$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa File: F1E9B236718E11EEAF67DB48C4F9AE02.roa (raw, json) Hash identifier: CKnFh68MZ6vWZLs6HZZnzt3hxWfZ7SKFfyFAeNeD5aI= Subject key identifier: 71:2D:32:6E:74:C6:49:B7:4B:7A:64:0B:23:7E:2D:9F:4F:BC:7C:6A Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Certificate serial: 01C0 Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:23:51 +0000 ROA not before: Sat 15 Nov 2025 01:48:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151981 IP address blocks: 103.67.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B Validity Not Before: Nov 15 01:48:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a413b7-daa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:07:f3:ee:23:94:b6:b2:b8:74:b6:11:13: d2:3e:2f:65:e6:a2:85:37:2f:22:7d:0a:53:8c:88: ad:3d:21:3c:30:1c:50:61:50:21:0d:16:bc:dc:6f: 24:6d:b4:fe:a5:54:82:67:15:3d:9f:5d:88:ba:7b: e9:33:2a:6d:4f:7d:57:01:0a:09:3b:ef:c1:5a:9f: 02:96:cd:a2:35:fb:7a:6a:7e:24:c5:13:dd:99:04: f4:a7:c7:38:36:18:e6:84:3b:85:58:7c:84:b8:78: 8f:28:ae:4b:c4:b5:c6:a3:4a:8a:74:ee:0b:3d:e0: 35:bf:ff:a8:d9:7f:7b:3e:c0:8e:8d:2c:88:e4:31: 8b:bc:5b:57:75:fd:4f:7e:0c:76:97:92:70:35:66: ed:9f:6d:aa:3d:6f:07:c8:a1:c8:d2:aa:41:86:53: c5:de:ff:96:26:22:b1:5e:24:e4:e9:3f:12:4b:f4: 73:2e:f0:4f:c0:8f:09:f6:ea:01:1c:4c:31:ec:0a: be:dd:72:14:c5:11:9d:26:77:9f:2d:9a:b8:7e:bf: 25:8f:a7:08:8e:9d:8f:3a:7c:c3:4c:48:52:dc:28: d0:47:f4:82:2b:a1:4e:2f:46:21:40:af:c5:2b:fb: 3e:9a:2c:2e:9c:b2:87:b0:c0:ad:6a:8c:12:b2:09: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:32:6E:74:C6:49:B7:4B:7A:64:0B:23:7E:2D:9F:4F:BC:7C:6A X509v3 Authority Key Identifier: keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/F1E9B236718E11EEAF67DB48C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.67.66.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:85:79:4a:bc:20:e9:49:b6:50:ea:1a:85:60:31:0c:6a:81: 33:a5:3c:5b:00:14:c7:65:b7:ce:f8:de:8b:f3:d6:08:14:32: df:b1:80:46:7d:21:75:13:fd:19:35:f8:a4:8f:cd:9c:26:4d: 45:fb:36:60:7d:f9:f8:b1:d5:79:7b:71:e4:91:92:81:ce:bb: 42:73:a2:54:ec:13:1c:bf:0f:8b:87:3d:53:6e:55:d7:88:92: 9d:8b:d3:6d:6e:2e:08:31:44:bb:25:0e:41:0a:f8:89:c2:d3: b1:72:cc:48:8d:e1:7e:71:16:d8:8f:f4:cb:c0:99:0a:c0:a8: 3f:7d:e8:a1:39:5b:22:58:87:7f:e7:d5:fe:c5:ba:52:87:ae: 96:06:ff:42:31:db:d3:07:c2:a8:c1:93:85:22:ad:6a:84:d4: c9:39:cc:4c:00:1e:74:23:09:09:f3:01:39:9d:5c:bd:51:7c: bb:3f:1f:9c:fb:ae:c7:c6:5b:30:0c:b6:23:b5:ca:ff:8f:1c: fb:f7:39:3c:34:ad:c7:a0:a8:68:fb:4b:a5:85:1f:41:fb:1d: cb:b7:40:0f:b1:36:46:fd:16:e7:16:73:56:34:0e:a2:7a:17: bd:42:e8:52:61:2f:26:79:b7:33:ee:ab:34:26:fc:2a:ab:58: 24:a0:35:42 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMDcxMTAvBgNVBAUTKDczODREQzY2N0I0RDQ5QTVBQ0Q1MEE1OEI0ODkxNkEx NUFDMjYxNkIwHhcNMjUxMTE1MDE0ODU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTNiNy1kYWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaIH8+4jlLayuHS2ERPSPi9l5qKFNy8ifQpTjIitPSE8MBxQYVAhDRa83G8k bbT+pVSCZxU9n12IunvpMyptT31XAQoJO+/BWp8Cls2iNft6an4kxRPdmQT0p8c4 NhjmhDuFWHyEuHiPKK5LxLXGo0qKdO4LPeA1v/+o2X97PsCOjSyI5DGLvFtXdf1P fgx2l5JwNWbtn22qPW8HyKHI0qpBhlPF3v+WJiKxXiTk6T8SS/RzLvBPwI8J9uoB HEwx7Aq+3XIUxRGdJnefLZq4fr8lj6cIjp2POnzDTEhS3CjQR/SCK6FOL0YhQK/F K/s+miwunLKHsMCtaowSsgms/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHEtMm50 xkm3S3pkCyN+LZ9PvHxqMB8GA1UdIwQYMBaAFHOE3GZ7TUmlrNUKWLSJFqFawmFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQwNy81MDU1NjBCNjZF N0IxMUVFQjdFOTdENUZDNEY5QUUwMi9jNFRjWm50TlNhV3MxUXBZdElrV29WckNZ V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M0VGNabnROU2FXczFRcFl0SWtXb1ZyQ1lXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThEMDcvNTA1NTYwQjY2RTdCMTFFRUI3RTk3RDVGQzRGOUFFMDIvRjFFOUIyMzY3 MThFMTFFRUFGNjdEQjQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ0NCMA0GCSqGSIb3DQEBCwUAA4IBAQCLhXlKvCDpSbZQ6hqFYDEM aoEzpTxbABTHZbfO+N6L89YIFDLfsYBGfSF1E/0ZNfikj82cJk1F+zZgffn4sdV5 e3HkkZKBzrtCc6JU7BMcvw+Lhz1TblXXiJKdi9Ntbi4IMUS7JQ5BCviJwtOxcsxI jeF+cRbYj/TLwJkKwKg/feihOVsiWId/59X+xbpSh66WBv9CMdvTB8KowZOFIq1q hNTJOcxMAB50IwkJ8wE5nVy9UXy7Px+c+67HxlswDLYjtcr/jxz79zk8NK3HoKho +0ulhR9B+x3Lt0APsTZG/RbnFnNWNA6iehe9QuhSYS8mebcz7qs0Jvwqq1gkoDVC -----END CERTIFICATE-----Generated at Mon Mar 2 11:07:21 2026 by rpki-client