$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/6CB78E8E967811EA92E45A27C4F9AE02.roa File: 6CB78E8E967811EA92E45A27C4F9AE02.roa (raw, json) Hash identifier: l1A4YgndzbqI3MDzdQHMj700aU0cnN7MLfy/zuo883k= Subject key identifier: 0F:4C:5A:F3:40:61:89:D9:E5:2D:E7:62:9E:F1:2C:19:88:7D:F5:89 Certificate issuer: /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Certificate serial: 2DB0 Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/6CB78E8E967811EA92E45A27C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:12:45 +0000 ROA not before: Thu 06 Mar 2025 15:32:20 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 56304 IP address blocks: 103.15.152.0/22 maxlen: 24 175.111.100.0/22 maxlen: 24 2400:6900::/32 maxlen: 32 2400:6900:3010::/48 maxlen: 48 2400:6900:f000::/48 maxlen: 48 2400:6900:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 15:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11696 (0x2db0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550 Validity Not Before: Mar 6 15:32:20 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a4030d-4427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:73:aa:03:7a:5b:51:9e:54:0a:0d:ce:15: 2f:21:40:bd:fe:e1:cf:c6:dd:d7:fb:52:b8:cb:9f: ce:02:15:46:1a:51:54:55:f8:e3:89:08:b0:7e:8d: ee:b4:70:c9:7d:66:0e:32:28:85:10:5b:a9:6b:9a: e1:f3:20:ae:dc:7e:7e:ee:f1:62:b8:f6:91:8d:60: c6:75:a4:8f:10:91:1b:74:a1:69:4f:83:32:7b:f0: 6e:d7:78:81:44:c2:5c:79:9e:ff:da:93:5e:47:b1: cd:96:2c:6c:86:35:3b:5f:7f:d7:8f:cc:b1:b5:3a: 2d:83:e3:6f:f0:50:51:96:82:14:5c:0c:f3:e4:62: 89:cb:fe:c6:b9:1a:7c:f2:64:f4:3a:99:39:21:8d: 02:87:a1:5c:14:27:b3:27:f2:54:bb:08:16:f2:58: 27:97:5b:61:6a:41:90:ff:a1:a4:d7:b5:39:48:ea: df:3f:b1:c6:da:81:26:68:17:56:8e:23:eb:49:93: 8c:c4:9f:3d:f9:d3:ce:99:0a:21:af:84:9b:a7:60: 13:0b:a9:5e:ce:27:01:63:6c:b9:1b:3c:ad:d7:07: 6a:94:fe:0a:59:a7:4a:f3:c4:16:9b:fa:8c:50:77: ef:53:83:ab:45:76:16:22:70:19:9a:3e:e0:bf:a9: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:5A:F3:40:61:89:D9:E5:2D:E7:62:9E:F1:2C:19:88:7D:F5:89 X509v3 Authority Key Identifier: keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/6CB78E8E967811EA92E45A27C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.15.152.0/22 175.111.100.0/22 IPv6: 2400:6900::/32 Signature Algorithm: sha256WithRSAEncryption 37:de:c1:35:86:8c:09:50:ea:c3:df:0d:03:3b:d3:99:f1:93: 5e:58:ce:66:a2:96:45:37:25:82:cd:2f:75:b6:76:16:e5:73: 59:6b:9e:af:9c:2b:2b:8b:12:09:4e:90:2c:02:a1:4a:07:89: 1d:7e:ef:b2:58:78:f6:bd:94:ce:77:96:d5:6c:c6:fe:48:fa: 43:88:74:f9:c1:5f:34:c3:e2:3c:42:65:53:e5:39:00:9a:7b: 7a:7b:88:36:ba:ba:1a:20:71:31:75:d8:68:2d:74:4e:98:fe: 9c:c4:2d:de:f6:fc:51:54:07:91:9c:fc:75:40:48:36:06:a0: 06:ea:2d:5f:2c:d4:f9:7e:67:cf:c4:29:0f:ba:5b:8c:7f:bd: 9f:c7:86:21:ee:b4:e0:4d:93:97:14:c3:31:53:8f:5d:75:f7: 89:7e:f7:94:bb:68:d4:f6:7e:ec:34:aa:1b:9e:56:d5:a0:38: da:b0:b5:0b:f0:27:51:2f:a8:6c:44:5e:f9:6c:99:c1:8a:2c: fc:bd:91:b0:4c:26:bc:d4:53:42:12:05:53:f0:f5:d4:d5:5f: 17:72:52:8c:94:8f:da:e7:21:0b:c5:07:0d:18:6b:dc:f0:da: 5c:cb:fc:6b:1c:d3:9c:cf:1b:3d:1d:c1:5b:59:0a:08:f7:71: 2c:99:94:4e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICLbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVCMjcxMTAvBgNVBAUTKDc5RTU2MzJBRjI5QkFFNjRFNUY5RjE5QzU3NUJDNUE5 OTVFMjA1NTAwHhcNMjUwMzA2MTUzMjIwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDMwZC00NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAopZzqgN6W1GeVAoNzhUvIUC9/uHPxt3X+1K4y5/OAhVGGlFUVfjjiQiwfo3u tHDJfWYOMiiFEFupa5rh8yCu3H5+7vFiuPaRjWDGdaSPEJEbdKFpT4Mye/Bu13iB RMJceZ7/2pNeR7HNlixshjU7X3/Xj8yxtTotg+Nv8FBRloIUXAzz5GKJy/7GuRp8 8mT0Opk5IY0Ch6FcFCezJ/JUuwgW8lgnl1thakGQ/6Gk17U5SOrfP7HG2oEmaBdW jiPrSZOMxJ89+dPOmQohr4Sbp2ATC6lezicBY2y5Gzyt1wdqlP4KWadK88QWm/qM UHfvU4OrRXYWInAZmj7gv6k+bwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFA9MWvNA YYnZ5S3nYp7xLBmIffWJMB8GA1UdIwQYMBaAFHnlYyrym65k5fnxnFdbxamV4gVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUIyNy8xNjdBOTdFQzlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9lZVZqS3ZLYnJtVGwtZkdjVjF2RnFaWGlC VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VlVmpLdkticm1UbC1mR2NWMXZGcVpYaUJWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVCMjcvMTY3QTk3RUM5QUUzMTFFM0E1QTI1N0E3NTkxMUVBMzIvNkNCNzhFOEU5 Njc4MTFFQTkyRTQ1QTI3QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZw+YAwQCr29kMA0EAgACMAcDBQAkAGkAMA0GCSqGSIb3DQEBCwUA A4IBAQA33sE1howJUOrD3w0DO9OZ8ZNeWM5mopZFNyWCzS91tnYW5XNZa56vnCsr ixIJTpAsAqFKB4kdfu+yWHj2vZTOd5bVbMb+SPpDiHT5wV80w+I8QmVT5TkAmnt6 e4g2uroaIHExddhoLXROmP6cxC3e9vxRVAeRnPx1QEg2BqAG6i1fLNT5fmfPxCkP uluMf72fx4Yh7rTgTZOXFMMxU49ddfeJfveUu2jU9n7sNKobnlbVoDjasLUL8CdR L6hsRF75bJnBiiz8vZGwTCa81FNCEgVT8PXU1V8XclKMlI/a5yELxQcNGGvc8Npc y/xrHNOczxs9HcFbWQoI93EsmZRO -----END CERTIFICATE-----Generated at Mon Mar 2 21:44:59 2026 by rpki-client