$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/1C61CBFA1D1A11F1B8E79D60103D8C67.roa File: 1C61CBFA1D1A11F1B8E79D60103D8C67.roa (raw, json) Hash identifier: wYka0Jo+ri8cUtmDcLdxLnFG7gW5TQTaHwdh/jeTkn4= Subject key identifier: 20:71:77:1E:82:4D:29:DB:FD:BD:CA:E3:98:8E:35:02:3A:BC:36:DE Certificate issuer: /CN=A91E7B89/serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Certificate serial: 31 Authority key identifier: 5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/1C61CBFA1D1A11F1B8E79D60103D8C67.roa Signing time: Wed 11 Mar 2026 07:15:41 +0000 ROA not before: Wed 11 Mar 2026 07:15:41 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152194 IP address blocks: 103.65.180.0/22 maxlen: 24 111.223.244.0/22 maxlen: 24 2400:b1c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7B89, serialNumber=5E78642B03CC37E26FD415E7D761BE484736C566 Validity Not Before: Mar 11 07:15:41 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69b1169d-a438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6e:fd:32:be:d0:b8:52:af:17:3f:ab:30:28: a7:61:86:fa:fa:92:d2:55:db:f1:bb:de:ea:3a:50: f1:be:92:b2:a3:52:72:fe:5f:7f:20:b1:72:f0:86: dc:71:11:a3:6d:6a:d8:50:1f:ba:ec:c4:f3:7b:bd: 14:20:13:ef:3c:36:60:3c:b8:03:9d:84:94:99:43: 60:30:1d:41:b3:b0:5c:6a:42:8b:a5:7e:69:37:fc: f2:57:b7:c8:0b:4b:ac:58:93:76:b8:31:70:49:de: e5:58:0c:ee:21:10:8a:f1:32:d0:35:67:b2:5d:3f: c9:fd:5f:91:f0:77:ed:76:40:1f:88:ab:f4:d3:71: b7:0b:61:ff:bd:0a:79:75:55:8a:66:2f:c9:47:3e: 1a:07:ab:e7:e0:b4:87:b7:39:c3:c9:e5:6a:88:1d: 8d:08:36:2c:54:f6:56:18:6f:c1:3f:63:1f:84:c8: 95:57:a7:d3:a6:18:9c:f9:ec:27:f6:1e:79:a6:07: 10:ed:b1:ac:a3:63:85:fb:18:19:b9:4f:86:85:19: de:49:e5:e9:9a:08:06:8d:37:12:02:e4:90:24:8d: 98:cb:73:00:0c:c4:fe:22:f1:e5:9f:df:f9:0d:db: a8:d6:80:df:45:a8:4c:d4:46:70:de:63:c9:f1:51: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:77:1E:82:4D:29:DB:FD:BD:CA:E3:98:8E:35:02:3A:BC:36:DE X509v3 Authority Key Identifier: keyid:5E:78:64:2B:03:CC:37:E2:6F:D4:15:E7:D7:61:BE:48:47:36:C5:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/XnhkKwPMN-Jv1BXn12G-SEc2xWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnhkKwPMN-Jv1BXn12G-SEc2xWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7B89/41BE4F44D9A011F093130E0768D3641D/1C61CBFA1D1A11F1B8E79D60103D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.65.180.0/22 111.223.244.0/22 IPv6: 2400:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption 2c:ef:1a:12:2c:d4:e2:76:f3:d5:c7:c0:34:7a:9e:9d:1f:09: fe:46:e4:54:bd:f3:65:d8:90:e3:21:58:be:13:25:31:25:67: 00:2e:54:f1:a0:f9:c7:15:52:0c:dd:3e:7c:8c:2f:cc:1d:b3: 50:53:5d:1a:da:0e:f3:24:d0:54:df:4f:05:64:88:51:b4:22: 93:0a:69:ad:f0:1e:c8:5c:b7:7a:86:5e:e6:e9:4d:35:12:82: 92:71:63:94:e7:97:04:e9:c0:b3:dc:7e:4c:13:b6:13:db:48: 76:72:05:77:15:8b:75:6d:09:92:68:81:44:b7:63:ab:f2:ef: 78:67:56:bf:34:2a:01:1e:1c:b0:9b:0c:22:1c:ac:d0:ee:e7: 9c:ce:af:df:ad:59:6a:bb:c0:70:85:ce:88:45:e4:3d:e5:6c: 69:95:70:21:b5:0d:cc:2c:bb:7b:fc:44:eb:42:58:e1:ca:15: 7b:bf:55:9d:fa:47:6b:b3:a9:3e:13:7f:1b:f3:bf:a1:53:37: d2:b3:36:ca:e1:9e:e3:13:3e:ae:e2:68:45:9f:be:88:de:29: 7e:c7:98:eb:f6:13:58:16:87:e1:c5:58:d4:77:ba:a1:5f:ab: f6:1b:f2:e9:36:e4:4f:4f:3d:d2:18:3e:ae:53:6e:93:55:5e: 4f:12:bc:63 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0I4OTExMC8GA1UEBRMoNUU3ODY0MkIwM0NDMzdFMjZGRDQxNUU3RDc2MUJFNDg0 NzM2QzU2NjAeFw0yNjAzMTEwNzE1NDFaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjExNjlkLWE0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTbv0yvtC4Uq8XP6swKKdhhvr6ktJV2/G73uo6UPG+krKjUnL+X38gsXLwhtxx EaNtathQH7rsxPN7vRQgE+88NmA8uAOdhJSZQ2AwHUGzsFxqQoulfmk3/PJXt8gL S6xYk3a4MXBJ3uVYDO4hEIrxMtA1Z7JdP8n9X5Hwd+12QB+Iq/TTcbcLYf+9Cnl1 VYpmL8lHPhoHq+fgtIe3OcPJ5WqIHY0INixU9lYYb8E/Yx+EyJVXp9OmGJz57Cf2 HnmmBxDtsayjY4X7GBm5T4aFGd5J5emaCAaNNxIC5JAkjZjLcwAMxP4i8eWf3/kN 26jWgN9FqEzURnDeY8nxUX7pAgMBAAGjggJ1MIICcTAdBgNVHQ4EFgQUIHF3HoJN Kdv9vcrjmI41Ajq8Nt4wHwYDVR0jBBgwFoAUXnhkKwPMN+Jv1BXn12G+SEc2xWYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3Qjg5LzQxQkU0RjQ0RDlB MDExRjA5MzEzMEUwNzY4RDM2NDFEL1huaGtLd1BNTi1KdjFCWG4xMkctU0VjMnhX WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWG5oa0t3UE1OLUp2MUJYbjEyRy1TRWMyeFdZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0I4OS80MUJFNEY0NEQ5QTAxMUYwOTMxMzBFMDc2OEQzNjQxRC8xQzYxQ0JGQTFE MUExMUYxQjhFNzlENjAxMDNEOEM2Ny5yb2EwNAYIKwYBBQUHAQcBAf8EJTAjMBIE AgABMAwDBAJnQbQDBAJv3/QwDQQCAAIwBwMFACQAscAwDQYJKoZIhvcNAQELBQAD ggEBACzvGhIs1OJ289XHwDR6np0fCf5G5FS982XYkOMhWL4TJTElZwAuVPGg+ccV UgzdPnyML8wds1BTXRraDvMk0FTfTwVkiFG0IpMKaa3wHshct3qGXubpTTUSgpJx Y5TnlwTpwLPcfkwTthPbSHZyBXcVi3VtCZJogUS3Y6vy73hnVr80KgEeHLCbDCIc rNDu55zOr9+tWWq7wHCFzohF5D3lbGmVcCG1Dcwsu3v8ROtCWOHKFXu/VZ36R2uz qT4Tfxvzv6FTN9KzNsrhnuMTPq7iaEWfvojeKX7HmOv2E1gWh+HFWNR3uqFfq/Yb 8uk25E9PPdIYPq5TbpNVXk8SvGM= -----END CERTIFICATE-----Generated at Thu Mar 26 17:28:07 2026 by rpki-client