$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa File: 6127B9001FE711ECB8454E83C4F9AE02.roa (raw, json) Hash identifier: SXnpFOe0vmH6ZhEOUBoFfqwqIICiKNDRMjwx5BrPeMo= Subject key identifier: 3D:8E:71:B2:72:5D:3C:18:DB:74:E1:79:40:DF:D8:D9:C3:E4:D3:72 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 11AA Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:34:31 +0000 ROA not before: Wed 04 Jun 2025 17:19:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63992 IP address blocks: 103.58.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4522 (0x11aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Jun 4 17:19:33 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42447-72c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:5c:d5:50:c4:de:7b:7d:fc:c6:47:35:06: 2a:66:e9:24:85:03:e1:a4:55:cf:12:21:00:77:3d: 6a:8e:8f:95:80:08:0d:9e:19:bb:1d:f1:92:62:1a: 4e:5b:d8:25:1b:11:86:66:9f:44:a3:76:3a:4b:1c: 8f:c6:67:76:17:1c:e7:84:b3:a2:b7:85:ea:0f:59: a8:8f:a4:64:30:34:86:00:41:6d:59:75:5c:02:c1: 5a:fc:97:31:9c:29:16:74:e5:ad:1e:55:ff:38:88: 5c:e2:ea:4a:dc:41:58:10:f9:a1:61:fd:58:9a:02: 39:81:49:f6:d6:08:7d:4f:2c:f2:8c:94:16:fd:5b: 3b:56:7d:a6:a1:52:93:d6:aa:46:44:69:8c:98:5b: dd:53:21:ce:30:28:f5:da:c0:fe:36:44:e8:d6:ed: a4:6a:74:55:f0:e9:fe:6a:f1:70:d5:87:ad:d6:0e: 90:27:91:51:ea:29:73:75:72:79:d4:a2:d1:7f:6e: d8:0e:a0:8c:99:88:f6:2e:c6:d2:56:f3:20:da:a2: a6:03:de:b8:70:ad:c2:21:24:35:77:37:1d:c3:a9: 42:a5:08:31:b4:14:b1:48:1e:08:d3:03:ab:ca:39: 63:da:8b:41:62:2d:29:fe:b4:0e:a1:b3:81:fe:84: 04:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8E:71:B2:72:5D:3C:18:DB:74:E1:79:40:DF:D8:D9:C3:E4:D3:72 X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.58.220.0/22 Signature Algorithm: sha256WithRSAEncryption 93:a2:12:7a:da:a0:96:dc:9e:04:0e:a5:69:fc:97:10:51:a0: 43:08:13:69:1e:35:54:36:3a:ff:7c:93:2f:d7:8e:46:64:98: cf:23:6b:8f:ed:32:b7:79:f3:51:5d:9c:2f:6b:a8:cc:8a:a2: 30:98:44:fa:a4:e7:d3:a3:da:a9:37:51:25:64:e0:ff:a7:6d: 14:7e:97:34:72:38:e8:ae:6f:d3:a5:9f:33:82:dd:be:f3:06: 98:33:c1:cc:c9:15:2f:40:57:b2:9a:4a:dd:ed:e3:b2:ce:37: 3c:d4:6c:d9:ea:db:f1:90:24:4b:d5:19:5d:62:0c:70:51:d6: 4c:df:e3:59:62:fa:09:e0:9a:18:1d:ff:c6:e7:a9:71:01:0a: 67:8e:85:ff:9b:a3:a3:04:b1:f8:a3:43:41:77:eb:cc:62:11: 34:b5:c2:94:9d:cc:ff:b1:85:03:be:27:b8:c9:1b:1a:10:8a: e4:a1:0f:71:b1:ef:5b:36:96:64:31:0e:b0:f7:71:b5:00:a6: 06:3c:b4:ed:78:7f:2c:d5:c7:ce:b8:2b:7b:27:25:e7:77:0a: 16:44:94:a4:c5:81:69:a4:9d:ea:a5:8e:26:4e:98:97:ce:4e: 40:76:4e:b0:75:3f:60:81:4b:4d:bc:4b:dd:ed:c3:e7:10:df: b0:a0:8d:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjUwNjA0MTcxOTMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjQ0Ny03MmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmdc1VDE3nt9/MZHNQYqZukkhQPhpFXPEiEAdz1qjo+VgAgNnhm7HfGSYhpO W9glGxGGZp9Eo3Y6SxyPxmd2FxznhLOit4XqD1moj6RkMDSGAEFtWXVcAsFa/Jcx nCkWdOWtHlX/OIhc4upK3EFYEPmhYf1YmgI5gUn21gh9TyzyjJQW/Vs7Vn2moVKT 1qpGRGmMmFvdUyHOMCj12sD+NkTo1u2kanRV8On+avFw1Yet1g6QJ5FR6ilzdXJ5 1KLRf27YDqCMmYj2LsbSVvMg2qKmA964cK3CISQ1dzcdw6lCpQgxtBSxSB4I0wOr yjlj2otBYi0p/rQOobOB/oQE3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD2OcbJy XTwY23TheUDf2NnD5NNyMB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMwNzgvNjZDODMwMkMxM0JDMTFFOTk4N0M0NjQ2QzRGOUFFMDIvNjEyN0I5MDAx RkU3MTFFQ0I4NDU0RTgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZzrcMA0GCSqGSIb3DQEBCwUAA4IBAQCTohJ62qCW3J4EDqVp/JcQ UaBDCBNpHjVUNjr/fJMv145GZJjPI2uP7TK3efNRXZwva6jMiqIwmET6pOfTo9qp N1ElZOD/p20Ufpc0cjjorm/TpZ8zgt2+8waYM8HMyRUvQFeymkrd7eOyzjc81GzZ 6tvxkCRL1RldYgxwUdZM3+NZYvoJ4JoYHf/G56lxAQpnjoX/m6OjBLH4o0NBd+vM YhE0tcKUncz/sYUDvie4yRsaEIrkoQ9xse9bNpZkMQ6w93G1AKYGPLTteH8s1cfO uCt7JyXndwoWRJSkxYFppJ3qpY4mTpiXzk5Adk6wdT9ggUtNvEvd7cPnEN+woI1O -----END CERTIFICATE-----Generated at Mon Mar 2 08:07:49 2026 by rpki-client