$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/606EE7BC0DED11EA88AC0A29C4F9AE02.roa File: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (raw, json) Hash identifier: yuktOU63CUDk9dXA6PfdxxWbt+wQ/Uh1i6/oHbF80UI= Subject key identifier: B8:15:BC:F2:C4:E9:66:A9:FA:FB:2F:F1:60:F2:22:A3:0D:4F:2A:BE Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Certificate serial: 0CA9 Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/606EE7BC0DED11EA88AC0A29C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:24:17 +0000 ROA not before: Mon 28 Apr 2025 19:27:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138697 IP address blocks: 103.136.62.0/23 maxlen: 23 103.136.62.0/24 maxlen: 24 103.136.63.0/24 maxlen: 24 2404:9c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:32:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E Validity Not Before: Apr 28 19:27:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a405c1-ea9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:ff:50:94:27:54:80:d8:1e:0b:85:79:a0: ed:55:3d:50:af:71:05:f6:b0:d4:09:33:5e:ff:b0: 90:2e:5d:fe:51:3c:36:31:61:25:f2:49:1c:ed:ef: 2e:8f:6b:6f:b9:c1:41:67:5a:79:99:ad:b9:1c:cc: 70:dd:b1:2b:f3:db:e3:11:a1:8a:44:6c:ae:ec:d8: 8a:fd:5c:ef:67:0b:48:f3:9e:7f:b7:10:4a:f4:2a: 97:3b:db:44:69:ef:00:07:8f:01:1c:b2:0e:b0:25: f7:a7:7e:2c:d5:84:8d:c3:bb:df:4e:2a:8f:4c:fd: 59:e1:96:b9:4b:33:95:5d:7b:e5:c0:7b:e5:ae:ee: c1:7b:ad:f6:c5:49:c8:84:d7:55:9b:37:88:31:11: ad:5c:ab:33:15:77:94:3b:1f:2b:b2:24:52:9b:d7: 25:76:cc:cb:07:d0:e2:85:3d:2e:4c:e9:a3:f3:c6: e7:65:d2:04:44:e1:40:e5:0d:84:a1:48:e5:87:37: 8f:7e:be:93:90:20:01:b3:b0:8a:a6:62:18:ad:7b: 1d:89:e1:25:71:a6:d4:3f:9a:b8:15:78:b1:44:e0: f6:a1:0e:41:42:d8:b6:1b:c2:50:66:a6:6d:a4:ce: 8c:b4:c4:db:da:23:1c:76:ee:d6:91:bb:b4:a4:67: 5f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:15:BC:F2:C4:E9:66:A9:FA:FB:2F:F1:60:F2:22:A3:0D:4F:2A:BE X509v3 Authority Key Identifier: keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/606EE7BC0DED11EA88AC0A29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.62.0/23 IPv6: 2404:9c40::/32 Signature Algorithm: sha256WithRSAEncryption 51:12:fc:b2:ee:41:ea:87:95:6e:91:48:a7:a5:8d:de:dd:e6: 20:4e:d9:3c:e1:90:af:58:7f:e8:5b:ea:ff:ba:f1:61:1f:b6: 5f:e7:fd:a5:2b:ec:d1:d5:38:1a:79:22:c1:e9:32:16:60:9e: 4d:53:82:ac:db:06:ad:45:bd:80:88:55:26:ab:b9:68:e9:c8: 6c:ee:e4:f8:9b:28:fe:82:75:3a:32:7f:5d:91:21:81:6f:ba: 30:d8:6d:df:ce:5f:6c:31:3d:2d:8d:83:0e:2b:cf:fb:bb:e4: 52:af:92:ce:79:d7:4a:fb:11:89:ed:e3:f5:bf:75:98:a7:a2: 45:7a:4c:9d:59:88:70:f6:13:5f:b9:ab:62:0e:c5:5c:ea:14: ce:1c:3f:51:78:83:46:52:4a:89:ff:4e:a8:13:2c:09:04:25: 35:10:b0:1b:06:72:29:4b:07:0b:f1:bc:d1:1f:df:27:21:7f: 83:cf:2a:44:a6:4b:f9:1d:47:ec:73:b1:61:21:9e:7d:12:cf: c5:82:04:2c:38:0e:39:39:91:6c:ce:c1:f0:3a:38:bb:9e:95: 1c:b5:a8:b2:c4:34:92:5b:91:b2:cb:0b:9c:0f:d9:a8:f6:96: a4:6a:52:03:da:7e:aa:3a:11:b0:0e:39:68:15:06:58:d7:cf: ba:fe:7a:83 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM1OUUxMTAvBgNVBAUTKEVGQjY5MDcwRTJDNDAxQTVGNzcxMzNEMkRCQjFCQTM0 MUQxN0U2MUUwHhcNMjUwNDI4MTkyNzU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDVjMS1lYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsT/UJQnVIDYHguFeaDtVT1Qr3EF9rDUCTNe/7CQLl3+UTw2MWEl8kkc7e8u j2tvucFBZ1p5ma25HMxw3bEr89vjEaGKRGyu7NiK/VzvZwtI855/txBK9CqXO9tE ae8AB48BHLIOsCX3p34s1YSNw7vfTiqPTP1Z4Za5SzOVXXvlwHvlru7Be632xUnI hNdVmzeIMRGtXKszFXeUOx8rsiRSm9cldszLB9DihT0uTOmj88bnZdIEROFA5Q2E oUjlhzePfr6TkCABs7CKpmIYrXsdieElcabUP5q4FXixROD2oQ5BQti2G8JQZqZt pM6MtMTb2iMcdu7Wkbu0pGdfGwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLgVvPLE 6Wap+vsv8WDyIqMNTyq+MB8GA1UdIwQYMBaAFO+2kHDixAGl93Ez0tuxujQdF+Ye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzU5RS82QTQ5ODhCNjBE RUIxMUVBQjhFNjBCMjVDNEY5QUUwMi83N2FRY09MRUFhWDNjVFBTMjdHNk5CMFg1 aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc3YVFjT0xFQWFYM2NUUFMyN0c2TkIwWDVoNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDM1OUUvNkE0OTg4QjYwREVCMTFFQUI4RTYwQjI1QzRGOUFFMDIvNjA2RUU3QkMw REVEMTFFQTg4QUMwQTI5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4g+MA0EAgACMAcDBQAkBJxAMA0GCSqGSIb3DQEBCwUAA4IBAQBR Evyy7kHqh5VukUinpY3e3eYgTtk84ZCvWH/oW+r/uvFhH7Zf5/2lK+zR1TgaeSLB 6TIWYJ5NU4Ks2watRb2AiFUmq7lo6chs7uT4myj+gnU6Mn9dkSGBb7ow2G3fzl9s MT0tjYMOK8/7u+RSr5LOeddK+xGJ7eP1v3WYp6JFekydWYhw9hNfuatiDsVc6hTO HD9ReINGUkqJ/06oEywJBCU1ELAbBnIpSwcL8bzRH98nIX+DzypEpkv5HUfsc7Fh IZ59Es/FggQsOA45OZFszsHwOji7npUctaiyxDSSW5GyywucD9mo9pakalID2n6q OhGwDjloFQZY18+6/nqD -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:36 2026 by rpki-client