$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa File: 7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa (raw, json) Hash identifier: elXGzOAXv/vOs6kbXOd59T9g8u/dR7mHNS46gVlolLM= Subject key identifier: 33:47:AE:51:4B:1E:2F:32:2F:5E:C2:4E:C6:B9:DA:EF:7D:9B:17:FF Certificate issuer: /CN=A91F67F5/serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Certificate serial: 0975 Authority key identifier: AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:01:56 +0000 ROA not before: Mon 02 Feb 2026 20:16:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 55707 IP address blocks: 101.2.168.0/22 maxlen: 24 103.7.72.0/22 maxlen: 22 103.7.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2421 (0x975) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67F5, serialNumber=ABF173DC0A2586959291769A067037319AFA8FD5 Validity Not Before: Feb 2 20:16:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a462f4-2778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:cd:86:65:3d:49:b5:ff:4a:c9:3c:8b:0a: 33:53:97:a8:40:5b:3b:4b:f9:9d:2c:e4:4f:d4:4b: a5:5a:94:ec:ba:12:80:8d:37:8c:27:74:dd:a0:e9: a8:53:3e:66:42:7f:53:a9:d4:b5:6f:d1:74:64:71: 06:50:c1:91:41:52:94:db:a3:34:aa:c4:e4:f3:58: 36:34:60:0e:47:45:c9:51:d1:4f:46:95:1b:ec:40: 88:4c:71:2a:57:3b:78:af:d7:d4:6c:77:d4:de:95: 36:8e:f5:99:14:ba:5d:56:44:0a:14:eb:5c:44:62: c6:12:d5:a6:ae:25:d0:45:9b:2f:c9:32:a7:5e:d1: 67:f6:a9:f9:e7:0f:66:87:8e:0b:5d:ca:8a:02:5b: 25:7b:0a:ab:18:f3:73:05:b8:16:93:20:5e:28:54: 29:27:59:a8:18:cb:10:a0:8c:a5:a6:a8:50:9b:e6: 2e:3f:32:e7:82:0b:ac:93:bf:df:46:47:76:95:0f: db:91:61:32:49:1d:5a:3e:1a:03:d7:36:1f:86:87: ba:4c:ab:da:ec:c8:ae:25:cc:53:ff:9c:53:e4:07: 2f:c4:a9:92:df:18:b5:40:a4:23:b4:6c:2b:75:f3: 84:4b:cc:5f:0c:dd:bb:a7:7c:be:48:9a:e7:b0:3e: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:47:AE:51:4B:1E:2F:32:2F:5E:C2:4E:C6:B9:DA:EF:7D:9B:17:FF X509v3 Authority Key Identifier: keyid:AB:F1:73:DC:0A:25:86:95:92:91:76:9A:06:70:37:31:9A:FA:8F:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/q_Fz3AolhpWSkXaaBnA3MZr6j9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q_Fz3AolhpWSkXaaBnA3MZr6j9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67F5/BD10B4DCB1C611EAA848296CC4F9AE02/7CA0A2E2B1CE11EAAF2F2784C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 101.2.168.0/22 103.7.72.0/22 Signature Algorithm: sha256WithRSAEncryption 20:0f:bd:63:e0:93:47:1c:56:5a:1f:33:4b:4d:20:31:c1:4f: de:01:a4:60:a4:a1:d3:71:72:1e:a5:b6:3c:2f:4f:6f:44:5b: a9:f6:61:3b:00:6f:46:1b:23:22:94:e2:b4:8e:09:fa:fb:17: 43:11:12:11:c5:80:07:29:cc:73:b1:08:8e:4e:18:07:f1:12: e9:72:5a:a1:97:98:63:13:26:24:bb:c0:e4:b7:bb:ce:dd:00: 0e:6f:82:ba:28:dd:70:f6:cc:61:a9:74:5d:52:7d:e5:23:a9: f4:70:23:cd:ee:fd:23:8c:8c:37:8d:eb:e6:f9:b6:c4:36:97: b7:a0:ab:5d:28:14:65:cf:86:57:53:71:db:73:ed:18:97:b3: 69:be:44:5b:cb:90:48:17:7f:57:e8:71:c1:bf:4d:43:f9:87: ec:c9:cd:c3:d5:18:b2:6d:22:77:46:f1:79:3b:a2:a2:a9:c7: 00:2c:73:96:88:bf:d6:13:3d:22:e8:5c:48:c7:e3:37:99:16: d0:a6:9a:1a:67:55:bb:fb:58:33:b6:db:f2:fe:e6:63:1b:60: 01:6c:93:13:34:64:fd:2a:a1:35:43:2a:bb:95:25:d6:e0:b2: 5b:f9:e4:76:d3:73:de:25:9c:10:7d:0b:3d:82:3a:73:1c:ab: 48:8e:ff:22 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICCXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3RjUxMTAvBgNVBAUTKEFCRjE3M0RDMEEyNTg2OTU5MjkxNzY5QTA2NzAzNzMx OUFGQThGRDUwHhcNMjYwMjAyMjAxNjUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjJmNC0yNzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqDNhmU9SbX/Ssk8iwozU5eoQFs7S/mdLORP1EulWpTsuhKAjTeMJ3TdoOmo Uz5mQn9TqdS1b9F0ZHEGUMGRQVKU26M0qsTk81g2NGAOR0XJUdFPRpUb7ECITHEq Vzt4r9fUbHfU3pU2jvWZFLpdVkQKFOtcRGLGEtWmriXQRZsvyTKnXtFn9qn55w9m h44LXcqKAlslewqrGPNzBbgWkyBeKFQpJ1moGMsQoIylpqhQm+YuPzLnggusk7/f Rkd2lQ/bkWEySR1aPhoD1zYfhoe6TKva7MiuJcxT/5xT5AcvxKmS3xi1QKQjtGwr dfOES8xfDN27p3y+SJrnsD42hQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFDNHrlFL Hi8yL17CTsa52u99mxf/MB8GA1UdIwQYMBaAFKvxc9wKJYaVkpF2mgZwNzGa+o/V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdGNS9CRDEwQjREQ0Ix QzYxMUVBQTg0ODI5NkNDNEY5QUUwMi9xX0Z6M0FvbGhwV1NrWGFhQm5BM01acjZq OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FfRnozQW9saHBXU2tYYWFCbkEzTVpyNmo5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY3RjUvQkQxMEI0RENCMUM2MTFFQUE4NDgyOTZDQzRGOUFFMDIvN0NBMEEyRTJC MUNFMTFFQUFGMkYyNzg0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZQKoAwQCZwdIMA0GCSqGSIb3DQEBCwUAA4IBAQAgD71j4JNHHFZa HzNLTSAxwU/eAaRgpKHTcXIepbY8L09vRFup9mE7AG9GGyMilOK0jgn6+xdDERIR xYAHKcxzsQiOThgH8RLpclqhl5hjEyYku8Dkt7vO3QAOb4K6KN1w9sxhqXRdUn3l I6n0cCPN7v0jjIw3jevm+bbENpe3oKtdKBRlz4ZXU3Hbc+0Yl7NpvkRby5BIF39X 6HHBv01D+Yfsyc3D1RiybSJ3RvF5O6KiqccALHOWiL/WEz0i6FxIx+M3mRbQppoa Z1W7+1gzttvy/uZjG2ABbJMTNGT9KqE1Qyq7lSXW4LJb+eR203PeJZwQfQs9gjpz HKtIjv8i -----END CERTIFICATE-----Generated at Mon Mar 2 04:07:14 2026 by rpki-client