$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa File: 60DA0694D9E111EA82120960C4F9AE02.roa (raw, json) Hash identifier: iiBtufSHWf33321WKi8LpLk6XSy2WK+DXaj/oX9ilrc= Subject key identifier: E7:B3:C6:A6:92:B5:05:A5:E1:6E:C8:28:8C:5B:31:34:A2:7B:94:D0 Certificate issuer: /CN=A91EEEB8/serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Certificate serial: 355E Authority key identifier: E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:01:35 +0000 ROA not before: Thu 02 Oct 2025 15:11:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 135168 IP address blocks: 103.136.122.0/24 maxlen: 24 103.136.123.0/24 maxlen: 24 103.195.14.0/24 maxlen: 24 103.195.15.0/24 maxlen: 24 2404:8e80:1::/48 maxlen: 48 2404:8e80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13662 (0x355e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEEB8, serialNumber=E622C8114F3F24AA6A807C8141E3964B551BB930 Validity Not Before: Oct 2 15:11:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a47eff-059b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:99:f4:5b:48:e4:f7:60:d3:8a:0a:9a:00: cc:94:b9:48:25:39:8c:36:8e:fd:1d:4a:36:8a:c7: 9b:12:eb:34:ed:65:a8:c0:3a:fb:4a:21:fb:95:2f: c7:1e:b7:0b:a4:f9:27:63:fa:1d:01:bb:05:83:9d: 33:e6:b9:20:7d:a6:ea:7e:c5:4c:83:38:ed:63:8c: 4e:b2:a8:6c:47:2b:cd:54:ce:17:11:ed:30:33:ae: 18:c4:09:28:38:89:e4:85:56:07:40:b1:71:ea:bc: 43:e9:a2:98:6e:ee:8f:dc:39:e0:f3:21:02:ce:b5: 67:82:1b:38:0b:ce:7e:65:c0:74:fd:62:65:3b:11: d7:e9:50:f7:9d:1d:3d:eb:cf:1a:b4:5a:6f:1f:c0: c6:f9:02:60:3e:9a:7b:12:60:1a:e5:29:2f:78:63: 05:52:0e:3d:b7:59:aa:d1:25:bf:b0:50:17:f8:1a: 52:e5:fc:8a:30:67:8c:17:e4:09:c3:40:17:60:d5: d0:06:9c:a9:19:3c:00:ce:5c:bc:a2:ba:da:47:25: b0:1f:a7:ca:a1:14:0d:f0:37:b1:9b:db:5e:39:6e: 00:b3:04:6d:68:da:27:20:86:29:34:e4:4e:d1:4c: 2b:a6:8b:64:f2:11:79:6a:3a:02:95:29:76:34:d7: 4f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B3:C6:A6:92:B5:05:A5:E1:6E:C8:28:8C:5B:31:34:A2:7B:94:D0 X509v3 Authority Key Identifier: keyid:E6:22:C8:11:4F:3F:24:AA:6A:80:7C:81:41:E3:96:4B:55:1B:B9:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iLIEU8_JKpqgHyBQeOWS1UbuTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEEB8/8E0F2CB61DA111E2B906BC9308B02CD2/60DA0694D9E111EA82120960C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.136.122.0/23 103.195.14.0/23 IPv6: 2404:8e80:1::/48 2404:8e80:3::/48 Signature Algorithm: sha256WithRSAEncryption 27:74:f9:48:7a:10:41:c3:e9:fb:0a:86:fe:6d:8c:34:87:44: cc:7c:42:b4:27:4e:e6:fa:41:40:e0:34:6f:c1:b3:4c:1d:32: 24:d0:8c:05:cf:2d:5f:46:85:e5:be:b9:77:1e:ee:2b:63:d7: 1c:e5:f1:9d:70:10:b9:eb:f6:00:25:17:c2:78:0d:a4:55:66: da:9b:5d:51:d4:9c:2e:07:9f:fe:fd:51:fb:1f:5b:8d:13:ba: ac:b7:56:e1:f9:38:f6:3a:a6:10:cd:e6:14:50:36:5b:9b:08: 55:66:3a:17:93:12:a2:c1:15:f2:07:62:ae:86:20:52:40:f5: 07:79:9b:e6:38:a1:ca:47:ef:3e:a6:a5:db:6e:e1:09:72:a5: 52:4f:94:61:27:ff:14:45:2b:b7:87:5e:74:e5:6e:e2:dc:71: cc:19:08:78:dc:8a:2a:57:69:74:d3:30:98:05:51:5b:b1:7a: 71:de:6f:5f:6c:ab:1b:08:50:b2:04:2c:92:c8:7b:83:24:f5: 9e:6a:16:8b:b7:84:97:f3:b5:e8:be:2b:43:31:be:d7:f0:64: 7e:2b:06:ea:bf:95:02:9e:2c:d3:1a:81:b0:18:25:62:bc:51: a1:ba:1a:ff:0a:a2:f4:c1:62:a8:6c:05:2f:5a:43:ed:3d:04: 32:19:0f:a1 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICNV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVFQjgxMTAvBgNVBAUTKEU2MjJDODExNEYzRjI0QUE2QTgwN0M4MTQxRTM5NjRC NTUxQkI5MzAwHhcNMjUxMDAyMTUxMTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2VmZi0wNTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwe+Z9FtI5Pdg04oKmgDMlLlIJTmMNo79HUo2isebEus07WWowDr7SiH7lS/H HrcLpPknY/odAbsFg50z5rkgfabqfsVMgzjtY4xOsqhsRyvNVM4XEe0wM64YxAko OInkhVYHQLFx6rxD6aKYbu6P3Dng8yECzrVnghs4C85+ZcB0/WJlOxHX6VD3nR09 688atFpvH8DG+QJgPpp7EmAa5SkveGMFUg49t1mq0SW/sFAX+BpS5fyKMGeMF+QJ w0AXYNXQBpypGTwAzly8orraRyWwH6fKoRQN8Dexm9teOW4AswRtaNonIIYpNORO 0Uwrpotk8hF5ajoClSl2NNdPcQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFOezxqaS tQWl4W7IKIxbMTSie5TQMB8GA1UdIwQYMBaAFOYiyBFPPySqaoB8gUHjlktVG7kw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUVCOC84RTBGMkNCNjFE QTExMUUyQjkwNkJDOTMwOEIwMkNEMi81aUxJRVU4X0pLcHFnSHlCUWVPV1MxVWJ1 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpTElFVThfSktwcWdIeUJRZU9XUzFVYnVUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVFQjgvOEUwRjJDQjYxREExMTFFMkI5MDZCQzkzMDhCMDJDRDIvNjBEQTA2OTRE OUUxMTFFQTgyMTIwOTYwQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQBZ4h6AwQBZ8MOMBgEAgACMBIDBwAkBI6AAAEDBwAkBI6AAAMwDQYJ KoZIhvcNAQELBQADggEBACd0+Uh6EEHD6fsKhv5tjDSHRMx8QrQnTub6QUDgNG/B s0wdMiTQjAXPLV9GheW+uXce7itj1xzl8Z1wELnr9gAlF8J4DaRVZtqbXVHUnC4H n/79UfsfW40Tuqy3VuH5OPY6phDN5hRQNlubCFVmOheTEqLBFfIHYq6GIFJA9Qd5 m+Y4ocpH7z6mpdtu4QlypVJPlGEn/xRFK7eHXnTlbuLcccwZCHjciipXaXTTMJgF UVuxenHeb19sqxsIULIELJLIe4Mk9Z5qFou3hJfztei+K0MxvtfwZH4rBuq/lQKe LNMagbAYJWK8UaG6Gv8KovTBYqhsBS9aQ+09BDIZD6E= -----END CERTIFICATE-----Generated at Mon Mar 2 11:36:44 2026 by rpki-client