$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/DA61302A0F0211EDABBE3C6AC4F9AE02.roa File: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (raw, json) Hash identifier: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY= Subject key identifier: 27:88:45:7B:43:AF:64:AD:E2:F9:91:32:B7:F6:91:56:1D:7D:B9:AD Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Certificate serial: 030D Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/DA61302A0F0211EDABBE3C6AC4F9AE02.roa Signing time: Tue 03 Mar 2026 09:31:55 +0000 ROA not before: Tue 03 Mar 2026 09:31:55 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 141682 IP address blocks: 103.161.244.0/23 maxlen: 23 2407:940::/32 maxlen: 32 2407:940:ff00::/48 maxlen: 48 2407:940:ff01::/48 maxlen: 48 2407:940:ff02::/48 maxlen: 48 2407:940:ff03::/48 maxlen: 48 2407:940:ff04::/48 maxlen: 48 2407:940:ff05::/48 maxlen: 48 2407:940:ff06::/48 maxlen: 48 2407:940:ff07::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 781 (0x30d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Validity Not Before: Mar 3 09:31:55 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a6aa8b-f332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:c8:41:d8:b0:84:3e:8d:fc:06:6b:83:eb: 7a:49:19:d8:7c:86:85:f6:9f:ee:bb:27:e5:ea:9d: c1:74:25:a0:b3:7b:7f:ed:e1:8a:93:59:d1:f0:7c: 85:78:c6:79:81:8a:9e:fd:4f:0b:bd:1d:05:48:cb: 13:ee:ff:e8:4f:60:28:11:66:2c:cd:96:09:44:fd: 78:8e:17:27:4a:ba:54:4a:ae:1a:40:06:c2:f3:f2: bd:90:5b:7c:55:f2:71:6e:bb:89:7d:1b:f8:75:f6: 9e:1f:59:45:18:1a:24:05:7f:49:ed:f0:47:8c:cc: d2:97:83:ca:ce:be:7d:e1:86:d8:fb:d5:8b:03:6f: e5:30:c6:df:b3:ac:ec:39:ba:f0:b9:a1:f7:fa:49: de:22:6f:31:7d:b1:f8:4f:cc:f8:58:41:1a:23:6b: ff:00:f7:4b:ba:c7:37:01:07:b7:f4:8a:de:23:ae: 47:39:dd:6e:e1:b3:07:20:18:25:eb:bf:dc:ac:96: af:9a:9f:d2:20:31:89:b5:9f:a0:70:c3:39:30:c5: 3c:4d:48:ff:16:aa:04:d8:5e:2f:2c:d9:52:ec:b0: ff:46:0b:24:48:10:b4:46:49:75:a9:d6:6b:a5:5b: 74:cc:fe:4c:d3:e4:38:a4:c8:f5:a1:2e:c2:a5:16: 29:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:88:45:7B:43:AF:64:AD:E2:F9:91:32:B7:F6:91:56:1D:7D:B9:AD X509v3 Authority Key Identifier: keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/DA61302A0F0211EDABBE3C6AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.244.0/23 IPv6: 2407:940::/32 Signature Algorithm: sha256WithRSAEncryption 40:d6:13:d5:31:49:b6:49:34:81:18:be:b1:75:fb:db:f9:cb: dc:0f:0b:54:bc:d0:e7:ce:0b:4a:27:d2:0b:ac:3c:9d:fc:44: 30:f4:c8:ba:09:d2:66:24:da:d7:87:c3:73:89:3f:5e:ba:ea: 5b:ca:be:6c:9d:18:a3:34:22:4a:ff:c9:18:70:6b:3a:a9:d2: 5e:8f:27:c7:65:69:5e:8e:e7:69:97:8f:28:54:88:8b:5c:ef: d0:51:dc:51:7a:1b:2a:c5:74:d9:87:f5:ff:da:f0:90:0a:b5: d6:c6:c0:bc:45:53:6b:5b:09:9c:dc:60:98:e5:69:70:86:65: 86:41:2f:7d:fa:ae:d1:1d:56:9e:70:f3:ad:b0:4f:8d:bf:ea: 38:45:ef:3e:8b:88:34:bc:1d:52:38:a2:07:1d:fc:09:fa:7c: ae:22:06:79:95:08:68:66:2f:f9:b7:69:c5:c5:bd:0a:d0:37: 3e:f1:1c:18:19:7c:e6:85:1c:6b:bd:f1:50:6f:70:ee:7c:44: a4:8f:b2:c5:c2:16:ce:1d:9f:0e:e2:93:86:e5:91:25:63:e1: 20:b1:5b:2b:55:77:4d:7b:e4:46:fc:3c:1d:6b:23:b0:bf:f8: 02:2c:e8:e1:d4:7f:2a:01:0e:f5:71:24:c0:6e:1f:e1:4a:3a: ca:df:42:16 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx Qzg4MzdBQzYwHhcNMjYwMzAzMDkzMTU1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2YWE4Yi1mMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0zIQdiwhD6N/AZrg+t6SRnYfIaF9p/uuyfl6p3BdCWgs3t/7eGKk1nR8HyF eMZ5gYqe/U8LvR0FSMsT7v/oT2AoEWYszZYJRP14jhcnSrpUSq4aQAbC8/K9kFt8 VfJxbruJfRv4dfaeH1lFGBokBX9J7fBHjMzSl4PKzr594YbY+9WLA2/lMMbfs6zs ObrwuaH3+kneIm8xfbH4T8z4WEEaI2v/APdLusc3AQe39IreI65HOd1u4bMHIBgl 67/crJavmp/SIDGJtZ+gcMM5MMU8TUj/FqoE2F4vLNlS7LD/RgskSBC0Rkl1qdZr pVt0zP5M0+Q4pMj1oS7CpRYp0wIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCeIRXtD r2St4vmRMrf2kVYdfbmtMB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk1QzEvQ0JFNkJDNzQwRjAwMTFFREE3NDQwNjZBQzRGOUFFMDIvREE2MTMwMkEw RjAyMTFFREFCQkUzQzZBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6H0MA0EAgACMAcDBQAkBwlAMA0GCSqGSIb3DQEBCwUAA4IBAQBA 1hPVMUm2STSBGL6xdfvb+cvcDwtUvNDnzgtKJ9ILrDyd/EQw9Mi6CdJmJNrXh8Nz iT9euupbyr5snRijNCJK/8kYcGs6qdJejyfHZWlejudpl48oVIiLXO/QUdxRehsq xXTZh/X/2vCQCrXWxsC8RVNrWwmc3GCY5WlwhmWGQS99+q7RHVaecPOtsE+Nv+o4 Re8+i4g0vB1SOKIHHfwJ+nyuIgZ5lQhoZi/5t2nFxb0K0Dc+8RwYGXzmhRxrvfFQ b3DufESkj7LFwhbOHZ8O4pOG5ZElY+EgsVsrVXdNe+RG/DwdayOwv/gCLOjh1H8q AQ71cSTAbh/hSjrK30IW -----END CERTIFICATE-----Generated at Sat Mar 28 13:40:58 2026 by rpki-client