$ rpki-client -vvf rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/D421D958881611E78B9B0850C4F9AE02.roa File: D421D958881611E78B9B0850C4F9AE02.roa (raw, json) Hash identifier: 8Nuoull25KblVQ1PNDvmoNwHbwhuQ64gaT6vwAXGPpc= Subject key identifier: 02:F6:66:FA:85:A6:EC:4A:FB:78:CA:52:C6:AE:79:FF:A7:91:34:7A Certificate issuer: /CN=A91E892A/serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Certificate serial: 198A Authority key identifier: 23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/D421D958881611E78B9B0850C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:42:48 +0000 ROA not before: Thu 04 Sep 2025 16:55:21 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136926 IP address blocks: 103.99.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6538 (0x198a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E892A, serialNumber=23B96037AB8AD237E6326F7ED0F81E318E8A14AB Validity Not Before: Sep 4 16:55:21 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44258-f653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:5a:4c:93:b6:33:0f:b7:45:1e:4e:85:1c: 4d:4f:6f:ff:ff:3b:e9:58:b5:e5:c3:79:85:c6:54: d5:b6:79:2e:5a:97:47:e8:77:20:ba:1b:ac:e8:aa: c5:c0:cd:78:46:96:7c:86:c0:b1:6f:ad:aa:05:69: 9c:a4:da:a3:d5:5b:55:ae:c5:af:23:7c:f7:e5:cd: f4:9c:3a:6a:fc:40:28:81:24:2d:41:bf:7c:8b:3f: c1:40:84:17:c7:c4:63:4c:5d:0f:89:42:b6:cd:98: 6a:fa:b6:3a:02:1b:50:db:ec:70:22:ae:65:bc:fe: 3e:21:48:a6:be:c7:94:e6:84:12:b3:f9:3d:ae:2e: 57:a2:7d:df:29:43:b2:1a:a9:84:c5:9a:af:55:16: b3:5f:97:04:d1:af:3e:59:94:75:58:32:23:90:0d: f6:94:52:f2:80:1a:da:f4:44:9c:0d:0e:c7:45:0c: 63:57:a1:c7:90:3c:3d:fe:d1:82:73:cb:91:6b:94: a0:43:6c:12:4a:ec:18:1a:ee:82:09:39:25:81:c1: c0:8e:d8:da:53:ce:e9:20:53:5a:4e:19:a0:4c:6e: d2:50:2d:6b:1c:55:45:be:7d:27:43:d3:67:13:4f: e7:e8:cd:c3:ca:2d:f3:1d:45:8f:26:9b:bc:9a:45: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F6:66:FA:85:A6:EC:4A:FB:78:CA:52:C6:AE:79:FF:A7:91:34:7A X509v3 Authority Key Identifier: keyid:23:B9:60:37:AB:8A:D2:37:E6:32:6F:7E:D0:F8:1E:31:8E:8A:14:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/I7lgN6uK0jfmMm9-0PgeMY6KFKs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7lgN6uK0jfmMm9-0PgeMY6KFKs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E892A/F810E9A4881511E78BF7D14EC4F9AE02/D421D958881611E78B9B0850C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.99.42.0/24 Signature Algorithm: sha256WithRSAEncryption 00:fa:60:2c:12:da:85:f2:dc:a7:e6:41:cd:82:c6:90:c1:05: 5b:01:a6:18:9c:8c:cc:62:92:05:57:3a:bc:ac:3f:c2:84:fc: 62:1a:f7:95:b6:4f:d6:51:35:1d:5d:e8:8a:8b:af:4e:63:90: 4a:b0:c2:5c:e5:01:20:27:e0:f8:cf:51:4d:fa:53:ac:f8:52: 84:31:88:8a:3a:c3:e6:01:5a:01:b0:43:08:72:fe:ae:7e:32: 9c:5b:77:d1:cc:3a:8e:63:97:bb:03:01:c1:e9:d9:59:7b:18: a7:ab:87:8c:d6:46:49:9a:1f:e4:c4:ee:96:f3:0f:e7:55:36: 40:ec:4e:11:c8:2a:a8:35:61:b7:61:83:06:a9:c8:13:da:9e: 26:b8:0a:1e:d2:f7:65:9b:4f:f7:a8:08:f4:d4:fb:0b:d9:68: d0:ed:e6:1c:62:e8:54:fc:2e:e2:04:20:0b:a8:4a:5c:b2:92: 99:d8:94:1a:10:1f:71:32:10:17:97:d1:d8:63:f2:1b:2f:f7: cd:93:16:ed:92:ca:e2:68:8b:c0:51:7b:c8:a6:12:44:b3:99: 4d:fc:26:cf:82:8a:80:72:e6:55:b6:5f:c5:cc:ab:0f:7d:f8: 57:f3:fe:6c:fe:33:e9:0d:fe:e7:ec:cf:a1:68:c2:48:8c:57: d3:3f:7a:26 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5MkExMTAvBgNVBAUTKDIzQjk2MDM3QUI4QUQyMzdFNjMyNkY3RUQwRjgxRTMx OEU4QTE0QUIwHhcNMjUwOTA0MTY1NTIxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDI1OC1mNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQlaTJO2Mw+3RR5OhRxNT2///zvpWLXlw3mFxlTVtnkuWpdH6Hcguhus6KrF wM14RpZ8hsCxb62qBWmcpNqj1VtVrsWvI3z35c30nDpq/EAogSQtQb98iz/BQIQX x8RjTF0PiUK2zZhq+rY6AhtQ2+xwIq5lvP4+IUimvseU5oQSs/k9ri5Xon3fKUOy GqmExZqvVRazX5cE0a8+WZR1WDIjkA32lFLygBra9EScDQ7HRQxjV6HHkDw9/tGC c8uRa5SgQ2wSSuwYGu6CCTklgcHAjtjaU87pIFNaThmgTG7SUC1rHFVFvn0nQ9Nn E0/n6M3Dyi3zHUWPJpu8mkVwJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAL2ZvqF puxK+3jKUsauef+nkTR6MB8GA1UdIwQYMBaAFCO5YDeritI35jJvftD4HjGOihSr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkyQS9GODEwRTlBNDg4 MTUxMUU3OEJGN0QxNEVDNEY5QUUwMi9JN2xnTjZ1SzBqZm1NbTktMFBnZU1ZNktG S3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3bGdONnVLMGpmbU1tOS0wUGdlTVk2S0ZLcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg5MkEvRjgxMEU5QTQ4ODE1MTFFNzhCRjdEMTRFQzRGOUFFMDIvRDQyMUQ5NTg4 ODE2MTFFNzhCOUIwODUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2MqMA0GCSqGSIb3DQEBCwUAA4IBAQAA+mAsEtqF8tyn5kHNgsaQ wQVbAaYYnIzMYpIFVzq8rD/ChPxiGveVtk/WUTUdXeiKi69OY5BKsMJc5QEgJ+D4 z1FN+lOs+FKEMYiKOsPmAVoBsEMIcv6ufjKcW3fRzDqOY5e7AwHB6dlZexinq4eM 1kZJmh/kxO6W8w/nVTZA7E4RyCqoNWG3YYMGqcgT2p4muAoe0vdlm0/3qAj01PsL 2WjQ7eYcYuhU/C7iBCALqEpcspKZ2JQaEB9xMhAXl9HYY/IbL/fNkxbtksriaIvA UXvIphJEs5lN/CbPgoqAcuZVtl/FzKsPffhX8/5s/jPpDf7n7M+haMJIjFfTP3om -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:17 2026 by rpki-client