REMxNzAyQTIwHhcNMjYwMjE2MjIxOTE0WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDllNC03ODYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/TCrsnpQgVfAr/bxTG0d3SNE6f8niyAMSL5U89jGij0oFvePlfNwXm3evdy q19IONzNwqpuaT4lZ5EYho617AQY/P4LfFwkutKEhN81R1Kpzm0F1UIVkMGjcbEL y+sYzY8N6JMbM9HPO99SskAzANMQ4HE1PdAFGXtijBVS9U+Jxb2k95T8mEr1gmDL YysO1nUY1CT4bu0JmdAidGz/LBiBkIZZwKXuTdIFTxpbGS8DC5DnrxUuAs2NrQqO ZOWQTsSAWpBYjzQM4NsfcaKN/qPYXuYzU25qFEn0G26/KdwY8BIoJM/UYF5qWJpw zsHHsf3qRtHgbKi+c3nl/FuaoQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFMmyoeOa +LWcPW/db4qcvUp8A0DcMB8GA1UdIwQYMBaAFCw9I1obIZ9BZhCQCwA7ir/cFwKi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUE0MC84RTk2NEJDRUFG NzkxMUVCODQyMTdBNThDNEY5QUUwMi9MRDBqV2hzaG4wRm1FSkFMQUR1S3Y5d1hB cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xEMGpXaHNobjBGbUVKQUxBRHVLdjl3WEFxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VBNDAvOEU5NjRCQ0VBRjc5MTFFQjg0MjE3QTU4QzRGOUFFMDIvOTZGMDkzRDRC RUEwMTFFQjhDQUQ5NjVGQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQCK/U4AwQCZxmMAwQBZ3RYAwQBZ5LIAwQBff4yMA0EAgACMAcDBQAk BZ9AMA0GCSqGSIb3DQEBCwUAA4IBAQBvrLlOlIFKXAPr+rHxMfrk3pA9JXpDd7R5 6NYPWFSh3HZNosem/bI8vKIwK3C4cy5nlKZ51fUgwL6/ow2hdtDgpRBklyERoKlX FcDCTO0OxOSsSX2J2fB8jqxvTiMTUx1lWWVrOZgwLfYz02leU4D5KwXfJ7o7Ac9L 61KBSU7Dqkf4S/3xxLsHdqzuLU+74swD1vid8jmYSxj4AkxRRKV1O85DZ0MZv5HV peUT8stB8wns+4AsZblX0CjU375tWYeEdjBN0sa2SSBH+2YQCI5mn/XcF3RjW+U4 2K7K4WVZADhQ0plwsn2SrrzxKeLjtrh8gZwJ0fj/i8bQoo+5xkCj -----END CERTIFICATE-----Generated at Mon Mar 2 20:56:45 2026 by rpki-client