$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/16F7FB3E8FAF11EA96738C46C4F9AE02.roa File: 16F7FB3E8FAF11EA96738C46C4F9AE02.roa (raw, json) Hash identifier: ouYBwpfCXuAbXe6I0vrvzKSbU872/FUx3W+kR5PDwWQ= Subject key identifier: C4:04:DA:38:F9:47:D6:0F:C8:CD:15:A4:AB:32:CD:34:CE:1F:C4:72 Certificate issuer: /CN=A91E8EAD/serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Certificate serial: 0A15 Authority key identifier: F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/16F7FB3E8FAF11EA96738C46C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:48:41 +0000 ROA not before: Sat 31 Jan 2026 20:16:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136030 IP address blocks: 103.127.36.0/22 maxlen: 22 103.127.36.0/24 maxlen: 24 103.127.37.0/24 maxlen: 24 103.127.38.0/24 maxlen: 24 103.127.39.0/24 maxlen: 24 2404:1940::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2581 (0xa15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8EAD, serialNumber=F376090DD79CF6A259AE2A17020372E9E6160BB6 Validity Not Before: Jan 31 20:16:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a451c9-de9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a5:6d:85:79:40:db:ff:d3:bd:86:62:93:c7: ea:3c:67:df:eb:32:b7:f8:f5:0c:74:fa:e1:4b:49: a7:de:01:76:ce:cd:74:01:0f:74:b3:06:8a:b3:52: 6f:03:bb:6c:cd:a3:d0:ee:27:5f:91:a5:f2:d4:a1: f1:23:95:5b:20:7d:93:20:a1:f4:fb:5f:cb:48:51: 2f:a2:db:d8:ee:2f:29:4d:57:61:39:bb:4c:82:ab: 4f:c8:27:b8:c1:7b:b8:b2:d8:0c:f2:0b:d0:42:3e: df:e6:68:ee:b6:94:fc:03:a3:c8:7a:96:b9:b9:33: b9:a1:7a:c1:eb:cf:bc:56:47:2b:b0:48:c5:69:fe: b1:82:0f:0a:84:e9:db:d9:55:bb:3c:e9:b9:5f:43: 53:a1:eb:bb:7b:d4:df:d4:c5:28:39:13:72:c2:8a: c1:37:28:12:d7:47:cc:b2:13:e6:bd:da:2c:d9:b5: 29:ec:51:a2:07:b6:98:2f:0e:72:3e:06:4d:70:ff: 6c:94:48:15:6b:0b:5f:50:a3:04:a2:ab:3d:e0:e9: 07:34:85:94:2a:d4:a9:4c:67:35:f0:6a:4c:35:60: d1:f1:54:e5:9c:c9:59:c0:22:ae:c1:08:f2:47:50: f5:ef:e6:25:a6:dc:5e:24:9f:b3:f6:b7:a2:94:5a: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:04:DA:38:F9:47:D6:0F:C8:CD:15:A4:AB:32:CD:34:CE:1F:C4:72 X509v3 Authority Key Identifier: keyid:F3:76:09:0D:D7:9C:F6:A2:59:AE:2A:17:02:03:72:E9:E6:16:0B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/83YJDdec9qJZrioXAgNy6eYWC7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83YJDdec9qJZrioXAgNy6eYWC7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8EAD/3C24DAD28FAD11EA92D1F642C4F9AE02/16F7FB3E8FAF11EA96738C46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.127.36.0/22 IPv6: 2404:1940::/32 Signature Algorithm: sha256WithRSAEncryption a4:83:2c:f3:3f:61:e3:6e:8b:44:a7:bf:37:d2:60:f1:ec:55: fe:87:ed:e9:94:22:b9:1c:99:c6:69:13:aa:c3:34:07:b1:2d: 08:d8:eb:51:82:cc:58:6b:84:11:75:0b:5f:4d:af:0e:fc:fe: 55:77:48:4b:8b:ff:2e:23:79:54:e3:ce:c9:7e:aa:54:fc:ee: a5:7f:03:28:59:0d:78:c9:3b:b5:bc:06:75:ea:55:bd:87:58: 92:c0:36:18:71:6f:46:45:02:32:4b:69:a9:60:3b:64:68:71: 14:34:17:ab:f7:20:52:bc:93:cd:b5:3c:6d:43:84:7f:08:fe: a1:48:87:a6:d1:70:b1:5c:79:0e:4f:e3:61:38:f2:c5:5f:38: 98:fc:03:32:49:2e:89:bd:e2:d6:54:e5:ec:53:c3:9a:f6:bf: b3:1c:fc:d6:56:e6:a3:4e:b0:ce:70:53:23:2a:07:16:70:3a: 8e:e3:1c:14:03:cd:27:2b:16:d1:ed:9d:c7:98:5f:b4:09:60: 02:d3:d1:84:d9:0b:cc:e2:7a:94:a3:8e:4f:b2:a2:0a:3f:fd: 10:44:14:ab:7a:e1:13:2e:aa:39:6c:26:3a:65:86:8b:f9:39: 6c:1d:53:da:13:4b:06:a5:dc:bf:32:df:53:a0:b1:38:8b:0f: 37:f9:ac:ef -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICChUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThFQUQxMTAvBgNVBAUTKEYzNzYwOTBERDc5Q0Y2QTI1OUFFMkExNzAyMDM3MkU5 RTYxNjBCQjYwHhcNMjYwMTMxMjAxNjUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTFjOS1kZTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKVthXlA2//TvYZik8fqPGff6zK3+PUMdPrhS0mn3gF2zs10AQ90swaKs1Jv A7tszaPQ7idfkaXy1KHxI5VbIH2TIKH0+1/LSFEvotvY7i8pTVdhObtMgqtPyCe4 wXu4stgM8gvQQj7f5mjutpT8A6PIepa5uTO5oXrB68+8VkcrsEjFaf6xgg8KhOnb 2VW7POm5X0NToeu7e9Tf1MUoORNyworBNygS10fMshPmvdos2bUp7FGiB7aYLw5y PgZNcP9slEgVawtfUKMEoqs94OkHNIWUKtSpTGc18GpMNWDR8VTlnMlZwCKuwQjy R1D17+YlptxeJJ+z9reilFrD8wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMQE2jj5 R9YPyM0VpKsyzTTOH8RyMB8GA1UdIwQYMBaAFPN2CQ3XnPaiWa4qFwIDcunmFgu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEVBRC8zQzI0REFEMjhG QUQxMUVBOTJEMUY2NDJDNEY5QUUwMi84M1lKRGRlYzlxSlpyaW9YQWdOeTZlWVdD N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgzWUpEZGVjOXFKWnJpb1hBZ055NmVZV0M3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThFQUQvM0MyNERBRDI4RkFEMTFFQTkyRDFGNjQyQzRGOUFFMDIvMTZGN0ZCM0U4 RkFGMTFFQTk2NzM4QzQ2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ38kMA0EAgACMAcDBQAkBBlAMA0GCSqGSIb3DQEBCwUAA4IBAQCk gyzzP2HjbotEp7830mDx7FX+h+3plCK5HJnGaROqwzQHsS0I2OtRgsxYa4QRdQtf Ta8O/P5Vd0hLi/8uI3lU487JfqpU/O6lfwMoWQ14yTu1vAZ16lW9h1iSwDYYcW9G RQIyS2mpYDtkaHEUNBer9yBSvJPNtTxtQ4R/CP6hSIem0XCxXHkOT+NhOPLFXziY /AMySS6JveLWVOXsU8Oa9r+zHPzWVuajTrDOcFMjKgcWcDqO4xwUA80nKxbR7Z3H mF+0CWAC09GE2QvM4nqUo45PsqIKP/0QRBSreuETLqo5bCY6ZYaL+TlsHVPaE0sG pdy/Mt9ToLE4iw83+azv -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:23 2026 by rpki-client