$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/AC8A67CA100311F085EE3D29C4F9AE02.roa File: AC8A67CA100311F085EE3D29C4F9AE02.roa (raw, json) Hash identifier: x7wMdNtws0Zk8todAFQAVhvhVj8vpXnpLHAo0o0q0EI= Subject key identifier: AB:04:91:1A:42:63:BE:AB:77:7C:E5:BE:D8:F6:AA:94:20:A3:99:05 Certificate issuer: /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Certificate serial: 36C7 Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/AC8A67CA100311F085EE3D29C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:45:44 +0000 ROA not before: Tue 02 Sep 2025 15:01:30 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 396356 IP address blocks: 103.68.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14023 (0x36c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F Validity Not Before: Sep 2 15:01:30 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48958-b46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c4:db:54:a0:40:ac:63:d0:6b:80:64:c1:c6: d9:16:a6:9b:c3:15:ad:af:8d:71:a3:37:32:ca:7b: f1:06:14:25:d1:24:e4:12:65:33:99:5c:fc:1b:9a: 1f:41:fe:00:7d:c9:8f:fb:a6:bb:bb:b4:d7:86:97: ba:28:87:e0:ac:d4:68:a3:e6:c8:53:b3:74:9b:94: 53:c2:f6:36:c0:9d:76:21:38:4d:4f:42:79:ff:66: 71:62:01:38:13:57:41:80:63:6f:ce:fd:30:4e:03: ad:60:f9:45:85:bd:88:c7:87:ca:83:b8:0a:1b:c2: a0:61:34:db:6d:bf:c6:85:97:5a:c3:e3:0f:ae:70: 22:fe:01:10:aa:ce:01:8e:96:e9:bd:82:e5:12:be: 77:b1:03:00:5b:4d:b9:f4:ac:e3:45:85:54:eb:00: 7f:a6:e8:25:62:3a:a3:33:f9:35:4e:10:0b:a8:ea: fd:e1:44:e5:d1:1f:87:74:8e:22:a6:30:b4:5a:50: 1f:b7:82:6f:98:f0:39:48:55:b1:87:4e:e2:65:d2: 92:84:49:d5:ff:fe:2b:64:46:73:54:55:f4:50:7f: 10:0a:db:48:6e:20:68:4a:80:1c:aa:8c:a7:44:6a: ca:d6:6b:90:02:61:8a:34:36:f8:14:fb:e0:e8:e6: b9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:04:91:1A:42:63:BE:AB:77:7C:E5:BE:D8:F6:AA:94:20:A3:99:05 X509v3 Authority Key Identifier: keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/AC8A67CA100311F085EE3D29C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.120.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:3f:88:b3:a5:db:48:7a:ce:35:6e:ed:01:fa:ca:99:e9:14: 4a:ef:94:ba:d2:02:9d:d6:58:c0:b0:76:2c:d1:bf:b6:37:0c: bf:7f:aa:5e:59:cd:4b:c0:1b:7a:d5:41:d6:27:30:35:8e:6c: f3:8e:a4:e1:01:50:b2:03:4f:c9:de:48:d0:3f:c7:80:2b:72: d4:12:82:50:16:f4:2c:7e:7a:62:3b:4e:ba:91:8b:26:c5:61: bc:99:3f:3f:4a:5c:d3:fd:64:e9:61:b4:4e:3f:42:b6:62:61: 0d:ae:f4:f1:2e:2e:9b:ef:a4:9e:34:de:f1:34:51:32:0b:5b: 26:6a:eb:a0:00:df:5e:bb:c3:95:3d:80:cd:06:a7:f1:15:02: f0:f5:a4:21:e5:d2:50:1a:b3:3f:82:ff:13:3e:a0:a9:06:12: 78:48:ef:8b:ec:6b:b8:fb:64:09:c3:de:d2:1b:be:22:0f:1e: e2:62:1a:d2:28:e8:51:01:48:03:25:ea:3b:1f:55:ec:b4:63: 9e:a4:37:ab:e6:e9:97:5e:74:c6:38:e5:ff:11:ac:5a:4e:c9: a2:cf:83:86:c9:61:36:7f:2f:e0:a4:64:3f:52:50:12:4f:a0: 0d:94:72:88:c1:ed:0e:54:2a:b5:e3:8c:60:0f:20:5b:e9:b2: b0:f7:4c:c5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDOTAxMTAvBgNVBAUTKDU4QTE5NkE3QkYwNkYyRTE2RTkwOUQyNzcxNDFCQTQ0 OTExRjFGNEYwHhcNMjUwOTAyMTUwMTMwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODk1OC1iNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sTbVKBArGPQa4BkwcbZFqabwxWtr41xozcyynvxBhQl0STkEmUzmVz8G5of Qf4AfcmP+6a7u7TXhpe6KIfgrNRoo+bIU7N0m5RTwvY2wJ12IThNT0J5/2ZxYgE4 E1dBgGNvzv0wTgOtYPlFhb2Ix4fKg7gKG8KgYTTbbb/GhZdaw+MPrnAi/gEQqs4B jpbpvYLlEr53sQMAW0259KzjRYVU6wB/puglYjqjM/k1ThALqOr94UTl0R+HdI4i pjC0WlAft4JvmPA5SFWxh07iZdKShEnV//4rZEZzVFX0UH8QCttIbiBoSoAcqoyn RGrK1muQAmGKNDb4FPvg6Oa58QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKsEkRpC Y76rd3zlvtj2qpQgo5kFMB8GA1UdIwQYMBaAFFihlqe/BvLhbpCdJ3FBukSRHx9P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEM5MC8yRDFCRUJFNDFE OTUxMUUyODhFNkIzRkEwOEIwMkNEMi9XS0dXcDc4Rzh1RnVrSjBuY1VHNlJKRWZI MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLR1dwNzhHOHVGdWtKMG5jVUc2UkpFZkgwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RThDOTAvMkQxQkVCRTQxRDk1MTFFMjg4RTZCM0ZBMDhCMDJDRDIvQUM4QTY3Q0Ex MDAzMTFGMDg1RUUzRDI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ0R4MA0GCSqGSIb3DQEBCwUAA4IBAQBOP4izpdtIes41bu0B+sqZ 6RRK75S60gKd1ljAsHYs0b+2Nwy/f6peWc1LwBt61UHWJzA1jmzzjqThAVCyA0/J 3kjQP8eAK3LUEoJQFvQsfnpiO066kYsmxWG8mT8/SlzT/WTpYbROP0K2YmENrvTx Li6b76SeNN7xNFEyC1smauugAN9eu8OVPYDNBqfxFQLw9aQh5dJQGrM/gv8TPqCp BhJ4SO+L7Gu4+2QJw97SG74iDx7iYhrSKOhRAUgDJeo7H1XstGOepDer5umXXnTG OOX/EaxaTsmiz4OGyWE2fy/gpGQ/UlAST6ANlHKIwe0OVCq144xgDyBb6bKw90zF -----END CERTIFICATE-----Generated at Thu Mar 26 04:39:22 2026 by rpki-client