$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/C9819022CE7011E98E86DD52C4F9AE02.roa File: C9819022CE7011E98E86DD52C4F9AE02.roa (raw, json) Hash identifier: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8= Subject key identifier: BC:F2:18:F6:09:EF:7C:F8:65:BB:DB:2D:37:D3:B8:21:D2:0E:5E:70 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0DF1 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/C9819022CE7011E98E86DD52C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:38:56 +0000 ROA not before: Thu 12 Feb 2026 18:15:17 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 133210 IP address blocks: 103.112.80.0/24 maxlen: 24 103.255.250.0/24 maxlen: 24 2001:df1:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Feb 12 18:15:17 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a44f80-3888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8b:37:b7:7b:3f:59:90:dd:fe:ef:c8:10:29: 91:9e:2d:84:6b:f7:c1:cf:7c:98:a7:b3:7b:40:93: 54:8d:3d:ef:d5:82:ac:7b:2f:42:a9:ae:61:2b:bc: 7d:57:fb:5b:2a:97:b9:33:a8:60:9c:98:5f:47:77: ce:79:26:c7:c8:c1:94:bc:df:73:56:0a:bb:93:3b: 01:7e:eb:1c:41:43:2a:be:25:69:35:05:3e:c8:bb: 3b:1d:8c:ec:f2:43:65:5f:f4:8f:62:8c:c3:22:d4: 6e:eb:1e:78:0e:61:e5:47:70:97:b9:be:67:ec:22: c3:7c:8c:53:e1:28:c3:cd:9e:28:76:a7:e0:b1:81: 1d:25:04:b1:a1:d1:f7:18:ca:7c:8f:8a:4a:c6:29: ba:e0:af:4c:ac:1f:7b:14:06:28:75:5b:30:e5:28: 7e:e3:d3:10:56:da:b7:89:1c:6f:fd:c4:09:ea:72: d7:33:d7:6f:95:58:94:dc:c4:82:8d:57:5f:de:df: 75:75:98:22:ce:81:83:9b:8e:05:f6:a6:8e:4f:03: 5c:01:f9:0e:4e:5f:0e:78:71:33:88:7d:99:af:af: 27:a5:a8:9b:5a:18:ba:e8:ee:4f:9f:63:48:8c:b2: 5c:63:19:aa:75:02:b6:24:c5:cc:29:dc:d9:ad:63: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F2:18:F6:09:EF:7C:F8:65:BB:DB:2D:37:D3:B8:21:D2:0E:5E:70 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/C9819022CE7011E98E86DD52C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.112.80.0/24 103.255.250.0/24 IPv6: 2001:df1:a800::/48 Signature Algorithm: sha256WithRSAEncryption b6:a4:4d:fb:4f:65:73:0a:59:b9:44:86:d4:b6:e5:72:91:1d: 7e:bf:4e:d6:1b:f3:b2:a6:40:25:dc:6c:91:c3:2f:5e:4d:09: a9:4b:12:c4:ca:f6:a8:9e:1e:7f:09:5c:77:41:4d:ee:e6:0f: ff:ae:58:6c:1f:7f:30:87:70:aa:76:6d:48:0a:11:08:56:5b: dc:ce:5b:2b:c4:65:3e:c2:ba:da:76:d8:8e:db:96:90:65:9f: 9e:85:1d:92:b0:e2:49:82:e9:5a:db:74:78:5f:35:cb:52:cd: fe:85:64:70:43:a1:54:d3:04:4a:ad:f0:ad:e9:72:af:77:27: c4:61:bb:f0:bf:3a:4e:d5:ef:2f:6a:a9:17:73:0a:0b:5c:0a: 7c:11:1c:df:53:f4:52:6f:43:ac:e6:9b:96:11:64:f5:19:b6: 13:b9:31:1a:c3:f6:df:97:9c:37:48:16:1a:fe:6f:d2:c6:7c: b2:f8:d2:b3:0e:a2:38:31:12:c7:6c:1a:58:7b:08:37:40:2f: 8b:64:c1:3f:63:41:45:cf:eb:c2:9b:38:6e:8c:5c:08:f5:14: 73:60:ab:c8:a1:cd:05:55:3b:b8:d8:c0:69:9a:42:36:6f:5e: ca:5e:1a:33:fc:47:12:a8:00:5e:d7:61:ee:6b:b0:ce:e5:2f: b5:96:dd:37 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwMjEyMTgxNTE3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGY4MC0zODg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4os3t3s/WZDd/u/IECmRni2Ea/fBz3yYp7N7QJNUjT3v1YKsey9Cqa5hK7x9 V/tbKpe5M6hgnJhfR3fOeSbHyMGUvN9zVgq7kzsBfuscQUMqviVpNQU+yLs7HYzs 8kNlX/SPYozDItRu6x54DmHlR3CXub5n7CLDfIxT4SjDzZ4odqfgsYEdJQSxodH3 GMp8j4pKxim64K9MrB97FAYodVsw5Sh+49MQVtq3iRxv/cQJ6nLXM9dvlViU3MSC jVdf3t91dZgizoGDm44F9qaOTwNcAfkOTl8OeHEziH2Zr68npaibWhi66O5Pn2NI jLJcYxmqdQK2JMXMKdzZrWONOQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFLzyGPYJ 73z4ZbvbLTfTuCHSDl5wMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQ1NzEvRUNEMkRGOTZDRTZGMTFFOUEwRDg2RDUxQzRGOUFFMDIvQzk4MTkwMjJD RTcwMTFFOThFODZERDUyQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ3BQAwQAZ//6MA8EAgACMAkDBwAgAQ3xqAAwDQYJKoZIhvcNAQEL BQADggEBALakTftPZXMKWblEhtS25XKRHX6/TtYb87KmQCXcbJHDL15NCalLEsTK 9qieHn8JXHdBTe7mD/+uWGwffzCHcKp2bUgKEQhWW9zOWyvEZT7Cutp22I7blpBl n56FHZKw4kmC6VrbdHhfNctSzf6FZHBDoVTTBEqt8K3pcq93J8Rhu/C/Ok7V7y9q qRdzCgtcCnwRHN9T9FJvQ6zmm5YRZPUZthO5MRrD9t+XnDdIFhr+b9LGfLL40rMO ojgxEsdsGlh7CDdAL4tkwT9jQUXP68KbOG6MXAj1FHNgq8ihzQVVO7jYwGmaQjZv XspeGjP8RxKoAF7XYe5rsM7lL7WW3Tc= -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:02 2026 by rpki-client