$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa File: 84B6E12A312911EEBE440C7FC4F9AE02.roa (raw, json) Hash identifier: AlMNQVgOtpgnBSe6UFI6r8IqzTubbKL0YXL2eJjxBI8= Subject key identifier: 11:57:22:79:32:FD:4C:FF:34:44:91:0F:59:12:E7:29:9A:5B:2D:8C Certificate issuer: /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Certificate serial: 0C41 Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa Signing time: Wed 04 Mar 2026 19:24:17 +0000 ROA not before: Wed 04 Mar 2026 19:24:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 149994 IP address blocks: 103.142.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A Validity Not Before: Mar 4 19:24:17 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a886e1-60ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:05:c4:3b:c1:c7:70:de:c2:71:75:5e:de:43: 33:75:8c:67:16:c3:69:6c:fc:6b:69:5a:44:bc:44: db:31:53:9b:32:ab:d1:6f:60:e6:dc:47:5e:f8:3e: 50:51:ea:7f:6d:a0:ac:0f:24:8b:20:f8:85:b2:69: 0c:49:37:f7:85:8c:ab:19:af:15:97:7b:28:a2:be: 03:bc:cb:e4:12:b3:f1:06:4c:28:d3:01:d7:08:2b: 61:1a:4e:8a:43:00:bd:c4:c7:3b:7c:37:27:ea:5d: e9:59:13:5f:06:6e:5a:89:6e:37:46:c6:fd:96:ca: ad:e0:01:8d:df:c0:4d:03:02:33:65:47:56:d8:8c: 78:2f:ff:14:60:63:ab:0a:05:4a:b8:34:bf:a0:05: ba:02:37:50:0e:d9:15:d5:9c:e1:f3:ad:52:dd:16: c9:c2:61:8e:27:03:34:af:eb:bf:7e:60:f9:dc:22: b8:c2:93:cf:e0:15:aa:46:13:54:5a:48:93:77:d5: b6:3c:3c:36:fa:ac:40:6a:e7:40:2d:58:69:b8:fe: f6:25:78:00:cb:85:fe:6e:97:bd:22:42:b5:cc:d1: 3d:7c:eb:42:11:02:e5:55:e3:a5:f5:21:b0:b4:7e: 93:a8:30:ce:db:22:6a:fe:14:54:99:a0:77:28:a6: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:57:22:79:32:FD:4C:FF:34:44:91:0F:59:12:E7:29:9A:5B:2D:8C X509v3 Authority Key Identifier: keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/84B6E12A312911EEBE440C7FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.142.68.0/24 Signature Algorithm: sha256WithRSAEncryption 48:e5:43:58:11:ad:11:65:ad:37:19:6e:3f:f8:af:6d:65:8e: 35:75:3d:2f:9b:4f:a0:0b:c7:8f:16:fd:db:a2:0d:f4:c9:d3: e2:a8:21:76:c1:8f:97:34:bf:f4:e9:e1:36:30:91:0a:5f:17: 9b:93:1e:5f:c7:5d:20:cf:27:fa:81:24:63:9e:bb:5a:45:4e: 28:ee:12:3d:ba:97:1c:bd:42:00:2a:01:a8:5f:d6:62:5a:09: 1c:58:e6:c3:4f:42:8b:e5:8f:86:b2:b8:30:69:c7:03:8c:a3: 3b:bb:80:1a:05:19:55:a5:ac:2b:c6:04:e9:bd:60:08:e1:5e: 56:df:46:98:4e:8c:0d:be:b4:53:ff:75:e4:c8:71:10:60:0c: 9a:55:03:13:29:e7:4a:e1:f6:b8:03:7e:7b:0e:36:78:81:37: ce:1f:1c:4d:bb:3b:0d:8a:7f:71:92:d9:0c:e8:a6:f1:06:52: 2c:7c:b5:5b:6b:ea:46:d4:40:e1:53:7a:13:55:95:b4:eb:bf: 9b:27:0e:75:c0:bd:67:45:3a:b9:ac:24:cf:07:80:23:9f:32: 7f:e8:2a:f0:0b:dc:ee:06:2a:0b:95:38:a2:32:a4:fd:61:1c: 1a:76:9d:96:06:d7:fd:2b:e8:d3:b0:65:18:7b:44:6d:a0:35: cf:31:4d:17 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy Q0NBQkU5M0EwHhcNMjYwMzA0MTkyNDE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4ODZlMS02MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQXEO8HHcN7CcXVe3kMzdYxnFsNpbPxraVpEvETbMVObMqvRb2Dm3Ede+D5Q Uep/baCsDySLIPiFsmkMSTf3hYyrGa8Vl3soor4DvMvkErPxBkwo0wHXCCthGk6K QwC9xMc7fDcn6l3pWRNfBm5aiW43Rsb9lsqt4AGN38BNAwIzZUdW2Ix4L/8UYGOr CgVKuDS/oAW6AjdQDtkV1Zzh861S3RbJwmGOJwM0r+u/fmD53CK4wpPP4BWqRhNU WkiTd9W2PDw2+qxAaudALVhpuP72JXgAy4X+bpe9IkK1zNE9fOtCEQLlVeOl9SGw tH6TqDDO2yJq/hRUmaB3KKbHJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBFXInky /Uz/NESRD1kS5ymaWy2MMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4 QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2 VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURGMTIvQ0ZBNTI1OUEyOEMwMTFFQUFBRTI0RTQ4QzRGOUFFMDIvODRCNkUxMkEz MTI5MTFFRUJFNDQwQzdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ45EMA0GCSqGSIb3DQEBCwUAA4IBAQBI5UNYEa0RZa03GW4/+K9t ZY41dT0vm0+gC8ePFv3bog30ydPiqCF2wY+XNL/06eE2MJEKXxebkx5fx10gzyf6 gSRjnrtaRU4o7hI9upccvUIAKgGoX9ZiWgkcWObDT0KL5Y+GsrgwaccDjKM7u4Aa BRlVpawrxgTpvWAI4V5W30aYTowNvrRT/3XkyHEQYAyaVQMTKedK4fa4A357DjZ4 gTfOHxxNuzsNin9xktkM6KbxBlIsfLVba+pG1EDhU3oTVZW067+bJw51wL1nRTq5 rCTPB4AjnzJ/6CrwC9zuBioLlTiiMqT9YRwadp2WBtf9K+jTsGUYe0RtoDXPMU0X -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:13 2026 by rpki-client