$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/A4E0754863B411EEAADB3A7CC4F9AE02.roa File: A4E0754863B411EEAADB3A7CC4F9AE02.roa (raw, json) Hash identifier: EhYXno6ug4ByU87OUq1wUeh+ctGIsCVZa0SYOR15ZnY= Subject key identifier: 78:4A:D8:74:CB:3A:1A:E4:78:41:32:06:32:72:CA:62:4C:17:3D:B6 Certificate issuer: /CN=A91E2042/serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Certificate serial: 01D2 Authority key identifier: 87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/A4E0754863B411EEAADB3A7CC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:19:24 +0000 ROA not before: Wed 26 Nov 2025 18:25:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151820 IP address blocks: 103.204.42.0/23 maxlen: 23 103.204.42.0/24 maxlen: 24 103.204.43.0/24 maxlen: 24 2401:ec20::/32 maxlen: 32 2401:ec20::/48 maxlen: 48 2401:ec20:1::/48 maxlen: 48 2401:ec20:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2042, serialNumber=87CF1D01604551E86C24409E481DAF9C66594BF4 Validity Not Before: Nov 26 18:25:54 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a458fc-2635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:4a:24:d7:58:9d:50:fb:58:90:bd:c4:01: e1:f8:97:05:e3:8a:7a:c0:1f:b8:1f:1a:52:b6:62: 7c:40:07:be:10:67:8f:e2:3b:37:69:6f:c2:d6:1a: 45:c9:2a:0c:18:eb:0e:e2:4c:70:d4:11:46:46:01: 33:84:22:e0:ca:58:b8:07:5e:67:de:49:a8:c7:34: 4e:69:95:14:8b:06:ae:8e:aa:2d:24:26:0d:41:84: 3e:0e:af:cd:3d:5c:2c:51:c1:5c:0a:11:f4:d4:4f: 4f:78:19:ba:97:8a:2b:7d:fa:76:cc:f2:7c:df:09: 3b:a7:9d:47:4a:4d:69:3d:1e:46:74:b5:62:6e:24: a6:8f:c1:6b:a1:69:b6:90:26:a7:68:61:02:1b:92: da:af:69:67:f9:ca:90:03:dc:34:3a:de:b4:9b:c7: 33:fe:59:ce:39:eb:0c:1e:cf:83:02:58:ac:bf:8e: 7f:18:9b:74:24:11:c9:80:98:4d:45:8b:0d:dc:fa: 41:ee:45:86:55:62:eb:b7:48:47:92:8f:31:79:45: e9:07:d0:e2:9e:ba:2e:b4:bf:f3:85:bb:b2:cb:3b: 96:70:b8:64:34:c9:c5:ba:7e:a9:6a:44:d9:e8:51: 62:3b:ac:61:d3:a5:1a:29:c8:ed:ef:0a:8d:2c:d0: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:D8:74:CB:3A:1A:E4:78:41:32:06:32:72:CA:62:4C:17:3D:B6 X509v3 Authority Key Identifier: keyid:87:CF:1D:01:60:45:51:E8:6C:24:40:9E:48:1D:AF:9C:66:59:4B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/h88dAWBFUehsJECeSB2vnGZZS_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h88dAWBFUehsJECeSB2vnGZZS_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2042/0AEC1D0C63B411EEB65D2B7BC4F9AE02/A4E0754863B411EEAADB3A7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.204.42.0/23 IPv6: 2401:ec20::/32 Signature Algorithm: sha256WithRSAEncryption 08:c4:de:92:da:5f:3a:c0:ee:be:e8:6f:57:6b:14:ac:c1:38: fa:fc:cc:e4:80:c7:c3:07:1e:04:31:d3:0b:f6:34:0e:91:7b: 21:bf:3b:7f:5f:db:89:27:24:f6:85:63:8b:fc:a3:0b:3c:e8: ac:cd:3f:ab:4a:1d:ba:da:5e:23:3b:7f:0e:e8:9f:fd:cc:e8: 8d:1f:b3:56:f2:14:96:85:80:d5:39:8e:7b:b6:69:03:95:3e: c5:65:c7:56:7a:96:9f:95:e4:e4:e8:26:9e:b1:5b:ce:2d:0d: 74:ef:84:cd:53:ed:74:60:fc:ad:67:aa:c8:b1:5b:9e:2b:5b: 5d:74:0b:e9:4c:b2:53:34:5e:2c:cf:2c:51:3c:b1:c0:2f:ab: 08:8d:65:c3:3e:c7:f1:e3:0b:3f:1e:16:d6:4f:d2:8a:77:b4: 83:c3:60:6f:4c:bf:33:e4:13:30:c4:e0:67:d9:eb:d1:ca:e7: 6d:e9:62:47:b1:8c:e1:4b:c7:e9:7d:f8:92:54:19:df:b6:80: ba:e1:6a:c3:56:3e:f0:00:18:a8:66:43:3e:21:8f:9a:c2:09: 20:1c:8d:a3:89:a6:bb:58:22:6a:bb:b4:11:12:33:a0:a0:28: ba:e9:f4:7e:4a:f7:05:27:af:bf:75:64:57:69:25:a4:b5:af: ca:72:77:4b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIwNDIxMTAvBgNVBAUTKDg3Q0YxRDAxNjA0NTUxRTg2QzI0NDA5RTQ4MURBRjlD NjY1OTRCRjQwHhcNMjUxMTI2MTgyNTU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NThmYy0yNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrhKJNdYnVD7WJC9xAHh+JcF44p6wB+4HxpStmJ8QAe+EGeP4js3aW/C1hpF ySoMGOsO4kxw1BFGRgEzhCLgyli4B15n3kmoxzROaZUUiwaujqotJCYNQYQ+Dq/N PVwsUcFcChH01E9PeBm6l4orffp2zPJ83wk7p51HSk1pPR5GdLVibiSmj8FroWm2 kCanaGECG5Lar2ln+cqQA9w0Ot60m8cz/lnOOesMHs+DAlisv45/GJt0JBHJgJhN RYsN3PpB7kWGVWLrt0hHko8xeUXpB9DinroutL/zhbuyyzuWcLhkNMnFun6pakTZ 6FFiO6xh06UaKcjt7wqNLNDscwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHhK2HTL OhrkeEEyBjJyymJMFz22MB8GA1UdIwQYMBaAFIfPHQFgRVHobCRAnkgdr5xmWUv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjA0Mi8wQUVDMUQwQzYz QjQxMUVFQjY1RDJCN0JDNEY5QUUwMi9oODhkQVdCRlVlaHNKRUNlU0Iydm5HWlpT X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4OGRBV0JGVWVoc0pFQ2VTQjJ2bkdaWlNfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTIwNDIvMEFFQzFEMEM2M0I0MTFFRUI2NUQyQjdCQzRGOUFFMDIvQTRFMDc1NDg2 M0I0MTFFRUFBREIzQTdDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ8wqMA0EAgACMAcDBQAkAewgMA0GCSqGSIb3DQEBCwUAA4IBAQAI xN6S2l86wO6+6G9XaxSswTj6/MzkgMfDBx4EMdML9jQOkXshvzt/X9uJJyT2hWOL /KMLPOiszT+rSh262l4jO38O6J/9zOiNH7NW8hSWhYDVOY57tmkDlT7FZcdWepaf leTk6CaesVvOLQ1074TNU+10YPytZ6rIsVueK1tddAvpTLJTNF4szyxRPLHAL6sI jWXDPsfx4ws/HhbWT9KKd7SDw2BvTL8z5BMwxOBn2evRyudt6WJHsYzhS8fpffiS VBnftoC64WrDVj7wABioZkM+IY+awgkgHI2jiaa7WCJqu7QREjOgoCi66fR+SvcF J6+/dWRXaSWkta/KcndL -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:33 2026 by rpki-client