$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/1BD6E18E1D1A11F1B8E79D60103D8C67.roa File: 1BD6E18E1D1A11F1B8E79D60103D8C67.roa (raw, json) Hash identifier: FWUBzi+iodYXnW4vMdTTKwC/KG79KdBqlOoiZl/TPEw= Subject key identifier: BD:AF:68:83:6F:7F:0E:42:A9:21:9A:8E:9E:0F:30:38:DC:D8:70:6E Certificate issuer: /CN=A91E7B89/serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Certificate serial: 30 Authority key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/1BD6E18E1D1A11F1B8E79D60103D8C67.roa Signing time: Wed 11 Mar 2026 07:15:40 +0000 ROA not before: Wed 11 Mar 2026 07:15:40 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 13335 IP address blocks: 103.65.180.0/22 maxlen: 24 111.223.244.0/22 maxlen: 24 2400:b1c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Validity Not Before: Mar 11 07:15:40 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69b1169c-b210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:85:4b:37:2f:c6:a0:d9:4d:f3:00:08:a7:81: 31:e8:f2:83:a9:43:4b:c1:7f:56:6c:4e:2c:a5:36: ff:6f:1d:db:bb:2e:92:19:52:ad:2b:ef:43:86:29: 8f:77:46:fb:28:a3:08:bc:f0:12:61:be:4f:a4:27: 24:1a:da:9a:9a:69:a5:a8:2b:73:02:68:43:66:2b: 9f:93:32:a0:f8:8c:a2:67:8d:6a:95:c6:34:22:aa: 36:2d:9e:9f:74:37:92:53:58:23:f8:61:18:db:5a: 58:67:06:91:89:b3:f9:56:40:33:e6:5f:f3:92:e1: 76:67:83:45:ee:3a:90:a7:de:b3:4c:a5:5c:7a:04: 12:86:bb:7d:f0:83:8c:d3:75:09:e5:83:9a:8e:f6: 94:56:de:a4:66:5e:03:43:2f:c4:07:dd:58:11:92: 09:d6:bc:a8:2b:24:8d:44:b2:5a:21:c6:0a:6f:97: 6c:fb:d6:b0:c9:64:45:25:b2:5e:87:8e:a4:27:29: f7:bc:9b:49:46:34:18:d2:83:21:ce:94:dc:d1:c3: fb:d1:10:6d:2b:37:65:35:e1:0d:16:bd:f3:8f:bb: 74:92:ae:bd:3b:ef:2c:06:81:7e:1c:8b:87:5e:77: 35:d9:ba:88:bd:e4:8a:a4:13:50:5b:78:3f:05:70: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AF:68:83:6F:7F:0E:42:A9:21:9A:8E:9E:0F:30:38:DC:D8:70:6E X509v3 Authority Key Identifier: keyid:5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/1BD6E18E1D1A11F1B8E79D60103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.65.180.0/22 111.223.244.0/22 IPv6: 2400:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption 44:88:08:02:c0:f3:fa:d8:7e:7e:32:ab:8a:9c:85:6c:4c:00: 8e:cb:f2:28:f4:d0:dd:7d:58:b3:b5:96:5c:ef:af:f3:86:f7: 15:68:4a:ae:40:51:ee:2c:4e:4e:f9:b5:9e:04:f2:ed:98:11: af:6b:4d:73:23:b2:d0:e5:8f:85:68:b1:90:81:bc:ec:c5:ff: 58:49:56:a7:a3:aa:6c:e6:67:ef:25:51:b9:32:66:1f:58:3f: 73:f2:9e:11:26:a2:f2:40:8d:13:ae:dd:7a:89:32:fc:6c:17: 8f:c2:1b:bc:12:62:ba:29:83:f3:58:cc:cb:3b:b8:d1:c3:b6: 88:e4:72:3e:9f:b5:a8:e6:99:1d:1a:fe:24:fc:10:51:1f:b8: d5:c8:a5:12:5c:ad:82:f6:b7:b0:08:14:9d:85:2d:c5:76:a5: 0d:04:2e:c7:6e:a7:35:fa:64:83:67:17:d2:47:7c:28:51:fd: e5:8e:f6:5b:f3:38:4c:d3:d0:db:20:17:78:3b:86:7d:82:4c: a4:da:b3:5f:49:ba:30:9c:44:26:9a:ff:76:05:d8:04:2a:0d: a1:15:4e:1b:14:1c:df:0f:96:19:f9:91:e7:c5:62:c7:89:d5: a4:86:ff:7f:cc:b8:b4:6d:e9:f0:b2:31:71:1e:c9:01:b9:13: d8:e1:6c:e0 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0I4OTExMC8GA1UEBRMoNUU3ODY0MkIwM0NDMzdFMjZGRDQxNUU3RDc2MUJFNDg0 NzM2QzU2NjAeFw0yNjAzMTEwNzE1NDBaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjExNjljLWIyMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfhUs3L8ag2U3zAAingTHo8oOpQ0vBf1ZsTiylNv9vHdu7LpIZUq0r70OGKY93 Rvsoowi88BJhvk+kJyQa2pqaaaWoK3MCaENmK5+TMqD4jKJnjWqVxjQiqjYtnp90 N5JTWCP4YRjbWlhnBpGJs/lWQDPmX/OS4XZng0XuOpCn3rNMpVx6BBKGu33wg4zT dQnlg5qO9pRW3qRmXgNDL8QH3VgRkgnWvKgrJI1Eslohxgpvl2z71rDJZEUlsl6H jqQnKfe8m0lGNBjSgyHOlNzRw/vREG0rN2U14Q0WvfOPu3SSrr077ywGgX4ci4de dzXZuoi95IqkE1BbeD8FcJcVAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUva9og29/ DkKpIZqOng8wONzYcG4wHwYDVR0jBBgwFoAUXnhkKwPMN+Jv1BXn12G+SEc2xWYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3Qjg5LzQxQkU0RjQ0RDlB MDExRjA5MzEzMEUwNzY4RDM2NDFEL1huaGtLd1BNTi1KdjFCWG4xMkctU0VjMnhX WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG5oa0t3UE1OLUp2MUJYbjEyRy1TRWMyeFdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0I4OS80MUJFNEY0NEQ5QTAxMUYwOTMxMzBFMDc2OEQzNjQxRC8xQkQ2RTE4RTFE MUExMUYxQjhFNzlENjAxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAJnQbQDBAJv3/QwDQQCAAIwBwMFACQAscAwDQYJKoZIhvcNAQELBQAD ggEBAESICALA8/rYfn4yq4qchWxMAI7L8ij00N19WLO1llzvr/OG9xVoSq5AUe4s Tk75tZ4E8u2YEa9rTXMjstDlj4VosZCBvOzF/1hJVqejqmzmZ+8lUbkyZh9YP3Py nhEmovJAjROu3XqJMvxsF4/CG7wSYropg/NYzMs7uNHDtojkcj6ftajmmR0a/iT8 EFEfuNXIpRJcrYL2t7AIFJ2FLcV2pQ0ELsdupzX6ZINnF9JHfChR/eWO9lvzOEzT 0NsgF3g7hn2CTKTas19JujCcRCaa/3YF2AQqDaEVThsUHN8Plhn5kefFYseJ1aSG /3/MuLRt6fCyMXEeyQG5E9jhbOA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:45 2026 by rpki-client