$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/4FFFD8D41D7211EFA095B25AC4F9AE02.roa File: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (raw, json) Hash identifier: fPiQQSxTOwbdMOV255D4bAXvgu9GO9QsaMcZ6OWDgrU= Subject key identifier: FE:FE:74:17:23:93:E8:05:42:7B:A2:58:B7:52:2C:83:62:F7:45:10 Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 015A Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/4FFFD8D41D7211EFA095B25AC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:45:48 +0000 ROA not before: Fri 09 May 2025 05:17:05 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152730 IP address blocks: 203.14.108.0/24 maxlen: 24 2001:df0:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: May 9 05:17:05 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5a29b-94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:be:67:5f:0b:cb:8c:a6:22:5a:85:79:fa:da: ba:a4:dc:a1:31:ef:a8:39:4c:90:c6:58:7b:f0:1d: 6b:ac:8f:30:05:d4:7c:0b:e0:c4:0b:f3:45:97:f8: 92:97:ff:70:65:22:e6:26:d9:4a:64:1c:a6:09:24: b6:98:d1:83:1f:ac:c1:97:f7:e2:46:3d:0f:cc:1f: c8:7c:ee:d2:c5:8b:0e:36:9a:b8:74:9f:be:23:02: ed:76:42:d3:b9:f5:6e:48:35:44:2d:0a:89:25:82: 56:8f:b5:93:54:ff:04:4a:bc:39:e5:f7:dc:c8:bc: 5f:eb:ee:8e:ef:b6:bd:f0:4d:a4:29:8d:39:f3:c4: cb:17:d0:df:24:66:e3:18:d7:06:52:55:d9:6a:d2: 57:12:ed:7a:19:4c:41:8e:91:57:59:11:76:50:74: 72:ac:d2:39:5b:bf:62:b2:fc:6a:b4:71:d1:70:4c: 10:3d:98:b4:93:e5:79:64:48:d2:38:46:cd:c0:2f: b3:d8:4a:c7:00:48:41:82:f0:99:4c:43:55:13:14: d1:e3:86:ff:ca:f3:cf:c8:1a:5d:04:bd:83:f7:84: 36:3b:e6:92:4f:3a:5e:93:4f:b2:2b:94:5f:4a:ac: 6a:e1:de:7c:1b:98:b7:19:c3:64:03:53:4e:a3:2a: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FE:74:17:23:93:E8:05:42:7B:A2:58:B7:52:2C:83:62:F7:45:10 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/4FFFD8D41D7211EFA095B25AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.14.108.0/24 IPv6: 2001:df0:c340::/48 Signature Algorithm: sha256WithRSAEncryption 12:fe:78:2e:7c:2e:2b:3a:31:3e:a3:ce:42:d2:17:c9:ca:76: 95:ab:dc:46:49:cd:c4:3b:69:76:19:a5:29:ab:96:e9:9e:b6: c0:34:35:8f:50:94:3c:d1:43:c9:df:3a:6e:3e:fd:8c:a2:2d: a1:b8:4c:9b:34:71:c4:74:9b:79:01:e8:23:30:f8:b1:6c:4a: 22:a5:bd:6b:12:29:e6:01:ba:4b:58:94:54:6e:d8:31:70:28: 10:a6:c5:a5:b2:d0:3f:b1:4c:27:01:2d:39:25:50:c1:b4:02: 7d:e8:33:d2:74:67:ff:25:2e:02:0b:6f:40:78:9c:eb:ed:a5: b2:74:74:7e:d5:d2:84:44:46:a7:43:de:e5:ae:92:50:f6:fe: 4b:5e:c0:4d:15:81:c0:6e:52:87:84:c9:cb:a1:73:71:f8:9f: 35:9f:18:1b:98:56:d4:75:5d:09:fa:1d:d7:38:c4:65:04:93: 4a:cc:11:3a:0a:e5:42:0a:05:c7:ae:00:21:ae:39:e4:69:34: 38:71:d9:2e:a0:f0:72:c6:34:1d:4b:d3:56:0c:e2:ea:77:f4: fc:b1:bf:04:0f:2a:3d:f7:a9:35:59:60:1b:f8:3e:e4:4a:0d: a8:de:a7:2d:94:13:35:06:1d:25:f0:cd:20:44:35:ad:5a:0a: 93:7c:89:d9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjUwNTA5MDUxNzA1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTI5Yi05NGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAob5nXwvLjKYiWoV5+tq6pNyhMe+oOUyQxlh78B1rrI8wBdR8C+DEC/NFl/iS l/9wZSLmJtlKZBymCSS2mNGDH6zBl/fiRj0PzB/IfO7SxYsONpq4dJ++IwLtdkLT ufVuSDVELQqJJYJWj7WTVP8ESrw55ffcyLxf6+6O77a98E2kKY0588TLF9DfJGbj GNcGUlXZatJXEu16GUxBjpFXWRF2UHRyrNI5W79isvxqtHHRcEwQPZi0k+V5ZEjS OEbNwC+z2ErHAEhBgvCZTENVExTR44b/yvPPyBpdBL2D94Q2O+aSTzpek0+yK5Rf Sqxq4d58G5i3GcNkA1NOoyoJBwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFP7+dBcj k+gFQnuiWLdSLINi90UQMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDAzRkMvQzdCMDkzNTYxRDcxMTFFRjk1RTI2ODQwQzRGOUFFMDIvNEZGRkQ4RDQx RDcyMTFFRkEwOTVCMjVBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAyw5sMA8EAgACMAkDBwAgAQ3ww0AwDQYJKoZIhvcNAQELBQADggEB ABL+eC58Lis6MT6jzkLSF8nKdpWr3EZJzcQ7aXYZpSmrlumetsA0NY9QlDzRQ8nf Om4+/YyiLaG4TJs0ccR0m3kB6CMw+LFsSiKlvWsSKeYBuktYlFRu2DFwKBCmxaWy 0D+xTCcBLTklUMG0An3oM9J0Z/8lLgILb0B4nOvtpbJ0dH7V0oRERqdD3uWuklD2 /ktewE0VgcBuUoeEycuhc3H4nzWfGBuYVtR1XQn6Hdc4xGUEk0rMEToK5UIKBceu ACGuOeRpNDhx2S6g8HLGNB1L01YM4up39PyxvwQPKj33qTVZYBv4PuRKDajepy2U EzUGHSXwzSBENa1aCpN8idk= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:06 2026 by rpki-client