$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/D927A2DAA64A11EE8316D651C4F9AE02.roa File: D927A2DAA64A11EE8316D651C4F9AE02.roa (raw, json) Hash identifier: X520qcNus4TvBvTw4nMYN+cpkZ/KOdP/5ckBbIgl0V8= Subject key identifier: 59:3A:03:A3:2C:A5:F0:56:98:27:2C:69:C3:05:E9:21:DC:85:C1:7E Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 0FCE Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/D927A2DAA64A11EE8316D651C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:32:52 +0000 ROA not before: Thu 20 Nov 2025 17:36:54 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 23750 IP address blocks: 103.130.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4046 (0xfce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Nov 20 17:36:54 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45c24-11b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:6e:63:60:51:6a:74:a5:ed:79:b0:a0:5d: 63:9d:51:e2:26:21:14:46:a5:9c:29:ac:f8:b3:4d: 21:6a:7f:f8:3f:49:d6:9d:db:3b:26:d1:c8:cf:39: 21:7f:3f:e7:49:2f:9b:d8:93:e4:d4:9b:ac:ea:2b: 78:f0:e5:71:5d:07:a3:66:a1:3d:8d:c5:92:d1:fe: 60:ea:4f:65:7c:cb:83:87:db:c8:50:31:b4:f7:c2: bd:e6:3e:e3:f1:87:ed:60:da:1f:4d:1a:50:b7:0c: d5:00:b7:4f:21:9c:90:69:6f:df:c9:b9:7b:71:c2: cb:48:a7:10:04:5e:91:23:f8:dc:67:4b:f6:c4:a6: 9b:e6:2d:ae:d4:3c:65:ff:24:fc:3e:28:2f:ff:08: 77:ed:4b:a3:84:c4:e7:a5:4e:79:54:94:74:10:76: 41:6f:64:60:7f:2c:98:16:eb:ca:bf:ba:60:d4:46: 6d:5e:16:8b:08:9b:35:87:3f:10:3c:bc:7f:cc:68: 6d:e7:1c:6e:5d:8d:c6:51:0b:84:e4:ac:71:12:f6: de:41:b2:f4:48:9c:1a:53:fc:7e:25:e6:8c:be:01: 77:25:aa:58:45:0d:ce:fe:c5:f2:4b:50:bb:a8:a5: 7c:26:ff:cb:13:52:67:d5:86:98:fa:ac:ee:d9:43: 53:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:03:A3:2C:A5:F0:56:98:27:2C:69:C3:05:E9:21:DC:85:C1:7E X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/D927A2DAA64A11EE8316D651C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.130.156.0/24 Signature Algorithm: sha256WithRSAEncryption 64:7c:f6:a3:3f:a1:6d:b6:c7:c7:59:60:f1:6f:d1:65:f9:af: 04:2e:b6:01:39:c0:4e:d0:c2:9b:8a:eb:5a:02:eb:81:0c:0b: 6c:8e:67:1f:f6:35:99:7a:21:3d:62:92:83:f5:ea:2b:fc:e2: 0d:a7:05:83:13:21:5e:d4:43:bc:c1:c0:64:a9:49:aa:aa:38: 79:c6:0c:ab:75:55:14:dd:c2:8f:0e:36:5b:1f:c7:34:c8:da: 2d:ec:80:06:6e:a6:b5:0c:ed:ad:5e:b4:7f:7b:57:a8:15:e5: 8f:b6:22:47:ff:6e:a5:ac:94:e9:ed:e0:43:23:08:ed:d1:ce: 84:71:40:b2:76:ca:0d:f9:fc:19:2a:57:05:2c:78:ae:29:fe: 6a:b9:45:b8:32:48:62:ea:bb:12:df:9c:ad:2d:03:a2:dc:8c: 2c:94:bd:68:eb:b1:77:bc:1d:a2:a1:22:63:57:cc:c1:b5:77: 95:85:99:9d:b8:84:c4:a5:bd:0b:6e:09:e5:63:7e:9d:2e:55: bc:5a:bd:c3:bd:37:cc:b6:9f:02:e7:a3:7b:c1:80:23:e7:d3: de:7e:72:5c:32:17:48:15:89:63:7c:61:e1:6f:60:81:2f:cb: d3:51:8c:df:9c:b8:54:5f:92:bf:34:d2:71:7f:43:f6:c2:37: 21:d0:f0:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjUxMTIwMTczNjU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWMyNC0xMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiNuY2BRanSl7XmwoF1jnVHiJiEURqWcKaz4s00han/4P0nWnds7JtHIzzkh fz/nSS+b2JPk1Jus6it48OVxXQejZqE9jcWS0f5g6k9lfMuDh9vIUDG098K95j7j 8YftYNofTRpQtwzVALdPIZyQaW/fybl7ccLLSKcQBF6RI/jcZ0v2xKab5i2u1Dxl /yT8Pigv/wh37UujhMTnpU55VJR0EHZBb2RgfyyYFuvKv7pg1EZtXhaLCJs1hz8Q PLx/zGht5xxuXY3GUQuE5KxxEvbeQbL0SJwaU/x+JeaMvgF3JapYRQ3O/sXyS1C7 qKV8Jv/LE1Jn1YaY+qzu2UNT6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFk6A6Ms pfBWmCcsacMF6SHchcF+MB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkZFOUYvOEJFMDYzRTA3QjE2MTFFOTk5NDlBQzUxQzRGOUFFMDIvRDkyN0EyREFB NjRBMTFFRTgzMTZENjUxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ4KcMA0GCSqGSIb3DQEBCwUAA4IBAQBkfPajP6FttsfHWWDxb9Fl +a8ELrYBOcBO0MKbiutaAuuBDAtsjmcf9jWZeiE9YpKD9eor/OINpwWDEyFe1EO8 wcBkqUmqqjh5xgyrdVUU3cKPDjZbH8c0yNot7IAGbqa1DO2tXrR/e1eoFeWPtiJH /26lrJTp7eBDIwjt0c6EcUCydsoN+fwZKlcFLHiuKf5quUW4Mkhi6rsS35ytLQOi 3IwslL1o67F3vB2ioSJjV8zBtXeVhZmduITEpb0LbgnlY36dLlW8Wr3DvTfMtp8C 56N7wYAj59PefnJcMhdIFYljfGHhb2CBL8vTUYzfnLhUX5K/NNJxf0P2wjch0PBG -----END CERTIFICATE-----Generated at Mon Mar 2 08:35:12 2026 by rpki-client