$ rpki-client -vvf rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/6F882FB01D5211EE94C36C2FC4F9AE02.roa File: 6F882FB01D5211EE94C36C2FC4F9AE02.roa (raw, json) Hash identifier: DcXA2eAZGbJr4/hnQ1XPdT8g+RnlXIW8GnA5M9/Nm2E= Subject key identifier: 0E:B0:C8:E8:44:0F:0E:6C:F3:BA:64:90:E0:B5:F8:11:5B:3C:5E:92 Certificate issuer: /CN=A91F716F/serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Certificate serial: 01FF Authority key identifier: DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/6F882FB01D5211EE94C36C2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:01:06 +0000 ROA not before: Tue 23 Sep 2025 03:50:54 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151474 IP address blocks: 103.229.254.0/23 maxlen: 23 103.229.254.0/24 maxlen: 24 103.229.255.0/24 maxlen: 24 2001:df2:a040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F716F, serialNumber=DF0F1CE8F68C071143670E251EBB763BDB49BFD6 Validity Not Before: Sep 23 03:50:54 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a43892-8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:a9:cc:16:c0:73:47:f6:e0:ab:f3:08:c6: 22:ae:d0:f6:8a:7b:4c:fd:1c:00:80:95:6a:6d:53: 07:76:77:29:2d:2d:04:6d:c6:23:7d:3d:37:5c:bd: 66:55:90:ac:1e:d2:33:12:59:d7:bd:56:95:f4:f8: 87:2a:f8:57:7b:3c:1f:fb:7d:03:ab:e8:24:fb:53: e1:d2:36:aa:fb:b5:37:c1:d9:04:f8:1e:07:41:2f: 0d:1d:a0:87:79:a1:f9:3b:59:97:be:2c:a6:14:24: 8b:f4:23:5d:46:c3:6c:75:af:38:bb:2a:25:2d:b0: 43:fa:36:74:74:db:40:a8:28:69:6a:16:9c:aa:3c: fd:2d:d3:5f:ba:05:e4:b0:ec:7c:22:b6:7b:bf:35: 51:1b:b0:b8:1c:ee:e8:c5:0a:2b:03:78:24:56:35: 84:7e:62:f2:a3:ab:00:96:ff:e6:85:68:c2:d2:52: 3b:c1:8f:f4:32:f7:80:d6:95:68:53:8a:12:18:bb: 07:ca:e7:f4:31:b8:2f:54:44:a4:15:4d:15:ad:32: 36:47:2d:39:b1:24:da:7f:85:60:bd:81:24:ad:e3: d8:03:f8:8b:50:56:c8:30:94:86:f3:f0:4a:42:80: 6b:86:f2:07:ae:10:bf:4c:d2:7a:0b:f8:1d:af:85: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B0:C8:E8:44:0F:0E:6C:F3:BA:64:90:E0:B5:F8:11:5B:3C:5E:92 X509v3 Authority Key Identifier: keyid:DF:0F:1C:E8:F6:8C:07:11:43:67:0E:25:1E:BB:76:3B:DB:49:BF:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3w8c6PaMBxFDZw4lHrt2O9tJv9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F716F/15E4DDC01D5011EE917D9C2EC4F9AE02/6F882FB01D5211EE94C36C2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.229.254.0/23 IPv6: 2001:df2:a040::/48 Signature Algorithm: sha256WithRSAEncryption 8e:ad:23:a1:10:4a:d0:8e:cf:b9:59:5d:56:25:d7:b4:b3:4c: b2:1d:dc:25:03:a6:48:d4:10:75:eb:21:9b:40:77:44:2e:cf: b2:3f:1b:ad:76:6f:1f:43:e6:3b:d5:49:56:6a:2f:a7:24:3e: c7:fe:e2:1d:0c:91:6a:b8:5a:24:77:3c:67:fe:e6:fd:93:10: 34:fd:ae:ca:0c:f1:79:2a:90:bf:42:dd:12:34:33:26:9d:40: 68:2b:e7:b3:32:a5:c0:d2:0d:c3:58:59:24:3b:31:48:ca:0b: 63:1c:8b:ca:d3:ac:d8:89:4f:30:4a:14:12:14:c1:d8:07:75: c7:2b:99:02:b6:14:b7:83:f2:3b:11:e3:8e:fe:67:51:91:57: 34:38:02:5d:e2:c0:53:1d:52:02:88:c3:b3:e5:e7:4f:ed:05: 5a:28:66:6e:f9:6f:9c:73:c2:b9:02:83:40:ea:0e:bf:c1:5f: e5:8b:18:4c:4c:cf:aa:7f:d8:34:8d:ac:fa:a5:66:38:0f:00: a5:bb:d4:75:2a:b9:d7:53:31:b2:e0:62:d5:bc:25:91:a9:c1: 9b:6f:9b:4c:e1:3b:d1:7e:ee:9e:a6:f3:76:f1:93:6a:51:78: ac:a5:9a:ea:a8:56:17:03:2e:67:6a:82:22:78:8e:5a:d4:83: b4:e0:2c:f6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxNkYxMTAvBgNVBAUTKERGMEYxQ0U4RjY4QzA3MTE0MzY3MEUyNTFFQkI3NjNC REI0OUJGRDYwHhcNMjUwOTIzMDM1MDU0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzg5Mi04OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprepzBbAc0f24KvzCMYirtD2intM/RwAgJVqbVMHdncpLS0EbcYjfT03XL1m VZCsHtIzElnXvVaV9PiHKvhXezwf+30Dq+gk+1Ph0jaq+7U3wdkE+B4HQS8NHaCH eaH5O1mXviymFCSL9CNdRsNsda84uyolLbBD+jZ0dNtAqChpahacqjz9LdNfugXk sOx8IrZ7vzVRG7C4HO7oxQorA3gkVjWEfmLyo6sAlv/mhWjC0lI7wY/0MveA1pVo U4oSGLsHyuf0MbgvVESkFU0VrTI2Ry05sSTaf4VgvYEkrePYA/iLUFbIMJSG8/BK QoBrhvIHrhC/TNJ6C/gdr4WhdwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFA6wyOhE Dw5s87pkkOC1+BFbPF6SMB8GA1UdIwQYMBaAFN8PHOj2jAcRQ2cOJR67djvbSb/W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzE2Ri8xNUU0RERDMDFE NTAxMUVFOTE3RDlDMkVDNEY5QUUwMi8zdzhjNlBhTUJ4RkRadzRsSHJ0Mk85dEp2 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzN3OGM2UGFNQnhGRFp3NGxIcnQyTzl0SnY5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjcxNkYvMTVFNEREQzAxRDUwMTFFRTkxN0Q5QzJFQzRGOUFFMDIvNkY4ODJGQjAx RDUyMTFFRTk0QzM2QzJGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ+X+MA8EAgACMAkDBwAgAQ3yoEAwDQYJKoZIhvcNAQELBQADggEB AI6tI6EQStCOz7lZXVYl17SzTLId3CUDpkjUEHXrIZtAd0Quz7I/G612bx9D5jvV SVZqL6ckPsf+4h0MkWq4WiR3PGf+5v2TEDT9rsoM8XkqkL9C3RI0MyadQGgr57My pcDSDcNYWSQ7MUjKC2Mci8rTrNiJTzBKFBIUwdgHdccrmQK2FLeD8jsR447+Z1GR VzQ4Al3iwFMdUgKIw7Pl50/tBVooZm75b5xzwrkCg0DqDr/BX+WLGExMz6p/2DSN rPqlZjgPAKW71HUquddTMbLgYtW8JZGpwZtvm0zhO9F+7p6m83bxk2pReKylmuqo VhcDLmdqgiJ4jlrUg7TgLPY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:34:49 2026 by rpki-client