$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa File: 666595E890A911EDA8F5FF52C4F9AE02.roa (raw, json) Hash identifier: /z4CjwTmoI6V58kEIwfdp3rLN/xjI1kcsaBDtYIcNmU= Subject key identifier: C4:8F:1D:A6:93:AC:BD:7E:A5:FB:D7:23:23:31:D4:CF:90:EF:8C:0A Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 07E9 Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa Signing time: Wed 08 Apr 2026 21:27:40 +0000 ROA not before: Wed 08 Apr 2026 21:27:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140324 IP address blocks: 103.149.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7, serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: Apr 8 21:27:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d6c84c-2cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:db:a7:ad:e7:bb:1a:fa:d6:12:72:a5:c7:68: 6f:df:c8:02:50:de:3f:d0:5e:ff:c9:19:a1:00:59: fb:7a:29:67:63:ae:00:dc:c4:b7:d4:ea:4e:dd:70: 24:be:63:97:fe:6a:69:56:39:7d:a0:fc:04:6b:9f: 04:a5:61:a3:0f:ed:81:2f:cb:28:c3:02:e5:c7:1e: 00:93:9f:a6:b3:cf:ac:5e:e4:1a:a7:21:93:86:0e: ee:99:13:91:34:a1:10:6c:41:c0:23:5e:2d:b4:50: 46:5f:c5:c5:35:a1:77:64:0d:fc:64:83:64:2b:75: 68:c1:c5:f7:1e:ce:4b:d0:4c:36:e1:e8:36:b8:e3: f7:b4:92:51:67:33:f0:94:00:22:b6:bc:86:64:1f: 00:17:9b:1c:2f:30:96:2b:1e:97:b8:fa:a5:26:16: 64:59:29:8b:ba:5b:52:a1:00:8c:cc:8b:eb:c8:43: ef:89:a4:ae:f2:ee:31:af:9d:95:29:17:b9:d0:7c: 77:e3:c4:42:d2:64:cb:f5:38:01:f8:a3:5f:1e:1c: 1c:80:0e:19:42:48:bb:e2:b2:ed:51:45:89:07:83: 04:bd:3d:6e:bd:54:ab:d5:ce:6f:21:3d:eb:4a:97: 73:85:3c:7b:7c:6f:cd:46:28:5e:4d:7c:92:b6:2c: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8F:1D:A6:93:AC:BD:7E:A5:FB:D7:23:23:31:D4:CF:90:EF:8C:0A X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.204.0/23 Signature Algorithm: sha256WithRSAEncryption 69:27:31:d4:bf:8e:11:27:79:a0:e8:5a:fe:af:49:f5:03:68: c3:dc:27:a1:8a:90:31:5e:d6:96:d1:83:2e:d2:cd:b6:e3:36: 36:24:fc:45:39:7f:0f:4a:30:b4:58:d4:8c:cc:07:15:91:1a: 0e:36:3e:ed:66:0f:d6:5d:09:6d:78:85:fb:3f:72:00:d8:3a: c1:d0:59:02:d6:c2:51:1c:99:c9:a8:eb:d1:60:f1:89:54:e5: 88:36:42:3b:8b:08:af:b7:22:be:93:af:30:3e:95:c0:75:3a: 95:67:e3:bb:0f:64:d5:c9:2c:01:60:b2:c2:a7:fc:0b:54:ef: 7c:54:44:f4:90:e7:20:52:aa:a6:c5:39:88:7c:20:0d:4d:7c: 8d:ad:f0:b8:ac:fb:31:de:1f:38:e4:15:2e:fd:99:83:02:e3: b4:e2:31:52:dd:5f:f6:7b:49:df:ed:9e:b4:d4:25:87:60:3f: ff:ad:d0:ce:a3:0d:13:5a:51:60:46:04:c5:f6:8d:0f:4a:69: 8c:c3:f5:69:9a:23:4f:91:6b:f8:20:f9:a6:51:25:9d:6e:be: 3b:ca:58:e1:c2:01:13:27:d2:be:80:f0:10:a9:d3:77:9b:6f: 54:aa:53:6e:be:37:aa:e3:5f:07:20:e5:73:8d:84:11:56:99: a5:c8:be:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjYwNDA4MjEyNzQwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ2Yzg0Yy0yY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7dunree7GvrWEnKlx2hv38gCUN4/0F7/yRmhAFn7eilnY64A3MS31OpO3XAk vmOX/mppVjl9oPwEa58EpWGjD+2BL8sowwLlxx4Ak5+ms8+sXuQapyGThg7umROR NKEQbEHAI14ttFBGX8XFNaF3ZA38ZINkK3VowcX3Hs5L0Ew24eg2uOP3tJJRZzPw lAAitryGZB8AF5scLzCWKx6XuPqlJhZkWSmLultSoQCMzIvryEPviaSu8u4xr52V KRe50Hx348RC0mTL9TgB+KNfHhwcgA4ZQki74rLtUUWJB4MEvT1uvVSr1c5vIT3r SpdzhTx7fG/NRiheTXyStiwqpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMSPHaaT rL1+pfvXIyMx1M+Q74wKMB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGRDcvN0I0MDlDQTAyRkE5MTFFQkI5MEJCQTg0QzRGOUFFMDIvNjY2NTk1RTg5 MEE5MTFFREE4RjVGRjUyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5XMMA0GCSqGSIb3DQEBCwUAA4IBAQBpJzHUv44RJ3mg6Fr+r0n1 A2jD3CehipAxXtaW0YMu0s224zY2JPxFOX8PSjC0WNSMzAcVkRoONj7tZg/WXQlt eIX7P3IA2DrB0FkC1sJRHJnJqOvRYPGJVOWINkI7iwivtyK+k68wPpXAdTqVZ+O7 D2TVySwBYLLCp/wLVO98VET0kOcgUqqmxTmIfCANTXyNrfC4rPsx3h845BUu/ZmD AuO04jFS3V/2e0nf7Z601CWHYD//rdDOow0TWlFgRgTF9o0PSmmMw/VpmiNPkWv4 IPmmUSWdbr47yljhwgETJ9K+gPAQqdN3m29UqlNuvjeq418HIOVzjYQRVpmlyL7Q -----END CERTIFICATE-----Generated at Fri Apr 17 12:10:25 2026 by rpki-client