$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/4D942BCE08A011ED8AD21272C4F9AE02.roa File: 4D942BCE08A011ED8AD21272C4F9AE02.roa (raw, json) Hash identifier: jgftd+/9ZeJs/SIOse//P6waVUAgX808BhHUM0pG+LE= Subject key identifier: 21:1F:75:D6:68:7D:74:55:B6:EB:6F:C2:74:D6:7D:E7:85:D9:90:61 Certificate issuer: /CN=A91E9CE4/serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Certificate serial: 031C Authority key identifier: 14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/4D942BCE08A011ED8AD21272C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:05:27 +0000 ROA not before: Wed 17 Sep 2025 02:08:48 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 147008 IP address blocks: 103.172.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 796 (0x31c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9CE4, serialNumber=14588A4BE9EB8A4B9982D1B25DEB0C60738AEFBB Validity Not Before: Sep 17 02:08:48 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42b87-3e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e2:bd:7f:72:92:dd:51:1b:df:23:ad:36:69: e8:03:fe:1f:72:95:c0:68:1f:84:3c:36:b7:d7:aa: ee:2e:ea:57:ae:e2:bb:05:57:48:87:7a:b2:18:d5: cd:7b:96:2d:b7:89:6c:02:fd:12:47:39:2c:b2:3b: a2:68:df:4a:fe:96:43:bc:b6:6a:25:5e:d2:2f:2f: f2:14:75:bc:9f:0e:e7:aa:27:c4:20:05:23:d4:49: fc:37:f9:76:7b:f0:71:37:50:c1:98:ff:d4:5a:b9: c5:cb:47:9b:5f:32:c6:06:bc:68:2f:ad:4a:b6:7c: 74:8c:24:d4:43:c8:f4:00:6a:d0:11:a1:0c:86:83: 9f:9e:8e:de:b5:ae:d7:a1:01:1d:58:8f:b1:8c:68: 11:ef:c7:57:70:3d:4d:0d:b5:6f:a7:81:19:cf:58: 3e:6d:fe:32:9c:1f:13:13:72:47:15:b8:5f:6d:1b: e2:2d:8b:22:8b:11:63:16:59:0b:8f:64:8a:89:12: 7f:94:02:19:b2:b8:f1:52:aa:32:29:37:de:d4:81: 99:c5:5c:93:12:0e:45:7b:a3:08:da:d9:db:55:e7: 16:af:e4:1e:93:69:92:2b:82:86:ce:3c:45:81:ee: 56:dc:c9:8a:a3:dd:06:2e:82:2f:e5:39:07:79:70: e3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1F:75:D6:68:7D:74:55:B6:EB:6F:C2:74:D6:7D:E7:85:D9:90:61 X509v3 Authority Key Identifier: keyid:14:58:8A:4B:E9:EB:8A:4B:99:82:D1:B2:5D:EB:0C:60:73:8A:EF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/FFiKS-nrikuZgtGyXesMYHOK77s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFiKS-nrikuZgtGyXesMYHOK77s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9CE4/69CCB5BC089C11EDBFA2FB4BC4F9AE02/4D942BCE08A011ED8AD21272C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.172.191.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b3:db:3e:c8:3c:f9:1e:72:c8:57:6c:6c:0a:a9:da:c4:5a: c9:a9:ab:6e:78:b4:fe:8d:23:b8:dc:45:63:e7:82:35:ae:df: ed:f5:54:bd:15:60:6a:0e:42:ba:11:fc:74:80:9a:8e:00:02: f9:62:0c:41:57:27:f8:31:d1:b5:8e:85:77:d0:d0:97:2d:21: 61:64:4f:a5:db:0d:95:f0:b9:d0:3c:43:80:8f:ca:4f:4d:56: 67:b1:fb:61:86:51:4a:27:ae:26:f1:a6:58:7d:64:57:bb:c6: 82:0c:a2:24:0c:bf:79:be:24:f5:4c:61:74:a5:d3:67:73:a6: c3:87:0f:ef:5b:a5:d3:ab:d9:53:20:cf:d3:d7:48:35:36:9a: c5:f1:db:ed:42:f1:ee:aa:03:be:35:ca:ee:ed:a5:65:5d:aa: 13:bd:9e:34:44:c8:ce:a0:72:9c:e6:b3:90:90:c1:15:a3:d2: a3:18:7b:5e:ba:7a:70:24:4a:a6:d4:b0:3c:8a:47:e5:ca:65: 49:99:10:9f:16:ed:c8:57:92:a7:75:73:93:d8:be:60:f9:54: f0:ad:83:98:6a:23:db:e4:d1:10:5e:40:25:6b:37:7c:c9:06: 4e:fc:a6:7a:e9:40:b5:a0:0f:25:a5:60:71:74:bc:89:82:6c: 69:ab:a2:a8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlDRTQxMTAvBgNVBAUTKDE0NTg4QTRCRTlFQjhBNEI5OTgyRDFCMjVERUIwQzYw NzM4QUVGQkIwHhcNMjUwOTE3MDIwODQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmI4Ny0zZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+K9f3KS3VEb3yOtNmnoA/4fcpXAaB+EPDa316ruLupXruK7BVdIh3qyGNXN e5Ytt4lsAv0SRzkssjuiaN9K/pZDvLZqJV7SLy/yFHW8nw7nqifEIAUj1En8N/l2 e/BxN1DBmP/UWrnFy0ebXzLGBrxoL61Ktnx0jCTUQ8j0AGrQEaEMhoOfno7eta7X oQEdWI+xjGgR78dXcD1NDbVvp4EZz1g+bf4ynB8TE3JHFbhfbRviLYsiixFjFlkL j2SKiRJ/lAIZsrjxUqoyKTfe1IGZxVyTEg5Fe6MI2tnbVecWr+Qek2mSK4KGzjxF ge5W3MmKo90GLoIv5TkHeXDjPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCEfddZo fXRVtutvwnTWfeeF2ZBhMB8GA1UdIwQYMBaAFBRYikvp64pLmYLRsl3rDGBziu+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUNFNC82OUNDQjVCQzA4 OUMxMUVEQkZBMkZCNEJDNEY5QUUwMi9GRmlLUy1ucmlrdVpndEd5WGVzTVlIT0s3 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGaUtTLW5yaWt1Wmd0R3lYZXNNWUhPSzc3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlDRTQvNjlDQ0I1QkMwODlDMTFFREJGQTJGQjRCQzRGOUFFMDIvNEQ5NDJCQ0Uw OEEwMTFFRDhBRDIxMjcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ6y/MA0GCSqGSIb3DQEBCwUAA4IBAQAts9s+yDz5HnLIV2xsCqna xFrJqatueLT+jSO43EVj54I1rt/t9VS9FWBqDkK6Efx0gJqOAAL5YgxBVyf4MdG1 joV30NCXLSFhZE+l2w2V8LnQPEOAj8pPTVZnsfthhlFKJ64m8aZYfWRXu8aCDKIk DL95viT1TGF0pdNnc6bDhw/vW6XTq9lTIM/T10g1NprF8dvtQvHuqgO+Ncru7aVl XaoTvZ40RMjOoHKc5rOQkMEVo9KjGHteunpwJEqm1LA8ikflymVJmRCfFu3IV5Kn dXOT2L5g+VTwrYOYaiPb5NEQXkAlazd8yQZO/KZ66UC1oA8lpWBxdLyJgmxpq6Ko -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:31 2026 by rpki-client