$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa File: 6208BAD4499611E8B421BE5CC4F9AE02.roa (raw, json) Hash identifier: Ph0yoa8fJ4hSKrJxMSli90wvOUthBx6xCHGJ+3YSvmM= Subject key identifier: 2E:E2:61:A4:49:0E:0F:04:D2:F9:F1:3E:9C:08:1F:FC:85:5D:C0:B4 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 15C3 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:45:09 +0000 ROA not before: Mon 30 Jun 2025 17:07:39 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136558 IP address blocks: 103.92.208.0/24 maxlen: 24 103.101.53.0/24 maxlen: 24 103.101.54.0/23 maxlen: 23 103.101.54.0/24 maxlen: 24 103.101.55.0/24 maxlen: 24 2405:65c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5571 (0x15c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Jun 30 17:07:39 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a442e5-ad48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:7d:49:cd:41:f0:87:bf:f4:66:f0:6a:9b: 70:74:c1:b3:fd:aa:fe:b1:33:b0:c1:9c:ac:43:b1: 39:f0:c6:a8:f6:82:99:f0:6c:9c:82:d6:6b:91:16: bf:52:9b:98:1a:29:7f:f0:d4:39:6b:bf:6d:50:40: 3c:b1:68:e2:1f:9b:bc:3f:a6:9e:65:48:41:80:d4: 38:3c:b9:fa:07:d4:3e:c2:b3:bf:07:7d:7c:66:1a: 91:fa:44:03:86:15:ac:f4:98:3e:3d:10:a4:5f:42: 65:f3:ab:24:d3:56:41:40:65:e7:27:61:af:a9:0c: 34:c6:fe:df:ca:4c:93:83:af:e4:25:1f:11:e9:9e: d4:0f:fa:31:47:69:c9:e0:0e:f6:24:6c:09:83:3e: 9d:67:c4:15:d8:e5:70:64:b3:0c:78:63:08:c5:72: 33:08:a8:da:28:26:03:ad:d2:23:39:a5:bf:c2:46: 29:f2:f4:e2:13:c5:d3:dd:d9:2d:a9:1a:a7:e7:d7: 79:05:13:de:51:51:8d:de:93:c3:a3:cd:5f:1b:67: 62:71:d8:e5:1a:ac:f1:1c:bc:fa:1d:d9:19:3a:e8: 07:03:b5:68:36:9e:a1:ac:9f:42:d2:c4:54:26:c1: 93:48:a2:2f:3d:30:7a:6c:e9:39:68:3d:31:2b:ef: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E2:61:A4:49:0E:0F:04:D2:F9:F1:3E:9C:08:1F:FC:85:5D:C0:B4 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.92.208.0/24 103.101.53.0-103.101.55.255 IPv6: 2405:65c0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:01:82:0a:17:96:d8:2c:ce:38:a5:f3:42:a8:92:a0:95:60: 01:f7:24:44:a9:f6:cd:0f:b0:a8:ae:18:5e:52:21:1f:6b:99: 96:59:60:2a:30:3a:98:db:35:9c:3e:67:98:c4:46:b5:e2:79: 6d:53:e4:f0:b5:2b:96:29:38:09:ee:08:72:9b:97:75:a7:21: 35:ac:47:5d:b5:95:58:b0:d5:f3:32:c7:42:da:29:43:6b:8c: 26:c1:ca:96:68:2e:35:ab:17:16:b4:90:34:5a:d5:52:c0:8b: ff:af:ec:d4:d7:0e:c5:da:62:18:84:70:98:93:12:8a:42:92: 25:8d:44:53:4c:b5:ec:8f:b9:f4:e3:c6:f2:fc:b8:1d:c0:b7: a1:d4:59:ee:07:0e:43:22:2e:1f:34:53:36:d5:a2:09:de:c7: ae:64:36:2e:c1:4d:38:5d:05:73:16:39:f4:14:de:0b:75:e5: d3:09:5d:09:ba:51:bc:84:8a:e6:bc:12:ec:cf:01:5a:95:03: 95:9c:0b:96:0f:02:04:69:23:71:e8:9c:50:25:b3:4f:e2:90: 3f:04:94:9c:2a:57:f7:30:44:f7:41:62:8f:57:7a:b2:d2:4f: 48:ec:dd:2b:0f:08:70:df:b8:f8:b1:4a:48:ed:bc:96:86:04: 6e:06:81:e3 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICFcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjUwNjMwMTcwNzM5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDJlNS1hZDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzh9Sc1B8Ie/9GbwaptwdMGz/ar+sTOwwZysQ7E58Mao9oKZ8GycgtZrkRa/ UpuYGil/8NQ5a79tUEA8sWjiH5u8P6aeZUhBgNQ4PLn6B9Q+wrO/B318ZhqR+kQD hhWs9Jg+PRCkX0Jl86sk01ZBQGXnJ2GvqQw0xv7fykyTg6/kJR8R6Z7UD/oxR2nJ 4A72JGwJgz6dZ8QV2OVwZLMMeGMIxXIzCKjaKCYDrdIjOaW/wkYp8vTiE8XT3dkt qRqn59d5BRPeUVGN3pPDo81fG2dicdjlGqzxHLz6HdkZOugHA7VoNp6hrJ9C0sRU JsGTSKIvPTB6bOk5aD0xK+87SQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFC7iYaRJ Dg8E0vnxPpwIH/yFXcC0MB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI2OTUvQkI4N0FDNEE0N0Y4MTFFODgwRTRGNDEwQzRGOUFFMDIvNjIwOEJBRDQ0 OTk2MTFFOEI0MjFCRTVDQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa BAIAATAUAwQAZ1zQMAwDBABnZTUDBANnZTAwDQQCAAIwBwMFACQFZcAwDQYJKoZI hvcNAQELBQADggEBAG8BggoXltgszjil80KokqCVYAH3JESp9s0PsKiuGF5SIR9r mZZZYCowOpjbNZw+Z5jERrXieW1T5PC1K5YpOAnuCHKbl3WnITWsR121lViw1fMy x0LaKUNrjCbBypZoLjWrFxa0kDRa1VLAi/+v7NTXDsXaYhiEcJiTEopCkiWNRFNM teyPufTjxvL8uB3At6HUWe4HDkMiLh80UzbVognex65kNi7BTThdBXMWOfQU3gt1 5dMJXQm6UbyEiua8EuzPAVqVA5WcC5YPAgRpI3HonFAls0/ikD8ElJwqV/cwRPdB Yo9XerLST0js3SsPCHDfuPixSkjtvJaGBG4GgeM= -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:55 2026 by rpki-client