$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/F9D4AAB87DA911EB8532A559C4F9AE02.roa File: F9D4AAB87DA911EB8532A559C4F9AE02.roa (raw, json) Hash identifier: ZMWp3dWY1CbXEe6G5LscKnLOBbYifcrQfdwprxXyho4= Subject key identifier: 83:53:51:AE:B7:DA:2F:B7:FD:C6:E9:3A:21:D0:C7:95:A8:30:BA:F3 Certificate issuer: /CN=A91F5C0D/serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B Certificate serial: 0713 Authority key identifier: B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/F9D4AAB87DA911EB8532A559C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:43:32 +0000 ROA not before: Thu 05 Jun 2025 20:21:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45773 IP address blocks: 103.139.122.0/24 maxlen: 24 2001:df1:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5C0D, serialNumber=B5AC6869AFD951F897DD4AA72564FBF2A356D84B Validity Not Before: Jun 5 20:21:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a3fc34-e434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d9:db:51:56:e6:7c:7c:fb:08:ce:43:6f:47: 63:64:52:81:d5:13:ac:52:6b:d1:aa:83:9b:9a:da: 32:fe:05:9e:3a:72:4c:9d:54:bc:87:a2:11:37:b4: 55:bb:03:9f:80:ed:18:16:eb:f2:ae:4c:de:36:b8: 9b:2b:d3:60:32:63:82:dd:a7:a6:77:ba:1c:43:f6: 49:10:1b:a2:a4:83:55:86:ef:3c:b9:37:41:4a:30: d9:f2:4c:41:78:92:16:71:9c:da:24:90:64:13:07: 1f:af:b3:7f:49:72:71:b3:e8:19:5a:64:69:c1:01: a5:f1:96:c9:10:fa:d3:dd:9d:d5:bb:d4:66:3e:04: 72:af:90:d9:d9:91:9e:10:9b:23:eb:bb:00:f2:ce: 07:a3:59:8b:e7:0b:fb:c5:9d:a0:00:74:ac:c6:05: 00:17:20:89:6c:09:7f:9c:0c:a7:9b:fc:ab:ae:31: 90:1d:a5:d4:66:a4:84:68:80:8d:17:72:8a:da:75: c2:14:eb:07:12:05:a1:54:47:5e:5c:85:a0:51:3a: 65:13:a7:a3:bc:13:89:67:85:70:d1:5b:15:1f:97: f9:73:80:c2:82:ee:2b:83:34:d2:a5:97:dd:13:54: 1a:33:2e:ec:8e:48:03:8a:9b:5b:09:f1:b4:bf:70: 82:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:53:51:AE:B7:DA:2F:B7:FD:C6:E9:3A:21:D0:C7:95:A8:30:BA:F3 X509v3 Authority Key Identifier: keyid:B5:AC:68:69:AF:D9:51:F8:97:DD:4A:A7:25:64:FB:F2:A3:56:D8:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/taxoaa_ZUfiX3UqnJWT78qNW2Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taxoaa_ZUfiX3UqnJWT78qNW2Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5C0D/5EF751547DA811EB9BE84E58C4F9AE02/F9D4AAB87DA911EB8532A559C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.122.0/24 IPv6: 2001:df1:5080::/48 Signature Algorithm: sha256WithRSAEncryption 05:61:f7:5e:5a:f8:14:63:15:9a:99:fa:4b:a4:90:41:06:9a: 68:83:4a:d5:c8:62:9f:fd:0f:69:4b:a4:e6:cd:81:a7:74:12: 37:f6:77:2c:a4:84:c0:84:d7:1f:9b:a9:ad:6b:87:c0:c2:4b: 71:33:bd:49:4c:ba:7c:58:5b:84:18:37:96:20:02:a7:54:f2: 0e:d2:64:37:2f:6d:54:f4:47:29:19:55:43:f1:40:ef:65:8d: 13:58:7c:e5:d9:d6:c8:cb:f4:e3:75:f5:e7:ef:62:25:ee:52: 92:f2:9c:41:b9:e2:e0:03:da:b3:e6:66:82:73:e0:a3:fc:f6: 48:21:f2:b5:f3:ed:dd:99:af:c4:c7:08:0f:23:81:07:9a:14: 0c:f8:da:0a:21:b5:fa:59:66:b8:f6:71:7f:03:4f:f2:3f:7c: 68:d1:95:ab:32:99:cc:f6:e9:15:36:7c:2e:0f:c1:1f:5b:4e: 7b:41:97:b2:15:6a:ce:8e:6d:40:0a:c5:e8:83:3e:5a:29:48: e5:4c:97:05:62:af:e2:51:d9:73:fa:61:c7:37:a3:55:5b:cb: 49:03:99:c9:01:06:dd:1e:57:7f:f9:79:07:3b:1e:ca:32:cf: 2b:d5:a2:20:58:ee:41:44:7a:85:a2:2b:d7:c4:49:c4:70:8d: 1b:6d:fa:8f -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVDMEQxMTAvBgNVBAUTKEI1QUM2ODY5QUZEOTUxRjg5N0RENEFBNzI1NjRGQkYy QTM1NkQ4NEIwHhcNMjUwNjA1MjAyMTUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmMzNC1lNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dnbUVbmfHz7CM5Db0djZFKB1ROsUmvRqoObmtoy/gWeOnJMnVS8h6IRN7RV uwOfgO0YFuvyrkzeNribK9NgMmOC3aemd7ocQ/ZJEBuipINVhu88uTdBSjDZ8kxB eJIWcZzaJJBkEwcfr7N/SXJxs+gZWmRpwQGl8ZbJEPrT3Z3Vu9RmPgRyr5DZ2ZGe EJsj67sA8s4Ho1mL5wv7xZ2gAHSsxgUAFyCJbAl/nAynm/yrrjGQHaXUZqSEaICN F3KK2nXCFOsHEgWhVEdeXIWgUTplE6ejvBOJZ4Vw0VsVH5f5c4DCgu4rgzTSpZfd E1QaMy7sjkgDiptbCfG0v3CC+QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFINTUa63 2i+3/cbpOiHQx5WoMLrzMB8GA1UdIwQYMBaAFLWsaGmv2VH4l91KpyVk+/KjVthL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUMwRC81RUY3NTE1NDdE QTgxMUVCOUJFODRFNThDNEY5QUUwMi90YXhvYWFfWlVmaVgzVXFuSldUNzhxTlcy RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RheG9hYV9aVWZpWDNVcW5KV1Q3OHFOVzJFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjVDMEQvNUVGNzUxNTQ3REE4MTFFQjlCRTg0RTU4QzRGOUFFMDIvRjlENEFBQjg3 REE5MTFFQjg1MzJBNTU5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ4t6MA8EAgACMAkDBwAgAQ3xUIAwDQYJKoZIhvcNAQELBQADggEB AAVh915a+BRjFZqZ+kukkEEGmmiDStXIYp/9D2lLpObNgad0Ejf2dyykhMCE1x+b qa1rh8DCS3EzvUlMunxYW4QYN5YgAqdU8g7SZDcvbVT0RykZVUPxQO9ljRNYfOXZ 1sjL9ON19efvYiXuUpLynEG54uAD2rPmZoJz4KP89kgh8rXz7d2Zr8THCA8jgQea FAz42gohtfpZZrj2cX8DT/I/fGjRlasymcz26RU2fC4PwR9bTntBl7IVas6ObUAK xeiDPlopSOVMlwVir+JR2XP6Ycc3o1Vby0kDmckBBt0eV3/5eQc7HsoyzyvVoiBY 7kFEeoWiK9fEScRwjRtt+o8= -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:42 2026 by rpki-client