$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/C85C12E01D0011F1A9EEE03B033D8C67.roa File: C85C12E01D0011F1A9EEE03B033D8C67.roa (raw, json) Hash identifier: zL0iGBCbx7jkmH9g3x5NEs3M0zFNDBH3codLTqvy0M8= Subject key identifier: 66:E4:B2:89:EC:03:01:5A:7C:7E:08:BB:52:C8:B2:D3:67:D8:3F:C3 Certificate issuer: /CN=A91DD064/serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Certificate serial: 04 Authority key identifier: E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/C85C12E01D0011F1A9EEE03B033D8C67.roa Signing time: Wed 11 Mar 2026 04:14:22 +0000 ROA not before: Wed 11 Mar 2026 04:14:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15830 IP address blocks: 103.19.60.0/22 maxlen: 22 2407:d300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD064, serialNumber=E99A80730D0BA90511DBB2D1C7F5DD4DACA525DA Validity Not Before: Mar 11 04:14:22 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69b0ec1e-6721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:38:b4:2e:70:a2:81:ba:1c:ad:da:12:95: c0:3d:ae:0f:5e:cf:a0:74:30:1c:65:07:5b:20:f8: 7d:11:ad:ba:96:be:b4:c9:0a:42:60:d5:7b:b6:19: 6d:ee:a6:c3:21:b4:45:16:97:60:fe:e4:4f:1d:a1: 58:70:4f:87:09:cf:00:e2:17:42:45:67:c7:fb:fc: c9:7c:1b:a5:e2:15:b3:ec:bd:06:d3:c8:55:f7:31: 4c:fa:26:1a:ce:fa:eb:fb:a1:36:22:e0:9f:ad:e9: 98:6f:f0:6e:63:e1:c2:1e:d9:1b:d0:09:33:c1:83: b1:b7:96:d3:95:74:7f:51:ff:b8:4e:9e:56:65:c9: ce:c5:dc:30:80:af:06:3e:a3:c2:2c:59:18:fc:0d: 45:2e:96:99:5a:27:0d:18:09:e0:65:a9:c0:ec:db: 85:d1:ae:6d:c5:09:df:cd:21:5d:1b:34:2f:22:9c: 75:1a:50:67:86:bf:9f:64:e0:67:ee:68:88:d6:f1: 8b:9a:11:97:d7:4b:69:1c:7a:37:01:44:89:9b:ff: 2b:89:00:6b:32:87:7b:3c:4f:49:c8:48:6f:7f:63: 5c:35:69:91:8b:27:1f:5b:4e:dd:db:c4:8f:5d:4c: 22:03:94:d4:33:38:b3:4c:b6:a9:70:25:ee:4d:ff: 6c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E4:B2:89:EC:03:01:5A:7C:7E:08:BB:52:C8:B2:D3:67:D8:3F:C3 X509v3 Authority Key Identifier: keyid:E9:9A:80:73:0D:0B:A9:05:11:DB:B2:D1:C7:F5:DD:4D:AC:A5:25:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/6ZqAcw0LqQUR27LRx_XdTaylJdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZqAcw0LqQUR27LRx_XdTaylJdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD064/D12B1C781CFF11F1A69E50F9413D8C67/C85C12E01D0011F1A9EEE03B033D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.19.60.0/22 IPv6: 2407:d300::/32 Signature Algorithm: sha256WithRSAEncryption 7c:1e:62:3c:9a:5b:6c:dd:f6:20:65:3b:14:e1:18:c9:8b:cd: 81:b7:60:4e:e2:7c:6b:f0:5d:62:ef:40:33:d4:3f:1a:08:bc: cc:c8:9a:d2:9a:d6:0a:3a:69:63:2d:49:09:2f:b9:6b:b5:af: ea:b9:2c:e7:57:0a:93:f2:60:62:60:8b:9a:93:98:1d:4f:b3: b8:02:d8:75:2d:58:e8:91:57:1e:03:a0:cc:72:c7:82:d5:14: 9c:0c:ba:84:7d:35:8d:53:2a:e2:95:ce:42:65:d7:2f:59:9f: 96:01:9d:b5:53:a7:f1:17:8a:0e:7d:b2:29:0d:57:aa:8f:cb: b2:8f:a4:21:5f:d3:2a:37:75:49:3a:c5:78:56:1d:45:4d:be: 16:4c:17:37:f8:76:2f:8a:90:9a:ca:75:a5:ee:04:2c:c8:5c: 14:16:97:d1:95:a9:be:84:8d:3a:a8:f5:40:7b:ff:0e:1d:ff: e3:c6:99:9a:cb:68:a4:47:b8:9d:25:5b:4d:f0:bb:03:f9:01: c7:2e:d8:9d:43:ee:cb:6d:7a:68:e5:ce:35:26:b4:c9:9f:49: 2b:75:b9:ee:9f:93:f6:b0:9c:f9:9e:5f:c9:28:93:9c:4e:5e: d5:1c:51:ea:22:2b:4b:20:4c:ee:42:c4:30:d1:00:00:8f:cc: 90:49:90:6e -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDA2NDExMC8GA1UEBRMoRTk5QTgwNzMwRDBCQTkwNTExREJCMkQxQzdGNURENERB Q0E1MjVEQTAeFw0yNjAzMTEwNDE0MjJaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjBlYzFlLTY3MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnoji0LnCigbocrdoSlcA9rg9ez6B0MBxlB1sg+H0RrbqWvrTJCkJg1Xu2GW3u psMhtEUWl2D+5E8doVhwT4cJzwDiF0JFZ8f7/Ml8G6XiFbPsvQbTyFX3MUz6JhrO +uv7oTYi4J+t6Zhv8G5j4cIe2RvQCTPBg7G3ltOVdH9R/7hOnlZlyc7F3DCArwY+ o8IsWRj8DUUulplaJw0YCeBlqcDs24XRrm3FCd/NIV0bNC8inHUaUGeGv59k4Gfu aIjW8YuaEZfXS2kcejcBRImb/yuJAGsyh3s8T0nISG9/Y1w1aZGLJx9bTt3bxI9d TCIDlNQzOLNMtqlwJe5N/2xBAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUZuSyiewD AVp8fgi7Usiy02fYP8MwHwYDVR0jBBgwFoAU6ZqAcw0LqQUR27LRx/XdTaylJdow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMDY0L0QxMkIxQzc4MUNG RjExRjFBNjlFNTBGOTQxM0Q4QzY3LzZacUFjdzBMcVFVUjI3TFJ4X1hkVGF5bEpk by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNlpxQWN3MExxUVVSMjdMUnhfWGRUYXlsSmRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDA2NC9EMTJCMUM3ODFDRkYxMUYxQTY5RTUwRjk0MTNEOEM2Ny9DODVDMTJFMDFE MDAxMUYxQTlFRUUwM0IwMzNEOEM2Ny5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAJnEzwwDQQCAAIwBwMFACQH0wAwDQYJKoZIhvcNAQELBQADggEBAHwe YjyaW2zd9iBlOxThGMmLzYG3YE7ifGvwXWLvQDPUPxoIvMzImtKa1go6aWMtSQkv uWu1r+q5LOdXCpPyYGJgi5qTmB1Ps7gC2HUtWOiRVx4DoMxyx4LVFJwMuoR9NY1T KuKVzkJl1y9Zn5YBnbVTp/EXig59sikNV6qPy7KPpCFf0yo3dUk6xXhWHUVNvhZM Fzf4di+KkJrKdaXuBCzIXBQWl9GVqb6EjTqo9UB7/w4d/+PGmZrLaKRHuJ0lW03w uwP5Accu2J1D7sttemjlzjUmtMmfSSt1ue6fk/awnPmeX8kok5xOXtUcUeoiK0sg TO5CxDDRAACPzJBJkG4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:44 2026 by rpki-client