$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/8CAFF0E884AF11F0A1FF182BC4F9AE02.roa File: 8CAFF0E884AF11F0A1FF182BC4F9AE02.roa (raw, json) Hash identifier: n3JoaRohuK3vZGwx1NSLDBtMi6V3V4zWpmj5eBkILR0= Subject key identifier: 07:97:81:72:A0:F4:7E:E5:A8:84:F6:EE:15:B2:F0:17:E3:9C:0E:6D Certificate issuer: /CN=A91CB92A/serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Certificate serial: 67 Authority key identifier: AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/8CAFF0E884AF11F0A1FF182BC4F9AE02.roa Signing time: Tue 03 Mar 2026 07:45:21 +0000 ROA not before: Tue 03 Mar 2026 07:45:21 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 153995 IP address blocks: 103.147.16.0/23 maxlen: 23 103.147.16.0/24 maxlen: 24 103.147.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB92A, serialNumber=AD152AF6EF0299620BF9F77FD60CD8B3140417AF Validity Not Before: Mar 3 07:45:21 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a69191-af6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:fd:7d:22:ef:0c:81:58:b9:25:25:a6:0c: a4:d8:9a:be:9f:6a:45:75:4d:8f:1f:4f:ca:15:0f: dc:0c:91:4c:56:55:05:d3:df:20:78:10:92:ec:f0: a0:03:40:97:f1:db:05:57:b1:db:f5:5f:16:c0:de: 48:eb:df:ac:a7:4e:70:46:ae:85:05:85:df:75:0c: 28:f9:67:65:ee:19:98:02:65:ac:47:67:05:b4:69: 8f:c2:39:78:11:c7:60:e5:52:15:68:99:a8:05:26: 1d:f1:fb:21:5e:8a:d0:2e:5a:4a:21:19:ea:24:9f: 97:44:2e:f6:61:59:37:bd:1c:57:77:db:94:5c:e6: d1:d5:bf:26:00:a9:08:2e:9d:1d:2d:15:a7:0b:09: dd:63:95:24:93:ff:0e:e3:8c:cd:4e:a6:c0:ff:6f: 23:fd:8e:55:71:41:b2:2e:f2:cd:ab:4b:14:00:77: 5d:a5:45:2f:ca:5a:41:59:db:52:0a:99:07:32:f9: 41:42:66:9b:49:70:66:aa:98:6a:40:b8:f0:04:c1: 05:e7:21:64:6f:d7:17:34:04:41:e1:b9:ad:25:45: f9:92:2c:4b:ae:fd:6c:4f:0c:31:f2:b6:de:5f:e3: 54:57:f8:c3:44:2e:15:35:94:cf:99:d0:22:a0:b2: c9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:97:81:72:A0:F4:7E:E5:A8:84:F6:EE:15:B2:F0:17:E3:9C:0E:6D X509v3 Authority Key Identifier: keyid:AD:15:2A:F6:EF:02:99:62:0B:F9:F7:7F:D6:0C:D8:B3:14:04:17:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/rRUq9u8CmWIL-fd_1gzYsxQEF68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rRUq9u8CmWIL-fd_1gzYsxQEF68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB92A/FC12E31084AE11F096C09D29C4F9AE02/8CAFF0E884AF11F0A1FF182BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.147.16.0/23 Signature Algorithm: sha256WithRSAEncryption 96:59:6e:19:9a:55:36:bc:1d:e4:68:94:5b:f2:0f:27:b4:30: 48:1a:64:0d:6d:9e:e2:c0:5f:53:cf:a9:d1:e3:5c:1f:a9:b5: 71:b7:3c:6f:90:09:59:0e:ee:a4:30:7a:66:68:19:47:0a:55: 9f:e7:77:9e:82:b5:7e:7e:fb:9e:56:29:bb:dc:81:6b:e0:97: 46:6b:c0:ef:09:e3:3e:3d:cf:8a:0a:23:a2:ef:bd:c1:0c:66: 58:84:78:bd:90:b8:db:e5:d1:3c:c4:07:43:8a:2e:bd:00:8d: 39:19:1b:4b:59:c7:77:61:b0:c3:56:c0:55:88:e1:4c:5e:9b: cf:f5:bb:75:b1:bc:b8:81:d3:ac:2d:1d:07:94:16:38:03:41: f3:fc:bd:bd:cc:5f:3a:be:3d:ad:d6:4d:57:fa:d8:8e:0a:d1: 01:46:ec:5b:58:14:ea:31:6e:d3:fe:f0:f4:90:af:da:2e:6f: c1:f6:e9:20:66:ff:ed:91:34:93:47:16:d1:a8:8e:11:51:1a: fe:42:16:2a:05:6e:6d:f7:f9:2a:ae:0b:ad:54:f7:53:f7:df: c9:68:77:ea:10:69:42:c5:8e:8c:94:25:f0:99:5b:dc:db:5d: 0d:85:80:47:92:e2:e2:0f:53:56:75:a8:f3:da:e5:a8:e7:1f: d2:11:d5:f9 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjkyQTExMC8GA1UEBRMoQUQxNTJBRjZFRjAyOTk2MjBCRjlGNzdGRDYwQ0Q4QjMx NDA0MTdBRjAeFw0yNjAzMDMwNzQ1MjFaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTY5MTkxLWFmNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQQP19Iu8MgVi5JSWmDKTYmr6fakV1TY8fT8oVD9wMkUxWVQXT3yB4EJLs8KAD QJfx2wVXsdv1XxbA3kjr36ynTnBGroUFhd91DCj5Z2XuGZgCZaxHZwW0aY/COXgR x2DlUhVomagFJh3x+yFeitAuWkohGeokn5dELvZhWTe9HFd325Rc5tHVvyYAqQgu nR0tFacLCd1jlSST/w7jjM1OpsD/byP9jlVxQbIu8s2rSxQAd12lRS/KWkFZ21IK mQcy+UFCZptJcGaqmGpAuPAEwQXnIWRv1xc0BEHhua0lRfmSLEuu/WxPDDHytt5f 41RX+MNELhU1lM+Z0CKgsskvAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUB5eBcqD0 fuWohPbuFbLwF+OcDm0wHwYDVR0jBBgwFoAUrRUq9u8CmWIL+fd/1gzYsxQEF68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCOTJBL0ZDMTJFMzEwODRB RTExRjA5NkMwOUQyOUM0RjlBRTAyL3JSVXE5dThDbVdJTC1mZF8xZ3pZc3hRRUY2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvclJVcTl1OENtV0lMLWZkXzFnellzeFFFRjY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjkyQS9GQzEyRTMxMDg0QUUxMUYwOTZDMDlEMjlDNEY5QUUwMi84Q0FGRjBFODg0 QUYxMUYwQTFGRjE4MkJDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnkxAwDQYJKoZIhvcNAQELBQADggEBAJZZbhmaVTa8HeRolFvyDye0 MEgaZA1tnuLAX1PPqdHjXB+ptXG3PG+QCVkO7qQwemZoGUcKVZ/nd56CtX5++55W KbvcgWvgl0ZrwO8J4z49z4oKI6LvvcEMZliEeL2QuNvl0TzEB0OKLr0AjTkZG0tZ x3dhsMNWwFWI4Uxem8/1u3WxvLiB06wtHQeUFjgDQfP8vb3MXzq+Pa3WTVf62I4K 0QFG7FtYFOoxbtP+8PSQr9oub8H26SBm/+2RNJNHFtGojhFRGv5CFioFbm33+Squ C61U91P338lod+oQaULFjoyUJfCZW9zbXQ2FgEeS4uIPU1Z1qPPa5ajnH9IR1fk= -----END CERTIFICATE-----Generated at Thu Mar 26 04:18:26 2026 by rpki-client