$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/AC8124909A4911E7857CA62FC4F9AE02.roa File: AC8124909A4911E7857CA62FC4F9AE02.roa (raw, json) Hash identifier: iKMKJHnuqjupL8g2VYNcA3PI8q16XSxujQICOYU+IGY= Subject key identifier: 24:68:9B:ED:98:98:E9:1D:BC:21:1E:D5:43:74:DE:1C:64:86:1B:AC Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C84 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/AC8124909A4911E7857CA62FC4F9AE02.roa Signing time: Mon 02 Mar 2026 16:19:16 +0000 ROA not before: Mon 02 Mar 2026 16:19:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58689 IP address blocks: 103.205.132.0/24 maxlen: 24 103.205.134.0/23 maxlen: 24 144.48.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7300 (0x1c84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Mar 2 16:19:16 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5b884-1ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:5e:61:7f:1c:c7:98:29:8b:01:5b:4c:7c: 75:36:ed:0a:11:b8:f2:85:bf:aa:d3:fd:c7:1e:d1: d7:38:13:09:83:33:3a:c0:55:34:9f:d9:33:95:30: 10:fa:80:80:74:14:3f:90:da:ad:8e:ff:75:82:42: 2f:81:96:09:32:3b:4c:c8:8a:73:06:ca:b9:18:ea: cd:1c:52:ed:74:56:f2:5c:71:0c:14:1f:7e:8d:ec: d4:ca:78:f9:66:cd:6a:4e:6d:91:86:21:52:f8:7a: 07:a6:08:12:fe:a1:5b:ca:d4:d0:f6:6f:d6:12:65: fd:73:32:e4:d1:95:c8:e7:6b:27:07:25:f7:70:b3: b1:66:7b:c0:af:ee:f2:f1:a2:1c:db:05:dc:81:f3: f0:89:e4:20:36:10:3f:40:7e:09:c7:17:2e:61:80: 24:47:12:37:76:b9:cf:16:f0:fe:d8:c8:09:62:72: 1c:7c:a3:88:9a:b1:60:19:e0:3d:b2:e9:e9:71:d1: ac:ac:c8:36:f8:dc:b2:a1:74:fa:a2:b7:60:49:04: dc:6d:c0:de:64:97:f2:28:ad:1a:a3:98:69:b7:55: 72:8c:86:2e:be:87:8a:98:c1:7e:5e:50:89:cd:d6: 08:27:cd:e1:3b:8d:73:79:5b:85:b7:e1:f4:8d:86: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:68:9B:ED:98:98:E9:1D:BC:21:1E:D5:43:74:DE:1C:64:86:1B:AC X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/AC8124909A4911E7857CA62FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.205.132.0/24 103.205.134.0/23 144.48.108.0/22 Signature Algorithm: sha256WithRSAEncryption 88:b1:b0:40:54:e4:f4:73:12:3c:ec:ef:37:1c:fa:c1:89:ca: b3:62:99:4d:df:fa:32:e6:ac:6d:0b:2d:92:e8:69:7c:65:ff: 3b:39:6b:3a:0e:88:bf:74:d0:07:87:6e:be:e4:07:62:66:3a: cd:5a:29:30:14:bd:27:d0:c3:ba:51:ba:8f:3f:5b:ca:67:42: 58:c0:76:36:e7:d9:27:e3:b1:89:bf:46:d5:4e:f6:2d:46:0f: ae:7f:53:7f:b7:81:c1:27:d4:fe:78:77:d6:cf:e1:f5:33:aa: 0c:7d:fb:ce:1c:f3:8e:e0:f0:a5:28:82:ad:23:2d:b7:44:db: ae:d6:86:78:da:75:d6:24:fd:b0:14:83:c5:43:37:4a:ce:42: 47:ad:d4:58:e3:28:89:5f:98:41:c9:1e:81:ec:c5:fa:aa:9d: 13:1c:35:9b:60:c7:3c:15:21:7b:13:de:0f:ba:be:9c:ee:f3: d1:26:8d:09:ab:c6:84:e9:6e:91:6e:9b:b5:c5:10:f7:fd:d9: fa:04:9f:92:17:ea:ac:6f:83:ad:cc:01:be:2f:c2:a1:77:d6: 98:06:75:c7:b9:53:2b:7d:90:68:6a:f5:22:50:b6:cb:13:12: 6b:53:2d:fb:5c:24:05:96:e4:30:34:e0:d1:a3:08:7c:11:20: 65:6a:56:2b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICHIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjYwMzAyMTYxOTE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1Yjg4NC0xZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5peYX8cx5gpiwFbTHx1Nu0KEbjyhb+q0/3HHtHXOBMJgzM6wFU0n9kzlTAQ +oCAdBQ/kNqtjv91gkIvgZYJMjtMyIpzBsq5GOrNHFLtdFbyXHEMFB9+jezUynj5 Zs1qTm2RhiFS+HoHpggS/qFbytTQ9m/WEmX9czLk0ZXI52snByX3cLOxZnvAr+7y 8aIc2wXcgfPwieQgNhA/QH4JxxcuYYAkRxI3drnPFvD+2MgJYnIcfKOImrFgGeA9 sunpcdGsrMg2+NyyoXT6ordgSQTcbcDeZJfyKK0ao5hpt1VyjIYuvoeKmMF+XlCJ zdYIJ83hO41zeVuFt+H0jYat3QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCRom+2Y mOkdvCEe1UN03hxkhhusMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcwRTIvODEwMTI1OENGOUE4MTFFNkE0RUZFMDJFQzRGOUFFMDIvQUM4MTI0OTA5 QTQ5MTFFNzg1N0NBNjJGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZ82EAwQBZ82GAwQCkDBsMA0GCSqGSIb3DQEBCwUAA4IBAQCIsbBA VOT0cxI87O83HPrBicqzYplN3/oy5qxtCy2S6Gl8Zf87OWs6Doi/dNAHh26+5Adi ZjrNWikwFL0n0MO6UbqPP1vKZ0JYwHY259kn47GJv0bVTvYtRg+uf1N/t4HBJ9T+ eHfWz+H1M6oMffvOHPOO4PClKIKtIy23RNuu1oZ42nXWJP2wFIPFQzdKzkJHrdRY 4yiJX5hByR6B7MX6qp0THDWbYMc8FSF7E94Pur6c7vPRJo0Jq8aE6W6Rbpu1xRD3 /dn6BJ+SF+qsb4OtzAG+L8Khd9aYBnXHuVMrfZBoavUiULbLExJrUy37XCQFluQw NODRowh8ESBlalYr -----END CERTIFICATE-----Generated at Thu Mar 26 04:17:41 2026 by rpki-client