$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/86B7FE9005FF11EAB499A845C4F9AE02.roa File: 86B7FE9005FF11EAB499A845C4F9AE02.roa (raw, json) Hash identifier: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc= Subject key identifier: 03:D2:5D:71:C0:39:54:20:7E:F1:C1:00:DD:88:7F:E9:92:E6:FE:CA Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Certificate serial: 0CD5 Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/86B7FE9005FF11EAB499A845C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:18:42 +0000 ROA not before: Thu 28 Aug 2025 19:09:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136901 IP address blocks: 103.98.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE Validity Not Before: Aug 28 19:09:30 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42ea2-3f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:9a:90:41:ea:c0:5b:e6:a9:a7:3e:8c:05: f1:48:0d:86:df:15:5d:de:94:8b:e4:e1:da:6e:57: 25:42:91:6e:3b:13:7c:fe:44:ec:38:fb:5d:1e:c0: 50:d1:2e:f4:73:92:b7:35:9c:1a:ef:4e:a4:e4:4a: e5:ff:77:86:95:e2:88:8d:d3:ea:52:83:12:f7:be: fe:16:df:90:5e:08:91:3e:60:69:54:50:d9:82:55: 10:fd:ea:88:59:99:8f:2b:0d:7a:54:d7:7b:5a:8f: b3:cd:bc:fe:8f:c4:94:04:30:38:f4:62:39:f4:9f: 07:c1:57:7c:7c:1f:b9:13:b1:3f:fe:d4:4f:19:fe: e8:3a:ea:0d:1d:4a:82:3e:43:c3:c1:e8:94:87:03: da:e7:6f:c8:be:18:db:80:8a:83:f1:ea:e0:08:ee: 77:1a:d4:7e:74:09:8f:f3:93:37:77:78:c7:a4:ff: f1:71:87:8f:97:2f:4e:97:97:37:b6:17:93:7e:80: b6:de:9a:a0:60:bd:ea:6d:7c:69:97:94:07:41:ab: ad:62:47:5d:f2:d8:f3:df:d8:db:e0:a1:a7:b8:1d: 8d:69:62:3a:56:d7:40:e3:e6:12:62:f9:19:25:b6: 6e:a9:aa:79:3b:22:a9:71:28:ad:b5:20:71:5b:1d: 49:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D2:5D:71:C0:39:54:20:7E:F1:C1:00:DD:88:7F:E9:92:E6:FE:CA X509v3 Authority Key Identifier: keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/86B7FE9005FF11EAB499A845C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.98.64.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:da:d5:48:92:f9:81:c1:dc:6a:eb:67:6b:d0:3a:f5:54:6b: cf:9c:b1:30:30:02:82:68:c1:e7:67:2d:c2:df:dc:1d:c5:8d: fd:89:47:ea:e8:d2:1e:ec:36:db:d6:46:59:71:fb:e9:3a:ca: b9:ff:47:d5:f4:f0:8c:d2:51:05:00:09:b7:a2:86:ec:af:ce: 2b:1f:7d:df:9c:88:be:de:33:e3:c2:6b:cc:b5:15:27:0a:82: 7e:e6:ce:0e:46:16:23:4d:25:a6:59:e6:75:a4:ac:9b:5a:26: 79:6e:5a:c1:cf:2e:eb:7d:a0:a0:eb:f3:a2:16:38:5d:4d:46: cb:b3:6b:91:e5:5e:a7:ce:a9:32:b3:0b:98:1d:37:47:f3:65: 03:f1:d9:b6:db:fb:f4:98:16:eb:81:97:15:ae:72:f3:23:a8: f8:d3:f9:3a:a8:73:66:4b:d1:ea:91:d9:0b:27:1e:77:67:fe: 59:55:e5:ea:6b:62:7f:11:47:12:f0:74:d1:aa:2d:05:dd:80: 14:2e:6d:11:ca:7d:04:88:7b:e4:fd:fb:fb:6c:11:1e:95:30: e2:d4:76:fc:6d:0e:13:aa:08:dd:c1:e2:94:82:45:07:e8:3c: a1:84:f0:4a:10:0c:17:c7:95:d4:82:48:cf:e7:dc:f6:dc:e3: 13:2e:f1:b3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQUMxMTAvBgNVBAUTKDU0RDNBOTU1Q0MzNDFBODQxODE1QThDREVBMTkwQUVB NTEwMkRGQ0UwHhcNMjUwODI4MTkwOTMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVhMi0zZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSaakEHqwFvmqac+jAXxSA2G3xVd3pSL5OHablclQpFuOxN8/kTsOPtdHsBQ 0S70c5K3NZwa706k5Erl/3eGleKIjdPqUoMS977+Ft+QXgiRPmBpVFDZglUQ/eqI WZmPKw16VNd7Wo+zzbz+j8SUBDA49GI59J8HwVd8fB+5E7E//tRPGf7oOuoNHUqC PkPDweiUhwPa52/IvhjbgIqD8ergCO53GtR+dAmP85M3d3jHpP/xcYePly9Ol5c3 theTfoC23pqgYL3qbXxpl5QHQautYkdd8tjz39jb4KGnuB2NaWI6VtdA4+YSYvkZ JbZuqap5OyKpcSittSBxWx1JHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAPSXXHA OVQgfvHBAN2If+mS5v7KMB8GA1UdIwQYMBaAFFTTqVXMNBqEGBWozeoZCupRAt/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZBQy82ODE5QkY0MjA1 RkUxMUVBODc2M0MyNDNDNEY5QUUwMi9WTk9wVmN3MEdvUVlGYWpONmhrSzZsRUMz ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZOT3BWY3cwR29RWUZhak42aGtLNmxFQzM4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFGQUMvNjgxOUJGNDIwNUZFMTFFQTg3NjNDMjQzQzRGOUFFMDIvODZCN0ZFOTAw NUZGMTFFQUI0OTlBODQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2JAMA0GCSqGSIb3DQEBCwUAA4IBAQBq2tVIkvmBwdxq62dr0Dr1 VGvPnLEwMAKCaMHnZy3C39wdxY39iUfq6NIe7Dbb1kZZcfvpOsq5/0fV9PCM0lEF AAm3oobsr84rH33fnIi+3jPjwmvMtRUnCoJ+5s4ORhYjTSWmWeZ1pKybWiZ5blrB zy7rfaCg6/OiFjhdTUbLs2uR5V6nzqkyswuYHTdH82UD8dm22/v0mBbrgZcVrnLz I6j40/k6qHNmS9HqkdkLJx53Z/5ZVeXqa2J/EUcS8HTRqi0F3YAULm0Ryn0EiHvk /fv7bBEelTDi1Hb8bQ4TqgjdweKUgkUH6DyhhPBKEAwXx5XUgkjP59z23OMTLvGz -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:33 2026 by rpki-client