$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/F4C2F7F604FF11EABFF6E022C4F9AE02.roa File: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (raw, json) Hash identifier: DvZA6XJDkyHfkolYQVEDhxnUbcvdyFYpNYGE/Rx6mkk= Subject key identifier: 5E:30:B7:60:6B:95:7B:9A:30:7D:12:AE:F3:74:ED:32:0E:BD:3F:9C Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0CF9 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/F4C2F7F604FF11EABFF6E022C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:58:50 +0000 ROA not before: Wed 24 Dec 2025 18:15:43 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 17473 IP address blocks: 103.10.82.0/24 maxlen: 24 103.53.115.0/24 maxlen: 24 103.87.254.0/24 maxlen: 24 103.199.119.0/24 maxlen: 24 144.48.16.0/22 maxlen: 24 203.30.65.0/24 maxlen: 24 203.56.181.0/24 maxlen: 24 203.96.232.0/23 maxlen: 24 2405:5940::/32 maxlen: 32 2405:5940:afff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:40:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3321 (0xcf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Dec 24 18:15:43 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4623a-911e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:48:28:37:14:e2:12:49:5b:4c:c7:cf:a9: cc:2f:f0:07:33:4b:0c:7f:c1:8c:6a:96:82:8f:41: f4:6d:25:a9:c2:51:f5:94:5a:c9:cb:8a:7f:3a:82: fa:c1:3c:1c:83:7d:fa:73:c3:05:3b:a2:25:3f:45: 3c:ee:9e:b8:32:cb:ce:7c:d5:16:55:a3:1a:ff:e5: e3:c6:bd:f9:e8:7e:a7:70:b4:20:ca:50:1f:d6:91: cc:74:38:78:70:2b:67:a5:87:2e:6f:ae:62:2d:70: dc:14:59:9f:4f:ec:c7:61:c4:c0:f1:a7:e4:4a:df: b4:ad:4f:f4:f3:ec:b2:9d:87:f2:95:c5:8c:79:16: 12:8f:03:fe:7f:84:97:d9:cb:ea:01:0e:b5:d8:2b: eb:0e:d2:2a:eb:08:23:88:6e:90:10:1d:6b:8f:e6: 44:e5:a9:ae:b3:30:d2:93:44:f0:1c:fb:50:c5:38: ec:8e:3e:2d:2e:23:f4:8e:4f:f6:ff:ec:6c:20:3d: 8b:c9:d1:4f:04:66:c3:8d:82:d7:df:5b:23:0e:5f: 37:0e:fd:81:11:08:93:f8:a2:fe:77:19:f4:87:85: 27:8a:a0:ed:16:fd:9a:43:c9:f2:e2:ef:e2:58:49: 4b:90:f0:86:7b:12:1a:a5:c7:51:c1:d3:b5:d5:46: b0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:30:B7:60:6B:95:7B:9A:30:7D:12:AE:F3:74:ED:32:0E:BD:3F:9C X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/F4C2F7F604FF11EABFF6E022C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.10.82.0/24 103.53.115.0/24 103.87.254.0/24 103.199.119.0/24 144.48.16.0/22 203.30.65.0/24 203.56.181.0/24 203.96.232.0/23 IPv6: 2405:5940::/32 Signature Algorithm: sha256WithRSAEncryption 99:e6:e3:ec:51:2d:17:3c:7a:b5:32:08:a1:0b:f9:41:c5:7c: fd:49:d9:67:c0:25:b3:7a:ea:5c:a6:fd:3d:e9:5d:9c:36:81: 04:87:2a:9f:3b:e8:cc:f6:bc:f7:0e:77:c4:88:27:5e:3e:15: 13:d5:54:18:80:c0:d4:11:3c:35:fa:d3:31:6e:02:ec:09:11: 58:5d:9e:56:33:56:5a:ed:7c:68:eb:9a:e4:ba:5f:12:c4:33: b8:6c:77:18:25:57:41:6f:f3:d2:ee:73:25:b9:30:65:4e:4e: 77:ab:8f:1f:e6:d8:0c:43:c8:56:bb:fe:84:db:6b:06:1c:e9: 0e:01:26:3c:1d:cd:9a:63:68:c5:9c:70:0a:47:19:5f:b4:fb: 9c:84:99:64:70:13:10:52:5a:bc:6c:43:d0:a0:8f:89:41:dd: 32:ac:c7:09:41:a9:d5:88:41:94:c5:49:60:55:d4:0f:78:7b: 03:e9:92:a8:88:1e:7f:23:39:08:74:9c:16:70:db:7e:1c:f4: 80:63:c1:a6:12:ef:8b:d7:7e:b0:4a:d5:7f:61:01:ea:43:24: 08:93:1a:9e:ff:58:42:85:c6:a4:62:51:63:8a:b0:c3:92:3c: 61:25:50:d2:1a:a1:24:92:ad:98:30:9a:32:61:70:3d:37:b3: 6b:2c:35:95 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICDPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjUxMjI0MTgxNTQzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjIzYS05MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBVIKDcU4hJJW0zHz6nML/AHM0sMf8GMapaCj0H0bSWpwlH1lFrJy4p/OoL6 wTwcg336c8MFO6IlP0U87p64MsvOfNUWVaMa/+Xjxr356H6ncLQgylAf1pHMdDh4 cCtnpYcub65iLXDcFFmfT+zHYcTA8afkSt+0rU/08+yynYfylcWMeRYSjwP+f4SX 2cvqAQ612CvrDtIq6wgjiG6QEB1rj+ZE5amuszDSk0TwHPtQxTjsjj4tLiP0jk/2 /+xsID2LydFPBGbDjYLX31sjDl83Dv2BEQiT+KL+dxn0h4UniqDtFv2aQ8ny4u/i WElLkPCGexIapcdRwdO11UawwwIDAQABo4ICmTCCApUwHQYDVR0OBBYEFF4wt2Br lXuaMH0SrvN07TIOvT+cMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhFQUYvMTBCMEUzRDAwNEVBMTFFQUJFREM4MTYxQzRGOUFFMDIvRjRDMkY3RjYw NEZGMTFFQUJGRjZFMDIyQzRGOUFFMDIucm9hMFgGCCsGAQUFBwEHAQH/BEkwRzA2 BAIAATAwAwQAZwpSAwQAZzVzAwQAZ1f+AwQAZ8d3AwQCkDAQAwQAyx5BAwQAyzi1 AwQBy2DoMA0EAgACMAcDBQAkBVlAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ5uPsUS0X PHq1MgihC/lBxXz9SdlnwCWzeupcpv096V2cNoEEhyqfO+jM9rz3DnfEiCdePhUT 1VQYgMDUETw1+tMxbgLsCRFYXZ5WM1Za7Xxo65rkul8SxDO4bHcYJVdBb/PS7nMl uTBlTk53q48f5tgMQ8hWu/6E22sGHOkOASY8Hc2aY2jFnHAKRxlftPuchJlkcBMQ Ulq8bEPQoI+JQd0yrMcJQanViEGUxUlgVdQPeHsD6ZKoiB5/IzkIdJwWcNt+HPSA Y8GmEu+L136wStV/YQHqQyQIkxqe/1hChcakYlFjirDDkjxhJVDSGqEkkq2YMJoy YXA9N7NrLDWV -----END CERTIFICATE-----Generated at Mon Mar 2 06:18:29 2026 by rpki-client