$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/81E66AB486DD11EAA5DCD466C4F9AE02.roa File: 81E66AB486DD11EAA5DCD466C4F9AE02.roa (raw, json) Hash identifier: tMZ5eMTtP1d92HOozzJdgHksx9o6zVLKwH65RdaVt8g= Subject key identifier: D4:21:18:D5:95:EF:E1:9D:CC:E7:D5:76:7F:A2:78:6A:18:39:10:2B Certificate issuer: /CN=A91DA252/serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Certificate serial: 0A3F Authority key identifier: 28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/81E66AB486DD11EAA5DCD466C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:48:10 +0000 ROA not before: Fri 20 Feb 2026 19:17:00 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136238 IP address blocks: 36.255.104.0/24 maxlen: 24 36.255.105.0/24 maxlen: 24 103.84.134.0/24 maxlen: 24 103.110.109.0/24 maxlen: 24 103.110.110.0/24 maxlen: 24 103.110.111.0/24 maxlen: 24 2001:df0:1f00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2623 (0xa3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA252, serialNumber=28F18EC749EA91B5A3299749F2ABE2788A10C691 Validity Not Before: Feb 20 19:17:00 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a451a9-59cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:2b:57:98:b8:35:68:13:b2:99:44:a4:8c: f5:c8:cb:63:ad:4a:f4:2a:c4:27:64:d6:67:78:88: f6:0a:19:22:7b:0d:da:9d:ac:d4:d1:1f:12:5b:c4: d6:07:23:e0:dc:79:69:88:35:81:b5:18:33:b0:5c: 09:6e:47:d4:b6:e2:ac:e5:71:a1:1a:05:06:ac:ca: f8:02:46:a0:b3:e2:67:8e:7c:46:fe:af:b2:36:1b: 43:44:f3:2e:13:51:b2:93:8b:e1:24:7a:59:de:49: c9:37:43:fd:93:da:62:85:fa:95:4d:64:7f:3d:9e: 30:3e:27:f0:c1:69:26:ab:e2:bd:e8:d5:aa:f8:76: 9a:10:fe:f1:84:5d:97:9e:7f:27:40:91:6c:96:ba: c5:d8:ef:8d:52:c2:8f:2a:12:71:ca:79:0a:d4:01: de:f7:ae:6e:b1:41:91:18:e7:32:5c:c9:c4:68:2e: ec:65:a8:a6:17:a9:a1:38:53:ab:43:03:e3:97:06: d0:7b:e4:d9:df:8d:f9:66:e4:ee:23:46:18:66:46: 9c:d2:f2:36:fd:b9:ea:b6:27:86:1e:56:f9:46:2a: 9f:4f:54:b8:22:67:92:b8:f2:56:8f:fd:1b:42:2a: 94:34:e6:91:9f:f1:47:c4:1e:d5:5d:f6:27:85:12: fd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:21:18:D5:95:EF:E1:9D:CC:E7:D5:76:7F:A2:78:6A:18:39:10:2B X509v3 Authority Key Identifier: keyid:28:F1:8E:C7:49:EA:91:B5:A3:29:97:49:F2:AB:E2:78:8A:10:C6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/KPGOx0nqkbWjKZdJ8qvieIoQxpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPGOx0nqkbWjKZdJ8qvieIoQxpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA252/F081716886DC11EA9BD3C466C4F9AE02/81E66AB486DD11EAA5DCD466C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.255.104.0/23 103.84.134.0/24 103.110.109.0-103.110.111.255 IPv6: 2001:df0:1f00::/48 Signature Algorithm: sha256WithRSAEncryption 2a:59:1c:a4:a7:99:6b:dc:44:20:f8:c5:82:4c:21:d7:7b:ee: 01:48:e9:4f:fa:97:47:12:af:f4:34:3f:4d:fe:dc:11:b1:41: ca:57:65:c1:0f:2c:f6:3d:c6:d3:9a:83:92:0d:01:fb:ac:d1: 7e:79:c4:0a:fb:59:33:06:5f:14:8a:74:99:4c:fc:b8:c6:aa: bc:fb:30:5a:62:46:c5:66:99:00:e2:de:38:17:d1:87:cc:38: 56:53:36:35:d3:b4:35:76:7a:04:b0:3f:c9:66:9d:b2:80:1e: ab:cc:2f:03:ae:e0:d8:2d:02:1e:58:e3:c8:1d:34:f3:4d:55: 5c:c4:4b:8b:de:28:18:f2:8d:87:6c:f2:57:b4:1b:86:43:85: 84:e4:93:6d:17:32:19:77:40:29:2a:11:c8:b0:e5:53:fa:24: e9:b8:7c:94:a5:ba:5e:19:09:d3:b6:52:20:59:3a:ce:7c:01: bf:57:bd:bd:0c:78:a1:ab:6a:a7:7a:35:c2:f4:31:d7:d1:52: 69:64:0a:7f:76:63:a8:7f:cc:e8:a4:0f:6b:43:a9:08:a6:24: d4:ae:1a:ef:5a:ca:8c:9d:a7:4a:f2:20:4f:cc:ac:2e:dc:1f: 16:70:79:d0:4d:69:60:d5:43:4e:74:f0:2c:54:4d:33:a5:b7: e5:83:ff:6f -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICCj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyNTIxMTAvBgNVBAUTKDI4RjE4RUM3NDlFQTkxQjVBMzI5OTc0OUYyQUJFMjc4 OEExMEM2OTEwHhcNMjYwMjIwMTkxNzAwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTFhOS01OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukArV5i4NWgTsplEpIz1yMtjrUr0KsQnZNZneIj2Chkiew3anazU0R8SW8TW ByPg3HlpiDWBtRgzsFwJbkfUtuKs5XGhGgUGrMr4Akags+JnjnxG/q+yNhtDRPMu E1Gyk4vhJHpZ3knJN0P9k9pihfqVTWR/PZ4wPifwwWkmq+K96NWq+HaaEP7xhF2X nn8nQJFslrrF2O+NUsKPKhJxynkK1AHe965usUGRGOcyXMnEaC7sZaimF6mhOFOr QwPjlwbQe+TZ3435ZuTuI0YYZkac0vI2/bnqtieGHlb5RiqfT1S4ImeSuPJWj/0b QiqUNOaRn/FHxB7VXfYnhRL9GQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFNQhGNWV 7+GdzOfVdn+ieGoYORArMB8GA1UdIwQYMBaAFCjxjsdJ6pG1oymXSfKr4niKEMaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTI1Mi9GMDgxNzE2ODg2 REMxMUVBOUJEM0M0NjZDNEY5QUUwMi9LUEdPeDBucWtiV2pLWmRKOHF2aWVJb1F4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQR094MG5xa2JXaktaZEo4cXZpZUlvUXhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEyNTIvRjA4MTcxNjg4NkRDMTFFQTlCRDNDNDY2QzRGOUFFMDIvODFFNjZBQjQ4 NkREMTFFQUE1RENENDY2QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAg BAIAATAaAwQBJP9oAwQAZ1SGMAwDBABnbm0DBARnbmAwDwQCAAIwCQMHACABDfAf ADANBgkqhkiG9w0BAQsFAAOCAQEAKlkcpKeZa9xEIPjFgkwh13vuAUjpT/qXRxKv 9DQ/Tf7cEbFByldlwQ8s9j3G05qDkg0B+6zRfnnECvtZMwZfFIp0mUz8uMaqvPsw WmJGxWaZAOLeOBfRh8w4VlM2NdO0NXZ6BLA/yWadsoAeq8wvA67g2C0CHljjyB00 801VXMRLi94oGPKNh2zyV7QbhkOFhOSTbRcyGXdAKSoRyLDlU/ok6bh8lKW6XhkJ 07ZSIFk6znwBv1e9vQx4oatqp3o1wvQx19FSaWQKf3ZjqH/M6KQPa0OpCKYk1K4a 71rKjJ2nSvIgT8ysLtwfFnB50E1pYNVDTnTwLFRNM6W35YP/bw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:16 2026 by rpki-client