$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa File: A606B22CA65211EDB3A5967CC4F9AE02.roa (raw, json) Hash identifier: adumd4cSs4Z/aUEG4n9Ouw9MYn5ATbtz758rupDb3wY= Subject key identifier: A2:5F:B9:31:14:FE:51:10:81:E1:1E:75:86:3B:B9:0D:93:C3:98:C3 Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Certificate serial: 0257 Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa Signing time: Thu 05 Mar 2026 02:35:47 +0000 ROA not before: Thu 05 Mar 2026 02:35:47 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134663 IP address blocks: 103.72.138.0/24 maxlen: 24 103.72.139.0/24 maxlen: 24 2001:df2:4440::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:45:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F Validity Not Before: Mar 5 02:35:47 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a8ec03-a628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:b3:23:97:f4:e1:62:fb:82:2b:82:ed:74: c2:51:db:6c:98:b4:e0:15:f8:6d:00:4c:15:28:f7: df:81:f3:ab:18:50:bb:72:1e:25:19:7d:70:fa:72: be:ba:dd:fb:fc:1a:cb:14:f5:46:f9:6a:17:9d:81: 14:71:c5:1f:72:19:46:7c:13:c9:8f:7b:2c:e1:74: e4:c4:e4:b5:41:27:4f:ea:62:ca:de:0d:56:4b:1a: a4:2a:01:4e:a9:70:2a:e8:cb:68:f1:56:de:24:c1: bf:cb:2a:8c:a6:ac:54:1c:c6:0c:4f:f9:4c:d6:6b: f7:58:4f:76:48:0d:0a:58:76:40:ff:2f:79:1c:43: 6f:5c:06:7b:4c:84:ca:f0:57:dc:b7:9c:46:bb:02: f5:4a:25:dd:97:08:a0:e1:fd:a9:f1:81:cd:c7:25: bc:fb:63:8c:f1:b7:c7:76:2a:5f:04:c6:45:30:d3: a6:3a:c3:72:ea:c6:ee:ca:8c:c8:f8:d5:8a:38:d3: e9:21:1a:f6:60:a0:8d:e7:d7:e3:63:1f:17:a2:30: bf:12:c1:1b:e9:40:a6:c3:36:ab:72:13:ee:3f:e0: 6b:07:6b:17:15:d8:56:25:76:18:be:8c:d7:f2:64: 26:ae:cf:d8:38:1e:de:7c:e8:2e:5c:06:84:f0:b6: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5F:B9:31:14:FE:51:10:81:E1:1E:75:86:3B:B9:0D:93:C3:98:C3 X509v3 Authority Key Identifier: keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/A606B22CA65211EDB3A5967CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.72.138.0/23 IPv6: 2001:df2:4440::/48 Signature Algorithm: sha256WithRSAEncryption 5e:41:bc:41:8c:6a:cd:17:72:c0:09:41:48:97:30:88:ec:11: 85:33:70:a3:c2:4d:6c:8e:c1:24:d9:89:dc:89:dc:f0:9f:84: 56:ce:e3:77:7a:38:4d:c2:4f:53:14:53:6c:59:6a:df:07:49: 7d:98:a7:29:f9:de:76:81:df:81:6f:eb:21:a4:0e:b4:18:b7: 36:01:d3:aa:48:13:ad:2d:13:d6:8c:3c:c7:25:94:cd:b3:50: 64:b9:d1:eb:39:d8:70:2e:31:ad:23:c4:70:7f:f1:81:fd:9c: 59:ee:0d:3d:64:35:6b:80:4f:36:2f:5b:9d:08:91:22:7b:75: ba:d0:3a:c7:6d:c5:c7:47:b5:65:2a:5a:31:65:0e:47:40:d5: e9:77:f7:44:92:22:9c:31:8b:81:5f:69:70:c3:ab:45:e1:1a: 68:9b:7b:47:02:f9:a9:6d:46:e4:84:57:72:82:56:0b:73:62: 24:38:b1:07:6e:5c:5a:f8:80:5e:7f:df:33:79:f3:53:60:7a: 5b:19:fd:79:b1:1a:2d:9e:66:39:4e:20:74:36:8d:d2:34:9c: c3:11:cc:89:b2:f1:4a:0f:b9:4b:e2:fa:61:ce:07:06:b1:09: 65:b7:00:f0:48:5e:4d:0e:90:90:3a:e8:50:f8:a4:15:e7:f6: cf:82:41:db -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMUIxMTAvBgNVBAUTKEY2OUJCNkY3NzYwNzM5OUZEMzQyQjEyNENBRjhERThE RTQ3RjczMEYwHhcNMjYwMzA1MDIzNTQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE4ZWMwMy1hNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlKOzI5f04WL7giuC7XTCUdtsmLTgFfhtAEwVKPffgfOrGFC7ch4lGX1w+nK+ ut37/BrLFPVG+WoXnYEUccUfchlGfBPJj3ss4XTkxOS1QSdP6mLK3g1WSxqkKgFO qXAq6Mto8VbeJMG/yyqMpqxUHMYMT/lM1mv3WE92SA0KWHZA/y95HENvXAZ7TITK 8Ffct5xGuwL1SiXdlwig4f2p8YHNxyW8+2OM8bfHdipfBMZFMNOmOsNy6sbuyozI +NWKONPpIRr2YKCN59fjYx8XojC/EsEb6UCmwzarchPuP+BrB2sXFdhWJXYYvozX 8mQmrs/YOB7efOguXAaE8LaSgQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKJfuTEU /lEQgeEedYY7uQ2Tw5jDMB8GA1UdIwQYMBaAFPabtvd2Bzmf00KxJMr43o3kf3MP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIxQi8yQUQxMzk4NkE2 NEYxMUVEOTgwMkNBNzZDNEY5QUUwMi85cHUyOTNZSE9aX1RRckVreXZqZWplUl9j dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlwdTI5M1lIT1pfVFFyRWt5dmplamVSX2N3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JCMUIvMkFEMTM5ODZBNjRGMTFFRDk4MDJDQTc2QzRGOUFFMDIvQTYwNkIyMkNB NjUyMTFFREIzQTU5NjdDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ0iKMA8EAgACMAkDBwAgAQ3yREAwDQYJKoZIhvcNAQELBQADggEB AF5BvEGMas0XcsAJQUiXMIjsEYUzcKPCTWyOwSTZidyJ3PCfhFbO43d6OE3CT1MU U2xZat8HSX2Ypyn53naB34Fv6yGkDrQYtzYB06pIE60tE9aMPMcllM2zUGS50es5 2HAuMa0jxHB/8YH9nFnuDT1kNWuATzYvW50IkSJ7dbrQOsdtxcdHtWUqWjFlDkdA 1el390SSIpwxi4FfaXDDq0XhGmibe0cC+altRuSEV3KCVgtzYiQ4sQduXFr4gF5/ 3zN581NgelsZ/XmxGi2eZjlOIHQ2jdI0nMMRzImy8UoPuUvi+mHOBwaxCWW3APBI Xk0OkJA66FD4pBXn9s+CQds= -----END CERTIFICATE-----Generated at Thu Mar 26 22:26:16 2026 by rpki-client