$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa File: 4E8695C04F6111F0AEF2037CC4F9AE02.roa (raw, json) Hash identifier: ncn7Gjv5/K5v/CMdlLouui8Rvj7iaqS9f9pgwJ6xHLg= Subject key identifier: 03:14:F2:81:FF:21:4D:41:E9:B9:C2:04:77:19:D8:B8:4C:2A:88:58 Certificate issuer: /CN=A91DB6F8/serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Certificate serial: 0285 Authority key identifier: 23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:56:03 +0000 ROA not before: Thu 15 Jan 2026 01:21:09 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 153346 IP address blocks: 103.48.20.0/23 maxlen: 23 2001:df1:a0c0::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 645 (0x285) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB6F8, serialNumber=237B7D4CA84A26D5FC4958D48191F36A14BC7A2F Validity Not Before: Jan 15 01:21:09 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43763-5cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:6c:10:fa:36:df:01:44:fc:2b:07:0f:31: d7:33:18:f8:1d:15:be:b6:27:b7:0b:32:66:67:88: 4b:29:4f:97:69:93:c1:25:7a:0f:35:74:d3:c3:9a: 7a:03:7d:d5:9f:a9:c9:8a:75:d9:00:75:a0:ce:71: 6e:15:9e:53:f2:46:8f:64:43:65:c6:5d:62:5f:1b: 80:91:41:79:73:3c:2c:69:71:13:a1:00:ea:53:64: af:e2:34:0a:ed:9f:8c:44:ca:33:47:51:ba:02:18: 0d:71:4e:e0:14:18:15:75:b3:64:f6:51:39:cf:63: 53:e0:85:8c:4d:d3:c1:91:3d:9b:2c:f3:5f:79:16: 9e:27:04:41:23:2d:27:57:22:24:4e:42:d9:52:00: 0b:3d:51:90:c2:32:5c:f1:8a:80:fd:f6:45:c1:5f: e9:a5:af:dd:bf:38:43:46:89:fa:4a:3c:59:19:46: 92:b5:e6:ec:a1:91:af:49:33:96:55:c8:2b:f6:8e: b1:b9:8d:97:2d:b2:5c:4b:21:38:03:1d:03:e4:31: f0:22:73:e5:ec:fd:e2:25:5c:a0:cc:59:6a:56:c3: 84:74:ed:3e:4b:f8:ff:85:ba:0a:5c:05:8d:f7:d8: 01:52:7a:0a:3a:4b:6d:dc:be:3f:01:48:12:d3:d7: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:F2:81:FF:21:4D:41:E9:B9:C2:04:77:19:D8:B8:4C:2A:88:58 X509v3 Authority Key Identifier: keyid:23:7B:7D:4C:A8:4A:26:D5:FC:49:58:D4:81:91:F3:6A:14:BC:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/I3t9TKhKJtX8SVjUgZHzahS8ei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3t9TKhKJtX8SVjUgZHzahS8ei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6F8/562C3CB4724E11ED8E20673EC4F9AE02/4E8695C04F6111F0AEF2037CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.48.20.0/23 IPv6: 2001:df1:a0c0::/47 Signature Algorithm: sha256WithRSAEncryption a8:13:3c:e6:d4:0f:da:e9:ae:15:f1:f8:3b:41:3d:1f:90:8f: 58:ed:20:73:71:93:e9:0c:4f:9a:4d:d3:4f:b2:cc:2d:e8:1b: c3:04:b7:f4:40:70:84:43:d2:1a:cc:15:cb:f5:95:ba:a2:9c: 89:33:d5:23:18:48:8b:82:d7:a6:65:2c:0b:b5:c8:35:3e:43: cf:7e:fa:bc:0a:38:f0:f4:f6:18:3a:08:1f:2c:c4:5d:db:e2: bf:02:1e:c1:88:bf:96:4b:c6:82:8c:d4:ba:d7:02:e4:0a:74: 71:97:06:b8:eb:b1:b8:09:a0:c6:02:03:13:3a:2d:79:f1:11: 69:91:fc:d7:7a:88:2e:5e:07:ce:9b:2f:9b:34:75:b5:26:7f: a2:8e:94:39:40:9e:4d:26:27:84:b1:92:41:81:31:4a:18:69: 46:17:f3:55:4a:c9:09:1c:54:26:09:3a:7c:85:a8:38:56:cc: 9e:b0:a2:3f:46:4e:9a:8e:7d:9f:af:d4:e3:c9:17:6b:e6:4c: 7c:ce:56:ed:28:a5:62:63:30:d1:d5:a0:33:65:43:c5:42:0a: 35:69:33:7d:7f:ea:09:83:76:b3:c8:02:09:19:b2:55:41:b7: 3d:0c:db:28:7b:95:4b:4f:2c:33:98:b4:f0:06:e6:fc:65:09: 52:12:4f:f8 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2RjgxMTAvBgNVBAUTKDIzN0I3RDRDQTg0QTI2RDVGQzQ5NThENDgxOTFGMzZB MTRCQzdBMkYwHhcNMjYwMTE1MDEyMTA5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzc2My01Y2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgdsEPo23wFE/CsHDzHXMxj4HRW+tie3CzJmZ4hLKU+XaZPBJXoPNXTTw5p6 A33Vn6nJinXZAHWgznFuFZ5T8kaPZENlxl1iXxuAkUF5czwsaXEToQDqU2Sv4jQK 7Z+MRMozR1G6AhgNcU7gFBgVdbNk9lE5z2NT4IWMTdPBkT2bLPNfeRaeJwRBIy0n VyIkTkLZUgALPVGQwjJc8YqA/fZFwV/ppa/dvzhDRon6SjxZGUaStebsoZGvSTOW Vcgr9o6xuY2XLbJcSyE4Ax0D5DHwInPl7P3iJVygzFlqVsOEdO0+S/j/hboKXAWN 99gBUnoKOktt3L4/AUgS09eUfQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAMU8oH/ IU1B6bnCBHcZ2LhMKohYMB8GA1UdIwQYMBaAFCN7fUyoSibV/ElY1IGR82oUvHov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjZGOC81NjJDM0NCNDcy NEUxMUVEOEUyMDY3M0VDNEY5QUUwMi9JM3Q5VEtoS0p0WDhTVmpVZ1pIemFoUzhl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzdDlUS2hLSnRYOFNWalVnWkh6YWhTOGVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI2RjgvNTYyQzNDQjQ3MjRFMTFFRDhFMjA2NzNFQzRGOUFFMDIvNEU4Njk1QzA0 RjYxMTFGMEFFRjIwMzdDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZzAUMA8EAgACMAkDBwEgAQ3xoMAwDQYJKoZIhvcNAQELBQADggEB AKgTPObUD9rprhXx+DtBPR+Qj1jtIHNxk+kMT5pN00+yzC3oG8MEt/RAcIRD0hrM Fcv1lbqinIkz1SMYSIuC16ZlLAu1yDU+Q89++rwKOPD09hg6CB8sxF3b4r8CHsGI v5ZLxoKM1LrXAuQKdHGXBrjrsbgJoMYCAxM6LXnxEWmR/Nd6iC5eB86bL5s0dbUm f6KOlDlAnk0mJ4SxkkGBMUoYaUYX81VKyQkcVCYJOnyFqDhWzJ6woj9GTpqOfZ+v 1OPJF2vmTHzOVu0opWJjMNHVoDNlQ8VCCjVpM31/6gmDdrPIAgkZslVBtz0M2yh7 lUtPLDOYtPAG5vxlCVIST/g= -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:37 2026 by rpki-client