$ rpki-client -vvf rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa File: BCD0F6B0A0FF11EC924D4461C4F9AE02.roa (raw, json) Hash identifier: RLT4OavkIPlkhOt4yNgRmjMZlXgnd7ZiolTVU7K89ho= Subject key identifier: B9:6C:2F:CA:B9:50:9C:30:CB:7D:71:A0:5D:03:F9:32:34:39:92:16 Certificate issuer: /CN=A91B10B9/serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Certificate serial: 042A Authority key identifier: 3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa Signing time: Mon 09 Mar 2026 00:33:11 +0000 ROA not before: Mon 09 Mar 2026 00:33:10 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 141732 IP address blocks: 103.162.234.0/23 maxlen: 24 2407:1e40::/32 maxlen: 32 2407:1e40:4::/46 maxlen: 46 2407:1e40:5::/48 maxlen: 48 2407:1e40:8::/46 maxlen: 46 2407:1e40:200::/48 maxlen: 48 2407:1e40:300::/48 maxlen: 48 2407:1e40:400::/48 maxlen: 48 2407:1e40:500::/48 maxlen: 48 2407:1e40:600::/48 maxlen: 48 2407:1e40:fce::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1066 (0x42a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10B9, serialNumber=3D77B586A3F682C563B64265262891D4DA46A7A8 Validity Not Before: Mar 9 00:33:10 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69ae1546-5141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:9b:3d:11:da:c8:cc:68:1c:70:40:a6:f5: 0d:a5:2e:bb:21:d2:a1:9a:1d:3e:ba:c7:1a:d9:fa: 9a:4b:2b:b0:f9:5d:59:b1:d3:a5:60:55:39:cd:bb: 34:be:56:fb:d1:08:f9:55:bd:a9:82:fe:c1:c8:40: 45:d6:e3:9d:03:1d:88:b7:cb:3c:85:2f:b8:ae:e9: cc:84:68:96:64:0d:a4:84:14:ae:0c:f0:2a:aa:c3: 52:ce:f7:13:64:49:19:40:21:c2:98:fa:f1:38:6d: 6d:27:1e:c3:d6:21:c1:17:db:92:c5:8f:f5:41:7d: 3e:22:75:d1:4b:13:ba:c8:f9:1b:19:6d:d7:42:4d: ba:c6:8e:f7:6b:5a:b0:3c:3e:df:7a:e3:11:6b:55: 2a:82:74:25:df:a3:ff:7f:26:96:cb:5b:2c:45:a1: 5c:80:32:3b:56:15:7b:15:fc:6e:cc:5d:79:30:74: 8e:5b:64:11:05:49:a7:7c:cb:dc:4f:6d:e7:b5:ba: d9:1d:4a:55:50:53:13:30:0b:f3:43:51:e5:b5:25: f4:b4:a9:f2:dd:c0:f9:b8:a6:e4:75:6a:de:34:8f: 51:08:20:83:d8:81:95:26:a3:15:5d:16:65:05:36: e4:b6:bc:ac:6c:ce:ed:3d:64:04:6e:0d:de:dd:39: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6C:2F:CA:B9:50:9C:30:CB:7D:71:A0:5D:03:F9:32:34:39:92:16 X509v3 Authority Key Identifier: keyid:3D:77:B5:86:A3:F6:82:C5:63:B6:42:65:26:28:91:D4:DA:46:A7:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/PXe1hqP2gsVjtkJlJiiR1NpGp6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXe1hqP2gsVjtkJlJiiR1NpGp6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B10B9/D13BEAAAA0FB11ECA5D1DF5BC4F9AE02/BCD0F6B0A0FF11EC924D4461C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.162.234.0/23 IPv6: 2407:1e40::/32 Signature Algorithm: sha256WithRSAEncryption 31:13:39:92:c8:d4:5e:fd:74:53:85:60:37:7e:da:07:c8:49: 5c:f7:de:97:2a:27:33:65:76:17:fc:c7:b0:03:aa:26:8e:39: d6:12:97:af:6a:75:da:cd:82:54:01:20:88:9a:27:69:f6:23: 29:54:3a:20:2f:3e:98:be:66:11:85:1f:f9:45:aa:ab:12:30: b6:3e:31:2d:38:9d:d8:45:93:b2:e2:1d:fc:8a:c9:12:64:18: 3d:5e:f5:5b:46:91:a5:22:d7:42:fa:88:4a:70:86:33:d3:80: d7:49:37:d9:3e:0b:71:bf:4c:88:56:02:7d:b0:11:6e:c2:25: 8c:cf:93:06:82:fe:40:3e:ab:cc:c1:ed:b2:df:38:e5:98:e6: c3:45:ff:a5:f6:43:45:9e:38:7b:da:55:7c:cb:25:20:7a:fe: 6d:23:3b:5b:37:f7:c8:fc:46:40:31:ff:fa:59:25:f6:d1:0e: 52:d2:d8:7c:33:ca:ca:b1:69:6e:c2:17:f8:0f:af:bd:2d:94: 71:79:76:d0:ba:0c:36:50:38:c4:b9:1f:44:02:b8:5f:2a:f4: 55:99:c4:5d:74:00:9a:b9:7f:58:28:95:dc:b7:ff:d7:5d:5d: 82:95:98:8f:f8:f4:bf:95:a2:d4:92:85:c2:19:0b:ce:b8:07: a8:9e:87:b8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwQjkxMTAvBgNVBAUTKDNENzdCNTg2QTNGNjgyQzU2M0I2NDI2NTI2Mjg5MUQ0 REE0NkE3QTgwHhcNMjYwMzA5MDAzMzEwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlMTU0Ni01MTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA096bPRHayMxoHHBApvUNpS67IdKhmh0+usca2fqaSyuw+V1ZsdOlYFU5zbs0 vlb70Qj5Vb2pgv7ByEBF1uOdAx2It8s8hS+4runMhGiWZA2khBSuDPAqqsNSzvcT ZEkZQCHCmPrxOG1tJx7D1iHBF9uSxY/1QX0+InXRSxO6yPkbGW3XQk26xo73a1qw PD7feuMRa1UqgnQl36P/fyaWy1ssRaFcgDI7VhV7FfxuzF15MHSOW2QRBUmnfMvc T23ntbrZHUpVUFMTMAvzQ1HltSX0tKny3cD5uKbkdWreNI9RCCCD2IGVJqMVXRZl BTbktrysbM7tPWQEbg3e3Tl7AwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLlsL8q5 UJwwy31xoF0D+TI0OZIWMB8GA1UdIwQYMBaAFD13tYaj9oLFY7ZCZSYokdTaRqeo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTBCOS9EMTNCRUFBQUEw RkIxMUVDQTVEMURGNUJDNEY5QUUwMi9QWGUxaHFQMmdzVmp0a0psSmlpUjFOcEdw NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYZTFocVAyZ3NWanRrSmxKaWlSMU5wR3A2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjEwQjkvRDEzQkVBQUFBMEZCMTFFQ0E1RDFERjVCQzRGOUFFMDIvQkNEMEY2QjBB MEZGMTFFQzkyNEQ0NDYxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ6LqMA0EAgACMAcDBQAkBx5AMA0GCSqGSIb3DQEBCwUAA4IBAQAx EzmSyNRe/XRThWA3ftoHyElc996XKiczZXYX/MewA6omjjnWEpevanXazYJUASCI midp9iMpVDogLz6YvmYRhR/5RaqrEjC2PjEtOJ3YRZOy4h38iskSZBg9XvVbRpGl ItdC+ohKcIYz04DXSTfZPgtxv0yIVgJ9sBFuwiWMz5MGgv5APqvMwe2y3zjlmObD Rf+l9kNFnjh72lV8yyUgev5tIztbN/fI/EZAMf/6WSX20Q5S0th8M8rKsWluwhf4 D6+9LZRxeXbQugw2UDjEuR9EArhfKvRVmcRddACauX9YKJXct//XXV2ClZiP+PS/ laLUkoXCGQvOuAeonoe4 -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:43 2026 by rpki-client