$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa File: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (raw, json) Hash identifier: 00gpwc2zOnyGovrxz5NLVNWOFFs8dFrjb8ZlbuA2tCY= Subject key identifier: BE:C3:97:52:93:78:05:14:31:4D:DC:31:D1:CA:65:67:95:A5:01:CE Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 296E Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:36:24 +0000 ROA not before: Sat 10 Jan 2026 16:12:42 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141681 IP address blocks: 103.254.120.0/24 maxlen: 24 103.254.121.0/24 maxlen: 24 2401:ae0::/32 maxlen: 32 2401:ae0::/48 maxlen: 48 2401:ae0:1::/48 maxlen: 48 2401:ae0:2::/48 maxlen: 48 2401:ae0:aa::/48 maxlen: 48 2401:ae0:bb::/48 maxlen: 48 2401:ae0:cc::/48 maxlen: 48 2401:ae0:6000::/36 maxlen: 36 2401:ae0:6000::/48 maxlen: 48 2401:ae0:6100::/48 maxlen: 48 2401:ae0:6200::/48 maxlen: 48 2401:ae0:6300::/48 maxlen: 48 2401:ae0:6400::/48 maxlen: 48 2401:ae0:6500::/48 maxlen: 48 2401:ae0:6600::/48 maxlen: 48 2401:ae0:6700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10606 (0x296e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Jan 10 16:12:42 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48727-1d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:4e:3d:02:18:f9:4d:e5:3e:d9:21:4c:ae: f1:50:30:9b:bd:77:04:86:ba:89:81:d0:71:f2:29: 65:50:07:cd:c1:68:64:02:62:a9:62:36:37:91:6e: 3b:48:de:c5:37:c1:5f:d3:d3:64:3a:db:cf:8f:73: ae:c3:9b:bd:03:51:5d:71:0c:5c:e4:db:cb:b7:34: 72:b5:91:4b:83:f6:9d:7e:92:bc:8a:12:f2:7c:94: b6:4d:c5:2a:3d:fa:cf:3c:6c:55:5a:15:8c:5f:f7: b2:6f:34:a4:d8:9f:dc:f5:39:c6:4d:9d:64:2a:14: c0:99:de:14:9c:28:e5:d5:38:6e:2c:6a:fc:2d:f9: 9e:f5:89:f3:10:b8:c1:36:36:ac:07:0a:f6:39:e8: 4b:73:0a:69:0b:e1:43:ac:79:13:28:24:a2:e0:05: 87:12:fa:93:e0:08:2e:8a:1c:b3:71:19:dc:73:c8: 60:ae:38:c8:99:18:9b:61:26:58:cf:2d:ae:95:2b: 61:4d:09:1a:e2:73:69:c8:8a:ce:15:6c:d3:de:fd: 0c:b7:80:93:fe:43:97:29:6c:0e:70:33:d0:dc:8b: 96:bd:aa:92:64:a4:0a:93:37:39:38:8b:1e:6e:a0: 2b:a3:1a:f4:42:cb:a5:e2:97:f5:22:aa:ff:ca:85: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C3:97:52:93:78:05:14:31:4D:DC:31:D1:CA:65:67:95:A5:01:CE X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/F9B7A3BEB0A911EF8706BE26C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.254.120.0/23 IPv6: 2401:ae0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:81:b0:22:d7:7b:09:9e:02:8a:e1:d6:6d:52:f8:87:ee:de: b5:a6:32:4a:7e:6f:a8:ee:79:88:33:1d:b3:0a:33:34:ec:e7: 42:e8:2a:40:35:b0:10:db:33:a2:c7:c8:60:13:1f:76:d3:48: 25:a7:06:97:cc:49:f6:e6:71:b7:47:27:77:e2:e6:9c:2a:5d: 0f:c6:59:c9:f2:a4:84:d1:d6:d2:0f:cf:a6:b3:13:3c:9e:7f: 1b:55:18:12:4b:ee:88:8b:5f:70:14:37:8b:17:b2:01:58:e7: 5c:44:90:05:cd:b0:28:47:76:46:3c:fb:81:91:43:f6:a6:04: ba:93:1d:a7:e6:7d:7d:42:a0:af:4e:1e:d8:b7:a6:ad:5d:3e: 98:e1:6c:0c:44:e1:23:ac:78:dc:28:3e:ff:1c:dd:21:11:35: cd:87:56:0c:74:3f:ca:d7:d8:7e:98:9a:45:80:7c:fb:6c:0b: cd:62:60:b9:ee:c5:f5:f8:88:eb:bf:91:d5:82:37:6f:f6:9a: 3b:46:10:21:da:6b:7b:ec:74:2b:78:08:78:17:6a:11:d0:ec: 97:9a:79:48:fd:28:54:c2:03:90:9b:57:0c:56:ff:3d:40:63: b7:90:d4:89:4c:1b:29:f7:0f:51:23:12:5f:7d:eb:5b:05:50: 91:d1:1f:cd -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICKW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjYwMTEwMTYxMjQyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODcyNy0xZDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zdOPQIY+U3lPtkhTK7xUDCbvXcEhrqJgdBx8illUAfNwWhkAmKpYjY3kW47 SN7FN8Ff09NkOtvPj3Ouw5u9A1FdcQxc5NvLtzRytZFLg/adfpK8ihLyfJS2TcUq PfrPPGxVWhWMX/eybzSk2J/c9TnGTZ1kKhTAmd4UnCjl1ThuLGr8Lfme9YnzELjB NjasBwr2OehLcwppC+FDrHkTKCSi4AWHEvqT4AguihyzcRncc8hgrjjImRibYSZY zy2ulSthTQka4nNpyIrOFWzT3v0Mt4CT/kOXKWwOcDPQ3IuWvaqSZKQKkzc5OIse bqAroxr0Qsul4pf1Iqr/yoWREQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFL7Dl1KT eAUUMU3cMdHKZWeVpQHOMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvRjlCN0EzQkVC MEE5MTFFRjg3MDZCRTI2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ/54MA0EAgACMAcDBQAkAQrgMA0GCSqGSIb3DQEBCwUAA4IBAQCe gbAi13sJngKK4dZtUviH7t61pjJKfm+o7nmIMx2zCjM07OdC6CpANbAQ2zOix8hg Ex9200glpwaXzEn25nG3Ryd34uacKl0PxlnJ8qSE0dbSD8+msxM8nn8bVRgSS+6I i19wFDeLF7IBWOdcRJAFzbAoR3ZGPPuBkUP2pgS6kx2n5n19QqCvTh7Yt6atXT6Y 4WwMROEjrHjcKD7/HN0hETXNh1YMdD/K19h+mJpFgHz7bAvNYmC57sX1+Ijrv5HV gjdv9po7RhAh2mt77HQreAh4F2oR0OyXmnlI/ShUwgOQm1cMVv89QGO3kNSJTBsp 9w9RIxJffetbBVCR0R/N -----END CERTIFICATE-----Generated at Mon Mar 2 09:56:35 2026 by rpki-client