$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa File: 70F65056CDB911F0BDBD9948C4F9AE02.roa (raw, json) Hash identifier: +r2m4LZBOfeFC8llerWWOPpo5aVgzOjABbJBM71Zx6w= Subject key identifier: 65:D2:18:F8:3D:64:FB:CE:53:57:FC:1F:67:F8:1A:7E:C8:16:6B:83 Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Certificate serial: 0875 Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:17:54 +0000 ROA not before: Mon 16 Feb 2026 20:17:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 58800 IP address blocks: 103.245.108.0/22 maxlen: 22 103.245.108.0/24 maxlen: 24 103.245.109.0/24 maxlen: 24 103.245.110.0/24 maxlen: 24 103.245.111.0/24 maxlen: 24 150.107.52.0/24 maxlen: 24 150.107.53.0/24 maxlen: 24 150.107.54.0/24 maxlen: 24 2406:b00::/32 maxlen: 32 2406:b00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2165 (0x875) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Validity Not Before: Feb 16 20:17:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a482d2-f3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:86:d6:18:ef:d6:94:17:e7:45:63:e4:5b: 48:8b:ce:da:07:71:33:4e:c9:7b:65:1a:4d:5c:a7: 27:84:ae:b9:8b:8c:46:47:b5:70:59:d2:33:58:2c: 31:5c:9d:fe:15:5a:46:ed:7a:79:90:95:62:30:90: 68:61:7b:86:a0:58:be:ab:1f:16:5c:f9:2e:58:4e: 78:4b:ea:cc:46:3b:4f:b2:18:d1:36:43:55:08:3d: 65:29:f2:3c:e2:88:70:a0:e5:62:b3:09:cd:44:8f: 3b:75:81:45:57:9d:36:db:90:27:2b:c9:a5:77:5e: de:d8:6d:95:55:9c:cd:53:11:09:77:03:74:87:c6: 72:da:da:f8:36:93:83:09:fb:01:9f:86:1c:a8:74: 84:ca:59:8b:6c:79:bf:4b:f5:e2:ab:46:f7:c7:4e: a3:bb:02:36:47:ae:07:c7:34:9a:9c:1d:58:96:aa: eb:b5:7b:b8:6b:46:88:87:d5:b4:f5:af:5e:9e:2c: a9:ed:4c:8d:19:34:18:27:8c:a4:4e:fb:cc:3d:cd: 03:1d:70:82:1a:48:f6:94:12:47:ac:95:11:e7:bd: a4:e5:d6:c9:36:76:9b:6b:cf:0f:68:f5:e5:b7:86: fc:c0:c8:ec:34:7d:9c:41:7a:b8:08:1e:b7:52:a7: d9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D2:18:F8:3D:64:FB:CE:53:57:FC:1F:67:F8:1A:7E:C8:16:6B:83 X509v3 Authority Key Identifier: keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/70F65056CDB911F0BDBD9948C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.108.0/22 150.107.52.0-150.107.54.255 IPv6: 2406:b00::/32 Signature Algorithm: sha256WithRSAEncryption 8c:3e:9e:a2:98:ca:18:83:c6:9d:4a:13:11:f0:0e:e8:67:f0: 69:1c:b1:66:63:80:f4:0e:08:43:4d:5e:f4:e7:9a:6f:46:a0: 06:56:7b:85:bf:b9:c9:d2:dd:65:ea:ba:4a:92:84:3e:74:7f: d4:f3:74:19:27:62:54:91:a2:12:3a:d8:94:12:39:1f:91:e6: ef:9c:b0:a6:6e:46:cf:66:f1:3c:06:84:a4:8f:61:53:cf:8a: a7:08:0f:72:a0:d7:ec:e4:1b:a1:ba:03:d4:0b:91:01:76:e4: d5:2c:51:42:26:78:b6:01:4f:f3:61:4b:4e:b0:9f:c5:50:6d: 1c:1a:04:55:7a:90:88:14:fa:45:5f:72:8b:9e:05:da:8e:20: 25:7d:5a:04:c4:fd:c8:44:9a:fc:4a:6a:c5:2a:e3:b6:e7:16: 77:1e:cd:91:3a:e7:3b:d2:03:a8:53:55:4e:56:ac:3e:ac:a5: 9f:31:a9:b7:90:4e:1d:91:b1:c9:b5:cd:b5:b3:97:63:8b:99: 3f:78:57:15:25:e7:52:4e:72:f0:20:43:04:29:9d:07:92:32: c4:1a:73:82:13:a3:fa:ab:b2:9e:bf:8d:8e:fb:e9:4c:bd:f1: 1c:49:0b:a1:1b:f2:1d:90:22:6b:ef:d9:fb:bf:0a:5d:d9:a5: 88:9f:2c:f0 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQxN0YxMTAvBgNVBAUTKDE3RjRGQjEyODc1NkVCQjBCQUM1OUQ0RTBGNEI3RTA4 NzI3OTc2MEQwHhcNMjYwMjE2MjAxNzM4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODJkMi1mM2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfaG1hjv1pQX50Vj5FtIi87aB3EzTsl7ZRpNXKcnhK65i4xGR7VwWdIzWCwx XJ3+FVpG7Xp5kJViMJBoYXuGoFi+qx8WXPkuWE54S+rMRjtPshjRNkNVCD1lKfI8 4ohwoOViswnNRI87dYFFV50225AnK8mld17e2G2VVZzNUxEJdwN0h8Zy2tr4NpOD CfsBn4YcqHSEylmLbHm/S/Xiq0b3x06juwI2R64HxzSanB1YlqrrtXu4a0aIh9W0 9a9eniyp7UyNGTQYJ4ykTvvMPc0DHXCCGkj2lBJHrJUR572k5dbJNnaba88PaPXl t4b8wMjsNH2cQXq4CB63UqfZ+wIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFGXSGPg9 ZPvOU1f8H2f4Gn7IFmuDMB8GA1UdIwQYMBaAFBf0+xKHVuuwusWdTg9LfghyeXYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDE3Ri9BNTZENUY0MEZC NDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3QzZ4WjFPRDB0LUNISjVk ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfVDdFb2RXNjdDNnhaMU9EMHQtQ0hKNWRnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQxN0YvQTU2RDVGNDBGQjQ3MTFFQUJFRjQ3RDNFQzRGOUFFMDIvNzBGNjUwNTZD REI5MTFGMEJEQkQ5OTQ4QzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa BAIAATAUAwQCZ/VsMAwDBAKWazQDBACWazYwDQQCAAIwBwMFACQGCwAwDQYJKoZI hvcNAQELBQADggEBAIw+nqKYyhiDxp1KExHwDuhn8GkcsWZjgPQOCENNXvTnmm9G oAZWe4W/ucnS3WXqukqShD50f9TzdBknYlSRohI62JQSOR+R5u+csKZuRs9m8TwG hKSPYVPPiqcID3Kg1+zkG6G6A9QLkQF25NUsUUImeLYBT/NhS06wn8VQbRwaBFV6 kIgU+kVfcoueBdqOICV9WgTE/chEmvxKasUq47bnFncezZE65zvSA6hTVU5WrD6s pZ8xqbeQTh2Rscm1zbWzl2OLmT94VxUl51JOcvAgQwQpnQeSMsQac4ITo/qrsp6/ jY776Uy98RxJC6Eb8h2QImvv2fu/Cl3ZpYifLPA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:52:32 2026 by rpki-client