$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/CC2C3CB684AC11F0B7B8977DC4F9AE02.roa File: CC2C3CB684AC11F0B7B8977DC4F9AE02.roa (raw, json) Hash identifier: WVKvdEi7kYbNoorvO+vXnFAGzIa+bxcA/kczPaL6kG4= Subject key identifier: E6:20:93:AB:1B:DF:15:33:CC:42:D8:BC:B3:92:7A:98:2F:69:7C:39 Certificate issuer: /CN=A91D8185/serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Certificate serial: 66 Authority key identifier: 89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/CC2C3CB684AC11F0B7B8977DC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:28:52 +0000 ROA not before: Sun 01 Mar 2026 09:28:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153995 IP address blocks: 103.161.158.0/23 maxlen: 23 103.161.158.0/24 maxlen: 24 103.161.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8185, serialNumber=89784D6D938B05CC3B7B666E5E7AEE9223DE4D70 Validity Not Before: Mar 1 09:28:52 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a406d4-8943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:04:5b:e3:b8:00:b1:c0:ee:6d:7d:a3:ee: e4:4c:17:1b:a3:d3:4a:d7:aa:3a:16:0e:9c:c8:be: ba:67:87:fc:2e:24:c7:d0:98:6c:a9:46:66:08:f6: c6:b1:66:ac:5f:de:46:cd:be:f4:9f:85:42:ed:7a: ca:0c:23:72:87:70:41:5f:4d:8c:a5:42:60:4f:d4: d6:9e:7b:06:f0:33:46:70:d0:ef:0c:20:45:21:63: 9a:0a:b4:1a:e4:d2:7a:2a:bf:9e:e4:c5:ec:33:6e: 69:fb:91:37:7d:f6:82:52:5e:28:39:d8:27:91:a7: 35:70:b8:80:32:2e:8e:1f:65:33:fa:49:75:32:0b: f4:ff:d7:56:80:73:29:63:62:67:af:4f:23:82:5f: 6a:6a:24:6e:83:11:4f:e3:ac:e4:73:59:60:42:f4: 58:fb:8f:75:c4:04:8c:a9:66:5b:f5:37:d5:8b:0f: 32:c9:e0:a6:ee:90:18:df:25:59:54:9e:21:da:dd: e2:2c:0c:f3:ba:06:5f:a1:a3:0e:a2:56:09:9a:05: 0d:50:68:d9:36:53:c8:9e:90:16:3a:f2:c8:6b:f5: db:fc:de:c5:26:2f:b8:7a:2d:5d:e4:31:c9:6d:68: 8a:d3:92:85:4c:db:65:e0:f2:75:01:ca:44:9c:46: 03:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:20:93:AB:1B:DF:15:33:CC:42:D8:BC:B3:92:7A:98:2F:69:7C:39 X509v3 Authority Key Identifier: keyid:89:78:4D:6D:93:8B:05:CC:3B:7B:66:6E:5E:7A:EE:92:23:DE:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/iXhNbZOLBcw7e2ZuXnrukiPeTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXhNbZOLBcw7e2ZuXnrukiPeTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8185/8501153284AC11F08D3AB979C4F9AE02/CC2C3CB684AC11F0B7B8977DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.158.0/23 Signature Algorithm: sha256WithRSAEncryption b2:4c:d6:07:f6:9e:25:6b:7f:b8:3d:08:ed:6d:f9:67:5f:0a: d4:8d:36:5b:2b:84:fd:50:67:72:53:8b:4a:06:63:9f:ea:4f: ba:69:51:38:d3:61:0a:e1:8d:c8:80:25:82:70:fb:87:49:31: e1:15:b5:b3:e7:a8:a4:ea:24:bd:34:a5:c1:dd:2d:e1:8d:42: 5a:12:cd:0e:23:43:44:43:bb:3e:42:3d:65:35:15:87:b8:35: 56:8b:b6:54:57:66:37:2e:2b:92:70:26:4a:56:e9:65:1d:25: 13:6a:a5:47:f3:9b:16:26:3e:02:3a:61:84:e0:2a:39:84:fe: 0b:84:a3:7b:3b:ac:cc:90:29:e9:aa:a0:c6:b5:96:79:c5:93: ea:55:b4:d6:bc:4b:fd:18:d3:a9:71:cc:5a:df:dd:ff:e3:d5: 57:f9:7c:2a:54:0c:82:46:df:8f:b8:54:09:89:1b:0f:05:25: eb:f1:78:80:57:51:3c:da:22:3c:fe:ac:50:6e:75:d4:3f:67: 4a:ba:5e:c2:c6:73:2c:59:30:c7:9f:1c:a6:0e:8a:9f:29:0c: 75:5f:1e:0e:c5:24:db:1d:c0:54:96:e8:d7:c7:7a:d8:f6:9c: b9:a8:f6:d3:58:43:bc:d6:c8:a9:77:7f:5b:b5:d1:d6:f0:3e: e4:08:5b:41 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE4NTExMC8GA1UEBRMoODk3ODRENkQ5MzhCMDVDQzNCN0I2NjZFNUU3QUVFOTIy M0RFNEQ3MDAeFw0yNjAzMDEwOTI4NTJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQwNmQ0LTg5NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQkQRb47gAscDubX2j7uRMFxuj00rXqjoWDpzIvrpnh/wuJMfQmGypRmYI9sax Zqxf3kbNvvSfhULtesoMI3KHcEFfTYylQmBP1NaeewbwM0Zw0O8MIEUhY5oKtBrk 0noqv57kxewzbmn7kTd99oJSXig52CeRpzVwuIAyLo4fZTP6SXUyC/T/11aAcylj YmevTyOCX2pqJG6DEU/jrORzWWBC9Fj7j3XEBIypZlv1N9WLDzLJ4KbukBjfJVlU niHa3eIsDPO6Bl+how6iVgmaBQ1QaNk2U8iekBY68shr9dv83sUmL7h6LV3kMclt aIrTkoVM22Xg8nUBykScRgOVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU5iCTqxvf FTPMQti8s5J6mC9pfDkwHwYDVR0jBBgwFoAUiXhNbZOLBcw7e2ZuXnrukiPeTXAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTg1Lzg1MDExNTMyODRB QzExRjA4RDNBQjk3OUM0RjlBRTAyL2lYaE5iWk9MQmN3N2UyWnVYbnJ1a2lQZVRY QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVhoTmJaT0xCY3c3ZTJadVhucnVraVBlVFhBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODE4NS84NTAxMTUzMjg0QUMxMUYwOEQzQUI5NzlDNEY5QUUwMi9DQzJDM0NCNjg0 QUMxMUYwQjdCODk3N0RDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnoZ4wDQYJKoZIhvcNAQELBQADggEBALJM1gf2niVrf7g9CO1t+Wdf CtSNNlsrhP1QZ3JTi0oGY5/qT7ppUTjTYQrhjciAJYJw+4dJMeEVtbPnqKTqJL00 pcHdLeGNQloSzQ4jQ0RDuz5CPWU1FYe4NVaLtlRXZjcuK5JwJkpW6WUdJRNqpUfz mxYmPgI6YYTgKjmE/guEo3s7rMyQKemqoMa1lnnFk+pVtNa8S/0Y06lxzFrf3f/j 1Vf5fCpUDIJG34+4VAmJGw8FJevxeIBXUTzaIjz+rFBuddQ/Z0q6XsLGcyxZMMef HKYOip8pDHVfHg7FJNsdwFSW6NfHetj2nLmo9tNYQ7zWyKl3f1u10dbwPuQIW0E= -----END CERTIFICATE-----Generated at Mon Mar 2 02:11:35 2026 by rpki-client