$ rpki-client -vvf rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/4C1F013E5AF511EFBAB1F86CC4F9AE02.roa File: 4C1F013E5AF511EFBAB1F86CC4F9AE02.roa (raw, json) Hash identifier: S7vABV4LANs4s/qDbVNaE7a/E/6cf6qzp42fekgpXlg= Subject key identifier: C5:03:3A:34:4C:23:6C:44:3B:5F:9B:D1:3C:81:2A:32:99:D1:D8:8A Certificate issuer: /CN=A91104C9/serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Certificate serial: 0C92 Authority key identifier: 68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/4C1F013E5AF511EFBAB1F86CC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:54:46 +0000 ROA not before: Sat 08 Nov 2025 18:08:00 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 131686 IP address blocks: 103.76.240.0/22 maxlen: 24 162.12.212.0/22 maxlen: 24 2407:7b80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3218 (0xc92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91104C9, serialNumber=68AE5BEB1BB7E442CEE0A7E014029FF72E3DB41F Validity Not Before: Nov 8 18:08:00 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a44526-64c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:7c:1a:73:25:bb:d2:2f:cf:68:4b:5c:65: c6:ae:73:17:1c:dc:ce:d8:20:62:8d:48:56:62:97: 5c:3f:46:79:40:c9:88:5d:bb:b1:09:80:8a:42:50: aa:09:c9:40:83:e2:bf:0d:7d:2c:d2:6c:8b:b4:0c: 03:5d:4d:5a:73:8d:65:00:a9:10:d4:5d:de:15:55: dc:73:c9:f3:cf:2b:54:ba:2f:c3:55:ed:18:45:3b: 25:b0:77:16:43:5c:eb:58:4d:da:6b:35:26:0e:27: 60:7f:f0:70:f1:53:e1:c0:a1:a8:4c:8d:58:ec:1d: d9:08:5c:41:84:e0:a4:4a:7e:e9:0d:8e:ad:b6:a1: 3c:34:4e:7d:d2:0c:5d:aa:11:49:38:19:1a:99:64: 4f:8b:28:b7:4e:49:79:02:61:f4:c1:e4:64:7e:30: db:29:36:e8:21:30:e4:6a:ee:07:8d:e9:3c:26:cb: da:75:33:94:84:98:fb:4f:4f:c1:8d:66:ce:e9:32: 38:b7:f8:1c:14:eb:da:85:6f:a2:9a:30:f0:20:46: c7:03:b8:76:05:c3:2b:bd:7d:90:17:03:51:92:ad: a3:4c:e5:72:a7:9c:ab:f1:20:bb:8a:aa:bc:2f:b1: 72:2b:df:03:55:1a:6f:b9:25:95:1f:39:df:f8:89: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:03:3A:34:4C:23:6C:44:3B:5F:9B:D1:3C:81:2A:32:99:D1:D8:8A X509v3 Authority Key Identifier: keyid:68:AE:5B:EB:1B:B7:E4:42:CE:E0:A7:E0:14:02:9F:F7:2E:3D:B4:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/aK5b6xu35ELO4KfgFAKf9y49tB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aK5b6xu35ELO4KfgFAKf9y49tB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104C9/2AA8B38814C811EA87D1516CC4F9AE02/4C1F013E5AF511EFBAB1F86CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.76.240.0/22 162.12.212.0/22 IPv6: 2407:7b80::/32 Signature Algorithm: sha256WithRSAEncryption 09:93:9a:a6:6a:65:50:fb:70:7a:50:d1:81:fa:7b:6a:e2:fa: 6c:b6:0f:59:b1:2b:d5:c7:4e:9e:4c:df:a2:8e:71:72:55:e0: 22:a3:98:8e:ed:2d:56:b9:59:5c:02:c3:c1:47:a8:b3:e5:7d: c4:53:8b:bf:7d:91:0a:f5:7e:43:d3:5e:47:b7:c7:da:e5:1e: 38:70:a2:e8:0c:20:74:0e:1b:90:ac:81:42:fb:66:f3:f2:b0: 5f:39:f2:80:a6:00:92:53:4a:8b:17:88:e6:47:66:1d:8d:4d: 20:49:c7:0f:f2:c4:dd:05:89:ea:f2:38:25:8c:46:b9:03:9a: 94:a6:2c:b8:c4:2d:a4:7e:96:a8:9e:ec:6f:ce:72:41:58:23: 39:21:7b:b4:0b:ef:2b:45:b1:45:a6:ab:13:87:a1:ba:fe:f2: 82:c1:e0:3e:83:96:b1:ae:38:b7:96:59:aa:d4:f3:77:3e:63: 66:70:0b:c3:0d:c2:b3:7c:74:0d:d6:cc:8f:5f:5f:f6:f8:0e: 1e:74:7a:5f:51:a8:36:f3:a5:f5:a1:7b:a4:f9:6b:f5:eb:92: fb:95:13:5e:9a:50:c0:7a:12:91:94:e4:1a:33:51:8c:d1:ad: ad:12:e3:7e:86:cc:e2:47:5e:3a:94:81:18:e0:e1:a4:19:bf: dd:2f:34:39 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA0QzkxMTAvBgNVBAUTKDY4QUU1QkVCMUJCN0U0NDJDRUUwQTdFMDE0MDI5RkY3 MkUzREI0MUYwHhcNMjUxMTA4MTgwODAwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDUyNi02NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kl8GnMlu9Ivz2hLXGXGrnMXHNzO2CBijUhWYpdcP0Z5QMmIXbuxCYCKQlCq CclAg+K/DX0s0myLtAwDXU1ac41lAKkQ1F3eFVXcc8nzzytUui/DVe0YRTslsHcW Q1zrWE3aazUmDidgf/Bw8VPhwKGoTI1Y7B3ZCFxBhOCkSn7pDY6ttqE8NE590gxd qhFJOBkamWRPiyi3Tkl5AmH0weRkfjDbKTboITDkau4Hjek8JsvadTOUhJj7T0/B jWbO6TI4t/gcFOvahW+imjDwIEbHA7h2BcMrvX2QFwNRkq2jTOVyp5yr8SC7iqq8 L7FyK98DVRpvuSWVHznf+Il6WwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMUDOjRM I2xEO1+b0TyBKjKZ0diKMB8GA1UdIwQYMBaAFGiuW+sbt+RCzuCn4BQCn/cuPbQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDRDOS8yQUE4QjM4ODE0 QzgxMUVBODdEMTUxNkNDNEY5QUUwMi9hSzViNnh1MzVFTE80S2ZnRkFLZjl5NDl0 QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FLNWI2eHUzNUVMTzRLZmdGQUtmOXk0OXRCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTA0QzkvMkFBOEIzODgxNEM4MTFFQTg3RDE1MTZDQzRGOUFFMDIvNEMxRjAxM0U1 QUY1MTFFRkJBQjFGODZDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ0zwAwQCogzUMA0EAgACMAcDBQAkB3uAMA0GCSqGSIb3DQEBCwUA A4IBAQAJk5qmamVQ+3B6UNGB+ntq4vpstg9ZsSvVx06eTN+ijnFyVeAio5iO7S1W uVlcAsPBR6iz5X3EU4u/fZEK9X5D015Ht8fa5R44cKLoDCB0DhuQrIFC+2bz8rBf OfKApgCSU0qLF4jmR2YdjU0gSccP8sTdBYnq8jgljEa5A5qUpiy4xC2kfpaonuxv znJBWCM5IXu0C+8rRbFFpqsTh6G6/vKCweA+g5axrji3llmq1PN3PmNmcAvDDcKz fHQN1syPX1/2+A4edHpfUag286X1oXuk+Wv165L7lRNemlDAehKRlOQaM1GM0a2t EuN+hsziR146lIEY4OGkGb/dLzQ5 -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:48 2026 by rpki-client