$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/16EA264C3FC611E9A0E68A30C4F9AE02.roa File: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (raw, json) Hash identifier: I3JDh6StMg4zJOMs9mkcVFkIKkoCAlh87CB+OtMgiuI= Subject key identifier: F2:6E:26:E9:37:80:CA:F6:FA:AA:A6:15:50:95:B1:E5:A3:AA:C2:59 Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 10D4 Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/16EA264C3FC611E9A0E68A30C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:33:16 +0000 ROA not before: Fri 04 Jul 2025 17:56:41 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 45259 IP address blocks: 103.139.109.0/24 maxlen: 24 202.59.230.0/24 maxlen: 24 202.90.36.0/24 maxlen: 24 2001:df1:ba00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4308 (0x10d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Jul 4 17:56:41 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a45c3c-1ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:14:4c:76:57:49:1a:c4:ce:f5:81:35:71: 1d:7b:20:ed:e1:fa:51:cf:a5:8c:7a:c7:da:3f:47: 4d:64:88:25:76:0a:6f:54:26:03:68:b4:a3:b8:ae: b2:33:63:d4:a5:91:d3:f4:db:44:84:cb:b7:f2:53: 76:04:11:aa:56:9e:d2:03:b5:94:74:42:74:93:33: e4:a0:26:95:30:28:05:d5:bd:b8:bf:a4:cb:fd:f0: 89:f8:7e:2c:ec:95:4c:1c:7d:cc:3f:66:bb:0b:bc: 53:75:1b:6d:4f:02:2d:d3:97:28:f6:13:71:f4:03: af:b0:e9:93:8d:40:46:8c:f0:7e:7f:3a:c2:d4:5f: 44:6e:51:31:0d:65:d3:6f:fb:c8:56:05:87:38:d6: f0:1d:5c:06:ea:16:97:e1:7a:ff:93:2a:35:6c:53: d1:4a:a2:c1:3d:d0:8e:b8:c0:22:77:9d:5a:50:a8: 09:9a:14:63:5a:04:31:5e:6a:ad:36:91:f6:a5:f3: 04:f2:bb:16:14:63:41:5e:54:b2:0d:cf:40:1c:5b: 10:17:38:49:77:c4:59:e7:9f:d9:eb:84:47:05:c8: 4c:c5:95:db:a8:eb:5d:69:53:a9:8e:52:17:62:a5: f9:3d:ff:fe:d6:14:ad:17:d3:1d:9e:0b:83:67:90: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:26:E9:37:80:CA:F6:FA:AA:A6:15:50:95:B1:E5:A3:AA:C2:59 X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/16EA264C3FC611E9A0E68A30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.109.0/24 202.59.230.0/24 202.90.36.0/24 IPv6: 2001:df1:ba00::/48 Signature Algorithm: sha256WithRSAEncryption 71:67:f7:fb:c0:d2:21:6b:76:38:4d:1a:24:b2:90:f0:06:20: 83:76:f1:88:94:b9:af:4b:ca:7b:b8:39:24:33:5c:c8:96:96: 35:ce:21:4d:d8:0c:c9:79:17:1d:fa:2f:be:26:67:59:f8:69: 66:72:55:89:04:30:f3:d9:e5:49:5f:03:93:74:f2:da:e6:86: b8:7b:e8:ea:bf:77:62:f8:3b:76:84:6b:c4:2b:84:3a:80:30: d2:7c:15:74:eb:71:d7:e5:4e:1d:7c:3e:83:bd:c2:5b:e9:36: 9b:16:ea:62:c7:b5:37:bc:70:f3:3f:ca:31:b0:9c:cd:fe:db: 82:2d:c4:f2:19:d6:09:7e:c9:58:09:d6:3e:cd:b3:3f:6e:4c: 60:30:f9:a1:b8:b7:d6:c4:98:d4:d7:11:29:85:ab:13:0b:dc: c6:ff:92:d0:df:13:c2:d3:b1:17:e4:c9:ee:4a:5f:c3:6d:f7: 7c:7e:4c:32:52:ee:4c:b3:de:a5:e8:5d:2c:3c:cd:01:db:f3: 97:2a:3b:cd:cd:ae:c3:0c:e7:27:4f:67:5d:8a:b3:f3:e4:4f: 25:bb:57:5b:aa:a0:77:dd:9b:40:32:a2:1b:e6:7b:21:bb:c2: 36:72:2a:05:44:90:83:fe:6e:86:7b:f7:c9:c4:80:40:f3:87: 68:f0:83:d1 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICENQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUwNzA0MTc1NjQxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWMzYy0xYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKMUTHZXSRrEzvWBNXEdeyDt4fpRz6WMesfaP0dNZIgldgpvVCYDaLSjuK6y M2PUpZHT9NtEhMu38lN2BBGqVp7SA7WUdEJ0kzPkoCaVMCgF1b24v6TL/fCJ+H4s 7JVMHH3MP2a7C7xTdRttTwIt05co9hNx9AOvsOmTjUBGjPB+fzrC1F9EblExDWXT b/vIVgWHONbwHVwG6haX4Xr/kyo1bFPRSqLBPdCOuMAid51aUKgJmhRjWgQxXmqt NpH2pfME8rsWFGNBXlSyDc9AHFsQFzhJd8RZ55/Z64RHBchMxZXbqOtdaVOpjlIX YqX5Pf/+1hStF9MdnguDZ5D91QIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFPJuJuk3 gMr2+qqmFVCVseWjqsJZMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk3MjEvOEFFQzJBQzQzRkM0MTFFOTkyQTNFNjJEQzRGOUFFMDIvMTZFQTI2NEMz RkM2MTFFOUEwRTY4QTMwQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAY BAIAATASAwQAZ4ttAwQAyjvmAwQAylokMA8EAgACMAkDBwAgAQ3xugAwDQYJKoZI hvcNAQELBQADggEBAHFn9/vA0iFrdjhNGiSykPAGIIN28YiUua9Lynu4OSQzXMiW ljXOIU3YDMl5Fx36L74mZ1n4aWZyVYkEMPPZ5UlfA5N08trmhrh76Oq/d2L4O3aE a8QrhDqAMNJ8FXTrcdflTh18PoO9wlvpNpsW6mLHtTe8cPM/yjGwnM3+24ItxPIZ 1gl+yVgJ1j7Nsz9uTGAw+aG4t9bEmNTXESmFqxML3Mb/ktDfE8LTsRfkye5KX8Nt 93x+TDJS7kyz3qXoXSw8zQHb85cqO83NrsMM5ydPZ12Ks/PkTyW7V1uqoHfdm0Ay ohvmeyG7wjZyKgVEkIP+boZ798nEgEDzh2jwg9E= -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:40 2026 by rpki-client