$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/660A349884C511EFB2831C16C4F9AE02.roa File: 660A349884C511EFB2831C16C4F9AE02.roa (raw, json) Hash identifier: 60YZnkNCt62OM9R5IdYDqAi54oL/bd0p0DzGTJOCooU= Subject key identifier: 87:22:A1:05:50:93:39:C0:D5:70:76:1F:BA:83:4A:66:F3:7F:CF:F4 Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 0631 Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/660A349884C511EFB2831C16C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:36:23 +0000 ROA not before: Thu 23 Oct 2025 00:13:56 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 6134 IP address blocks: 43.248.8.0/22 maxlen: 24 103.39.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Oct 23 00:13:56 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a46b07-e599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:2c:de:26:90:48:42:0d:c9:23:89:ce:65: bb:7f:46:f4:c3:35:55:25:bd:be:de:6e:f5:96:24: 58:5f:a2:0a:04:d7:ac:8f:57:ff:57:75:ea:46:f8: f9:0d:de:f4:bc:2f:1e:55:78:30:38:b9:09:93:17: 83:a2:a0:56:4f:1c:ff:c6:29:59:2a:e2:80:48:d9: f3:5d:56:72:84:9e:e6:9a:c7:f1:11:18:3d:54:08: b6:c9:51:4f:bd:32:97:d1:77:08:3e:84:92:33:4f: e1:98:69:f7:39:8e:2b:15:92:e4:04:a8:c3:7a:5f: f0:1d:16:59:21:d1:7f:7b:40:2b:aa:df:f6:dd:1f: 58:b7:d2:ae:fd:0b:43:62:c5:99:b2:1b:70:21:97: 45:26:95:7f:61:2e:3c:db:82:b6:3f:84:9b:fa:4d: 7e:7f:86:eb:66:d9:4f:4b:88:39:22:54:9f:83:25: 48:b4:ac:61:6f:f5:3b:01:ad:9f:3f:32:56:0b:3b: 22:92:b6:77:e2:29:36:e8:23:d3:d5:24:bf:fb:42: cb:aa:71:59:ab:f0:14:da:fe:dc:92:a0:37:08:77: b9:5f:e1:00:c1:18:a3:32:d3:eb:f7:e3:b9:89:a9: b8:a9:aa:0b:88:bf:1a:73:24:22:d1:44:8e:1d:fc: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:22:A1:05:50:93:39:C0:D5:70:76:1F:BA:83:4A:66:F3:7F:CF:F4 X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/660A349884C511EFB2831C16C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.248.8.0/22 103.39.76.0/22 Signature Algorithm: sha256WithRSAEncryption 10:50:dd:45:ed:41:1e:81:2b:e0:4b:ea:72:a0:6d:87:bb:aa: d2:fd:ed:0d:bd:cd:56:71:2d:eb:c9:a4:36:93:f9:09:a8:30: 61:7b:ec:1e:71:41:d1:ac:31:c8:f2:78:b5:79:a1:9d:23:98: dc:8f:bb:3f:db:59:88:08:f2:8b:46:c4:db:30:e0:8d:bd:6e: ea:e4:14:39:f0:38:6c:67:4c:68:43:ed:a3:86:b2:8a:a4:eb: 98:6a:ce:e1:40:eb:86:64:67:96:99:8d:7e:02:ac:89:5a:1f: 24:dd:b3:eb:19:01:f6:31:8a:2a:df:43:ce:94:c6:d6:c5:3f: 28:b9:2b:12:61:89:20:2a:47:c3:ac:eb:f7:7b:9b:3d:d2:d1: 15:33:72:26:17:55:41:01:14:25:f0:32:41:d7:9d:bd:57:08: 7a:e7:8b:f5:71:46:92:c6:9f:f1:12:da:71:35:69:31:d3:aa: 52:ba:bf:ce:27:93:63:5a:37:7e:51:07:95:20:02:3b:bc:62: 5f:92:d6:21:ad:2f:d6:45:60:fd:1d:7f:e3:d5:04:ca:96:99: cd:15:05:af:71:18:67:c5:1d:a1:cc:b7:4e:8d:ed:0b:56:47: 04:a9:06:31:18:52:38:97:8f:7f:77:91:85:66:79:e5:0b:dd: 8a:16:61:22 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUxMDIzMDAxMzU2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmIwNy1lNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWIs3iaQSEINySOJzmW7f0b0wzVVJb2+3m71liRYX6IKBNesj1f/V3XqRvj5 Dd70vC8eVXgwOLkJkxeDoqBWTxz/xilZKuKASNnzXVZyhJ7mmsfxERg9VAi2yVFP vTKX0XcIPoSSM0/hmGn3OY4rFZLkBKjDel/wHRZZIdF/e0Arqt/23R9Yt9Ku/QtD YsWZshtwIZdFJpV/YS4824K2P4Sb+k1+f4brZtlPS4g5IlSfgyVItKxhb/U7Aa2f PzJWCzsikrZ34ik26CPT1SS/+0LLqnFZq/AU2v7ckqA3CHe5X+EAwRijMtPr9+O5 iam4qaoLiL8acyQi0USOHfxUbwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIcioQVQ kznA1XB2H7qDSmbzf8/0MB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTA5NEQvNDBCNzM4NkVERTgxMTFFQkE5RkM3RDcyQzRGOUFFMDIvNjYwQTM0OTg4 NEM1MTFFRkIyODMxQzE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK/gIAwQCZydMMA0GCSqGSIb3DQEBCwUAA4IBAQAQUN1F7UEegSvg S+pyoG2Hu6rS/e0Nvc1WcS3ryaQ2k/kJqDBhe+wecUHRrDHI8ni1eaGdI5jcj7s/ 21mICPKLRsTbMOCNvW7q5BQ58DhsZ0xoQ+2jhrKKpOuYas7hQOuGZGeWmY1+AqyJ Wh8k3bPrGQH2MYoq30POlMbWxT8ouSsSYYkgKkfDrOv3e5s90tEVM3ImF1VBARQl 8DJB1529Vwh654v1cUaSxp/xEtpxNWkx06pSur/OJ5NjWjd+UQeVIAI7vGJfktYh rS/WRWD9HX/j1QTKlpnNFQWvcRhnxR2hzLdOje0LVkcEqQYxGFI4l49/d5GFZnnl C92KFmEi -----END CERTIFICATE-----Generated at Mon Mar 2 10:40:11 2026 by rpki-client