$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/85BF2BE4710111F093C54468C4F9AE02.roa File: 85BF2BE4710111F093C54468C4F9AE02.roa (raw, json) Hash identifier: j9SKLInNcpVR2MVZ8Thc62Fi6/lQmCSnVrmSmxlo0RM= Subject key identifier: 29:7B:DA:BE:E0:C5:C0:FF:4E:DE:12:BB:8E:14:04:45:A2:CB:29:D9 Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Certificate serial: 01C9 Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/85BF2BE4710111F093C54468C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:23:15 +0000 ROA not before: Thu 11 Sep 2025 04:41:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45905 IP address blocks: 103.65.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0 Validity Not Before: Sep 11 04:41:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a41393-92c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dc:4e:0f:d0:79:a5:0c:a5:c0:71:c6:4e:73: ed:1d:9a:87:1b:e1:29:31:ee:39:05:10:db:bb:ae: 63:72:ad:81:69:98:c9:09:89:61:00:2f:17:62:a3: de:93:20:70:0b:22:03:b4:4d:60:62:ba:26:3a:31: fe:61:f9:d7:e0:3c:2a:00:4e:03:d4:24:6c:05:89: dd:60:ff:35:df:73:5f:66:b5:9f:f0:d2:80:10:45: 70:6d:b7:d6:18:41:68:a1:b4:29:cb:5f:64:59:53: 9a:ea:2b:df:03:a3:5e:6d:0b:92:5f:f7:e1:42:7a: 14:05:ba:18:fe:11:bb:fe:d7:55:7f:56:03:23:c9: 95:64:a8:df:b8:05:3a:c9:5b:a2:4c:a3:ad:66:c5: 0e:d9:12:31:a8:cf:e2:bb:79:fb:7a:67:f4:dc:a9: b2:af:10:32:0a:89:f0:43:34:23:f8:5f:55:dd:b2: c9:78:e3:4c:1d:22:16:a2:5b:e4:ad:22:9b:3b:18: 76:a1:13:5a:ba:75:b0:c8:07:43:70:b3:cd:c1:b6: 08:9b:dd:9f:fa:ca:df:f0:c7:42:2a:7a:38:75:48: bd:91:88:b1:40:2a:7f:8b:d3:ab:de:77:79:92:f1: 1a:91:25:be:bd:4e:b3:de:b6:af:7f:d1:b8:70:ec: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7B:DA:BE:E0:C5:C0:FF:4E:DE:12:BB:8E:14:04:45:A2:CB:29:D9 X509v3 Authority Key Identifier: keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/85BF2BE4710111F093C54468C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.65.134.0/23 Signature Algorithm: sha256WithRSAEncryption 25:46:71:4d:9d:2c:1a:8a:d6:15:71:ad:a0:d6:32:1c:6d:66: ca:28:47:82:77:18:28:20:85:28:aa:65:99:06:16:cb:c3:83: 1e:9f:01:13:eb:aa:95:41:4d:e8:0e:fa:34:48:da:77:ea:cb: 31:11:b1:c4:15:fb:c4:a3:80:43:93:84:52:39:40:a8:cd:b3: 77:2f:02:26:1a:c0:5f:12:e9:35:72:4b:32:90:58:75:9b:08: e1:52:be:9f:ff:f6:f7:53:38:96:4b:11:bb:ec:48:7e:91:4f: 4f:20:9e:73:94:24:5b:2a:3a:84:8c:b3:74:10:32:53:4b:54: fb:e0:8d:0a:ee:fe:42:af:cb:2c:4a:9d:d8:0c:87:b7:b4:b3: 44:8a:25:37:54:51:81:7c:4e:cb:50:06:ea:3d:71:c0:33:aa: 2b:c0:1e:ce:fe:d4:04:65:75:e7:af:a1:b3:58:7d:60:ba:cc: 2e:e3:e8:6d:0d:b0:2f:f1:a4:b7:84:79:fc:ff:8b:e0:2b:c4: 93:fe:1a:e2:3e:13:92:1b:8f:06:e8:79:2d:44:87:9b:a3:de: e1:c9:ed:6b:df:a1:9e:3a:1e:1a:a6:b8:40:2a:00:e6:18:b4: 22:d5:f1:b9:ce:6f:46:7a:8b:cd:f1:a4:72:c7:0a:65:ca:a0: c1:81:a7:35 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBEODYxMTAvBgNVBAUTKDVGNUNFMjhDMDREMTZFOTUwRTBFQkNENTk1NTU0MjQ4 M0QzOTU2RDAwHhcNMjUwOTExMDQ0MTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTM5My05MmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dxOD9B5pQylwHHGTnPtHZqHG+EpMe45BRDbu65jcq2BaZjJCYlhAC8XYqPe kyBwCyIDtE1gYromOjH+YfnX4DwqAE4D1CRsBYndYP8133NfZrWf8NKAEEVwbbfW GEFoobQpy19kWVOa6ivfA6NebQuSX/fhQnoUBboY/hG7/tdVf1YDI8mVZKjfuAU6 yVuiTKOtZsUO2RIxqM/iu3n7emf03KmyrxAyConwQzQj+F9V3bLJeONMHSIWolvk rSKbOxh2oRNaunWwyAdDcLPNwbYIm92f+srf8MdCKno4dUi9kYixQCp/i9Or3nd5 kvEakSW+vU6z3ravf9G4cOzA3wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCl72r7g xcD/Tt4Su44UBEWiyynZMB8GA1UdIwQYMBaAFF9c4owE0W6VDg681ZVVQkg9OVbQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEQ4Ni82OEU3OTc4QTZD QkQxMUVFQjg0NkYzNzlDNEY5QUUwMi9YMXppakFUUmJwVU9EcnpWbFZWQ1NEMDVW dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gxemlqQVRSYnBVT0RyelZsVlZDU0QwNVZ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBEODYvNjhFNzk3OEE2Q0JEMTFFRUI4NDZGMzc5QzRGOUFFMDIvODVCRjJCRTQ3 MTAxMTFGMDkzQzU0NDY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ0GGMA0GCSqGSIb3DQEBCwUAA4IBAQAlRnFNnSwaitYVca2g1jIc bWbKKEeCdxgoIIUoqmWZBhbLw4MenwET66qVQU3oDvo0SNp36ssxEbHEFfvEo4BD k4RSOUCozbN3LwImGsBfEuk1cksykFh1mwjhUr6f//b3UziWSxG77Eh+kU9PIJ5z lCRbKjqEjLN0EDJTS1T74I0K7v5Cr8ssSp3YDIe3tLNEiiU3VFGBfE7LUAbqPXHA M6orwB7O/tQEZXXnr6GzWH1guswu4+htDbAv8aS3hHn8/4vgK8ST/hriPhOSG48G 6HktRIebo97hye1r36GeOh4aprhAKgDmGLQi1fG5zm9GeovN8aRyxwplyqDBgac1 -----END CERTIFICATE-----Generated at Mon Mar 2 11:06:21 2026 by rpki-client