$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/C109FFF4FC0511E7BAFB3E48C4F9AE02.roa File: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (raw, json) Hash identifier: ixlZRVOoeUZJ75nnpCsBl4fkLgRW7J4+9KrLoGwUAJc= Subject key identifier: F0:1B:25:99:5A:19:C6:99:F1:F0:A6:B5:45:2F:D1:F0:5F:3E:A7:5B Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Certificate serial: 1758 Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/C109FFF4FC0511E7BAFB3E48C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:49:47 +0000 ROA not before: Thu 18 Dec 2025 17:14:16 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 64089 IP address blocks: 45.253.130.0/23 maxlen: 24 103.85.42.0/23 maxlen: 24 103.247.36.0/23 maxlen: 24 2402:5c40:1000::/40 maxlen: 40 2402:5c40:1100::/40 maxlen: 40 2402:5c40:1200::/40 maxlen: 40 2402:5c40:1300::/40 maxlen: 40 2402:5c40:1400::/40 maxlen: 40 2402:5c40:1500::/40 maxlen: 40 2402:5c40:5c00::/40 maxlen: 40 2402:5c40:5c40::/48 maxlen: 48 2402:5c40:5c41::/48 maxlen: 48 2402:5c40:5c42::/48 maxlen: 48 2402:5c40:5c43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5976 (0x1758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D Validity Not Before: Dec 18 17:14:16 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47c3b-9086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:95:ad:e9:ef:12:e8:27:6e:5b:53:8f:90: fa:f0:29:28:a4:5b:92:3a:ff:d8:73:5a:0e:68:08: c8:09:ec:ca:5e:be:70:f1:06:53:3f:6e:30:e4:ca: 48:af:bf:6e:f8:5a:6d:dd:4e:46:f2:49:ac:a6:64: 57:6d:d5:f6:8b:eb:ee:24:b6:d5:91:ff:84:2c:59: 93:0f:e3:c4:cf:41:54:e4:dd:6b:56:78:c8:d8:d4: 8c:74:1f:2c:30:57:5b:db:35:bb:9d:0e:df:97:5d: 07:de:e1:ed:f8:e7:56:c0:56:4e:4c:c9:25:77:31: 8b:2f:73:75:80:71:cd:75:c6:e1:19:c4:81:78:8f: 85:85:0a:b3:e9:03:d9:a2:b1:eb:a8:49:5e:f8:3f: 56:73:57:f1:7d:10:f4:ff:ab:2d:2c:24:ac:5a:39: 13:88:c8:d8:e8:25:77:87:71:a7:84:3f:f0:69:a0: 13:44:7e:a0:8e:92:f1:42:e7:19:42:97:f2:47:f3: a2:72:cb:ca:52:d9:f1:46:d5:0b:14:b2:20:f8:8e: b8:86:91:05:a1:4d:ae:7e:ff:23:a4:6c:7e:3a:85: 3b:29:cf:14:a0:3c:fa:0c:ad:d9:22:a2:d9:02:29: ba:7c:d4:91:8f:4a:9b:29:99:14:c2:b1:cb:2f:bc: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1B:25:99:5A:19:C6:99:F1:F0:A6:B5:45:2F:D1:F0:5F:3E:A7:5B X509v3 Authority Key Identifier: keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/C109FFF4FC0511E7BAFB3E48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 45.253.130.0/23 103.85.42.0/23 103.247.36.0/23 IPv6: 2402:5c40:1000::-2402:5c40:15ff:ffff:ffff:ffff:ffff:ffff 2402:5c40:5c00::/40 Signature Algorithm: sha256WithRSAEncryption 4c:86:a5:4e:73:4b:c0:c3:91:68:a0:05:15:c6:08:f5:41:2e: fd:ce:ef:b3:25:77:6d:5f:55:5c:ae:a9:92:f8:89:94:0c:a7: a0:58:da:ce:71:1b:74:7a:fa:a8:0d:6b:5c:4d:47:a4:7c:bf: 1e:64:2c:fd:d3:bc:37:74:55:52:b1:f7:c8:4d:de:ce:11:a5: ba:6c:99:80:f7:fc:1f:31:9e:79:ea:f8:b5:0c:c7:70:88:1d: bf:75:b0:52:6c:3a:42:0d:d7:43:20:19:83:fc:bf:44:c6:9b: d8:07:c1:6d:87:3c:54:26:55:98:f0:30:1c:24:62:8f:ca:5f: 0d:fc:e0:51:ff:85:40:54:c8:be:87:43:b5:41:c9:10:17:1d: 5f:79:59:1d:2e:15:34:3d:02:10:49:1a:be:e7:e4:42:5b:9d: ae:6d:f8:61:10:f3:a7:0f:9d:ef:0a:43:88:c2:5a:48:7b:d2: f0:22:f6:84:02:c3:30:4a:82:95:d8:74:9f:da:3f:38:52:99: 6e:b5:c9:63:fb:af:dd:a1:04:3e:f6:82:5a:ca:e7:5e:ab:fc: 09:bc:80:4b:3f:fb:0f:27:da:cd:05:7c:e2:67:be:5b:95:f6: 29:0a:69:9a:f4:4f:5b:c4:0c:d7:e5:1c:a8:64:76:0e:17:b7: b1:b0:88:60 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgICF1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4 MDY2QTU0NUQwHhcNMjUxMjE4MTcxNDE2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2MzYi05MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjqVrenvEugnbltTj5D68CkopFuSOv/Yc1oOaAjICezKXr5w8QZTP24w5MpI r79u+Fpt3U5G8kmspmRXbdX2i+vuJLbVkf+ELFmTD+PEz0FU5N1rVnjI2NSMdB8s MFdb2zW7nQ7fl10H3uHt+OdWwFZOTMkldzGLL3N1gHHNdcbhGcSBeI+FhQqz6QPZ orHrqEle+D9Wc1fxfRD0/6stLCSsWjkTiMjY6CV3h3GnhD/waaATRH6gjpLxQucZ QpfyR/OicsvKUtnxRtULFLIg+I64hpEFoU2ufv8jpGx+OoU7Kc8UoDz6DK3ZIqLZ Aim6fNSRj0qbKZkUwrHLL7wSxQIDAQABo4ICjjCCAoowHQYDVR0OBBYEFPAbJZla GcaZ8fCmtUUv0fBfPqdbMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTgxNjEvNjcwNjEyQjBGQTY0MTFFN0E0QzI2OTNFQzRGOUFFMDIvQzEwOUZGRjRG QzA1MTFFN0JBRkIzRTQ4QzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAY BAIAATASAwQBLf2CAwQBZ1UqAwQBZ/ckMCAEAgACMBowEAMGBCQCXEAQAwYBJAJc QBQDBgAkAlxAXDANBgkqhkiG9w0BAQsFAAOCAQEATIalTnNLwMORaKAFFcYI9UEu /c7vsyV3bV9VXK6pkviJlAynoFjaznEbdHr6qA1rXE1HpHy/HmQs/dO8N3RVUrH3 yE3ezhGlumyZgPf8HzGeeer4tQzHcIgdv3WwUmw6Qg3XQyAZg/y/RMab2AfBbYc8 VCZVmPAwHCRij8pfDfzgUf+FQFTIvodDtUHJEBcdX3lZHS4VND0CEEkavufkQlud rm34YRDzpw+d7wpDiMJaSHvS8CL2hALDMEqCldh0n9o/OFKZbrXJY/uv3aEEPvaC WsrnXqv8CbyASz/7DyfazQV84me+W5X2KQppmvRPW8QM1+UcqGR2Dhe3sbCIYA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:04:50 2026 by rpki-client