$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa File: C9989D9EF52011EF88416555C4F9AE02.roa (raw, json) Hash identifier: OehBxOplI/UOZ/b2d9DDqACV634wRHZsLO+l8ckQwQQ= Subject key identifier: 60:50:8D:60:36:DC:FF:F5:27:09:6B:EF:D0:77:EF:C5:8E:93:88:27 Certificate issuer: /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Certificate serial: 0CBD Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:55:08 +0000 ROA not before: Wed 04 Feb 2026 18:15:36 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136022 IP address blocks: 103.134.40.0/24 maxlen: 24 103.134.41.0/24 maxlen: 24 2404:5cc0::/32 maxlen: 32 2404:5cc0::/48 maxlen: 48 2404:5cc0:1::/48 maxlen: 48 2404:5cc0:2::/48 maxlen: 48 2404:5cc0:3::/48 maxlen: 48 2404:5cc0:4::/48 maxlen: 48 2404:5cc0:5::/48 maxlen: 48 2404:5cc0:6::/48 maxlen: 48 2404:5cc0:7::/48 maxlen: 48 2404:5cc0:8::/48 maxlen: 48 2404:5cc0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA2CC, serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634 Validity Not Before: Feb 4 18:15:36 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a47d7c-9d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:22:93:d6:25:55:ba:3f:02:02:13:2f:8a:3b: 82:fb:c8:23:45:64:b8:67:b4:f0:68:f0:f7:df:a7: 31:51:b5:8e:09:06:71:86:86:46:8f:22:5a:28:86: a1:7b:8b:37:46:57:63:af:6d:52:8c:57:56:71:49: 56:69:04:7c:73:bc:0c:5c:7b:22:20:a9:43:81:44: 6a:3c:eb:bc:cd:a4:35:37:cf:2c:d2:33:9a:6c:d0: 24:bd:1a:ba:66:9f:0c:e1:ea:df:8b:03:a3:1f:f1: 89:86:ef:2e:49:86:52:0e:d5:70:68:0d:ce:54:b3: eb:ca:69:f8:5d:8d:a1:26:22:34:fe:ce:1f:cb:dd: af:d1:d2:e4:df:c1:da:0e:bd:d1:ee:5f:e5:77:3b: c3:84:26:ca:85:1e:4c:f0:84:65:68:a9:d3:a7:b5: 99:d9:2f:5f:cb:95:bc:e7:5e:ed:12:45:90:9d:5a: 77:a2:0c:a6:fd:ad:5f:17:31:23:ae:05:74:a9:a9: ff:43:64:74:a4:c9:ba:7d:59:66:2e:4f:45:eb:b7: 97:eb:54:02:19:4d:9f:9e:df:fb:74:57:2e:2f:4b: f1:09:c1:2b:11:46:52:e8:fe:84:22:f6:e5:69:29: b2:fd:d4:c9:8e:fe:b4:a6:f8:01:23:26:dd:b5:e0: 5a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:50:8D:60:36:DC:FF:F5:27:09:6B:EF:D0:77:EF:C5:8E:93:88:27 X509v3 Authority Key Identifier: keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/C9989D9EF52011EF88416555C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.40.0/23 IPv6: 2404:5cc0::/32 Signature Algorithm: sha256WithRSAEncryption 3c:9d:b2:67:dc:81:97:ef:60:eb:ce:00:52:82:75:51:1d:d6: 38:b6:8d:4e:d5:fe:79:49:a0:aa:6b:cf:9e:35:0d:e6:95:85: dd:20:2e:cc:d6:4c:13:b0:15:af:47:db:cb:d4:a9:f4:62:2d: 96:c9:33:c8:a2:04:56:98:c3:52:23:ff:be:4a:54:30:5f:16: fc:a6:8f:ad:53:f2:2a:a5:e7:da:a6:b9:7f:54:38:4f:ac:e7: b1:35:ab:9d:c4:a2:4b:e9:5d:f1:a2:b2:34:19:1c:8d:3f:3c: 7b:47:bd:1c:f7:ca:c4:9a:c5:c8:1e:2d:69:af:00:49:38:2b: db:2d:b7:20:d9:d4:65:77:37:7b:ae:54:97:d3:10:d9:d0:0a: 0b:40:cd:80:eb:bf:e6:43:a0:82:8c:4d:a3:70:6f:7b:15:3f: b8:f5:ce:8e:76:4a:b7:3e:da:c9:41:69:ff:db:97:79:c0:5c: 86:69:ea:ba:ed:3b:22:13:25:60:ad:c4:01:66:8a:ad:c8:e0: 69:6a:b1:5d:f0:55:df:f0:ce:08:7d:c4:85:2e:fa:5a:2a:34: 1a:9b:43:fb:e4:a3:1d:8f:65:a4:16:47:64:ed:9e:d0:43:f6: 9a:4d:20:89:59:c8:4b:00:2c:a4:1d:47:48:23:a3:a0:bb:35: 7b:2f:1a:2f -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUEyQ0MxMTAvBgNVBAUTKDkwQTk4NDUwQjlEQTkzODExOEEyRDVBRDUzNEQ4ODI4 RjRCOTQ2MzQwHhcNMjYwMjA0MTgxNTM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2Q3Yy05ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSKT1iVVuj8CAhMvijuC+8gjRWS4Z7TwaPD336cxUbWOCQZxhoZGjyJaKIah e4s3Rldjr21SjFdWcUlWaQR8c7wMXHsiIKlDgURqPOu8zaQ1N88s0jOabNAkvRq6 Zp8M4erfiwOjH/GJhu8uSYZSDtVwaA3OVLPrymn4XY2hJiI0/s4fy92v0dLk38Ha Dr3R7l/ldzvDhCbKhR5M8IRlaKnTp7WZ2S9fy5W8517tEkWQnVp3ogym/a1fFzEj rgV0qan/Q2R0pMm6fVlmLk9F67eX61QCGU2fnt/7dFcuL0vxCcErEUZS6P6EIvbl aSmy/dTJjv60pvgBIybdteBa9wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFGBQjWA2 3P/1Jwlr79B378WOk4gnMB8GA1UdIwQYMBaAFJCphFC52pOBGKLVrVNNiCj0uUY0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTJDQy9GMjZFMDZDRTEx RjkxMUVBOUNCODhDMzVDNEY5QUUwMi9rS21FVUxuYWs0RVlvdFd0VTAySUtQUzVS alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tLbUVVTG5hazRFWW90V3RVMDJJS1BTNVJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUEyQ0MvRjI2RTA2Q0UxMUY5MTFFQTlDQjg4QzM1QzRGOUFFMDIvQzk5ODlEOUVG NTIwMTFFRjg4NDE2NTU1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ4YoMA0EAgACMAcDBQAkBFzAMA0GCSqGSIb3DQEBCwUAA4IBAQA8 nbJn3IGX72DrzgBSgnVRHdY4to1O1f55SaCqa8+eNQ3mlYXdIC7M1kwTsBWvR9vL 1Kn0Yi2WyTPIogRWmMNSI/++SlQwXxb8po+tU/Iqpefaprl/VDhPrOexNaudxKJL 6V3xorI0GRyNPzx7R70c98rEmsXIHi1prwBJOCvbLbcg2dRldzd7rlSX0xDZ0AoL QM2A67/mQ6CCjE2jcG97FT+49c6Odkq3PtrJQWn/25d5wFyGaeq67TsiEyVgrcQB ZoqtyOBparFd8FXf8M4IfcSFLvpaKjQam0P75KMdj2WkFkdk7Z7QQ/aaTSCJWchL ACykHUdII6OguzV7Lxov -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:47 2026 by rpki-client