$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/76A59020E12911EAB8642E19C4F9AE02.roa File: 76A59020E12911EAB8642E19C4F9AE02.roa (raw, json) Hash identifier: t3r3ct1v62CkRoqbDTfbFNF8KY0PM5gtyGYmsu7VXes= Subject key identifier: 7F:F2:2A:EC:BD:1B:05:CF:34:60:32:30:41:C5:E1:99:2A:90:A8:94 Certificate issuer: /CN=A91FBFC9/serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Certificate serial: 08A0 Authority key identifier: A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/76A59020E12911EAB8642E19C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:42:55 +0000 ROA not before: Thu 02 Oct 2025 20:51:35 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 137005 IP address blocks: 103.101.244.0/24 maxlen: 24 103.101.245.0/24 maxlen: 24 103.101.246.0/24 maxlen: 24 103.101.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2208 (0x8a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBFC9, serialNumber=A28ADA7611BDFD0FADB81D8A803A1109900F7780 Validity Not Before: Oct 2 20:51:35 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45e7f-738d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:51:c5:fa:b4:95:54:a8:86:9f:78:2a:60: 16:3e:2f:aa:73:57:09:10:73:c2:88:7a:45:9f:0e: 6f:10:7a:c7:63:0c:c0:22:0a:bc:cd:6e:eb:71:c0: fa:72:f0:ea:4e:36:cd:db:37:23:da:59:99:20:93: 1d:91:e5:36:7a:91:2b:32:f8:4c:f5:2d:b4:b3:e8: 57:9b:bb:8f:86:d4:7b:59:43:02:61:4a:90:d6:2d: fe:89:fb:5e:d6:d0:3c:5b:cd:57:31:46:ca:ba:40: 32:98:42:05:aa:75:68:6a:82:89:4e:2b:ef:b4:16: 2f:88:28:16:ef:e1:6d:03:7f:8f:1f:4e:c3:d0:68: e0:ea:81:3a:7f:2c:21:07:da:b9:73:33:b8:50:b5: 5a:48:de:18:d3:b9:f1:ba:f3:b2:bf:c7:3f:4c:3b: 0f:21:fb:bf:5d:d3:94:01:3e:5d:15:c2:a9:11:d2: e8:91:97:76:ad:cd:53:58:fa:07:b0:98:33:85:0e: 96:5e:ca:66:d8:f1:c3:a9:70:fb:69:34:8b:fe:91: 34:1d:e8:4e:50:d8:34:e4:6e:2b:a9:3a:7e:c8:a7: e3:1a:91:eb:86:60:25:2c:9f:ba:b5:e7:3d:4a:06: 8c:a7:db:76:55:b8:1b:a4:1e:3c:b4:ad:60:4a:5d: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F2:2A:EC:BD:1B:05:CF:34:60:32:30:41:C5:E1:99:2A:90:A8:94 X509v3 Authority Key Identifier: keyid:A2:8A:DA:76:11:BD:FD:0F:AD:B8:1D:8A:80:3A:11:09:90:0F:77:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/ooradhG9_Q-tuB2KgDoRCZAPd4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ooradhG9_Q-tuB2KgDoRCZAPd4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBFC9/B37F6522E12711EA8EAA2116C4F9AE02/76A59020E12911EAB8642E19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:1a:46:4a:d6:25:fb:7b:76:4d:3f:6b:32:f9:b1:48:c7:24: b1:2a:8d:f1:d6:1c:bc:99:a5:ad:52:8d:41:f2:52:0e:4b:72: 9f:51:4a:bc:54:6b:45:c1:d9:da:ed:ed:be:0b:a3:73:58:65: ca:bd:96:01:38:ca:37:4b:59:4e:95:b8:75:62:f0:c5:cc:83: 9f:ce:74:b2:02:60:aa:f3:90:f2:ae:43:cf:e5:52:93:65:b3: 35:8e:40:ad:35:83:07:c9:03:01:c0:e1:96:0d:14:9a:73:21: 70:b9:a2:45:dd:46:85:86:a6:f6:6e:2f:f7:3e:67:bb:eb:85: f7:b9:dd:18:e9:1f:3e:27:68:54:56:a6:8c:de:f9:6c:c7:59: 1e:4d:9f:9b:55:eb:c6:8e:29:36:99:37:80:48:b9:b0:75:74: 3d:b6:d8:4b:7d:82:4c:aa:75:56:d3:0d:24:7b:54:bf:be:28: 06:96:57:7f:ce:cd:13:04:55:c8:a4:f1:fa:9e:db:24:ff:55: d5:33:4f:26:a1:a6:57:34:66:6a:6d:07:ac:ff:1c:42:93:23: b1:46:81:c8:2b:49:31:74:96:5a:8c:ee:24:0f:eb:47:36:cb: e4:2b:5f:91:4d:36:5b:12:dd:57:fa:8a:95:b0:9d:9a:6b:80: 00:33:1b:32 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJGQzkxMTAvBgNVBAUTKEEyOEFEQTc2MTFCREZEMEZBREI4MUQ4QTgwM0ExMTA5 OTAwRjc3ODAwHhcNMjUxMDAyMjA1MTM1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWU3Zi03MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoXVRxfq0lVSohp94KmAWPi+qc1cJEHPCiHpFnw5vEHrHYwzAIgq8zW7rccD6 cvDqTjbN2zcj2lmZIJMdkeU2epErMvhM9S20s+hXm7uPhtR7WUMCYUqQ1i3+ifte 1tA8W81XMUbKukAymEIFqnVoaoKJTivvtBYviCgW7+FtA3+PH07D0Gjg6oE6fywh B9q5czO4ULVaSN4Y07nxuvOyv8c/TDsPIfu/XdOUAT5dFcKpEdLokZd2rc1TWPoH sJgzhQ6WXspm2PHDqXD7aTSL/pE0HehOUNg05G4rqTp+yKfjGpHrhmAlLJ+6tec9 SgaMp9t2VbgbpB48tK1gSl2TjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH/yKuy9 GwXPNGAyMEHF4ZkqkKiUMB8GA1UdIwQYMBaAFKKK2nYRvf0PrbgdioA6EQmQD3eA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkZDOS9CMzdGNjUyMkUx MjcxMUVBOEVBQTIxMTZDNEY5QUUwMi9vb3JhZGhHOV9RLXR1QjJLZ0RvUkNaQVBk NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29vcmFkaEc5X1EtdHVCMktnRG9SQ1pBUGQ0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkJGQzkvQjM3RjY1MjJFMTI3MTFFQThFQUEyMTE2QzRGOUFFMDIvNzZBNTkwMjBF MTI5MTFFQUI4NjQyRTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2X0MA0GCSqGSIb3DQEBCwUAA4IBAQBfGkZK1iX7e3ZNP2sy+bFI xySxKo3x1hy8maWtUo1B8lIOS3KfUUq8VGtFwdna7e2+C6NzWGXKvZYBOMo3S1lO lbh1YvDFzIOfznSyAmCq85DyrkPP5VKTZbM1jkCtNYMHyQMBwOGWDRSacyFwuaJF 3UaFhqb2bi/3Pme764X3ud0Y6R8+J2hUVqaM3vlsx1keTZ+bVevGjik2mTeASLmw dXQ9tthLfYJMqnVW0w0ke1S/vigGlld/zs0TBFXIpPH6ntsk/1XVM08moaZXNGZq bQes/xxCkyOxRoHIK0kxdJZajO4kD+tHNsvkK1+RTTZbEt1X+oqVsJ2aa4AAMxsy -----END CERTIFICATE-----Generated at Mon Mar 2 08:18:53 2026 by rpki-client