$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa File: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (raw, json) Hash identifier: uIB/iGD9NSR9Z5Dx/6iTyvp39u2y6pd5/0tMf3x9ZRE= Subject key identifier: F8:F7:FA:49:3A:77:A2:B2:AB:FA:CB:C0:E8:76:7F:0E:BA:DA:81:C5 Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Certificate serial: 0768 Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:47:31 +0000 ROA not before: Fri 17 Oct 2025 10:10:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 131183 IP address blocks: 103.136.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1896 (0x768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C Validity Not Before: Oct 17 10:10:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a46da3-95eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:87:db:7e:ff:97:d5:c6:3e:eb:af:86:38: a9:2d:83:0f:2b:70:77:fc:d2:66:2c:cc:ea:04:f9: e8:aa:ac:d5:3d:84:1f:5d:f3:73:f9:46:c5:8b:7c: d4:a8:fc:ae:b7:bc:11:28:19:d6:18:ef:91:e1:b6: 5c:94:c3:07:f9:cd:54:85:97:d2:5a:72:af:bd:8b: 18:af:c5:b1:3b:a3:19:3e:d6:ec:18:4a:d6:37:e0: f6:51:b7:33:d5:48:5c:2e:3c:08:64:59:e4:27:1b: 4c:0b:e7:c6:7c:c5:07:d9:1d:e0:57:1c:a0:da:28: e7:5d:b1:43:ae:8b:5f:38:fc:66:b0:2b:da:e5:4f: 4f:3a:88:c5:b8:64:9a:a1:48:5a:19:10:2f:10:fc: 07:be:99:35:11:e1:89:94:2f:8c:4d:00:aa:75:1e: 99:ee:5f:c5:70:e2:92:b6:fe:22:a7:95:51:aa:28: 60:d2:e7:f8:57:61:8c:a6:db:00:c4:b2:e8:52:cf: 36:6e:af:c5:ab:c3:99:de:75:65:4e:ee:31:cc:c0: 43:6a:01:6c:4f:5c:ec:16:ba:f8:4b:4c:ac:29:af: 7d:0b:29:9a:40:7a:20:86:84:71:34:be:31:fc:0c: 4f:2a:4d:98:24:82:84:66:3b:fa:c6:1b:e0:98:d4: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:FA:49:3A:77:A2:B2:AB:FA:CB:C0:E8:76:7F:0E:BA:DA:81:C5 X509v3 Authority Key Identifier: keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/8A5AA9BAAB4111F09E531265C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.105.0/24 Signature Algorithm: sha256WithRSAEncryption 75:da:03:d2:7a:b5:7c:67:f4:58:5b:0b:02:10:e0:61:48:87: e4:fd:4c:f6:ea:b4:b5:7f:95:f9:ce:3f:55:12:a0:ec:21:a5: 6f:47:32:17:6a:04:e5:ff:51:02:10:98:e3:3e:15:74:7c:db: 15:1b:5c:82:95:97:6d:6b:7f:f1:9f:ac:45:f6:37:c2:a5:72: 41:9e:1f:da:95:37:57:ea:a7:40:f9:2f:12:08:2b:55:b5:b9: 16:15:3c:fd:44:b0:c8:aa:94:67:81:dd:8d:d9:f3:8e:b8:e2: 4a:f5:5b:fb:ae:5b:0f:69:63:6a:c7:54:27:00:df:f3:e3:2b: 3b:2f:1f:63:17:5d:07:5c:d9:2c:ed:66:4d:c3:00:a1:80:a0: 8a:cd:55:6a:72:a7:e5:dd:c6:c3:d2:11:f5:14:be:9d:7d:06: d2:76:dd:ab:a4:a2:d2:ad:39:10:5f:c7:94:23:cc:12:fb:ac: 7a:0f:77:9a:ca:1a:0e:c6:21:cb:b4:4a:82:55:4b:b8:95:12: 68:53:3e:b0:5c:e1:25:e7:c5:9b:f5:90:ea:39:ad:a3:d9:dc: c8:a7:49:04:29:5a:b4:11:64:68:c0:0e:f8:29:4b:34:f7:43: c7:4c:f1:72:0a:6d:b1:fd:b8:c5:d0:dc:ea:db:7a:6e:cf:7e: c2:b4:ba:d9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw N0I1NEM4NkMwHhcNMjUxMDE3MTAxMDQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmRhMy05NWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqKH237/l9XGPuuvhjipLYMPK3B3/NJmLMzqBPnoqqzVPYQfXfNz+UbFi3zU qPyut7wRKBnWGO+R4bZclMMH+c1UhZfSWnKvvYsYr8WxO6MZPtbsGErWN+D2Ubcz 1UhcLjwIZFnkJxtMC+fGfMUH2R3gVxyg2ijnXbFDrotfOPxmsCva5U9POojFuGSa oUhaGRAvEPwHvpk1EeGJlC+MTQCqdR6Z7l/FcOKStv4ip5VRqihg0uf4V2GMptsA xLLoUs82bq/Fq8OZ3nVlTu4xzMBDagFsT1zsFrr4S0ysKa99CymaQHoghoRxNL4x /AxPKk2YJIKEZjv6xhvgmNRsAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPj3+kk6 d6Kyq/rLwOh2fw662oHFMB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5 R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5NzkvRUQ2MzNFODY1RkQ5MTFFQkEzMEVFMzdCQzRGOUFFMDIvOEE1QUE5QkFB QjQxMTFGMDlFNTMxMjY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4hpMA0GCSqGSIb3DQEBCwUAA4IBAQB12gPSerV8Z/RYWwsCEOBh SIfk/Uz26rS1f5X5zj9VEqDsIaVvRzIXagTl/1ECEJjjPhV0fNsVG1yClZdta3/x n6xF9jfCpXJBnh/alTdX6qdA+S8SCCtVtbkWFTz9RLDIqpRngd2N2fOOuOJK9Vv7 rlsPaWNqx1QnAN/z4ys7Lx9jF10HXNks7WZNwwChgKCKzVVqcqfl3cbD0hH1FL6d fQbSdt2rpKLSrTkQX8eUI8wS+6x6D3eayhoOxiHLtEqCVUu4lRJoUz6wXOEl58Wb 9ZDqOa2j2dzIp0kEKVq0EWRowA74KUs090PHTPFyCm2x/bjF0Nzq23puz37CtLrZ -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:59 2026 by rpki-client