$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa File: BCD8D1DCD22B11EE9443A443C4F9AE02.roa (raw, json) Hash identifier: 4ijaOJ2+7U7oN4x3SqY0L3WCZ6WSLk5KycTCu9vay3M= Subject key identifier: CF:DB:93:D8:6B:BA:54:21:27:66:B6:1D:50:D6:6F:D1:53:22:4B:41 Certificate issuer: /CN=A91EAAF5/serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Certificate serial: 04CB Authority key identifier: 45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa Signing time: Sat 07 Feb 2026 00:19:57 +0000 ROA not before: Sat 07 Feb 2026 00:19:57 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 16509 IP address blocks: 103.179.36.0/24 maxlen: 24 2001:df0:45c4::/46 maxlen: 47 2001:df0:45c4::/47 maxlen: 48 2001:df0:45c6::/48 maxlen: 48 2001:df0:45c8::/45 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAAF5, serialNumber=4584AEA2394C46D6934E63ED6887D4726FDF7A13 Validity Not Before: Feb 7 00:19:57 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6986852d-c270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:d2:d3:4e:4c:09:00:a8:1e:9f:0a:19:b3: a2:26:ba:9a:69:ad:d8:2f:90:79:3b:09:65:2f:7f: 5e:58:d4:2a:a5:3d:50:f6:9b:03:f4:4e:6e:35:0f: c7:d0:33:18:f7:35:f9:24:9d:a1:51:d9:0f:3b:a6: 57:bc:14:b8:81:2e:23:62:51:15:9d:e2:0e:2a:45: b3:7f:d8:b8:65:b5:f7:34:92:cf:7e:4c:38:51:5e: c5:d2:ed:80:de:2a:3e:ba:6b:7f:bf:36:9a:79:cc: 4e:d5:5f:0c:31:f8:b5:0e:df:ee:d0:72:62:93:d4: 18:6e:0d:59:4c:4d:8b:ff:ef:8b:86:21:f7:34:dc: c0:8e:88:88:b9:b4:7a:a5:0c:b4:55:5a:3c:de:18: 69:1f:0a:d3:d0:fe:4b:48:3a:03:fc:f5:c1:24:f7: be:ea:50:07:23:6c:f9:58:08:2f:4b:a4:16:a6:e5: ef:71:b5:3d:d2:a6:42:92:29:a9:e4:d3:7b:b6:a2: 3e:ae:6a:fd:6c:60:07:ef:5b:2f:fa:cf:65:1f:e2: 31:cf:37:ae:9c:e9:f9:d0:8b:d5:09:75:32:33:22: f6:01:f6:76:28:2d:6a:21:ab:52:5a:4a:a7:1b:ed: ca:9e:62:3f:4e:ce:3f:78:3a:cd:94:d6:8a:51:75: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DB:93:D8:6B:BA:54:21:27:66:B6:1D:50:D6:6F:D1:53:22:4B:41 X509v3 Authority Key Identifier: keyid:45:84:AE:A2:39:4C:46:D6:93:4E:63:ED:68:87:D4:72:6F:DF:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/RYSuojlMRtaTTmPtaIfUcm_fehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYSuojlMRtaTTmPtaIfUcm_fehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAAF5/E99F523A6EC411ECAFD27331C4F9AE02/BCD8D1DCD22B11EE9443A443C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.179.36.0/24 IPv6: 2001:df0:45c4::-2001:df0:45cf:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3e:5e:32:87:1b:f5:f4:49:bf:54:3b:85:e7:51:f4:a7:80:1d: e0:8b:6d:51:98:a2:de:e3:51:ad:81:b0:b6:63:55:d0:57:6e: e6:2d:b0:2f:f0:db:e0:47:62:41:68:48:71:70:97:c5:b0:ed: 5c:3f:ee:ef:17:f3:cd:4d:c7:7d:69:1d:68:42:a0:65:c5:41: 60:1e:7f:f5:a1:f6:b6:f1:43:83:45:11:5f:e6:eb:af:e5:c6: 6d:11:2b:a1:3b:43:a6:2a:e9:58:19:bc:2a:7e:7e:e6:bb:31: 66:3a:aa:b1:04:56:7a:d3:96:2c:08:e5:74:19:17:1f:1c:40: 90:e0:ed:0a:ff:c9:85:88:6c:68:75:88:a5:10:ef:01:29:19: 2a:33:f6:a1:d2:de:06:1c:29:c3:68:39:9e:4a:b5:62:fe:75: d6:bc:67:c7:c9:81:2b:8d:27:52:59:ab:87:62:e8:11:7c:0a: 29:5d:cf:74:ef:cf:f3:be:02:0e:06:f3:1d:bb:e8:37:0c:4a: 44:01:6e:77:ac:55:1c:65:2c:8b:48:4e:68:9f:6e:d4:70:97: ab:cf:fd:1e:45:ac:4b:ab:31:6e:bf:ba:50:7a:84:88:4f:3d: a8:a9:93:43:31:22:5a:99:58:98:d3:e0:10:d9:9d:d6:e9:c1: e2:b6:10:a4 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RUFBRjUxMTAvBgNVBAUTKDQ1ODRBRUEyMzk0QzQ2RDY5MzRFNjNFRDY4ODdENDcy NkZERjdBMTMwHhcNMjYwMjA3MDAxOTU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTg2ODUyZC1jMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv83S005MCQCoHp8KGbOiJrqaaa3YL5B5OwllL39eWNQqpT1Q9psD9E5uNQ/H 0DMY9zX5JJ2hUdkPO6ZXvBS4gS4jYlEVneIOKkWzf9i4ZbX3NJLPfkw4UV7F0u2A 3io+umt/vzaaecxO1V8MMfi1Dt/u0HJik9QYbg1ZTE2L/++LhiH3NNzAjoiIubR6 pQy0VVo83hhpHwrT0P5LSDoD/PXBJPe+6lAHI2z5WAgvS6QWpuXvcbU90qZCkimp 5NN7tqI+rmr9bGAH71sv+s9lH+IxzzeunOn50IvVCXUyMyL2AfZ2KC1qIatSWkqn G+3KnmI/Ts4/eDrNlNaKUXUHnQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFM/bk9hr ulQhJ2a2HVDWb9FTIktBMB8GA1UdIwQYMBaAFEWErqI5TEbWk05j7WiH1HJv33oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUFGNS9FOTlGNTIzQTZF QzQxMUVDQUZEMjczMzFDNEY5QUUwMi9SWVN1b2psTVJ0YVRUbVB0YUlmVWNtX2Zl aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZU3VvamxNUnRhVFRtUHRhSWZVY21fZmVoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFBRjUvRTk5RjUyM0E2RUM0MTFFQ0FGRDI3MzMxQzRGOUFFMDIvQkNEOEQxRENE MjJCMTFFRTk0NDNBNDQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMAwEAgABMAYDBABnsyQwGgQCAAIwFDASAwcCIAEN8EXEAwcEIAEN8EXAMA0G CSqGSIb3DQEBCwUAA4IBAQA+XjKHG/X0Sb9UO4XnUfSngB3gi21RmKLe41GtgbC2 Y1XQV27mLbAv8NvgR2JBaEhxcJfFsO1cP+7vF/PNTcd9aR1oQqBlxUFgHn/1ofa2 8UODRRFf5uuv5cZtESuhO0OmKulYGbwqfn7muzFmOqqxBFZ605YsCOV0GRcfHECQ 4O0K/8mFiGxodYilEO8BKRkqM/ah0t4GHCnDaDmeSrVi/nXWvGfHyYErjSdSWauH YugRfAopXc9078/zvgIOBvMdu+g3DEpEAW53rFUcZSyLSE5on27UcJerz/0eRaxL qzFuv7pQeoSITz2oqZNDMSJamViY0+AQ2Z3W6cHithCk -----END CERTIFICATE-----Generated at Mon Mar 2 00:09:05 2026 by rpki-client