$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/599F65C652C011EEAAE0CD34C4F9AE02.roa File: 599F65C652C011EEAAE0CD34C4F9AE02.roa (raw, json) Hash identifier: wKiIt1esrHOB+SKAyHneV8WULzJobDN24pHkGLD9384= Subject key identifier: 1B:31:4A:D2:80:DC:7A:3F:E8:76:B7:64:CC:29:19:E6:60:71:BF:B0 Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Certificate serial: 01D6 Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/599F65C652C011EEAAE0CD34C4F9AE02.roa Signing time: Sun 01 Mar 2026 05:23:13 +0000 ROA not before: Sun 01 Mar 2026 05:23:13 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 58610 IP address blocks: 103.76.205.0/24 maxlen: 24 103.76.247.0/24 maxlen: 24 103.77.4.0/23 maxlen: 23 116.12.56.0/21 maxlen: 21 116.12.56.0/24 maxlen: 24 116.12.57.0/24 maxlen: 24 116.12.58.0/24 maxlen: 24 116.12.59.0/24 maxlen: 24 116.12.60.0/24 maxlen: 24 116.12.61.0/24 maxlen: 24 116.12.62.0/24 maxlen: 24 116.12.63.0/24 maxlen: 24 116.206.160.0/22 maxlen: 22 116.206.160.0/23 maxlen: 23 116.206.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 05:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Validity Not Before: Mar 1 05:23:13 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3cd41-4548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:4d:49:6e:50:af:2b:c3:e6:cd:7f:ae:93: a8:e6:4a:c5:66:e5:a1:21:ba:ef:14:bc:46:22:f7: 38:a1:a0:4c:87:b3:05:68:10:a5:fc:16:0d:d4:14: 0c:04:60:28:15:07:35:84:45:c8:64:1d:b4:c1:e6: 40:10:41:b5:2c:80:90:ca:d3:a9:b8:73:fa:af:fe: 79:5d:fe:0f:f4:66:a7:f5:4e:15:f4:b1:ee:ab:bf: 2d:91:12:33:3f:9e:e2:b2:20:22:df:96:44:d2:4e: d4:ca:a2:0f:56:5f:6a:55:42:ac:56:2a:c4:aa:a9: b7:be:3e:23:5f:81:ff:92:ae:42:dc:ba:21:54:16: 23:13:72:ed:8b:f1:50:1e:71:35:1b:60:96:48:06: f7:60:bc:f8:c1:e2:88:4e:34:00:71:b0:66:62:5d: 6e:9f:40:84:c7:bd:43:9c:4e:47:77:a4:3b:a6:a0: e1:4c:d0:4b:d8:4f:8e:8e:fb:ad:c9:4a:0e:24:32: 15:8e:41:32:c1:9a:cb:99:93:af:53:b4:10:18:17: b5:bd:b2:38:8d:5c:63:e9:8b:2b:e3:4b:d3:d6:9d: 73:f4:38:48:10:5b:29:f2:81:e6:e0:45:3f:b0:fe: 9d:40:58:69:0e:f1:8f:c4:2e:13:4c:ca:80:4b:aa: 73:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:4A:D2:80:DC:7A:3F:E8:76:B7:64:CC:29:19:E6:60:71:BF:B0 X509v3 Authority Key Identifier: keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/599F65C652C011EEAAE0CD34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.76.205.0/24 103.76.247.0/24 103.77.4.0/23 116.12.56.0/21 116.206.160.0/22 Signature Algorithm: sha256WithRSAEncryption c4:da:98:49:aa:6a:0d:07:53:14:3d:2e:cb:98:3f:0a:d4:16: b0:b0:94:49:52:29:30:da:ac:6f:83:a1:30:45:d9:a3:ad:82: f3:81:33:bc:37:91:c9:e0:0e:7e:b9:e4:2a:04:04:80:ee:75: d4:66:14:a0:50:98:69:63:2c:06:37:eb:7d:88:0a:bd:97:e5: b9:ff:50:40:f6:64:2a:99:33:e8:e8:76:5a:59:e9:f0:e0:f7: 8f:7c:f4:6c:a4:de:c2:61:65:d6:04:51:74:f3:b0:7d:41:eb: ff:7a:65:6b:68:69:07:89:65:98:9e:df:56:05:7a:2d:cf:64: 5f:90:97:23:09:15:f6:70:4b:48:f6:34:7a:07:06:d6:3c:a7: 0e:78:10:6a:43:f8:e6:11:c6:fb:19:ec:c5:e5:1c:b8:b7:cd: 80:7b:41:bc:d1:74:9b:9b:95:f2:82:58:2e:1c:85:a2:4b:70: 86:a7:0f:96:70:d6:73:9a:a7:a9:fe:8c:26:f5:a3:b7:ce:97: 11:4a:ab:88:bc:8a:54:87:0d:6b:89:38:32:5d:65:d4:7c:0b: e6:5f:77:32:51:8a:80:a0:33:71:2c:c5:04:80:4e:52:b3:8a: 10:a8:d3:8b:92:51:19:f5:93:e5:7c:8a:23:c7:db:a3:2c:dd: a7:f2:fa:34 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4MDQxMTAvBgNVBAUTKEEwRkE2NkY2OTM0QUEyODEzRTFBMUYwMDczOTU5MEM2 MzU3RDQwREEwHhcNMjYwMzAxMDUyMzEzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OWEzY2Q0MS00NTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8tNSW5QryvD5s1/rpOo5krFZuWhIbrvFLxGIvc4oaBMh7MFaBCl/BYN1BQM BGAoFQc1hEXIZB20weZAEEG1LICQytOpuHP6r/55Xf4P9Gan9U4V9LHuq78tkRIz P57isiAi35ZE0k7UyqIPVl9qVUKsVirEqqm3vj4jX4H/kq5C3LohVBYjE3Lti/FQ HnE1G2CWSAb3YLz4weKITjQAcbBmYl1un0CEx71DnE5Hd6Q7pqDhTNBL2E+Ojvut yUoOJDIVjkEywZrLmZOvU7QQGBe1vbI4jVxj6Ysr40vT1p1z9DhIEFsp8oHm4EU/ sP6dQFhpDvGPxC4TTMqAS6pzEwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFBsxStKA 3Ho/6Ha3ZMwpGeZgcb+wMB8GA1UdIwQYMBaAFKD6ZvaTSqKBPhofAHOVkMY1fUDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgwNC9DMjEzOEQ0MDUy QkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29vRS1HaDhBYzVXUXhqVjlR Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QcG05cE5Lb29FLUdoOEFjNVdReGpWOVFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4MDQvQzIxMzhENDA1MkJGMTFFRThFNDRBQTFCQzRGOUFFMDIvNTk5RjY1QzY1 MkMwMTFFRUFBRTBDRDM0QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAZ0zNAwQAZ0z3AwQBZ00EAwQDdAw4AwQCdM6gMA0GCSqGSIb3DQEB CwUAA4IBAQDE2phJqmoNB1MUPS7LmD8K1BawsJRJUikw2qxvg6EwRdmjrYLzgTO8 N5HJ4A5+ueQqBASA7nXUZhSgUJhpYywGN+t9iAq9l+W5/1BA9mQqmTPo6HZaWenw 4PePfPRspN7CYWXWBFF087B9Qev/emVraGkHiWWYnt9WBXotz2RfkJcjCRX2cEtI 9jR6BwbWPKcOeBBqQ/jmEcb7GezF5Ry4t82Ae0G80XSbm5XyglguHIWiS3CGpw+W cNZzmqep/owm9aO3zpcRSquIvIpUhw1riTgyXWXUfAvmX3cyUYqAoDNxLMUEgE5S s4oQqNOLklEZ9ZPlfIojx9ujLN2n8vo0 -----END CERTIFICATE-----Generated at Mon Mar 2 00:18:06 2026 by rpki-client