$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/E51AC37C169D11F18D04F8B992EE528E.roa File: E51AC37C169D11F18D04F8B992EE528E.roa (raw, json) Hash identifier: mYlJdFIW8EjyX8ajfhqX1Cs+hajlapMlYM5UC79/gBw= Subject key identifier: 87:65:D4:1D:60:CC:25:3A:AC:E0:F7:4E:DE:8D:6D:AD:14:78:C1:D6 Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 0877 Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/E51AC37C169D11F18D04F8B992EE528E.roa Signing time: Tue 03 Mar 2026 01:11:23 +0000 ROA not before: Tue 03 Mar 2026 01:11:23 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141226 IP address blocks: 103.5.108.0/22 maxlen: 24 103.156.192.0/23 maxlen: 24 163.47.188.0/22 maxlen: 24 202.36.209.0/24 maxlen: 24 2407:c9c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2167 (0x877) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Mar 3 01:11:23 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a6353b-490c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:e8:7e:89:8f:af:2f:50:2d:97:d0:40:90: 96:4e:03:0b:c0:f0:b0:97:3e:a8:b4:72:57:62:f2: 25:c9:87:8e:50:81:48:ef:e0:d9:ea:db:de:f9:35: 79:8c:42:db:3a:c9:4f:9d:ba:dc:d5:89:6d:d9:d4: aa:fc:3c:aa:81:ac:a8:62:2e:4d:3b:08:88:f0:8f: 2a:60:66:12:d8:14:8f:2a:e8:76:1b:78:d4:04:c9: cb:24:d7:07:98:cf:cc:3c:94:ae:10:fc:ca:da:31: 12:a1:9f:ff:4a:08:fe:d1:90:d6:60:f1:ab:c6:9f: 76:95:8a:a0:e2:02:ca:3f:81:f8:54:90:64:c2:98: ce:dc:30:03:b2:d8:f9:63:50:1a:7d:39:75:1e:7d: a0:08:0e:79:5f:e8:af:7d:88:d0:d4:c1:87:d7:d0: 1d:56:88:f0:87:99:89:cf:7a:9c:87:78:66:ae:dd: ee:4d:7d:d4:de:90:21:55:20:4d:d9:1a:b5:d7:6b: 3d:28:56:de:0d:ac:cf:f1:cc:bf:ba:b0:5d:23:14: 85:f6:19:cf:99:ef:23:33:d1:79:72:6d:4e:6a:ce: 9d:d8:86:38:af:95:2b:e1:c2:fe:37:92:f0:41:3d: 41:25:1c:e1:ca:79:d1:64:72:2b:63:7c:43:82:a0: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:65:D4:1D:60:CC:25:3A:AC:E0:F7:4E:DE:8D:6D:AD:14:78:C1:D6 X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/E51AC37C169D11F18D04F8B992EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.5.108.0/22 103.156.192.0/23 163.47.188.0/22 202.36.209.0/24 IPv6: 2407:c9c0::/32 Signature Algorithm: sha256WithRSAEncryption 28:f3:8d:fb:e5:98:73:77:46:c5:6e:ae:b6:ee:fd:91:f7:d9: 5b:0a:d3:6f:81:d8:75:78:78:78:c1:f2:76:4a:4d:e4:49:9f: b1:a6:98:7f:ec:f3:79:28:50:9e:15:4e:d4:8d:f6:c1:a5:9b: af:05:1f:0e:82:ab:c8:2d:46:e9:f7:5d:c9:e2:01:fd:c3:68: 4f:68:1e:e6:1a:91:af:b4:fa:6d:37:37:e5:ec:68:e1:41:ae: 53:a4:21:a4:c5:9c:f2:88:ee:25:69:85:cb:85:fd:76:64:a4: 66:43:1c:47:b0:86:2c:24:23:79:bb:85:05:c4:46:c7:7c:bb: ff:91:0e:56:d4:1b:84:4e:30:30:17:d0:0e:1e:0b:4e:d6:e6: e1:a8:f8:48:0c:01:48:33:25:9b:f9:59:eb:f0:7e:77:14:fc: 4c:00:ad:b8:6e:54:be:db:70:45:c4:90:c8:b1:f8:d9:50:ff: 47:ee:e8:a5:40:77:1e:3a:ca:71:08:31:06:7a:d7:bd:16:1c: 95:e1:e3:b6:ea:a7:40:ae:8b:d3:5c:80:4f:e7:49:cc:cd:d5: 97:e1:8d:6b:94:68:2b:62:1b:5e:c3:1b:7b:bd:b7:94:74:d2: ba:d1:05:07:49:1e:6c:73:48:d1:8c:5b:02:63:d1:86:2d:d4: 05:eb:ac:47 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgICCHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjYwMzAzMDExMTIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MzUzYi00OTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquHofomPry9QLZfQQJCWTgMLwPCwlz6otHJXYvIlyYeOUIFI7+DZ6tve+TV5 jELbOslPnbrc1Ylt2dSq/DyqgayoYi5NOwiI8I8qYGYS2BSPKuh2G3jUBMnLJNcH mM/MPJSuEPzK2jESoZ//Sgj+0ZDWYPGrxp92lYqg4gLKP4H4VJBkwpjO3DADstj5 Y1AafTl1Hn2gCA55X+ivfYjQ1MGH19AdVojwh5mJz3qch3hmrt3uTX3U3pAhVSBN 2Rq112s9KFbeDazP8cy/urBdIxSF9hnPme8jM9F5cm1Oas6d2IY4r5Ur4cL+N5Lw QT1BJRzhynnRZHIrY3xDgqDiJwIDAQABo4ICgTCCAn0wHQYDVR0OBBYEFIdl1B1g zCU6rOD3Tt6Nba0UeMHWMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY4QzMvRDBFMzNGQTQwMkMzMTFFQjhBREMzMjM4QzRGOUFFMDIvRTUxQUMzN0Mx NjlEMTFGMThEMDRGOEI5OTJFRTUyOEUucm9hMEAGCCsGAQUFBwEHAQH/BDEwLzAe BAIAATAYAwQCZwVsAwQBZ5zAAwQCoy+8AwQAyiTRMA0EAgACMAcDBQAkB8nAMA0G CSqGSIb3DQEBCwUAA4IBAQAo84375Zhzd0bFbq627v2R99lbCtNvgdh1eHh4wfJ2 Sk3kSZ+xpph/7PN5KFCeFU7UjfbBpZuvBR8OgqvILUbp913J4gH9w2hPaB7mGpGv tPptNzfl7GjhQa5TpCGkxZzyiO4laYXLhf12ZKRmQxxHsIYsJCN5u4UFxEbHfLv/ kQ5W1BuETjAwF9AOHgtO1ubhqPhIDAFIMyWb+Vnr8H53FPxMAK24blS+23BFxJDI sfjZUP9H7uilQHceOspxCDEGete9FhyV4eO26qdArovTXIBP50nMzdWX4Y1rlGgr Yhtewxt7vbeUdNK60QUHSR5sc0jRjFsCY9GGLdQF66xH -----END CERTIFICATE-----Generated at Thu Mar 26 04:07:17 2026 by rpki-client