$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa File: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (raw, json) Hash identifier: MxcRCOMDVxWYLuz/1DuRHNURRxOV2Q55QL6ZvvYDCSE= Subject key identifier: 37:09:A9:4D:25:1F:18:D4:C7:C8:27:78:AD:D9:48:70:44:2F:DC:D2 Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Certificate serial: 09A0 Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:01:30 +0000 ROA not before: Fri 06 Feb 2026 20:17:01 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138663 IP address blocks: 43.239.204.0/24 maxlen: 24 43.239.205.0/24 maxlen: 24 103.106.6.0/23 maxlen: 24 103.117.164.0/23 maxlen: 24 203.78.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2464 (0x9a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Validity Not Before: Feb 6 20:17:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a462da-3f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:01:1f:0b:4c:6a:4e:03:9e:42:1b:7a:56: 42:38:7d:98:f6:32:4a:92:1f:8e:bf:70:e3:eb:ac: a6:4f:06:6f:09:c1:cf:79:52:87:45:b2:58:6e:99: b1:8a:8d:74:85:65:65:90:62:6c:c2:e1:fe:68:14: 0f:74:08:f3:a5:68:3e:ec:4c:59:24:b0:09:9c:36: 0c:f4:bc:9d:85:6c:66:09:86:c9:73:6e:fc:a4:74: 79:8a:34:ee:e8:04:d2:1d:07:a4:0c:71:43:a8:71: 7f:71:d9:58:3e:6a:36:47:f0:5d:87:f3:36:4c:01: ea:e7:47:77:83:38:13:18:f1:10:41:f8:e0:0d:0a: 69:bc:8d:72:e7:9a:96:ee:75:8b:1c:84:d1:ca:e4: a7:dc:d5:79:1f:82:e5:1e:9c:25:46:29:c0:b5:4e: dd:6b:7d:77:21:6e:e6:3b:bd:77:52:21:97:76:1e: 04:3e:64:f3:1a:7e:ba:70:07:1b:43:02:6c:05:a6: 15:87:f8:ed:ee:94:f3:c7:44:8c:3e:c0:fb:88:94: 39:fa:29:33:3f:ff:7f:d4:f1:ff:fe:db:48:93:1f: d7:ec:cd:6e:f6:75:cf:fd:57:88:4f:c8:aa:14:5f: 18:e5:e8:04:88:5e:6c:67:61:69:ca:91:04:ca:aa: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:09:A9:4D:25:1F:18:D4:C7:C8:27:78:AD:D9:48:70:44:2F:DC:D2 X509v3 Authority Key Identifier: keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.239.204.0/23 103.106.6.0/23 103.117.164.0/23 203.78.162.0/24 Signature Algorithm: sha256WithRSAEncryption 14:fc:9a:c7:78:5b:69:cb:19:3c:d9:ac:28:a4:db:81:2e:4e: f3:1f:45:08:45:d1:a5:46:92:80:35:0a:79:92:28:c7:c4:57: 48:f6:30:85:aa:88:15:02:2b:ac:ff:7c:56:8b:ae:ee:86:35: d8:f3:23:14:5d:a7:6b:2e:52:fe:31:c9:bf:9f:87:eb:05:b7: 70:ed:fa:15:92:ff:6d:8c:12:2b:dc:14:9e:ab:b8:f8:ec:aa: fd:02:1b:fc:a4:3f:27:b4:b9:b9:dc:3f:e7:b6:11:0e:4f:e2: 35:34:96:fb:34:74:78:76:48:b5:8f:45:aa:06:44:13:23:77: db:a7:81:8b:52:6b:a8:79:5d:46:ae:3a:e1:77:39:29:55:62: 43:f1:fd:0f:b7:3b:fb:e8:91:e7:89:b6:6b:69:c6:ed:61:b3: f9:44:64:31:76:51:63:ff:03:0a:0e:62:f9:fa:c7:bb:e9:1e: 5c:1b:3b:8e:38:51:bc:90:a2:0a:18:fb:8f:cd:8a:63:ef:9e: c6:bc:b8:82:2c:38:1d:63:fd:9f:95:22:5a:04:7d:74:29:ef: c3:d2:c9:bd:83:21:0a:b1:fa:42:00:f6:7c:59:35:d3:79:3d: 24:05:b3:c5:31:8f:be:e7:c3:74:50:47:e0:07:8a:ea:dc:3d: 22:9b:04:f6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwQTQxMTAvBgNVBAUTKDdFMjcwOUEyOUU0NjIwRTU0MjdGNzM1RjM3QzAzNDcz RTM2QjU5N0EwHhcNMjYwMjA2MjAxNzAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjJkYS0zZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowEBHwtMak4DnkIbelZCOH2Y9jJKkh+Ov3Dj66ymTwZvCcHPeVKHRbJYbpmx io10hWVlkGJswuH+aBQPdAjzpWg+7ExZJLAJnDYM9LydhWxmCYbJc278pHR5ijTu 6ATSHQekDHFDqHF/cdlYPmo2R/Bdh/M2TAHq50d3gzgTGPEQQfjgDQppvI1y55qW 7nWLHITRyuSn3NV5H4LlHpwlRinAtU7da313IW7mO713UiGXdh4EPmTzGn66cAcb QwJsBaYVh/jt7pTzx0SMPsD7iJQ5+ikzP/9/1PH//ttIkx/X7M1u9nXP/VeIT8iq FF8Y5egEiF5sZ2FpypEEyqrO5wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFDcJqU0l HxjUx8gneK3ZSHBEL9zSMB8GA1UdIwQYMBaAFH4nCaKeRiDlQn9zXzfANHPja1l6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDBBNC85NUQ1RTM5MkFB NzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lPVkNmM05mTjhBMGMtTnJX WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZpY0pvcDVHSU9WQ2YzTmZOOEEwYy1OcldYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQwQTQvOTVENUUzOTJBQTczMTFFQUExMEFDQzg0QzRGOUFFMDIvQzhDQ0UyQ0NB QTc0MTFFQTlERjJFNjg1QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQBK+/MAwQBZ2oGAwQBZ3WkAwQAy06iMA0GCSqGSIb3DQEBCwUAA4IB AQAU/JrHeFtpyxk82awopNuBLk7zH0UIRdGlRpKANQp5kijHxFdI9jCFqogVAius /3xWi67uhjXY8yMUXadrLlL+Mcm/n4frBbdw7foVkv9tjBIr3BSeq7j47Kr9Ahv8 pD8ntLm53D/nthEOT+I1NJb7NHR4dki1j0WqBkQTI3fbp4GLUmuoeV1Grjrhdzkp VWJD8f0Ptzv76JHnibZracbtYbP5RGQxdlFj/wMKDmL5+se76R5cGzuOOFG8kKIK GPuPzYpj757GvLiCLDgdY/2flSJaBH10Ke/D0sm9gyEKsfpCAPZ8WTXTeT0kBbPF MY++58N0UEfgB4rq3D0imwT2 -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:41 2026 by rpki-client