$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa File: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (raw, json) Hash identifier: 8WnbS97OaktE0LRamYKvOSKiZchhu0drnp75jTKrR5k= Subject key identifier: FF:19:9B:34:A9:85:68:2D:DC:C7:01:09:16:26:3F:77:4D:45:28:B0 Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 059B Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:41:13 +0000 ROA not before: Wed 03 Sep 2025 00:15:16 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 139484 IP address blocks: 103.172.104.0/23 maxlen: 23 103.172.104.0/24 maxlen: 24 103.172.105.0/24 maxlen: 24 2001:df7:6d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: Sep 3 00:15:16 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a433e8-7b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:e8:b0:ee:cd:d7:3e:bc:e0:09:db:55:96: 6f:3d:57:cb:ae:2e:b5:28:64:3b:6d:94:75:ec:25: 89:91:49:a2:60:80:22:88:80:0f:41:3e:8c:89:24: 9f:52:15:e8:bf:5f:64:81:4e:33:f7:20:64:5b:04: 31:78:8c:4c:e4:96:2d:96:2e:26:52:e0:eb:7f:5c: a5:f6:36:2a:ce:66:db:f5:17:99:19:e7:79:82:a6: 9a:8e:79:5c:39:b9:ba:d2:d2:ac:a3:3e:07:d3:bd: 51:7b:69:1f:c3:33:67:8d:ff:92:97:29:d9:30:9f: cb:00:e8:c2:75:a0:11:a5:1a:5b:a3:d1:69:a0:8a: 64:94:b4:29:7b:e1:5e:b6:48:0a:f2:b4:d8:14:6f: 50:e4:a1:32:1d:1a:cb:8d:32:3f:75:75:db:2f:ef: 3a:0b:d0:22:55:90:cd:01:87:ea:f9:12:65:90:f4: 25:e9:7c:74:97:05:fe:88:50:5c:01:fe:e1:e3:d9: 52:b6:45:47:3e:51:7c:46:d2:c0:9b:b1:4d:0e:1d: 5d:3f:18:6a:33:72:e1:26:54:46:0b:6f:d4:54:14: f6:52:2f:03:69:ba:48:62:c3:4d:1a:79:e8:9d:66: 5a:95:6d:ef:d1:57:8e:63:32:7a:74:18:db:46:18: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:9B:34:A9:85:68:2D:DC:C7:01:09:16:26:3F:77:4D:45:28:B0 X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/81A9AA2A30A011EC9613A82FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.104.0/23 IPv6: 2001:df7:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 4d:0d:0a:1d:24:e7:53:c1:e7:bb:e9:bf:78:fc:86:c8:f0:e8: 95:62:71:de:d0:a9:39:21:cd:4f:01:06:b2:50:7f:ed:f2:e4: b3:d0:75:73:bd:e4:d3:a4:87:6e:2d:4d:cc:91:29:57:ec:b1: e6:42:c8:32:dd:6c:42:71:d5:23:3c:7b:97:fc:27:eb:d6:50: 2e:85:1d:74:e4:e4:6c:a5:18:d0:23:9b:29:c7:46:12:74:67: f0:99:c3:00:df:57:39:74:ed:ea:54:64:3d:da:3a:bf:fd:ce: 49:e6:03:37:8a:3c:ed:59:a3:c1:29:b8:6f:91:65:0d:b2:66: 20:a7:3b:9a:08:25:94:b1:aa:7c:02:5c:6d:6d:fc:0b:4e:72: 50:2f:44:c8:f6:91:31:d9:ec:0c:7e:54:03:c6:13:8d:85:17: 45:dc:24:c5:08:17:c7:8f:96:75:f1:e0:61:f3:d9:89:bb:d6: ad:74:6b:ad:45:d7:ae:23:b7:28:3c:50:25:48:89:47:1b:a6: 55:97:52:94:28:c8:77:96:90:fa:d2:e9:73:90:db:3d:0d:72: 26:3e:43:48:f7:5a:b2:eb:0b:b6:6e:3d:4d:ea:32:0b:8e:3f: 6e:89:21:b5:67:56:05:31:37:2c:b5:b2:f2:24:51:1f:66:b2: 40:26:d7:4e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjUwOTAzMDAxNTE2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzNlOC03YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhvosO7N1z684AnbVZZvPVfLri61KGQ7bZR17CWJkUmiYIAiiIAPQT6MiSSf UhXov19kgU4z9yBkWwQxeIxM5JYtli4mUuDrf1yl9jYqzmbb9ReZGed5gqaajnlc Obm60tKsoz4H071Re2kfwzNnjf+SlynZMJ/LAOjCdaARpRpbo9FpoIpklLQpe+Fe tkgK8rTYFG9Q5KEyHRrLjTI/dXXbL+86C9AiVZDNAYfq+RJlkPQl6Xx0lwX+iFBc Af7h49lStkVHPlF8RtLAm7FNDh1dPxhqM3LhJlRGC2/UVBT2Ui8DabpIYsNNGnno nWZalW3v0VeOYzJ6dBjbRhjwNwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFP8ZmzSp hWgt3McBCRYmP3dNRSiwMB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTYyMDQvODMwQTNBMjgxMjA2MTFFQ0FFQ0VENDc3QzRGOUFFMDIvODFBOUFBMkEz MEEwMTFFQzk2MTNBODJGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6xoMA8EAgACMAkDBwAgAQ33bYAwDQYJKoZIhvcNAQELBQADggEB AE0NCh0k51PB57vpv3j8hsjw6JVicd7QqTkhzU8BBrJQf+3y5LPQdXO95NOkh24t TcyRKVfsseZCyDLdbEJx1SM8e5f8J+vWUC6FHXTk5GylGNAjmynHRhJ0Z/CZwwDf Vzl07epUZD3aOr/9zknmAzeKPO1Zo8EpuG+RZQ2yZiCnO5oIJZSxqnwCXG1t/AtO clAvRMj2kTHZ7Ax+VAPGE42FF0XcJMUIF8ePlnXx4GHz2Ym71q10a61F164jtyg8 UCVIiUcbplWXUpQoyHeWkPrS6XOQ2z0NciY+Q0j3WrLrC7ZuPU3qMguOP26JIbVn VgUxNyy1svIkUR9mskAm104= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:26 2026 by rpki-client