$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa File: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (raw, json) Hash identifier: 52FStysb8y6SSS0DgpkYNnuMyVWPrRkIBtAubJdaP50= Subject key identifier: DC:47:31:1F:76:31:29:DF:2D:6B:D2:69:DB:44:AB:03:12:60:1E:A9 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0BB4 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:58:18 +0000 ROA not before: Tue 02 Sep 2025 19:39:25 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 38082 IP address blocks: 103.14.164.0/24 maxlen: 24 103.14.165.0/24 maxlen: 24 103.14.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2996 (0xbb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Sep 2 19:39:25 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a445fa-c0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fe:d4:aa:82:a0:9d:90:81:c4:0d:8a:7a:49: 6e:41:32:4c:d1:b7:2f:29:75:73:08:e4:f3:12:44: 11:26:15:75:b0:ef:fb:c5:9f:74:70:23:ce:91:4c: 95:05:31:65:57:a9:28:6e:a3:db:80:09:a8:f7:f3: fb:c9:a8:95:a6:18:f6:33:88:73:28:8f:c1:ca:ca: af:2f:d0:0c:02:d8:f1:6c:48:15:f2:d7:4c:82:cd: 41:7b:ce:85:98:9e:52:59:4b:a7:10:45:0e:5e:f8: 95:4a:e1:f5:1b:4f:c2:1a:fe:c3:fc:9f:39:e6:03: 2f:25:2c:97:a4:6b:b2:83:96:34:10:72:1e:cc:63: 88:87:07:4d:92:58:46:11:20:b1:ea:be:a3:70:e1: cc:f7:9b:0a:59:89:a5:ac:c1:7a:e5:cd:3e:88:99: b1:d6:be:e8:6f:3e:71:40:0a:8a:e6:3a:41:42:9e: b8:fd:f5:9d:aa:17:bc:40:2d:aa:1f:69:92:38:5f: 50:ed:47:7d:77:e1:eb:62:fa:e4:6d:5f:eb:89:10: 8b:74:13:cf:7d:3a:3a:2c:57:02:29:c1:77:32:7e: 59:90:62:f6:b4:56:7a:19:5c:af:1b:03:4b:9e:f8: 14:37:c7:5e:f7:68:f6:2b:0b:14:27:d1:e9:4b:55: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:47:31:1F:76:31:29:DF:2D:6B:D2:69:DB:44:AB:03:12:60:1E:A9 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1E6B12EC049F11F0AD5C7C33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.14.164.0-103.14.166.255 Signature Algorithm: sha256WithRSAEncryption 15:21:c5:4d:dd:b3:bd:f9:01:7b:a9:26:c9:51:1b:56:e0:98: 86:e9:a3:f8:f3:3f:da:0b:d3:bd:cc:66:ed:0b:26:ae:40:57: dd:e0:69:3e:a5:dd:4a:85:22:60:ee:89:01:bd:ff:79:69:42: 00:e1:60:0d:2d:fd:8b:fe:be:b1:90:ea:0b:46:56:0c:a9:e6: 42:40:ba:17:60:83:2f:e7:30:4d:01:29:4f:23:b4:1a:0f:80: 39:81:52:ff:c1:fb:ae:92:a7:89:ab:65:83:dd:08:cd:e3:a7: cf:b5:bf:c0:a1:63:a0:3b:b5:bd:1f:e4:6f:71:9f:63:df:a3: 73:a8:62:3f:9e:35:24:79:51:2f:a4:1c:fe:40:b5:87:65:ca: 36:cf:cb:40:ee:9b:44:dd:42:88:d8:b3:5b:44:3e:8d:86:6f: bf:8e:c0:b1:ca:75:90:ff:e4:e8:38:d3:dd:31:da:3d:58:a0: e2:ff:5c:80:ba:2e:d1:1c:78:8b:53:20:04:f9:b5:f2:33:4c: a3:0a:4f:4e:77:16:6f:ee:d8:c2:94:12:88:aa:a3:84:ec:9c: 40:e6:86:a6:37:46:60:f5:86:f9:a1:fc:1a:00:a9:7a:46:f2: 09:bd:80:60:e1:14:5b:22:e1:41:97:0e:46:0a:be:b8:e8:c6: a0:ab:94:45 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICC7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjUwOTAyMTkzOTI1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDVmYS1jMGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApP7UqoKgnZCBxA2KekluQTJM0bcvKXVzCOTzEkQRJhV1sO/7xZ90cCPOkUyV BTFlV6kobqPbgAmo9/P7yaiVphj2M4hzKI/BysqvL9AMAtjxbEgV8tdMgs1Be86F mJ5SWUunEEUOXviVSuH1G0/CGv7D/J855gMvJSyXpGuyg5Y0EHIezGOIhwdNklhG ESCx6r6jcOHM95sKWYmlrMF65c0+iJmx1r7obz5xQAqK5jpBQp64/fWdqhe8QC2q H2mSOF9Q7Ud9d+HrYvrkbV/riRCLdBPPfTo6LFcCKcF3Mn5ZkGL2tFZ6GVyvGwNL nvgUN8de92j2KwsUJ9HpS1WuEQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFNxHMR92 MSnfLWvSadtEqwMSYB6pMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI0NzUvMjA4RkI3MzA0MTcyMTFFQTk4QTM2ODZEQzRGOUFFMDIvMUU2QjEyRUMw NDlGMTFGMEFENUM3QzMzQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAJnDqQDBABnDqYwDQYJKoZIhvcNAQELBQADggEBABUhxU3ds735 AXupJslRG1bgmIbpo/jzP9oL073MZu0LJq5AV93gaT6l3UqFImDuiQG9/3lpQgDh YA0t/Yv+vrGQ6gtGVgyp5kJAuhdggy/nME0BKU8jtBoPgDmBUv/B+66Sp4mrZYPd CM3jp8+1v8ChY6A7tb0f5G9xn2Pfo3OoYj+eNSR5US+kHP5AtYdlyjbPy0Dum0Td QojYs1tEPo2Gb7+OwLHKdZD/5Og4090x2j1YoOL/XIC6LtEceItTIAT5tfIzTKMK T053Fm/u2MKUEoiqo4TsnEDmhqY3RmD1hvmh/BoAqXpG8gm9gGDhFFsi4UGXDkYK vrjoxqCrlEU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:13 2026 by rpki-client