$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/A1EB38DEF23D11EDAF983380C4F9AE02.roa File: A1EB38DEF23D11EDAF983380C4F9AE02.roa (raw, json) Hash identifier: zxKqdb0zMWCK7O7b2gTDy0Tlsn+WOImUW+TSuWVYasI= Subject key identifier: 86:AF:45:CE:06:12:27:E5:B4:D0:3C:7A:B9:C5:BD:21:A0:65:BF:DB Certificate issuer: /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Certificate serial: 0234 Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/A1EB38DEF23D11EDAF983380C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:10:45 +0000 ROA not before: Thu 22 Jan 2026 15:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150799 IP address blocks: 103.107.240.0/23 maxlen: 23 103.107.240.0/24 maxlen: 24 103.107.241.0/24 maxlen: 24 2400:e7a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679 Validity Not Before: Jan 22 15:45:15 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a410a5-6f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:06:b8:e0:f5:57:72:7c:f1:df:e1:10:40:f2: c2:71:f6:18:e7:60:41:36:40:0a:96:c2:5b:5d:0e: c4:d9:90:6d:77:e6:05:fe:6b:47:25:3e:7a:33:4f: 5c:0a:f6:c3:62:d5:ae:94:da:0a:f2:aa:ee:07:d6: 4c:db:63:de:1c:cf:bc:21:ee:38:9b:c6:93:4b:a6: a0:02:a1:30:03:ff:32:fd:4d:5b:de:0e:ea:dc:21: c6:b0:64:7e:e8:94:95:55:62:91:c0:8c:e2:53:81: fe:29:e1:63:c0:48:df:7e:3b:2f:3b:3e:26:7e:c5: 76:fd:89:18:57:79:2c:3b:55:9f:34:3d:69:55:b4: 18:90:22:76:8d:1e:c9:63:0c:d9:36:56:6e:22:36: 6a:27:78:f3:93:08:55:f3:d3:6a:ca:6e:a0:bc:34: 9a:71:0d:98:4b:3e:28:10:90:81:2a:7d:1f:d0:8e: 8c:78:52:47:10:bf:db:0f:4e:fb:19:f9:e1:13:47: 7f:ae:a7:b9:37:45:79:61:1a:df:9c:70:e6:95:93: 1c:87:c8:92:3b:4e:c8:4b:fe:40:8b:81:79:53:9a: d2:c1:b9:ac:36:18:e9:e2:48:61:9c:b2:8c:c9:75: 19:7b:b0:50:5a:0e:5a:ea:08:e7:78:6b:3f:0e:ff: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AF:45:CE:06:12:27:E5:B4:D0:3C:7A:B9:C5:BD:21:A0:65:BF:DB X509v3 Authority Key Identifier: keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/A1EB38DEF23D11EDAF983380C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.107.240.0/23 IPv6: 2400:e7a0::/32 Signature Algorithm: sha256WithRSAEncryption bf:20:cd:7f:7e:e7:4e:0e:1a:9b:31:b9:44:50:82:4f:20:cc: 2e:82:b1:c4:cd:ab:5a:b0:f5:c4:62:08:a0:db:21:ed:82:c5: 70:1a:3b:8c:5c:49:86:52:75:7c:4a:7b:82:67:d4:b7:ed:a5: 2b:46:2b:52:4d:66:ae:e9:f2:ca:ef:d8:bf:66:fe:de:e2:2e: 9c:9e:17:9e:9e:69:de:38:05:78:1f:1c:cf:f8:0c:5f:93:6e: 4b:97:dd:bf:6b:00:20:96:ae:f7:1e:5c:c4:92:2c:3d:6c:cc: c7:15:fa:16:eb:37:01:9c:c8:04:71:cf:f5:c1:25:13:55:cb: 19:70:fb:88:f1:78:46:cf:14:2b:76:e2:cb:05:69:c5:c5:58: 35:ea:ea:94:aa:f0:05:fc:7e:99:56:43:33:f4:d5:0b:f2:c0: f1:18:dd:10:d3:dd:b5:be:e3:30:a3:b4:93:06:f3:ad:b9:68: f7:03:4e:11:d2:42:7e:f0:2b:fa:f9:8c:ff:2a:45:70:d8:ba: 3f:39:b1:4b:61:2e:cd:0e:3a:f4:05:48:fc:33:66:b2:e0:29: 99:03:ff:57:1a:93:17:d2:e3:c9:1c:22:7f:71:c6:28:c9:c3: c4:a8:a9:25:fe:88:28:a1:5b:50:f7:6d:ac:90:28:c8:bb:eb: b9:96:05:fd -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlCQjcxMTAvBgNVBAUTKDk5NjYzNkExRDQ1RkQzNUExNjVDMTUwQkM1RjYyMzkz NEJCQkI2NzkwHhcNMjYwMTIyMTU0NTE1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTBhNS02ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Aa44PVXcnzx3+EQQPLCcfYY52BBNkAKlsJbXQ7E2ZBtd+YF/mtHJT56M09c CvbDYtWulNoK8qruB9ZM22PeHM+8Ie44m8aTS6agAqEwA/8y/U1b3g7q3CHGsGR+ 6JSVVWKRwIziU4H+KeFjwEjffjsvOz4mfsV2/YkYV3ksO1WfND1pVbQYkCJ2jR7J YwzZNlZuIjZqJ3jzkwhV89Nqym6gvDSacQ2YSz4oEJCBKn0f0I6MeFJHEL/bD077 GfnhE0d/rqe5N0V5YRrfnHDmlZMch8iSO07IS/5Ai4F5U5rSwbmsNhjp4khhnLKM yXUZe7BQWg5a6gjneGs/Dv+QqwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIavRc4G EifltNA8ernFvSGgZb/bMB8GA1UdIwQYMBaAFJlmNqHUX9NaFlwVC8X2I5NLu7Z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUJCNy84NzM3Rjc2RUJF ODcxMUVEOEUwQUFCNzhDNEY5QUUwMi9tV1kyb2RSZjAxb1dYQlVMeGZZamswdTd0 bmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21XWTJvZFJmMDFvV1hCVUx4ZllqazB1N3Ruay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjlCQjcvODczN0Y3NkVCRTg3MTFFRDhFMEFBQjc4QzRGOUFFMDIvQTFFQjM4REVG MjNEMTFFREFGOTgzMzgwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ2vwMA0EAgACMAcDBQAkAOegMA0GCSqGSIb3DQEBCwUAA4IBAQC/ IM1/fudODhqbMblEUIJPIMwugrHEzatasPXEYgig2yHtgsVwGjuMXEmGUnV8SnuC Z9S37aUrRitSTWau6fLK79i/Zv7e4i6cnheenmneOAV4HxzP+Axfk25Ll92/awAg lq73HlzEkiw9bMzHFfoW6zcBnMgEcc/1wSUTVcsZcPuI8XhGzxQrduLLBWnFxVg1 6uqUqvAF/H6ZVkMz9NUL8sDxGN0Q0921vuMwo7STBvOtuWj3A04R0kJ+8Cv6+Yz/ KkVw2Lo/ObFLYS7NDjr0BUj8M2ay4CmZA/9XGpMX0uPJHCJ/ccYoycPEqKkl/ogo oVtQ922skCjIu+u5lgX9 -----END CERTIFICATE-----Generated at Mon Mar 2 23:39:32 2026 by rpki-client