$ rpki-client -vvf rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa File: F91B41A40C5811EFB9F63337C4F9AE02.roa (raw, json) Hash identifier: Jk5uqCPyaNsGd8jbVmaILepyJWOOUgN004FOn1X9Q2I= Subject key identifier: 7C:08:88:FE:01:03:8B:16:A3:C3:70:BB:5E:15:34:42:6F:1C:7E:A3 Certificate issuer: /CN=A91F96DB/serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Certificate serial: 0451 Authority key identifier: 40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:01:23 +0000 ROA not before: Thu 27 Mar 2025 01:06:50 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 132601 IP address blocks: 103.181.180.0/24 maxlen: 24 2001:df0:7140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1105 (0x451) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F96DB, serialNumber=4001F0CD19DDB9942CB5A39567EC3693BE25C6A0 Validity Not Before: Mar 27 01:06:50 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a40e73-b647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:39:18:ac:7e:b9:74:0d:5e:08:30:88:61:a4: 95:fb:23:d7:7b:1a:13:a6:c4:42:ce:d8:bf:68:9e: 46:0d:b3:fb:5f:90:05:fe:59:40:87:2b:64:09:4f: d1:97:08:90:de:b4:31:0f:09:1d:66:1a:63:73:7b: dc:81:68:40:a1:ef:f0:54:a3:40:53:fc:9a:cb:05: af:3e:85:37:9a:b9:32:eb:fb:b0:32:cf:53:fa:07: 40:81:36:1d:04:04:20:3c:3e:87:12:4d:0d:d4:ef: 01:79:0b:21:f0:3f:02:d7:52:cd:b3:8d:a5:c6:44: e1:37:f8:fc:f5:ba:fe:d1:c1:21:66:54:cf:95:be: 0f:4e:a5:48:85:f2:fb:f1:69:96:63:e2:6f:54:6c: 1c:43:42:88:00:40:90:9f:09:86:a4:69:0f:04:b2: 85:32:d9:5e:ec:94:00:75:af:ee:6e:5b:7a:95:1a: d6:74:81:f6:15:d8:98:83:8d:93:70:67:f7:20:c0: d9:34:e8:ed:34:f9:68:45:e6:4e:f0:8e:f0:db:52: b1:1a:ca:56:4b:1b:23:8c:b2:fb:32:3b:82:9c:ef: 8b:bb:ef:cd:c1:01:56:d8:1d:16:8b:5a:52:9f:34: f0:f6:31:b6:7f:95:3f:60:58:c4:82:44:7c:25:8c: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:08:88:FE:01:03:8B:16:A3:C3:70:BB:5E:15:34:42:6F:1C:7E:A3 X509v3 Authority Key Identifier: keyid:40:01:F0:CD:19:DD:B9:94:2C:B5:A3:95:67:EC:36:93:BE:25:C6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/QAHwzRnduZQstaOVZ-w2k74lxqA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QAHwzRnduZQstaOVZ-w2k74lxqA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F96DB/A864D0EA8E3D11ECA87ABF16C4F9AE02/F91B41A40C5811EFB9F63337C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.181.180.0/24 IPv6: 2001:df0:7140::/48 Signature Algorithm: sha256WithRSAEncryption 56:49:82:d9:cf:56:74:66:4c:f2:e5:26:ef:e7:78:ea:c1:a4: a3:9a:23:72:3e:74:26:c6:a7:dd:94:9d:04:85:6a:ce:60:3d: 52:a5:e3:71:d5:b2:5b:1a:65:e0:30:aa:68:c4:55:a7:9b:53: 4d:7c:37:ef:1c:87:f9:28:f8:07:ad:ca:0d:a0:dd:56:ba:83: 0f:1f:c8:7f:c7:9f:5b:db:3f:fd:ae:65:9f:d4:ec:1d:bc:fe: a9:ee:91:2f:20:ab:05:b7:a3:af:6c:76:d6:22:cf:5a:92:b2: dd:ca:6c:75:35:b1:b5:d3:ec:6f:dc:73:82:21:92:55:db:3c: 66:52:fc:91:b3:97:33:9d:4d:15:03:78:87:fd:08:30:13:c5: 61:cb:f0:ac:5e:ab:e6:ad:70:bb:fd:d1:d2:ef:27:f6:3f:be: 33:2c:79:fc:65:62:58:b5:3f:4d:94:84:2f:9a:cf:61:54:fc: c5:0a:8d:68:0a:1d:de:f9:4b:ac:a4:37:57:5e:8a:58:aa:85: 23:da:ae:f9:68:e3:fb:1d:67:6b:f2:56:57:16:c3:53:3d:7c: 4b:ff:83:a0:f1:43:50:e9:30:f7:b9:e3:59:14:0d:0f:43:c2: 4c:fa:06:33:24:c7:93:5d:0a:23:79:76:f1:6a:dd:c0:92:a4: 93:bb:f9:7b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2REIxMTAvBgNVBAUTKDQwMDFGMENEMTlEREI5OTQyQ0I1QTM5NTY3RUMzNjkz QkUyNUM2QTAwHhcNMjUwMzI3MDEwNjUwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGU3My1iNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTkYrH65dA1eCDCIYaSV+yPXexoTpsRCzti/aJ5GDbP7X5AF/llAhytkCU/R lwiQ3rQxDwkdZhpjc3vcgWhAoe/wVKNAU/yaywWvPoU3mrky6/uwMs9T+gdAgTYd BAQgPD6HEk0N1O8BeQsh8D8C11LNs42lxkThN/j89br+0cEhZlTPlb4PTqVIhfL7 8WmWY+JvVGwcQ0KIAECQnwmGpGkPBLKFMtle7JQAda/ublt6lRrWdIH2FdiYg42T cGf3IMDZNOjtNPloReZO8I7w21KxGspWSxsjjLL7MjuCnO+Lu+/NwQFW2B0Wi1pS nzTw9jG2f5U/YFjEgkR8JYwI5QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHwIiP4B A4sWo8Nwu14VNEJvHH6jMB8GA1UdIwQYMBaAFEAB8M0Z3bmULLWjlWfsNpO+Jcag MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTZEQi9BODY0RDBFQThF M0QxMUVDQTg3QUJGMTZDNEY5QUUwMi9RQUh3elJuZHVaUXN0YU9WWi13Mms3NGx4 cUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FBSHd6Um5kdVpRc3RhT1ZaLXcyazc0bHhxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjk2REIvQTg2NEQwRUE4RTNEMTFFQ0E4N0FCRjE2QzRGOUFFMDIvRjkxQjQxQTQw QzU4MTFFRkI5RjYzMzM3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ7W0MA8EAgACMAkDBwAgAQ3wcUAwDQYJKoZIhvcNAQELBQADggEB AFZJgtnPVnRmTPLlJu/neOrBpKOaI3I+dCbGp92UnQSFas5gPVKl43HVslsaZeAw qmjEVaebU018N+8ch/ko+Aetyg2g3Va6gw8fyH/Hn1vbP/2uZZ/U7B28/qnukS8g qwW3o69sdtYiz1qSst3KbHU1sbXT7G/cc4IhklXbPGZS/JGzlzOdTRUDeIf9CDAT xWHL8Kxeq+atcLv90dLvJ/Y/vjMsefxlYli1P02UhC+az2FU/MUKjWgKHd75S6yk N1deiliqhSParvlo4/sdZ2vyVlcWw1M9fEv/g6DxQ1DpMPe541kUDQ9Dwkz6BjMk x5NdCiN5dvFq3cCSpJO7+Xs= -----END CERTIFICATE-----Generated at Mon Mar 2 20:56:39 2026 by rpki-client