$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa File: 6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa (raw, json) Hash identifier: LkhP34kRAwsaZGXbZCKiGhgebtzNNtbT059q5fOSQxI= Subject key identifier: 9C:92:BA:25:5D:A2:58:54:CD:06:9F:0B:14:EA:44:9D:D1:74:36:8D Certificate issuer: /CN=A91F7E85/serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Certificate serial: 0CA1 Authority key identifier: 59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:55:27 +0000 ROA not before: Fri 03 Oct 2025 05:08:21 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139026 IP address blocks: 103.138.164.0/23 maxlen: 23 103.138.164.0/24 maxlen: 24 103.138.165.0/24 maxlen: 24 2001:df0:4480::/48 maxlen: 48 2400:a7e0::/32 maxlen: 32 2400:a7e0::/33 maxlen: 33 2400:a7e0::/34 maxlen: 34 2400:a7e0::/38 maxlen: 38 2400:a7e0:400::/38 maxlen: 38 2400:a7e0:800::/38 maxlen: 38 2400:a7e0:c00::/38 maxlen: 38 2400:a7e0:4000::/34 maxlen: 34 2400:a7e0:8000::/33 maxlen: 33 2400:a7e0:8000::/34 maxlen: 34 2400:a7e0:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:53:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3233 (0xca1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7E85, serialNumber=596852D52994FBB67A6379AB1E0AF514553EE886 Validity Not Before: Oct 3 05:08:21 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a4454f-6344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:c8:cd:7b:db:26:c2:59:9a:65:d4:ae:4d: 71:ed:5a:96:47:b8:30:de:33:42:38:8b:0c:0f:4b: 24:78:26:a6:30:6c:af:6d:ae:f1:13:0b:89:50:7e: 60:b7:d6:5f:56:ab:62:e5:a1:9a:64:45:01:97:32: 11:bc:93:fc:63:24:be:06:5d:53:91:f3:ab:cf:7e: 23:17:38:1d:80:58:cb:d3:3b:bd:62:0f:03:c2:ad: 5d:23:08:c7:aa:18:b2:57:83:ca:6c:51:a2:76:fd: c1:66:a0:a5:8a:09:1a:a1:e3:0b:24:f0:5c:21:00: 90:ed:dc:8e:92:56:ce:14:31:55:00:25:25:cf:ef: 45:3b:f1:d6:42:c2:9b:fc:f1:af:49:9d:47:4c:b3: d4:e2:21:f3:5a:eb:f9:b8:42:c9:45:dc:7e:02:25: 95:fa:1f:ec:3a:19:7f:e1:e7:c2:52:b1:27:c1:a1: 8b:16:82:86:ad:38:02:4f:87:cf:6c:86:b3:54:f5: 77:00:56:ce:bb:86:48:8c:02:d1:95:b2:01:b4:59: bc:49:fd:79:93:bb:17:38:2b:84:c1:a3:78:a8:7e: 11:7b:ec:98:f3:2a:82:27:88:44:6a:29:0c:d5:d7: ed:3d:c7:aa:5b:29:56:9e:83:1a:60:82:66:2b:92: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:92:BA:25:5D:A2:58:54:CD:06:9F:0B:14:EA:44:9D:D1:74:36:8D X509v3 Authority Key Identifier: keyid:59:68:52:D5:29:94:FB:B6:7A:63:79:AB:1E:0A:F5:14:55:3E:E8:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWhS1SmU-7Z6Y3mrHgr1FFU-6IY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7E85/B2E0E5AE1C3411EAA8E25A5CC4F9AE02/6AFD06C0EB8B11EEA2DC1E49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.164.0/23 IPv6: 2001:df0:4480::/48 2400:a7e0::/32 Signature Algorithm: sha256WithRSAEncryption 92:39:04:a7:6c:69:0c:0d:8b:d9:a3:55:a8:3a:75:64:04:3d: b5:1a:6f:ad:b9:33:f6:c4:46:58:75:a6:60:88:dc:b3:9c:7b: de:30:f2:dc:9b:09:57:0d:7b:a4:95:c4:14:9c:e7:8b:38:7a: 68:98:3a:b8:8f:57:bf:73:62:f7:a8:1b:00:5a:ba:51:2e:53: 42:f3:8c:ba:4c:08:47:75:fa:3a:37:58:c4:25:d3:d8:bc:dd: 5e:4e:c8:d9:44:84:f6:ce:90:0d:9b:e9:3b:63:6e:59:ee:cf: c8:1f:0d:7c:e7:cd:09:f2:c1:6f:79:97:b1:0c:28:bb:2b:e1: ab:09:5a:e3:68:f4:66:ec:7d:f8:5b:36:76:1b:bb:15:f6:19: 7f:e5:5b:0f:c8:db:ce:3c:05:51:36:6e:65:a1:8e:54:40:f9: bb:39:72:05:0f:65:2b:92:85:74:b2:09:47:7e:bf:f0:66:dc: 45:6f:4d:94:19:f4:b3:97:db:e0:5d:66:56:96:5a:f3:75:af: 67:76:20:09:f1:0e:62:2a:9b:0b:78:5d:c9:55:84:a3:a5:03: ae:e7:e4:e2:f8:90:9d:0b:c1:60:e9:34:1d:c5:6e:97:54:ce: 22:a0:e1:f5:c8:06:d6:20:b8:45:7f:d9:c8:61:6f:fe:58:a9: 0d:0d:ed:9e -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdFODUxMTAvBgNVBAUTKDU5Njg1MkQ1Mjk5NEZCQjY3QTYzNzlBQjFFMEFGNTE0 NTUzRUU4ODYwHhcNMjUxMDAzMDUwODIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDU0Zi02MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp/IzXvbJsJZmmXUrk1x7VqWR7gw3jNCOIsMD0skeCamMGyvba7xEwuJUH5g t9ZfVqti5aGaZEUBlzIRvJP8YyS+Bl1TkfOrz34jFzgdgFjL0zu9Yg8Dwq1dIwjH qhiyV4PKbFGidv3BZqCligkaoeMLJPBcIQCQ7dyOklbOFDFVACUlz+9FO/HWQsKb /PGvSZ1HTLPU4iHzWuv5uELJRdx+AiWV+h/sOhl/4efCUrEnwaGLFoKGrTgCT4fP bIazVPV3AFbOu4ZIjALRlbIBtFm8Sf15k7sXOCuEwaN4qH4Re+yY8yqCJ4hEaikM 1dftPceqWylWnoMaYIJmK5KYlwIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFJySuiVd olhUzQafCxTqRJ3RdDaNMB8GA1UdIwQYMBaAFFloUtUplPu2emN5qx4K9RRVPuiG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0U4NS9CMkUwRTVBRTFD MzQxMUVBQThFMjVBNUNDNEY5QUUwMi9XV2hTMVNtVS03WjZZM21ySGdyMUZGVS02 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dXaFMxU21VLTdaNlkzbXJIZ3IxRkZVLTZJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdFODUvQjJFMEU1QUUxQzM0MTFFQUE4RTI1QTVDQzRGOUFFMDIvNkFGRDA2QzBF QjhCMTFFRUEyREMxRTQ5QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ4qkMBYEAgACMBADBwAgAQ3wRIADBQAkAKfgMA0GCSqGSIb3DQEB CwUAA4IBAQCSOQSnbGkMDYvZo1WoOnVkBD21Gm+tuTP2xEZYdaZgiNyznHveMPLc mwlXDXuklcQUnOeLOHpomDq4j1e/c2L3qBsAWrpRLlNC84y6TAhHdfo6N1jEJdPY vN1eTsjZRIT2zpANm+k7Y25Z7s/IHw18580J8sFveZexDCi7K+GrCVrjaPRm7H34 WzZ2G7sV9hl/5VsPyNvOPAVRNm5loY5UQPm7OXIFD2UrkoV0sglHfr/wZtxFb02U GfSzl9vgXWZWllrzda9ndiAJ8Q5iKpsLeF3JVYSjpQOu5+Ti+JCdC8Fg6TQdxW6X VM4ioOH1yAbWILhFf9nIYW/+WKkNDe2e -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:10 2026 by rpki-client