$ rpki-client -vvf rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/8A145232FCFC11F0A8CB3974376F56BC.roa File: 8A145232FCFC11F0A8CB3974376F56BC.roa (raw, json) Hash identifier: Xjz1s0MQRu7MQA5suGipgKZp8P0BW1VYHZCCTuVLDsk= Subject key identifier: 03:4C:75:A8:4B:91:66:61:03:68:F8:53:BE:0B:26:29:45:4A:45:E3 Certificate issuer: /CN=A91E427F/serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Certificate serial: 1A Authority key identifier: 95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/8A145232FCFC11F0A8CB3974376F56BC.roa Signing time: Sun 01 Mar 2026 05:42:27 +0000 ROA not before: Thu 29 Jan 2026 10:28:48 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 38868 IP address blocks: 103.133.192.0/24 maxlen: 24 103.133.193.0/24 maxlen: 24 103.133.194.0/24 maxlen: 24 103.133.195.0/24 maxlen: 24 119.40.112.0/20 maxlen: 20 119.40.112.0/22 maxlen: 22 119.40.116.0/22 maxlen: 22 119.40.120.0/22 maxlen: 22 119.40.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E427F, serialNumber=9560BCA9AB6C68BD909F304C5B22BA63639CF01C Validity Not Before: Jan 29 10:28:48 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a3d1c3-af95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:a2:c9:4e:b4:cc:b5:d7:a6:22:64:1a:91: dc:17:9c:51:4f:1e:b8:6c:f5:f6:ee:20:45:68:8f: f4:0d:b7:59:8c:41:c6:70:f1:bf:2c:7b:92:b9:13: e8:1a:b9:dc:f8:d1:89:99:5b:33:05:ea:dc:4f:2f: 16:32:55:22:7d:c1:8f:6f:e2:fb:a5:66:90:48:8b: 29:4f:29:66:f8:98:46:b8:43:93:3c:96:af:e7:9a: 14:fe:7a:a5:78:eb:2a:58:c0:50:fe:32:4a:19:fb: 28:90:e2:06:b9:8f:39:ab:81:12:47:7a:aa:24:11: 90:75:4f:57:83:e2:ae:2c:93:5e:98:04:71:ba:c0: c0:50:e3:46:aa:f0:08:67:a9:f7:4e:cf:b9:d8:64: 15:e6:f2:64:d6:2d:3d:0c:3b:f0:f8:e6:fd:4b:a3: 14:64:b2:71:18:e6:2f:72:26:e9:f6:58:ad:12:84: d0:fc:4c:95:d5:92:fe:e0:dd:e7:01:bd:f6:41:2a: 8d:38:b1:1a:5d:cd:e2:3d:52:a0:02:97:4f:ba:0a: d6:f4:31:e0:28:21:ea:b3:0d:10:7b:90:04:27:ce: e9:ce:af:28:24:5d:02:c7:f0:24:1b:94:a2:2a:c9: 28:1c:b4:54:e1:ae:dd:ce:66:e6:12:71:2f:be:d8: 96:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4C:75:A8:4B:91:66:61:03:68:F8:53:BE:0B:26:29:45:4A:45:E3 X509v3 Authority Key Identifier: keyid:95:60:BC:A9:AB:6C:68:BD:90:9F:30:4C:5B:22:BA:63:63:9C:F0:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lWC8qatsaL2QnzBMWyK6Y2Oc8Bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E427F/3BBDACE2FC0611F0AA1BCE05746F56BC/8A145232FCFC11F0A8CB3974376F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.133.192.0/22 119.40.112.0/20 Signature Algorithm: sha256WithRSAEncryption 54:48:40:1f:6e:41:9f:48:1c:f9:67:1f:0e:4d:06:f7:23:f7: f1:b5:e1:8f:ce:52:89:69:cb:c5:2b:e1:b3:38:4d:19:18:b7: 50:63:f3:57:4b:8f:80:54:71:08:fc:a2:d6:1e:c0:e0:86:95: 64:8b:28:70:06:c5:06:24:dd:8c:6d:66:89:75:33:7e:51:f1: 6e:84:ae:97:97:ad:59:52:c7:a8:38:dd:03:35:58:d8:90:8b: a9:1e:53:36:21:61:70:7b:0c:74:50:97:2a:23:02:71:11:66: 6b:77:c3:7b:e5:26:fc:22:a3:bb:b3:8d:bf:fd:13:1a:02:d7: 1e:53:c7:ef:6f:34:b5:1a:1d:8c:84:d3:b5:b0:27:32:b8:57: 44:97:6f:ee:db:12:33:95:72:bb:c9:3a:c8:d4:e8:72:20:71: 28:23:64:43:0c:0f:ba:e1:84:e4:91:56:ae:e7:ec:68:6a:0e: ce:b2:a9:5e:8a:ab:bb:2a:1a:41:bd:f8:bf:31:bd:cc:27:f6: cc:37:4a:a3:11:ef:8f:5e:d2:81:40:cf:01:56:ed:f1:30:5e: ed:55:56:51:27:f6:06:de:c3:80:f0:ae:b2:18:94:1b:40:03: c6:9b:1f:76:83:89:74:ae:a0:26:4c:be:d9:1c:ac:91:f6:0e: b0:99:64:12 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDI3RjExMC8GA1UEBRMoOTU2MEJDQTlBQjZDNjhCRDkwOUYzMDRDNUIyMkJBNjM2 MzlDRjAxQzAeFw0yNjAxMjkxMDI4NDhaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMWMzLWFmOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKDKLJTrTMtdemImQakdwXnFFPHrhs9fbuIEVoj/QNt1mMQcZw8b8se5K5E+ga udz40YmZWzMF6txPLxYyVSJ9wY9v4vulZpBIiylPKWb4mEa4Q5M8lq/nmhT+eqV4 6ypYwFD+MkoZ+yiQ4ga5jzmrgRJHeqokEZB1T1eD4q4sk16YBHG6wMBQ40aq8Ahn qfdOz7nYZBXm8mTWLT0MO/D45v1LoxRksnEY5i9yJun2WK0ShND8TJXVkv7g3ecB vfZBKo04sRpdzeI9UqACl0+6Ctb0MeAoIeqzDRB7kAQnzunOrygkXQLH8CQblKIq ySgctFThrt3OZuYScS++2JbTAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUA0x1qEuR ZmEDaPhTvgsmKUVKReMwHwYDVR0jBBgwFoAUlWC8qatsaL2QnzBMWyK6Y2Oc8Bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MjdGLzNCQkRBQ0UyRkMw NjExRjBBQTFCQ0UwNTc0NkY1NkJDL2xXQzhxYXRzYUwyUW56Qk1XeUs2WTJPYzhC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbFdDOHFhdHNhTDJRbnpCTVd5SzZZMk9jOEJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDI3Ri8zQkJEQUNFMkZDMDYxMUYwQUExQkNFMDU3NDZGNTZCQy84QTE0NTIzMkZD RkMxMUYwQThDQjM5NzQzNzZGNTZCQy5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAJnhcADBAR3KHAwDQYJKoZIhvcNAQELBQADggEBAFRIQB9uQZ9IHPln Hw5NBvcj9/G14Y/OUolpy8Ur4bM4TRkYt1Bj81dLj4BUcQj8otYewOCGlWSLKHAG xQYk3YxtZol1M35R8W6ErpeXrVlSx6g43QM1WNiQi6keUzYhYXB7DHRQlyojAnER Zmt3w3vlJvwio7uzjb/9ExoC1x5Tx+9vNLUaHYyE07WwJzK4V0SXb+7bEjOVcrvJ OsjU6HIgcSgjZEMMD7rhhOSRVq7n7GhqDs6yqV6Kq7sqGkG9+L8xvcwn9sw3SqMR 749e0oFAzwFW7fEwXu1VVlEn9gbew4DwrrIYlBtAA8abH3aDiXSuoCZMvtkcrJH2 DrCZZBI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:56 2026 by rpki-client