$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa File: 6208BAD4499611E8B421BE5CC4F9AE02.roa (raw, json) Hash identifier: TAyyXoTPcbbK7G+yCCqdnjIbOPrO1+rGTob4cAtBF5c= Subject key identifier: E3:34:32:44:86:C7:53:5B:78:9B:52:BF:CA:DA:81:56:6A:6D:F5:08 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 15C8 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa Signing time: Tue 03 Mar 2026 17:09:11 +0000 ROA not before: Tue 03 Mar 2026 17:09:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136558 IP address blocks: 103.92.208.0/24 maxlen: 24 103.101.53.0/24 maxlen: 24 103.101.54.0/23 maxlen: 23 103.101.54.0/24 maxlen: 24 103.101.55.0/24 maxlen: 24 2405:65c0::/32 maxlen: 32 2405:65c0::/36 maxlen: 36 2405:65c0:1000::/36 maxlen: 36 2405:65c0:2000::/36 maxlen: 36 2405:65c0:3000::/36 maxlen: 36 2405:65c0:4000::/36 maxlen: 36 2405:65c0:5000::/36 maxlen: 36 2405:65c0:6000::/36 maxlen: 36 2405:65c0:7000::/36 maxlen: 36 2405:65c0:8000::/36 maxlen: 36 2405:65c0:9000::/36 maxlen: 36 2405:65c0:a000::/36 maxlen: 36 2405:65c0:b000::/36 maxlen: 36 2405:65c0:c000::/36 maxlen: 36 2405:65c0:d000::/36 maxlen: 36 2405:65c0:e000::/36 maxlen: 36 2405:65c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5576 (0x15c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Mar 3 17:09:10 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a715b6-e25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:e3:89:00:b6:29:d9:98:e3:2b:bc:17:31: 18:8b:2d:64:0a:03:2f:46:1a:9d:1e:4f:fd:65:78: 25:e7:9a:7a:c7:41:bd:45:44:c4:b9:2c:bb:12:06: fa:b8:6b:3f:65:cb:13:28:27:9d:1e:0d:af:da:5a: c3:fd:72:58:24:b4:55:61:95:c6:e3:5b:82:4b:5c: fe:f5:9b:2a:96:dd:f3:22:71:03:b5:00:7f:25:67: e7:43:43:9c:01:94:15:53:83:d7:48:3a:d7:01:34: ab:36:22:0b:76:ff:0c:ad:70:96:f5:e9:a3:df:5f: f5:78:04:b3:63:40:45:59:f0:bb:2e:20:1c:a5:75: 05:b8:c1:c2:74:66:d5:8a:e8:5f:45:3d:a5:ff:05: d4:e2:19:0d:40:30:fd:b2:93:ae:96:e1:57:60:1c: cd:0d:81:a9:16:e7:e8:cc:ca:16:65:46:5c:84:93: ca:a5:39:6d:eb:a5:8d:81:1d:47:1d:47:ec:a1:3e: ff:82:b1:15:6f:43:e0:20:f1:23:a2:07:ad:0d:bb: 6b:a9:07:49:d7:a2:9b:9c:bb:02:e1:0e:d8:3c:96: c8:63:c4:90:f5:c6:78:79:d6:93:3e:23:e2:15:88: 63:c9:ba:09:ad:cc:cc:01:c8:42:85:af:12:ca:c8: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:34:32:44:86:C7:53:5B:78:9B:52:BF:CA:DA:81:56:6A:6D:F5:08 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/6208BAD4499611E8B421BE5CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.92.208.0/24 103.101.53.0-103.101.55.255 IPv6: 2405:65c0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:88:83:9e:41:e8:f9:b2:f4:84:e7:9c:60:48:f4:97:a1:06: d0:aa:4a:f2:1e:67:d3:8f:11:ef:96:d1:85:35:dd:ae:5e:b2: e1:f7:58:5e:6b:37:80:d2:1e:56:43:92:f9:8d:4b:56:e6:68: 48:74:92:8e:08:e2:ba:f4:21:c7:67:70:c3:c2:f6:48:c6:27: 8b:57:54:ac:d4:77:80:6e:cb:ae:c9:de:7b:d9:5d:35:50:f9: 81:e8:e6:46:6a:7e:02:66:04:be:af:c7:67:1e:b9:6b:b8:87: fd:17:56:42:61:d8:e8:d9:0c:cf:d2:e6:28:cc:60:37:77:a5: c6:a8:c5:89:77:8e:d8:ce:23:a2:82:6e:aa:75:04:89:d8:36: 4a:49:80:cd:97:79:15:bf:e4:5e:dc:18:d3:41:08:a7:a0:db: be:07:f6:80:f6:64:3e:82:36:16:3a:d1:f6:a5:7b:26:b2:43: a4:2e:44:84:cc:63:f7:e9:91:46:c8:f9:83:c8:ed:24:0d:39: 50:4c:55:13:e1:05:1a:a2:3a:1c:67:b1:a5:29:c1:24:10:fb: ec:55:fa:5e:0e:ab:5b:91:b3:e8:d3:14:2a:f6:25:d4:cf:7b: e3:7d:cd:39:e9:dd:fc:98:76:17:f9:7d:77:12:cd:89:e1:78: be:39:66:db -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgICFcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjYwMzAzMTcwOTEwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE3MTViNi1lMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMbjiQC2KdmY4yu8FzEYiy1kCgMvRhqdHk/9ZXgl55p6x0G9RUTEuSy7Egb6 uGs/ZcsTKCedHg2v2lrD/XJYJLRVYZXG41uCS1z+9Zsqlt3zInEDtQB/JWfnQ0Oc AZQVU4PXSDrXATSrNiILdv8MrXCW9emj31/1eASzY0BFWfC7LiAcpXUFuMHCdGbV iuhfRT2l/wXU4hkNQDD9spOuluFXYBzNDYGpFufozMoWZUZchJPKpTlt66WNgR1H HUfsoT7/grEVb0PgIPEjogetDbtrqQdJ16KbnLsC4Q7YPJbIY8SQ9cZ4edaTPiPi FYhjyboJrczMAchCha8SysgR0QIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFOM0MkSG x1NbeJtSv8ragVZqbfUIMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI2OTUvQkI4N0FDNEE0N0Y4MTFFODgwRTRGNDEwQzRGOUFFMDIvNjIwOEJBRDQ0 OTk2MTFFOEI0MjFCRTVDQzRGOUFFMDIucm9hMDwGCCsGAQUFBwEHAQH/BC0wKzAa BAIAATAUAwQAZ1zQMAwDBABnZTUDBANnZTAwDQQCAAIwBwMFACQFZcAwDQYJKoZI hvcNAQELBQADggEBAC6Ig55B6Pmy9ITnnGBI9JehBtCqSvIeZ9OPEe+W0YU13a5e suH3WF5rN4DSHlZDkvmNS1bmaEh0ko4I4rr0IcdncMPC9kjGJ4tXVKzUd4Buy67J 3nvZXTVQ+YHo5kZqfgJmBL6vx2ceuWu4h/0XVkJh2OjZDM/S5ijMYDd3pcaoxYl3 jtjOI6KCbqp1BInYNkpJgM2XeRW/5F7cGNNBCKeg274H9oD2ZD6CNhY60faleyay Q6QuRITMY/fpkUbI+YPI7SQNOVBMVRPhBRqiOhxnsaUpwSQQ++xV+l4Oq1uRs+jT FCr2JdTPe+N9zTnp3fyYdhf5fXcSzYnheL45Zts= -----END CERTIFICATE-----Generated at Thu Mar 26 23:18:04 2026 by rpki-client