$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa File: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (raw, json) Hash identifier: Ohuq5/ilpYlHFnVFw/Xqzd7tdftLWWcaPxQsLzbu1bE= Subject key identifier: 6C:8A:E9:5C:A4:47:1F:CE:85:D4:F0:A6:13:96:D3:1D:40:62:C6:85 Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Certificate serial: 0DFF Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa Signing time: Thu 12 Mar 2026 18:23:24 +0000 ROA not before: Thu 12 Mar 2026 18:23:24 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 132602 IP address blocks: 103.16.152.0/22 maxlen: 22 103.16.152.0/24 maxlen: 24 103.16.153.0/24 maxlen: 24 103.16.154.0/23 maxlen: 24 163.47.80.0/22 maxlen: 24 2406:4b00::/32 maxlen: 32 2406:4b00:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3583 (0xdff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD Validity Not Before: Mar 12 18:23:24 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b3049b-eafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:59:e0:b7:b5:aa:be:bd:40:7b:58:59:4c:55: 01:7c:9e:35:f1:67:2a:15:ad:77:05:3f:63:9c:eb: b0:6a:bc:19:2a:4b:bb:da:7a:11:1c:19:a0:45:4f: 51:64:95:44:9a:9e:76:85:7d:52:a1:af:db:1a:c1: b0:93:30:c1:f4:36:34:22:1b:a3:b1:7a:18:09:2d: 77:04:11:b7:25:b4:8b:1d:bd:69:ab:92:68:79:3e: 7d:7c:a1:bd:a5:32:68:3a:33:b9:44:c9:0a:e4:d2: 5e:ea:d5:b1:fc:d1:e4:42:cc:3b:58:74:e4:6b:6d: 6d:77:64:b9:75:55:df:16:6d:e2:cf:85:13:90:4b: 02:9f:6e:dc:c1:3d:9c:de:70:d7:b0:72:b9:6b:09: 08:88:28:0f:b6:33:f7:29:0b:3c:f8:05:f7:e7:05: 8b:85:1c:fd:0f:97:48:7a:56:c0:ca:b8:59:2d:c5: 0a:7a:3c:d7:31:a0:1a:8a:8e:2d:31:b5:dd:37:98: 75:60:93:cd:c4:93:b1:37:0f:1f:c7:82:99:39:aa: bf:a0:d3:8e:6c:bb:d1:f7:60:2b:41:c8:64:0e:dc: f2:c6:6d:ee:db:30:e5:88:b3:bd:ce:80:78:41:b0: d2:a5:3d:9d:54:06:39:b0:c3:91:88:41:13:bc:64: 4e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8A:E9:5C:A4:47:1F:CE:85:D4:F0:A6:13:96:D3:1D:40:62:C6:85 X509v3 Authority Key Identifier: keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.16.152.0/22 163.47.80.0/22 IPv6: 2406:4b00::/32 Signature Algorithm: sha256WithRSAEncryption 4f:b5:53:97:72:a3:9b:36:b3:a0:ed:7e:e2:5d:e0:cf:7f:86: 81:d3:bc:88:7d:5b:16:48:42:23:86:9c:05:e3:1b:50:99:22: f4:a8:24:0b:db:c9:70:c2:c6:b5:88:fb:bc:30:6c:c4:8d:1d: cc:b2:7a:70:a2:c7:e0:3a:51:8c:90:2a:11:db:87:37:fb:e4: 59:79:11:37:19:1b:ac:e8:49:1a:be:8f:03:bd:58:f2:61:7f: e9:de:7f:40:2e:d5:bb:56:81:c5:82:c0:d4:80:97:2d:ed:6b: 07:5e:5f:de:45:10:3c:e7:59:c9:02:4a:12:53:94:ef:75:6d: d1:8d:e8:01:d0:6f:15:b2:4a:4d:a6:e6:e6:d6:57:69:e5:bf: 28:a8:bc:48:69:02:85:a9:dc:cc:cf:b7:38:59:0c:04:3d:4d: b7:5b:fa:2e:05:39:75:b4:56:5d:9a:3d:1e:c7:6d:47:f8:b8: d3:6e:4c:54:40:cb:74:7a:32:c2:b0:64:3f:e2:09:31:bb:07: 2f:b6:ec:76:00:4f:68:7b:99:34:09:56:aa:4d:1f:78:13:bd: c3:ce:2f:8f:45:36:00:e9:fe:50:c2:e0:90:fb:d6:a3:e0:45: 93:7d:e7:37:d3:03:31:c8:1a:55:a7:0c:55:6d:dd:ab:8f:cd: 40:7c:b3:2f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFMDcxMTAvBgNVBAUTKEM4RUJBMzM0QkQ3REE2RTkyRTY3QzQwOEJEMDM3ODdC QUVBRTBDQUQwHhcNMjYwMzEyMTgyMzI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWIzMDQ5Yi1lYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVngt7Wqvr1Ae1hZTFUBfJ418WcqFa13BT9jnOuwarwZKku72noRHBmgRU9R ZJVEmp52hX1Soa/bGsGwkzDB9DY0IhujsXoYCS13BBG3JbSLHb1pq5JoeT59fKG9 pTJoOjO5RMkK5NJe6tWx/NHkQsw7WHTka21td2S5dVXfFm3iz4UTkEsCn27cwT2c 3nDXsHK5awkIiCgPtjP3KQs8+AX35wWLhRz9D5dIelbAyrhZLcUKejzXMaAaio4t MbXdN5h1YJPNxJOxNw8fx4KZOaq/oNOObLvR92ArQchkDtzyxm3u2zDliLO9zoB4 QbDSpT2dVAY5sMORiEETvGRObQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGyK6Vyk Rx/OhdTwphOW0x1AYsaFMB8GA1UdIwQYMBaAFMjrozS9fabpLmfECL0DeHuurgyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkUwNy85NjJDNEI3RUQy QkYxMUU5QTg0RDY2MjJDNEY5QUUwMi95T3VqTkwxOXB1a3VaOFFJdlFONGU2NnVE SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lPdWpOTDE5cHVrdVo4UUl2UU40ZTY2dURLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZFMDcvOTYyQzRCN0VEMkJGMTFFOUE4NEQ2NjIyQzRGOUFFMDIvQTk1RUMwQjJD OUZBMTFFQkI3RjJFNzQ5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZxCYAwQCoy9QMA0EAgACMAcDBQAkBksAMA0GCSqGSIb3DQEBCwUA A4IBAQBPtVOXcqObNrOg7X7iXeDPf4aB07yIfVsWSEIjhpwF4xtQmSL0qCQL28lw wsa1iPu8MGzEjR3MsnpwosfgOlGMkCoR24c3++RZeRE3GRus6Ekavo8DvVjyYX/p 3n9ALtW7VoHFgsDUgJct7WsHXl/eRRA851nJAkoSU5TvdW3RjegB0G8VskpNpubm 1ldp5b8oqLxIaQKFqdzMz7c4WQwEPU23W/ouBTl1tFZdmj0ex21H+LjTbkxUQMt0 ejLCsGQ/4gkxuwcvtux2AE9oe5k0CVaqTR94E73Dzi+PRTYA6f5QwuCQ+9aj4EWT fec30wMxyBpVpwxVbd2rj81AfLMv -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:33 2026 by rpki-client