$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/81D3C438E5E611E9A31D0F15C4F9AE02.roa File: 81D3C438E5E611E9A31D0F15C4F9AE02.roa (raw, json) Hash identifier: E6xKBwdXXk6plBWpWlytPRfzZulatDVFNhrKKgIrSig= Subject key identifier: 21:C6:D6:4D:C7:58:B7:C6:12:81:22:2D:74:D4:EF:35:93:67:64:A2 Certificate issuer: /CN=A91F59A6/serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Certificate serial: 0DA8 Authority key identifier: 30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/81D3C438E5E611E9A31D0F15C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:43:33 +0000 ROA not before: Thu 22 Jan 2026 18:14:58 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 14630 IP address blocks: 103.124.124.0/24 maxlen: 24 103.124.125.0/24 maxlen: 24 103.124.126.0/24 maxlen: 24 103.124.127.0/24 maxlen: 24 2403:df40::/32 maxlen: 32 2403:df40:14::/48 maxlen: 48 2403:df40:15::/48 maxlen: 48 2403:df40:16::/48 maxlen: 48 2403:df40:117::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3496 (0xda8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=30C45138678B7BD9AF4C5CA4EB1A5D3E2061C5C1 Validity Not Before: Jan 22 18:14:58 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46cb5-0bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:2d:91:39:ea:8a:8d:75:83:eb:bf:3b:c8: 60:c3:cc:c0:81:e1:91:87:f5:4b:08:55:1b:37:10: 54:ac:b9:38:ca:f0:32:02:68:29:bf:5b:79:35:21: aa:85:33:b6:c6:27:62:5e:45:9f:db:fe:a8:48:51: 26:f2:28:78:46:b9:de:71:ed:3f:e4:f9:70:af:08: 55:ed:0f:cf:19:8d:f0:32:04:e6:42:88:cb:c1:5f: bf:e1:54:95:5e:72:7c:1f:ee:61:8a:34:26:de:87: e9:f1:fd:60:3b:81:ab:7b:76:63:d8:f2:51:df:18: d4:7b:54:11:88:63:f8:ec:da:ed:39:74:c8:c1:72: 18:9a:5d:a4:12:af:38:9d:da:88:4f:1b:4c:29:0c: 0b:02:58:74:d6:8f:2a:f5:05:67:21:d1:e3:bc:a0: f0:fe:81:fa:bf:03:03:48:72:76:7d:d1:02:bb:90: 7a:64:9d:b8:c0:ad:5e:2b:3e:82:16:70:8e:76:db: ab:03:86:c4:b5:93:a8:86:ec:5f:1f:80:77:bb:b0: 7f:34:d3:d2:59:29:95:43:61:03:30:15:74:6f:4e: 57:3a:83:d2:23:82:01:98:ae:ac:3e:b0:58:a2:95: 37:85:eb:26:aa:a8:0a:03:24:9c:94:2b:71:3d:5a: 37:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C6:D6:4D:C7:58:B7:C6:12:81:22:2D:74:D4:EF:35:93:67:64:A2 X509v3 Authority Key Identifier: keyid:30:C4:51:38:67:8B:7B:D9:AF:4C:5C:A4:EB:1A:5D:3E:20:61:C5:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/MMRROGeLe9mvTFyk6xpdPiBhxcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMRROGeLe9mvTFyk6xpdPiBhxcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/40848C3EE5E511E99F1F7C13C4F9AE02/81D3C438E5E611E9A31D0F15C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.124.124.0/22 IPv6: 2403:df40::/32 Signature Algorithm: sha256WithRSAEncryption 08:c8:36:17:1f:61:1d:5d:f5:03:b1:6e:ce:d5:24:79:34:ab: 80:df:26:6a:3f:44:90:c9:77:d9:88:aa:19:af:22:07:92:e7: c4:1b:34:bc:28:b1:55:88:ba:91:af:2b:0c:4c:6a:13:ba:94: 69:42:0d:5d:f8:a6:72:6f:63:76:73:b0:00:40:b0:99:ce:23: 70:d6:f3:9e:79:8b:c8:36:3c:bd:7e:d5:1b:36:08:d1:2f:b0: 2c:85:52:af:65:9e:e6:dd:c2:4f:e8:bf:8d:6d:c8:25:60:76: 8e:06:20:f5:28:6e:c8:83:96:ea:b9:80:ce:95:d0:d0:26:7d: 82:f8:67:60:9f:a8:1d:81:d5:b0:59:31:c0:e7:ea:9c:cd:8c: 67:aa:b8:e7:7a:36:7c:07:17:05:84:ad:eb:f4:dc:3d:44:05: 01:72:bc:33:9e:0f:aa:d9:1a:5a:e8:c0:76:20:64:cb:ec:f1: 72:c9:bf:53:f1:78:cc:6a:be:82:ea:72:2e:4e:86:68:f2:d4: b2:91:f7:35:3d:dd:12:1f:20:0f:c7:22:bd:0b:bb:10:b2:d8: 43:ce:aa:21:5a:5a:0c:c1:e2:a3:b1:c0:f8:26:27:2b:f7:8e: b4:1c:87:6b:e1:93:34:06:69:aa:d0:f4:eb:14:36:3a:d3:0a: 26:7f:5f:4c -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICDagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKDMwQzQ1MTM4Njc4QjdCRDlBRjRDNUNBNEVCMUE1RDNF MjA2MUM1QzEwHhcNMjYwMTIyMTgxNDU4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmNiNS0wYmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1hYtkTnqio11g+u/O8hgw8zAgeGRh/VLCFUbNxBUrLk4yvAyAmgpv1t5NSGq hTO2xidiXkWf2/6oSFEm8ih4Rrnece0/5PlwrwhV7Q/PGY3wMgTmQojLwV+/4VSV XnJ8H+5hijQm3ofp8f1gO4Gre3Zj2PJR3xjUe1QRiGP47NrtOXTIwXIYml2kEq84 ndqITxtMKQwLAlh01o8q9QVnIdHjvKDw/oH6vwMDSHJ2fdECu5B6ZJ24wK1eKz6C FnCOdturA4bEtZOohuxfH4B3u7B/NNPSWSmVQ2EDMBV0b05XOoPSI4IBmK6sPrBY opU3hesmqqgKAySclCtxPVo3EQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCHG1k3H WLfGEoEiLXTU7zWTZ2SiMB8GA1UdIwQYMBaAFDDEUThni3vZr0xcpOsaXT4gYcXB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi80MDg0OEMzRUU1 RTUxMUU5OUYxRjdDMTNDNEY5QUUwMi9NTVJST0dlTGU5bXZURnlrNnhwZFBpQmh4 Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01NUlJPR2VMZTltdlRGeWs2eHBkUGlCaHhjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5QTYvNDA4NDhDM0VFNUU1MTFFOTlGMUY3QzEzQzRGOUFFMDIvODFEM0M0MzhF NUU2MTFFOUEzMUQwRjE1QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ3x8MA0EAgACMAcDBQAkA99AMA0GCSqGSIb3DQEBCwUAA4IBAQAI yDYXH2EdXfUDsW7O1SR5NKuA3yZqP0SQyXfZiKoZryIHkufEGzS8KLFViLqRrysM TGoTupRpQg1d+KZyb2N2c7AAQLCZziNw1vOeeYvINjy9ftUbNgjRL7AshVKvZZ7m 3cJP6L+NbcglYHaOBiD1KG7Ig5bquYDOldDQJn2C+Gdgn6gdgdWwWTHA5+qczYxn qrjnejZ8BxcFhK3r9Nw9RAUBcrwzng+q2Rpa6MB2IGTL7PFyyb9T8XjMar6C6nIu ToZo8tSykfc1Pd0SHyAPxyK9C7sQsthDzqohWloMweKjscD4Jicr9460HIdr4ZM0 Bmmq0PTrFDY60womf19M -----END CERTIFICATE-----Generated at Mon Mar 2 07:31:58 2026 by rpki-client