$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa File: C5FC427C5C1911E997A2ED42C4F9AE02.roa (raw, json) Hash identifier: Ga6llXWosOhlY6bWFrZdjYL71sbRZ2RwBlUrKw2k6Pk= Subject key identifier: B5:D1:82:3E:E8:1D:E2:D1:43:36:CB:7F:C7:56:5B:7C:48:5F:31:3D Certificate issuer: /CN=A91A8AF1/serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Certificate serial: 1035 Authority key identifier: 27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:37:32 +0000 ROA not before: Wed 22 Oct 2025 04:05:59 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 17547 IP address blocks: 103.14.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4149 (0x1035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8AF1, serialNumber=27753CFD4E9D98EB4C36EB377BAB6DE2F92E6BE8 Validity Not Before: Oct 22 04:05:59 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a44f2c-a72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:96:15:fe:ae:de:08:95:42:93:2e:5f:24: af:37:38:d6:75:71:09:84:83:ff:ac:0f:20:5a:c4: 8f:87:25:05:74:bc:cb:be:d8:8f:25:86:c0:24:03: 30:ca:fb:83:42:c0:22:54:81:6c:f2:f9:dc:ef:e6: 4c:7d:0e:26:14:17:53:21:5c:f8:2e:5b:d5:80:19: e7:66:f5:bd:41:4f:bd:34:a5:36:8e:18:f6:2e:9c: aa:ae:68:25:32:90:dc:d6:d7:83:66:4b:30:a2:40: e4:b1:64:08:ae:5c:ce:47:6f:bc:4b:2a:e4:c5:1b: 9f:aa:be:2a:86:60:49:16:ce:c5:32:5b:41:ad:6f: 4d:a3:46:39:07:e3:89:c1:9e:a6:d7:52:15:5e:2f: ed:7f:cf:a0:75:b7:fc:be:59:d0:3b:e0:75:1e:af: 65:47:8d:d6:d1:35:52:5c:6b:ea:5f:b6:5f:10:23: 5a:d9:d6:13:3a:51:fb:0b:b2:b7:5e:30:a2:69:9e: ac:0c:84:e5:0c:d1:14:9e:36:e0:e6:46:b5:8e:ee: b3:08:75:b8:bd:55:c1:e4:34:40:2f:b0:68:b4:bf: be:f3:5f:9a:ea:78:48:28:4f:1b:34:b2:91:ab:4b: 76:82:75:24:90:49:4d:1e:35:71:23:32:fb:56:52: a5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D1:82:3E:E8:1D:E2:D1:43:36:CB:7F:C7:56:5B:7C:48:5F:31:3D X509v3 Authority Key Identifier: keyid:27:75:3C:FD:4E:9D:98:EB:4C:36:EB:37:7B:AB:6D:E2:F9:2E:6B:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/J3U8_U6dmOtMNus3e6tt4vkua-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3U8_U6dmOtMNus3e6tt4vkua-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8AF1/CA1A03C25C1811E9B3074341C4F9AE02/C5FC427C5C1911E997A2ED42C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.14.236.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:0a:8b:4f:36:fd:67:92:c1:20:15:5f:5e:ac:72:19:79:5c: ba:c5:f9:ea:2f:75:8e:64:da:f4:93:34:8f:42:22:05:9b:eb: e4:3f:f1:6f:aa:e9:68:69:c4:d8:0f:10:b8:3a:43:58:75:02: 93:fa:2b:c3:97:fd:e4:32:33:09:36:d4:73:aa:80:1b:22:12: 98:6d:e2:8f:d7:6a:f6:55:92:21:9b:c8:34:b4:74:7b:0f:cf: 5e:1a:c2:c2:be:5f:a0:96:ba:5b:c4:c6:19:4b:25:76:5f:3f: 24:e6:4f:51:58:de:8e:81:4d:b4:97:5e:c9:93:56:b9:2e:6f: fc:a6:d8:3f:16:22:3f:36:07:a5:82:4e:d0:c4:33:a2:4f:a8: e6:67:cf:74:47:7a:b5:40:2d:7a:7c:63:a5:43:0c:ef:4e:be: 47:de:05:d5:dc:cd:99:31:d7:c5:00:21:76:ca:a9:63:ee:3e: 26:4a:99:31:35:e2:67:dc:92:3a:89:e2:2c:8f:83:4e:d7:4d: 20:d1:be:75:13:3f:c4:59:8c:19:f8:05:42:b5:2f:35:99:e6: c4:d7:85:23:b9:f1:c5:b6:e6:90:cc:7a:2c:f5:45:3c:cd:f3: 8a:02:05:64:06:ef:36:b2:74:ff:75:ac:98:c8:b7:e6:e0:a6: b7:d7:7e:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBRjExMTAvBgNVBAUTKDI3NzUzQ0ZENEU5RDk4RUI0QzM2RUIzNzdCQUI2REUy RjkyRTZCRTgwHhcNMjUxMDIyMDQwNTU5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGYyYy1hNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqqWFf6u3giVQpMuXySvNzjWdXEJhIP/rA8gWsSPhyUFdLzLvtiPJYbAJAMw yvuDQsAiVIFs8vnc7+ZMfQ4mFBdTIVz4LlvVgBnnZvW9QU+9NKU2jhj2Lpyqrmgl MpDc1teDZkswokDksWQIrlzOR2+8SyrkxRufqr4qhmBJFs7FMltBrW9No0Y5B+OJ wZ6m11IVXi/tf8+gdbf8vlnQO+B1Hq9lR43W0TVSXGvqX7ZfECNa2dYTOlH7C7K3 XjCiaZ6sDITlDNEUnjbg5ka1ju6zCHW4vVXB5DRAL7BotL++81+a6nhIKE8bNLKR q0t2gnUkkElNHjVxIzL7VlKlWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLXRgj7o HeLRQzbLf8dWW3xIXzE9MB8GA1UdIwQYMBaAFCd1PP1OnZjrTDbrN3urbeL5Lmvo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEFGMS9DQTFBMDNDMjVD MTgxMUU5QjMwNzQzNDFDNEY5QUUwMi9KM1U4X1U2ZG1PdE1OdXMzZTZ0dDR2a3Vh LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozVThfVTZkbU90TU51czNlNnR0NHZrdWEtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThBRjEvQ0ExQTAzQzI1QzE4MTFFOUIzMDc0MzQxQzRGOUFFMDIvQzVGQzQyN0M1 QzE5MTFFOTk3QTJFRDQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZw7sMA0GCSqGSIb3DQEBCwUAA4IBAQBfCotPNv1nksEgFV9erHIZ eVy6xfnqL3WOZNr0kzSPQiIFm+vkP/FvquloacTYDxC4OkNYdQKT+ivDl/3kMjMJ NtRzqoAbIhKYbeKP12r2VZIhm8g0tHR7D89eGsLCvl+glrpbxMYZSyV2Xz8k5k9R WN6OgU20l17Jk1a5Lm/8ptg/FiI/Ngelgk7QxDOiT6jmZ890R3q1QC16fGOlQwzv Tr5H3gXV3M2ZMdfFACF2yqlj7j4mSpkxNeJn3JI6ieIsj4NO100g0b51Ez/EWYwZ +AVCtS81mebE14UjufHFtuaQzHos9UU8zfOKAgVkBu82snT/dayYyLfm4Ka3135O -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:54 2026 by rpki-client