$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa File: 02FB1DCAEF6A11E69A4AD551C4F9AE02.roa (raw, json) Hash identifier: 2yvcCZV+pN9jEg/q9+iV+9Rfav7HZxuqjuwplpogEBM= Subject key identifier: 6E:66:4A:79:C4:CA:58:A2:2A:B6:CE:40:F7:56:B8:9B:21:D1:8F:07 Certificate issuer: /CN=A91DAFA2/serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Certificate serial: 1C99 Authority key identifier: 18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:28:59 +0000 ROA not before: Wed 24 Dec 2025 16:13:51 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136179 IP address blocks: 103.83.59.0/24 maxlen: 24 2001:df7:d200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7321 (0x1c99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DAFA2, serialNumber=18B1C88CEE68F63C21CD6A0CB1B831D5D6F5D6CF Validity Not Before: Dec 24 16:13:51 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a45b3b-9f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:fb:ce:0a:01:70:28:03:86:69:38:18:a8: 0a:d5:fe:de:ae:21:49:18:9a:10:1b:bd:3d:56:27: de:59:cc:c8:b1:66:9c:08:9a:d2:86:a1:b2:95:25: 30:fa:77:a5:03:c8:10:56:ce:f3:35:bf:b3:14:08: b1:9d:12:f8:11:98:df:e0:2a:f4:6e:5f:42:89:9c: 0e:8d:37:de:ec:20:28:82:a7:97:da:2d:ed:e2:6b: 7c:fb:a3:a7:90:20:e9:3b:b6:4b:86:65:bd:5f:9f: 86:6c:51:6c:d8:b6:64:c6:ee:81:ab:a6:86:a3:cb: 8c:15:d3:c6:bc:b5:40:af:7c:5f:41:68:52:82:4f: 6b:7f:d8:f2:48:1c:a3:fc:30:21:4b:93:be:b1:47: 18:c4:05:40:3e:5d:cf:39:b2:21:42:df:a5:60:79: 8a:bd:07:d4:96:7c:91:e4:41:6d:bd:e6:d3:80:07: 49:13:df:ae:78:90:4d:8f:a1:81:4f:2d:cf:aa:ad: 64:e4:a5:14:d9:4a:c0:b6:72:15:d7:b0:d0:dd:49: c0:ac:fb:88:f3:72:19:87:8d:f3:11:ae:c6:9f:93: ef:74:a2:b4:c9:8e:4b:d3:bc:39:f8:13:3d:9d:b2: 28:52:62:51:9f:c7:a5:cf:55:94:ad:99:54:31:d3: 42:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:4A:79:C4:CA:58:A2:2A:B6:CE:40:F7:56:B8:9B:21:D1:8F:07 X509v3 Authority Key Identifier: keyid:18:B1:C8:8C:EE:68:F6:3C:21:CD:6A:0C:B1:B8:31:D5:D6:F5:D6:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/GLHIjO5o9jwhzWoMsbgx1db11s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GLHIjO5o9jwhzWoMsbgx1db11s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/B7B67760EF6911E6BD73C651C4F9AE02/02FB1DCAEF6A11E69A4AD551C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.83.59.0/24 IPv6: 2001:df7:d200::/48 Signature Algorithm: sha256WithRSAEncryption b7:c7:f8:1c:46:12:06:5f:ba:4a:54:9a:8f:67:24:6a:9c:7c: 0b:55:9c:dd:bd:f0:62:31:43:46:d5:ec:06:9b:94:d0:a9:25: 45:3a:00:d2:02:d7:3a:06:25:ed:27:a1:18:51:51:de:74:b7: 46:59:07:b4:87:d4:cf:66:07:cf:9a:9e:c7:0a:86:e7:2b:5f: 38:98:45:30:28:c0:b8:b9:83:c0:f7:1f:91:8d:2e:aa:6f:22: 6f:bb:f5:03:3f:ec:d0:e5:10:5a:50:bb:92:5d:a4:d7:c5:d9: 06:5f:4a:2c:c7:8c:04:4f:30:59:a1:9b:aa:d7:3f:f8:da:44: 8c:b1:62:e3:51:a8:8f:f2:94:52:0e:e9:39:9e:4f:51:ee:70: bc:f6:42:cf:bc:81:bf:70:40:6c:24:1e:a3:7b:f3:f1:96:fc: 73:cf:a0:78:56:d5:8d:dc:23:8f:56:72:e6:f1:26:81:e6:78: 53:60:b3:fa:ca:c3:21:5f:ce:94:4d:60:ef:83:82:2e:cf:84: 97:6a:77:43:86:d3:e7:77:24:7b:61:d7:b8:ea:09:62:4b:f4: 6e:82:02:06:9c:97:39:78:fe:6f:89:1d:8c:36:d0:57:f5:d7: 39:0d:23:ea:49:29:04:bc:0a:97:52:d9:44:74:d3:da:e7:be: 57:de:0d:17 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICHJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFGQTIxMTAvBgNVBAUTKDE4QjFDODhDRUU2OEY2M0MyMUNENkEwQ0IxQjgzMUQ1 RDZGNUQ2Q0YwHhcNMjUxMjI0MTYxMzUxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWIzYi05ZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAls77zgoBcCgDhmk4GKgK1f7eriFJGJoQG709VifeWczIsWacCJrShqGylSUw +nelA8gQVs7zNb+zFAixnRL4EZjf4Cr0bl9CiZwOjTfe7CAogqeX2i3t4mt8+6On kCDpO7ZLhmW9X5+GbFFs2LZkxu6Bq6aGo8uMFdPGvLVAr3xfQWhSgk9rf9jySByj /DAhS5O+sUcYxAVAPl3PObIhQt+lYHmKvQfUlnyR5EFtvebTgAdJE9+ueJBNj6GB Ty3Pqq1k5KUU2UrAtnIV17DQ3UnArPuI83IZh43zEa7Gn5PvdKK0yY5L07w5+BM9 nbIoUmJRn8elz1WUrZlUMdNCkQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFG5mSnnE yliiKrbOQPdWuJsh0Y8HMB8GA1UdIwQYMBaAFBixyIzuaPY8Ic1qDLG4MdXW9dbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUZBMi9CN0I2Nzc2MEVG NjkxMUU2QkQ3M0M2NTFDNEY5QUUwMi9HTEhJak81bzlqd2h6V29Nc2JneDFkYjEx czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dMSElqTzVvOWp3aHpXb01zYmd4MWRiMTFzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REFGQTIvQjdCNjc3NjBFRjY5MTFFNkJENzNDNjUxQzRGOUFFMDIvMDJGQjFEQ0FF RjZBMTFFNjlBNEFENTUxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ1M7MA8EAgACMAkDBwAgAQ330gAwDQYJKoZIhvcNAQELBQADggEB ALfH+BxGEgZfukpUmo9nJGqcfAtVnN298GIxQ0bV7AablNCpJUU6ANIC1zoGJe0n oRhRUd50t0ZZB7SH1M9mB8+anscKhucrXziYRTAowLi5g8D3H5GNLqpvIm+79QM/ 7NDlEFpQu5JdpNfF2QZfSizHjARPMFmhm6rXP/jaRIyxYuNRqI/ylFIO6TmeT1Hu cLz2Qs+8gb9wQGwkHqN78/GW/HPPoHhW1Y3cI49WcubxJoHmeFNgs/rKwyFfzpRN YO+Dgi7PhJdqd0OG0+d3JHth17jqCWJL9G6CAgaclzl4/m+JHYw20Ff11zkNI+pJ KQS8CpdS2UR009rnvlfeDRc= -----END CERTIFICATE-----Generated at Mon Mar 2 11:17:38 2026 by rpki-client