$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/F585ED70EBB511ECA410BF6DC4F9AE02.roa File: F585ED70EBB511ECA410BF6DC4F9AE02.roa (raw, json) Hash identifier: eh2olN6asVC4zjOV+kS987T4rETGl4oNwPTcTkaLCEw= Subject key identifier: EF:30:FB:CB:69:55:44:CF:F1:A1:88:78:59:EF:4A:DC:96:E2:46:12 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 0367 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/F585ED70EBB511ECA410BF6DC4F9AE02.roa Signing time: Wed 11 Mar 2026 00:34:16 +0000 ROA not before: Wed 11 Mar 2026 00:34:16 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135082 IP address blocks: 103.208.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 871 (0x367) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Mar 11 00:34:16 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b0b888-a492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:af:e1:77:67:f5:f9:ba:8f:29:42:d4:36: 42:07:26:53:cb:30:28:11:84:f6:db:e9:66:c7:46: ca:15:a1:36:87:02:a3:c0:df:2d:82:ab:79:a9:9e: 05:9b:c0:5f:f6:ae:de:55:2d:14:9a:4a:85:da:ac: 95:39:e8:d8:41:5e:45:10:1b:8d:6d:e5:38:12:1a: 19:7d:ee:42:98:0d:80:9b:bc:a7:9c:08:fd:af:f8: 8e:7a:b2:3e:03:2d:99:8f:5b:bb:e5:76:c2:09:5f: 85:23:b8:25:ed:9a:34:35:d4:2c:08:77:ec:dd:d4: c5:8f:0e:fd:f6:20:4b:77:e6:70:50:69:2b:44:0c: 4d:1d:fc:6a:5c:cc:68:ed:4a:b0:99:e3:dd:a2:89: 04:b7:90:f2:6c:05:04:5a:77:42:1e:e4:2f:0a:35: 61:0d:bb:d3:36:84:8c:98:15:5f:f2:75:84:5d:c4: 3a:33:a4:63:73:98:3a:85:24:9b:bc:12:9e:76:88: 0f:ba:bd:13:26:d2:93:00:3b:63:c7:7b:c7:ab:71: 67:65:2f:ec:3f:b7:c6:96:9f:f1:eb:df:39:e9:28: c3:4b:41:dd:c7:e6:b4:33:b0:66:55:3e:89:5d:02: 1b:46:57:35:c2:06:60:07:47:77:5f:ea:fe:ad:45: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:30:FB:CB:69:55:44:CF:F1:A1:88:78:59:EF:4A:DC:96:E2:46:12 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/F585ED70EBB511ECA410BF6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.208.198.0/24 Signature Algorithm: sha256WithRSAEncryption b0:c0:5b:ef:01:a6:9a:41:e6:e5:bd:02:57:f3:fb:0d:11:c6: 17:9f:26:82:01:a8:d8:73:4a:52:6b:43:20:af:e7:2a:c2:23: 8f:ae:58:a9:15:a6:27:a0:9c:62:86:aa:5d:9c:b3:da:c8:b5: bb:4c:e8:2d:49:36:1d:d8:c6:3e:8d:71:d2:7a:43:58:01:f9: f8:45:29:03:2d:12:83:c6:4c:86:83:51:0b:39:62:b5:ac:f1: 13:f2:fa:41:84:cd:9f:25:91:c4:5c:87:b8:ef:00:46:46:8d: 6b:49:0d:c2:d3:ec:76:82:4c:92:bc:0c:77:95:f6:0d:bf:9f: af:f4:77:59:13:d1:c3:3e:ef:96:63:71:50:37:0d:c3:09:a6: a9:bc:3d:f5:cb:f0:76:f9:53:fc:68:fa:94:17:d2:ab:20:f4: 0b:c7:d0:ca:c4:81:1f:8e:f9:e1:e2:75:12:aa:79:fc:5a:ab: 4e:57:36:cc:77:03:17:0c:2a:c6:b7:b7:ee:3b:e4:43:ac:5d: 89:9d:29:ea:a8:6d:16:52:3a:16:f6:84:57:24:54:be:4e:7e: 20:02:d6:3f:a0:1a:f6:89:f8:18:d0:1b:94:e1:ad:e8:9f:5c: ea:22:6c:23:53:08:34:c7:49:3e:00:34:ac:b3:46:0e:4d:14: 5f:28:62:77 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjYwMzExMDAzNDE2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIwYjg4OC1hNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPqv4Xdn9fm6jylC1DZCByZTyzAoEYT22+lmx0bKFaE2hwKjwN8tgqt5qZ4F m8Bf9q7eVS0UmkqF2qyVOejYQV5FEBuNbeU4EhoZfe5CmA2Am7ynnAj9r/iOerI+ Ay2Zj1u75XbCCV+FI7gl7Zo0NdQsCHfs3dTFjw799iBLd+ZwUGkrRAxNHfxqXMxo 7UqwmePdookEt5DybAUEWndCHuQvCjVhDbvTNoSMmBVf8nWEXcQ6M6Rjc5g6hSSb vBKedogPur0TJtKTADtjx3vHq3FnZS/sP7fGlp/x69856SjDS0Hdx+a0M7BmVT6J XQIbRlc1wgZgB0d3X+r+rUUzFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO8w+8tp VUTP8aGIeFnvStyW4kYSMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UxRTYvQ0Q5NEI4QjhFQkIxMTFFQzlEOUIyNTY5QzRGOUFFMDIvRjU4NUVENzBF QkI1MTFFQ0E0MTBCRjZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ9DGMA0GCSqGSIb3DQEBCwUAA4IBAQCwwFvvAaaaQeblvQJX8/sN EcYXnyaCAajYc0pSa0Mgr+cqwiOPrlipFaYnoJxihqpdnLPayLW7TOgtSTYd2MY+ jXHSekNYAfn4RSkDLRKDxkyGg1ELOWK1rPET8vpBhM2fJZHEXIe47wBGRo1rSQ3C 0+x2gkySvAx3lfYNv5+v9HdZE9HDPu+WY3FQNw3DCaapvD31y/B2+VP8aPqUF9Kr IPQLx9DKxIEfjvnh4nUSqnn8WqtOVzbMdwMXDCrGt7fuO+RDrF2JnSnqqG0WUjoW 9oRXJFS+Tn4gAtY/oBr2ifgY0BuU4a3on1zqImwjUwg0x0k+ADSss0YOTRRfKGJ3 -----END CERTIFICATE-----Generated at Sat Mar 28 13:40:54 2026 by rpki-client