$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/05AF21A4B71311F0B98A8D22C4F9AE02.roa File: 05AF21A4B71311F0B98A8D22C4F9AE02.roa (raw, json) Hash identifier: UQySzPejb5ugIgWBofwkQCINEk7PYw4Ofbh167EGXpA= Subject key identifier: 63:7A:0F:79:AB:06:7C:89:9F:B4:76:CF:7A:D8:10:B3:53:D0:50:10 Certificate issuer: /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Certificate serial: 07F7 Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/05AF21A4B71311F0B98A8D22C4F9AE02.roa Signing time: Sat 14 Mar 2026 21:28:19 +0000 ROA not before: Sat 14 Mar 2026 21:28:19 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 134506 IP address blocks: 103.161.106.0/23 maxlen: 23 103.161.106.0/24 maxlen: 24 103.161.107.0/24 maxlen: 24 2001:df5:c180::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4 Validity Not Before: Mar 14 21:28:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69b5d2f3-3d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4c:e6:5c:bd:91:d5:1d:3c:f9:2d:93:d9:83: 99:ce:9a:ae:47:cf:62:9c:64:e9:44:47:00:b4:ae: 76:de:bf:50:92:c1:dd:a6:75:13:01:94:ba:43:aa: 94:a4:6c:3b:f5:47:06:19:cc:0b:54:bf:bb:5e:1c: e5:4e:95:dc:f6:97:41:6b:bb:56:a9:88:ec:91:f9: 6e:ff:a6:c8:90:5e:a9:fc:26:33:af:20:12:90:83: 0f:8b:e9:e9:09:4c:e9:3e:e0:a5:60:a5:77:c3:d4: 01:f4:9d:e7:1b:f8:22:aa:23:73:b8:7d:fc:ea:cc: 66:83:d7:fc:12:7c:bb:d6:68:fa:0a:2e:5c:e5:8c: c8:82:ad:38:03:16:9b:d2:35:da:da:26:58:8b:97: b8:d2:a1:d7:ef:b7:96:bd:34:18:b8:e6:4e:9d:97: bc:16:18:4e:83:b4:37:b2:30:93:c7:c3:75:d7:bf: a9:14:42:68:98:29:4f:c2:29:c1:f6:98:cc:25:f4: cc:77:60:c3:d1:31:84:69:ef:78:71:71:e4:90:4e: 5e:91:64:5b:c9:85:64:c0:3d:8f:4e:a4:ed:de:a1: 0e:52:6b:3d:31:56:8f:ec:2f:10:b3:a8:a2:d7:21: 50:f5:e2:ba:3f:9e:1a:35:85:c3:85:09:cb:43:a4: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7A:0F:79:AB:06:7C:89:9F:B4:76:CF:7A:D8:10:B3:53:D0:50:10 X509v3 Authority Key Identifier: keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/05AF21A4B71311F0B98A8D22C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.161.106.0/23 IPv6: 2001:df5:c180::/48 Signature Algorithm: sha256WithRSAEncryption 8a:4c:27:92:d8:61:9a:85:5b:a6:e4:5a:43:62:ab:3c:d6:b3: 99:7a:15:f0:97:dc:9f:d8:88:34:66:fb:41:66:5a:ce:da:44: 85:49:12:ec:d5:3a:cd:31:76:a9:b2:09:bc:dc:84:cb:b6:04: 9c:f0:6a:79:b9:ab:1d:58:b5:22:f8:79:28:84:4e:68:d0:12: 6f:61:7c:3a:26:12:eb:89:12:d1:23:ea:55:20:5a:62:8b:31: 0c:08:33:da:b3:fe:cc:89:af:3a:9b:41:82:f9:23:3a:25:c7: 6a:3e:dc:33:79:02:89:12:41:3f:c3:41:ce:26:f9:fb:41:64: 75:52:eb:d7:95:f8:f6:7d:b0:c0:ef:3a:31:00:13:2f:f2:d7: 2a:fa:7b:5e:25:e6:74:5d:22:9c:35:db:9b:a2:31:b2:76:14: 42:13:4e:7e:bb:60:61:ce:4b:61:f1:3f:3c:a9:96:f7:c4:c3: 17:b6:09:0f:6e:7e:40:df:b8:23:61:34:96:7f:89:f6:c3:31: 53:4b:32:74:13:54:4e:e6:62:dd:ad:37:38:ed:b3:b6:d6:7d: 51:11:58:29:67:7b:6f:4c:5f:d7:b8:ec:57:28:ac:eb:5e:03: 9d:ef:fc:bb:d9:c8:09:f6:27:7e:a6:d2:da:9b:47:23:1b:39: 0c:61:f3:ec -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q5OEQxMTAvBgNVBAUTKEJGRTQ2MTM3NURDMjIzRDRGN0IyNzA1NUUyQjM0NzQ1 RkU2MTAxRDQwHhcNMjYwMzE0MjEyODE5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI1ZDJmMy0zZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEzmXL2R1R08+S2T2YOZzpquR89inGTpREcAtK523r9QksHdpnUTAZS6Q6qU pGw79UcGGcwLVL+7XhzlTpXc9pdBa7tWqYjskflu/6bIkF6p/CYzryASkIMPi+np CUzpPuClYKV3w9QB9J3nG/giqiNzuH386sxmg9f8Eny71mj6Ci5c5YzIgq04Axab 0jXa2iZYi5e40qHX77eWvTQYuOZOnZe8FhhOg7Q3sjCTx8N117+pFEJomClPwinB 9pjMJfTMd2DD0TGEae94cXHkkE5ekWRbyYVkwD2PTqTt3qEOUms9MVaP7C8Qs6ii 1yFQ9eK6P54aNYXDhQnLQ6QSNQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGN6D3mr BnyJn7R2z3rYELNT0FAQMB8GA1UdIwQYMBaAFL/kYTddwiPU97JwVeKzR0X+YQHU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDk4RC80NjE0NTdCNDUw MEMxMUVCQTcyREJFMjRDNEY5QUUwMi92LVJoTjEzQ0k5VDNzbkJWNHJOSFJmNWhB ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YtUmhOMTNDSTlUM3NuQlY0ck5IUmY1aEFkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0Q5OEQvNDYxNDU3QjQ1MDBDMTFFQkE3MkRCRTI0QzRGOUFFMDIvMDVBRjIxQTRC NzEzMTFGMEI5OEE4RDIyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6FqMA8EAgACMAkDBwAgAQ31wYAwDQYJKoZIhvcNAQELBQADggEB AIpMJ5LYYZqFW6bkWkNiqzzWs5l6FfCX3J/YiDRm+0FmWs7aRIVJEuzVOs0xdqmy CbzchMu2BJzwanm5qx1YtSL4eSiETmjQEm9hfDomEuuJEtEj6lUgWmKLMQwIM9qz /syJrzqbQYL5Izolx2o+3DN5AokSQT/DQc4m+ftBZHVS69eV+PZ9sMDvOjEAEy/y 1yr6e14l5nRdIpw125uiMbJ2FEITTn67YGHOS2HxPzyplvfEwxe2CQ9ufkDfuCNh NJZ/ifbDMVNLMnQTVE7mYt2tNzjts7bWfVERWClne29MX9e47FcorOteA53v/LvZ yAn2J36m0tqbRyMbOQxh8+w= -----END CERTIFICATE-----Generated at Sat Mar 28 12:10:00 2026 by rpki-client