$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/8F628C6C000E11F1B0B593243F6F56BC.roa File: 8F628C6C000E11F1B0B593243F6F56BC.roa (raw, json) Hash identifier: mhV3wJI4sW60cgaV9TFMNE1Xlg3TBUPjAyuhHyfLW4o= Subject key identifier: B8:DA:EE:71:9D:28:33:12:24:AB:36:1C:64:A5:24:3A:A4:61:F8:2C Certificate issuer: /CN=A91D6835/serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4 Certificate serial: 15 Authority key identifier: 8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/8F628C6C000E11F1B0B593243F6F56BC.roa Signing time: Mon 02 Mar 2026 14:50:49 +0000 ROA not before: Mon 02 Feb 2026 08:09:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4686 IP address blocks: 103.58.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6835, serialNumber=8A32FACA2B7A2A279BDDEDA94F588D00675D80A4 Validity Not Before: Feb 2 08:09:56 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5a3c9-7c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c3:72:f1:fc:6f:b2:38:9a:05:94:88:db:8d: 92:a1:46:0b:fb:cb:d5:bf:09:84:1c:59:3e:2b:b7: 49:b2:6d:de:37:83:bb:cf:38:e3:eb:52:1e:83:20: 07:ad:51:ed:b7:41:6c:10:34:fa:92:43:b7:33:a4: c4:33:64:f6:01:d3:ab:f5:53:9b:65:c5:d5:c1:81: 27:89:75:98:ac:aa:19:ba:a4:1f:62:94:0f:a7:c2: 73:c1:03:a3:60:53:70:f0:b3:30:1d:13:2b:e1:cc: 03:b4:db:97:a3:da:8c:1a:24:4e:2b:8a:aa:bb:d7: 8a:03:89:4b:db:f9:6b:d3:8a:5c:e2:3a:cd:f9:da: 13:a3:52:55:c9:6a:3a:f0:7b:0e:21:91:25:46:11: 7d:e7:44:58:ce:fc:c5:be:61:39:b9:58:cf:1e:ca: f5:1a:a5:d8:49:cf:21:c0:09:98:f5:b6:a8:d4:fb: f0:c2:12:fc:03:b1:2f:dc:79:99:28:a6:b9:53:a7: 17:50:d6:1a:74:44:c6:65:56:3f:71:6c:59:74:9b: 05:4b:a1:62:f7:61:2c:ef:9d:5b:4d:83:e1:7c:b7: e8:f2:23:8b:5f:21:fb:ce:3f:76:11:da:40:cb:a0: a6:cf:ac:02:58:09:2e:7a:c6:35:5a:17:c5:b8:c0: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DA:EE:71:9D:28:33:12:24:AB:36:1C:64:A5:24:3A:A4:61:F8:2C X509v3 Authority Key Identifier: keyid:8A:32:FA:CA:2B:7A:2A:27:9B:DD:ED:A9:4F:58:8D:00:67:5D:80:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/ijL6yit6Kieb3e2pT1iNAGddgKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijL6yit6Kieb3e2pT1iNAGddgKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6835/465CF5A2000E11F1A6B3148B3E6F56BC/8F628C6C000E11F1B0B593243F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 103.58.68.0/22 Signature Algorithm: sha256WithRSAEncryption 02:f1:08:74:cd:10:a4:ca:61:65:85:f3:57:2b:92:15:c3:0b: 2a:d5:70:84:0c:97:6d:0d:db:33:e2:f1:70:02:9b:47:16:56: 1a:98:d2:47:f1:e7:e0:c3:44:bf:ba:9f:a3:88:71:56:7a:bd: a5:ae:2d:79:44:a5:70:d7:30:c2:5b:22:83:f5:62:4c:bc:c5: 3e:34:31:70:a8:75:98:82:32:cd:81:b4:ed:58:1e:c1:3f:f6: 21:9c:9e:e7:aa:5a:1e:9b:fc:45:19:3e:d0:07:17:07:61:d1: 33:75:d7:69:20:7a:a5:79:b9:18:ce:50:13:0c:69:30:35:8a: fb:6f:be:06:c3:27:e7:98:df:53:00:9e:32:6d:a3:7f:09:34: 13:a5:5a:e6:7a:c0:9c:b5:16:3a:c7:75:ca:26:e9:29:e2:a8: b1:c3:a2:a7:e9:c8:e3:92:e8:f8:fe:49:4b:cf:d7:ee:c8:5f: 7f:52:63:87:8c:db:ec:9d:e3:f8:f3:85:98:64:ff:d7:41:b8: b8:27:27:a0:8b:95:10:40:e1:26:dc:59:68:d5:c5:83:15:a6: 32:91:89:32:3b:d1:a7:ff:c2:78:ee:86:ba:3d:ac:2a:04:7b: 5c:a6:61:43:b9:4e:4e:1d:43:db:13:22:e7:7d:6a:fb:d8:2a: 7c:8f:26:60 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NjgzNTExMC8GA1UEBRMoOEEzMkZBQ0EyQjdBMkEyNzlCRERFREE5NEY1ODhEMDA2 NzVEODBBNDAeFw0yNjAyMDIwODA5NTZaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTVhM2M5LTdjOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbw3Lx/G+yOJoFlIjbjZKhRgv7y9W/CYQcWT4rt0mybd43g7vPOOPrUh6DIAet Ue23QWwQNPqSQ7czpMQzZPYB06v1U5tlxdXBgSeJdZisqhm6pB9ilA+nwnPBA6Ng U3DwszAdEyvhzAO025ej2owaJE4riqq714oDiUvb+WvTilziOs352hOjUlXJajrw ew4hkSVGEX3nRFjO/MW+YTm5WM8eyvUapdhJzyHACZj1tqjU+/DCEvwDsS/ceZko prlTpxdQ1hp0RMZlVj9xbFl0mwVLoWL3YSzvnVtNg+F8t+jyI4tfIfvOP3YR2kDL oKbPrAJYCS56xjVaF8W4wBPdAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUuNrucZ0o MxIkqzYcZKUkOqRh+CwwHwYDVR0jBBgwFoAUijL6yit6Kieb3e2pT1iNAGddgKQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2ODM1LzQ2NUNGNUEyMDAw RTExRjFBNkIzMTQ4QjNFNkY1NkJDL2lqTDZ5aXQ2S2llYjNlMnBUMWlOQUdkZGdL US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaWpMNnlpdDZLaWViM2UycFQxaU5BR2RkZ0tRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjgzNS80NjVDRjVBMjAwMEUxMUYxQTZCMzE0OEIzRTZGNTZCQy84RjYyOEM2QzAw MEUxMUYxQjBCNTkzMjQzRjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJnOkQwDQYJKoZIhvcNAQELBQADggEBAALxCHTNEKTKYWWF81crkhXD CyrVcIQMl20N2zPi8XACm0cWVhqY0kfx5+DDRL+6n6OIcVZ6vaWuLXlEpXDXMMJb IoP1Yky8xT40MXCodZiCMs2BtO1YHsE/9iGcnueqWh6b/EUZPtAHFwdh0TN112kg eqV5uRjOUBMMaTA1ivtvvgbDJ+eY31MAnjJto38JNBOlWuZ6wJy1FjrHdcom6Sni qLHDoqfpyOOS6Pj+SUvP1+7IX39SY4eM2+yd4/jzhZhk/9dBuLgnJ6CLlRBA4Sbc WWjVxYMVpjKRiTI70af/wnjuhro9rCoEe1ymYUO5Tk4dQ9sTIud9avvYKnyPJmA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:18:13 2026 by rpki-client