$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/99AA3580F88611EE8E9B3E71C4F9AE02.roa File: 99AA3580F88611EE8E9B3E71C4F9AE02.roa (raw, json) Hash identifier: bPEX0dVvMeMHuF9ZTGsIQels0ly/XiaUVU8i8aAIXrw= Subject key identifier: 62:71:1C:B3:2D:EE:5F:E6:B3:CC:B5:D8:B5:EF:81:C1:F9:2B:58:79 Certificate issuer: /CN=A91FF89A/serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63 Certificate serial: 016A Authority key identifier: 60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/99AA3580F88611EE8E9B3E71C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:48:50 +0000 ROA not before: Wed 05 Nov 2025 05:19:37 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 151842 IP address blocks: 103.224.72.0/24 maxlen: 24 2001:df2:fdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 362 (0x16a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF89A, serialNumber=60E54F6051EDB41EA7A950896CD9BBD670120D63 Validity Not Before: Nov 5 05:19:37 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a59541-ab6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:14:c3:c9:eb:20:f0:49:5f:4d:6d:a8:28:af: ec:ff:eb:ca:0f:70:78:0e:df:f4:47:45:eb:28:d8: 8d:a9:fd:7c:42:d2:28:ef:b1:dd:db:4f:78:80:8c: f8:60:8c:e9:22:56:e7:45:ca:c0:55:5b:41:da:27: 1f:5f:28:c3:9c:63:04:69:9d:7c:16:4a:a1:b1:51: 5c:52:11:75:45:f9:99:f3:45:12:41:0e:dc:9d:9d: ec:50:fb:98:1b:e2:d3:bf:24:80:5e:cb:ab:9e:a1: 67:41:6c:37:7f:21:97:b3:60:dd:55:0e:a9:b3:3b: 5e:ed:dd:93:1c:8b:f4:b9:4d:3a:49:af:38:35:31: b9:dc:a4:66:53:69:7a:a6:db:6b:eb:50:9d:0b:35: 5b:05:89:2c:12:44:fd:fb:21:e8:eb:14:d5:f3:cb: 6e:7d:e8:27:3c:3a:b5:4a:e3:e8:ee:0d:49:bc:d2: e9:12:55:7f:7f:c3:b8:62:d1:d9:60:60:c2:18:08: 40:1a:1d:07:dd:69:6d:ac:5c:c0:6e:49:61:2d:63: 0c:1c:fd:00:41:dc:74:1b:22:c8:9c:34:22:76:56: f8:da:0c:5b:6a:86:dc:5d:60:c7:6f:a1:ab:da:fa: fa:53:bb:78:bb:93:15:7a:60:3b:ff:10:17:08:19: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:71:1C:B3:2D:EE:5F:E6:B3:CC:B5:D8:B5:EF:81:C1:F9:2B:58:79 X509v3 Authority Key Identifier: keyid:60:E5:4F:60:51:ED:B4:1E:A7:A9:50:89:6C:D9:BB:D6:70:12:0D:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/YOVPYFHttB6nqVCJbNm71nASDWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YOVPYFHttB6nqVCJbNm71nASDWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF89A/8C704744F88411EEA7B3A750C4F9AE02/99AA3580F88611EE8E9B3E71C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.224.72.0/24 IPv6: 2001:df2:fdc0::/48 Signature Algorithm: sha256WithRSAEncryption 15:9a:41:af:27:71:5a:64:0f:02:ab:ab:b0:6e:b2:3e:84:11: 6a:95:18:7d:82:95:29:fd:02:d9:80:8e:f1:39:a1:e7:f6:a0: 0b:b6:66:93:24:dc:d7:24:91:11:40:6f:4f:61:47:ce:de:36: 2e:4f:06:e6:bd:8c:12:97:89:06:fc:94:03:d3:fe:18:53:24: 7d:ca:21:b4:18:a5:0f:66:db:31:ad:fa:82:19:83:34:6f:fb: ec:88:bc:9a:2c:1f:42:1f:3f:32:89:47:0f:c1:33:95:8c:aa: 13:23:a2:52:de:f4:1b:29:23:09:ef:9e:e8:9f:fc:c5:6d:57: 36:cf:0a:22:46:7a:7a:ca:c7:6f:b4:47:15:64:c9:c2:99:ed: 0b:94:cd:d9:17:a2:89:03:7e:9e:75:ee:52:e7:f2:c7:b7:87: 19:11:82:4c:69:f5:33:43:13:c4:d3:f8:ce:1d:9c:e8:01:03: 17:81:91:3b:8e:3c:6b:99:64:9d:d3:92:99:a1:f2:d2:7c:bf: af:cf:29:95:a1:21:7d:f1:2d:8a:a8:85:ae:dd:4c:aa:34:43: 0b:24:00:7b:e5:d8:3d:54:13:84:f4:38:8b:bb:6b:2e:63:8d: f3:38:eb:f7:88:00:b0:02:6c:67:78:a5:4e:0f:d3:47:ee:bf: e6:6f:24:4d -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4OUExMTAvBgNVBAUTKDYwRTU0RjYwNTFFREI0MUVBN0E5NTA4OTZDRDlCQkQ2 NzAxMjBENjMwHhcNMjUxMTA1MDUxOTM3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTU0MS1hYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hTDyesg8ElfTW2oKK/s/+vKD3B4Dt/0R0XrKNiNqf18QtIo77Hd2094gIz4 YIzpIlbnRcrAVVtB2icfXyjDnGMEaZ18FkqhsVFcUhF1RfmZ80USQQ7cnZ3sUPuY G+LTvySAXsurnqFnQWw3fyGXs2DdVQ6pszte7d2THIv0uU06Sa84NTG53KRmU2l6 pttr61CdCzVbBYksEkT9+yHo6xTV88tufegnPDq1SuPo7g1JvNLpElV/f8O4YtHZ YGDCGAhAGh0H3WltrFzAbklhLWMMHP0AQdx0GyLInDQidlb42gxbaobcXWDHb6Gr 2vr6U7t4u5MVemA7/xAXCBnvewIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGJxHLMt 7l/ms8y12LXvgcH5K1h5MB8GA1UdIwQYMBaAFGDlT2BR7bQep6lQiWzZu9ZwEg1j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg5QS84QzcwNDc0NEY4 ODQxMUVFQTdCM0E3NTBDNEY5QUUwMi9ZT1ZQWUZIdHRCNm5xVkNKYk5tNzFuQVNE V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lPVlBZRkh0dEI2bnFWQ0piTm03MW5BU0RXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY4OUEvOEM3MDQ3NDRGODg0MTFFRUE3QjNBNzUwQzRGOUFFMDIvOTlBQTM1ODBG ODg2MTFFRThFOUIzRTcxQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ+BIMA8EAgACMAkDBwAgAQ3y/cAwDQYJKoZIhvcNAQELBQADggEB ABWaQa8ncVpkDwKrq7Busj6EEWqVGH2ClSn9AtmAjvE5oef2oAu2ZpMk3NckkRFA b09hR87eNi5PBua9jBKXiQb8lAPT/hhTJH3KIbQYpQ9m2zGt+oIZgzRv++yIvJos H0IfPzKJRw/BM5WMqhMjolLe9BspIwnvnuif/MVtVzbPCiJGenrKx2+0RxVkycKZ 7QuUzdkXookDfp517lLn8se3hxkRgkxp9TNDE8TT+M4dnOgBAxeBkTuOPGuZZJ3T kpmh8tJ8v6/PKZWhIX3xLYqoha7dTKo0QwskAHvl2D1UE4T0OIu7ay5jjfM46/eI ALACbGd4pU4P00fuv+ZvJE0= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:28 2026 by rpki-client