$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa File: C97A1A3EB41C11F0AFF91911C4F9AE02.roa (raw, json) Hash identifier: nJl/9CFmVp29B4Ix10HGbDmYMJPOnZIRDaogeFvZyK4= Subject key identifier: C5:88:A2:40:FE:D3:47:41:A5:CD:29:37:8E:95:8E:F4:05:91:94:2E Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0DE0 Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:11:09 +0000 ROA not before: Tue 06 Jan 2026 18:14:56 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 197450 IP address blocks: 59.152.60.0/24 maxlen: 24 59.152.61.0/24 maxlen: 24 59.152.62.0/24 maxlen: 24 59.152.63.0/24 maxlen: 24 103.205.180.0/24 maxlen: 24 103.205.181.0/24 maxlen: 24 103.205.182.0/24 maxlen: 24 103.205.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3552 (0xde0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: Jan 6 18:14:56 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4813d-f614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:7d:7a:74:aa:03:da:60:da:97:55:0f:b8: cb:9a:af:d7:c8:14:3b:1a:f9:75:8e:4e:06:04:ee: 58:78:2e:75:8f:db:bf:df:2c:28:56:bc:41:86:2d: 75:19:d9:93:bd:5f:dd:60:f5:94:b1:cc:56:0d:b7: f0:5e:f8:bb:7c:d0:a5:7f:91:69:de:e0:be:b4:ae: 0e:81:a7:97:d3:8e:57:3e:b4:d8:16:70:60:42:c7: f7:36:b8:06:88:36:ca:49:45:4a:c4:4a:e1:1a:cb: f1:a0:4e:de:65:69:6f:b2:b8:18:71:ee:af:e3:59: 9f:5e:26:e2:1a:e8:e9:fe:05:59:72:25:3a:ed:ea: ec:da:33:20:c1:bf:21:de:77:54:1c:f8:a4:52:78: 5b:86:f7:b8:f2:0a:96:45:f5:62:a8:14:e9:34:42: d4:a7:cc:d3:6f:7b:ba:19:82:6c:67:94:c0:e3:a3: 11:1c:3d:c6:cc:7f:01:2b:0b:f2:73:ee:85:b4:96: e4:48:e6:49:d9:56:66:d7:42:a9:41:f0:04:bf:f1: c6:72:86:d4:1e:ba:32:f5:50:20:0b:01:09:82:d3: e6:ea:22:71:13:a3:31:ef:74:7c:a2:c6:bc:69:4b: d5:d3:30:74:55:bf:7d:67:0a:f1:56:da:d3:c1:3c: 13:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:88:A2:40:FE:D3:47:41:A5:CD:29:37:8E:95:8E:F4:05:91:94:2E X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/C97A1A3EB41C11F0AFF91911C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.152.60.0/22 103.205.180.0/22 Signature Algorithm: sha256WithRSAEncryption 30:eb:fc:98:d8:fb:f7:10:32:86:4a:13:6a:4b:e1:bc:f8:79: 05:62:14:2a:64:30:cc:54:00:a2:32:22:c2:99:5b:04:71:81: 59:e6:12:c0:b3:f0:94:7c:2a:60:f9:8f:23:a5:d6:50:2e:46: 70:72:43:bb:86:35:55:ea:0b:6b:7a:b6:d7:af:63:82:c0:29: 0d:bb:3d:63:05:dd:ea:30:45:00:bb:01:c9:84:88:0c:ab:ba: 00:24:0b:e6:6f:a5:e8:bb:ad:31:27:9d:05:c9:df:ed:dc:e5: 2f:b5:e7:ee:04:84:d2:70:11:6a:5e:e1:47:82:dd:76:ea:b0: f5:bc:5e:2c:e3:00:15:bf:7f:76:e7:6c:52:69:e5:08:7c:12: 09:a1:10:cd:31:e8:28:ab:39:26:db:42:81:93:e8:d9:3a:bf: ef:ea:c2:2d:b3:ce:84:dd:7f:08:16:21:17:01:f1:38:40:c0: cb:f3:1d:51:4a:79:b7:a5:6e:b0:55:a4:00:c2:11:16:9f:46: 76:77:81:90:cc:d8:8e:80:6d:84:ee:95:9e:84:8a:a8:6a:7c: 73:06:dd:97:0b:49:6b:35:ff:30:5a:36:5d:94:70:47:b9:03: c9:1b:f2:00:ca:b5:85:f5:b9:5f:e6:b1:24:a4:b7:51:e2:99: 84:eb:dd:c5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjYwMTA2MTgxNDU2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODEzZC1mNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOl9enSqA9pg2pdVD7jLmq/XyBQ7Gvl1jk4GBO5YeC51j9u/3ywoVrxBhi11 GdmTvV/dYPWUscxWDbfwXvi7fNClf5Fp3uC+tK4OgaeX045XPrTYFnBgQsf3NrgG iDbKSUVKxErhGsvxoE7eZWlvsrgYce6v41mfXibiGujp/gVZciU67ers2jMgwb8h 3ndUHPikUnhbhve48gqWRfViqBTpNELUp8zTb3u6GYJsZ5TA46MRHD3GzH8BKwvy c+6FtJbkSOZJ2VZm10KpQfAEv/HGcobUHroy9VAgCwEJgtPm6iJxE6Mx73R8osa8 aUvV0zB0Vb99ZwrxVtrTwTwTPwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMWIokD+ 00dBpc0pN46VjvQFkZQuMB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE3RjIvNEM4OEE3QTBGREZFMTFFOUJENjY3RDFGQzRGOUFFMDIvQzk3QTFBM0VC NDFDMTFGMEFGRjkxOTExQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCO5g8AwQCZ820MA0GCSqGSIb3DQEBCwUAA4IBAQAw6/yY2Pv3EDKG ShNqS+G8+HkFYhQqZDDMVACiMiLCmVsEcYFZ5hLAs/CUfCpg+Y8jpdZQLkZwckO7 hjVV6gtrerbXr2OCwCkNuz1jBd3qMEUAuwHJhIgMq7oAJAvmb6Xou60xJ50Fyd/t 3OUvtefuBITScBFqXuFHgt126rD1vF4s4wAVv39252xSaeUIfBIJoRDNMegoqzkm 20KBk+jZOr/v6sIts86E3X8IFiEXAfE4QMDL8x1RSnm3pW6wVaQAwhEWn0Z2d4GQ zNiOgG2E7pWehIqoanxzBt2XC0lrNf8wWjZdlHBHuQPJG/IAyrWF9blf5rEkpLdR 4pmE693F -----END CERTIFICATE-----Generated at Mon Mar 2 08:12:47 2026 by rpki-client