$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa File: A8086732B6DA11EBB7B67954C4F9AE02.roa (raw, json) Hash identifier: 9cNeCzppQ/e103+t/5bNmmQB3XDS/R3mXfxCBYG3Y9w= Subject key identifier: 7F:AB:06:F6:19:39:89:DC:79:FC:01:82:E4:F3:BA:59:BA:F1:9A:A7 Certificate issuer: /CN=A91E9DF8/serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Certificate serial: 0675 Authority key identifier: 95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:36:10 +0000 ROA not before: Mon 10 Nov 2025 21:42:49 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 136975 IP address blocks: 103.101.16.0/22 maxlen: 22 103.101.16.0/24 maxlen: 24 103.101.17.0/24 maxlen: 24 103.101.18.0/24 maxlen: 24 103.101.19.0/24 maxlen: 24 2403:3240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9DF8, serialNumber=95068BB30ABC7E007FD8387E4DE0A83EFAADD472 Validity Not Before: Nov 10 21:42:49 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a432ba-9b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2e:a9:2f:22:60:5e:f1:59:4c:09:fb:c9:d6: a9:d6:61:f9:27:b6:2b:a5:38:56:04:d2:c5:40:00: 8c:23:6b:30:77:19:6a:dd:61:d7:bf:9d:f9:c2:d7: e3:dc:8f:1f:1c:11:f9:96:7f:1d:67:3d:e3:6b:0a: 56:da:7a:15:9c:c1:05:3d:f3:68:63:85:37:f7:73: b4:f5:0d:60:3e:d4:f1:c3:22:95:96:ab:76:bc:e9: fd:83:bc:29:b6:2c:44:ed:63:40:54:36:38:5f:6f: da:b9:38:e8:8e:a1:97:64:fb:0a:1c:c8:3b:28:c9: 49:55:13:a0:8b:c6:29:80:da:76:19:31:f2:ec:c8: 5b:4c:92:a3:78:38:92:31:0a:f4:bb:85:d1:63:14: d8:6f:85:d9:70:3c:5e:5a:1c:64:cf:8a:ea:17:a3: 4a:b5:be:a0:54:ab:f0:82:26:9f:33:87:ad:3d:0c: 4a:1f:7a:82:99:44:07:02:24:b2:c1:cb:a5:35:e9: a8:ec:69:62:7b:f6:60:cc:86:35:a6:10:e6:cd:ea: e0:51:50:fa:90:f2:1b:f6:d6:91:13:8b:60:dc:a2: 3d:11:94:08:73:2d:61:ec:40:e1:43:48:47:31:42: 73:86:76:aa:58:1f:16:e4:35:97:ec:c8:ba:c5:b1: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AB:06:F6:19:39:89:DC:79:FC:01:82:E4:F3:BA:59:BA:F1:9A:A7 X509v3 Authority Key Identifier: keyid:95:06:8B:B3:0A:BC:7E:00:7F:D8:38:7E:4D:E0:A8:3E:FA:AD:D4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/lQaLswq8fgB_2Dh-TeCoPvqt1HI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQaLswq8fgB_2Dh-TeCoPvqt1HI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9DF8/4B3B881EB6D911EB8F865554C4F9AE02/A8086732B6DA11EBB7B67954C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.101.16.0/22 IPv6: 2403:3240::/32 Signature Algorithm: sha256WithRSAEncryption 32:41:cf:46:e8:a4:3e:de:bd:2f:1f:db:61:9e:d9:f4:d5:3c: 56:58:4f:4f:80:13:d0:35:b6:20:47:6e:56:57:7a:c7:dc:d3: 5b:5e:c5:f8:d8:15:71:b7:a7:21:bc:49:5e:c2:f3:ea:1a:2f: 71:41:80:a2:91:25:eb:a6:3c:05:22:aa:e7:17:a3:57:f2:24: 06:48:42:b4:ad:28:95:3f:36:2c:4b:cd:24:73:91:1f:4b:be: 5e:ce:8b:e0:fc:bb:81:61:17:1b:3e:ba:eb:72:ec:82:26:ee: f2:fd:59:a7:d0:84:77:c4:6b:5c:37:92:44:b3:f9:49:8b:94: 34:62:8d:a2:a1:e5:72:74:91:99:f1:25:ab:79:c9:4f:6d:5d: ef:2c:43:2b:63:08:12:69:95:d8:c7:0e:4b:c6:ed:32:54:5f: e4:37:7b:53:1a:e1:b1:f0:0f:e6:43:ec:2b:7e:2f:80:31:74: ea:6e:be:62:aa:c3:2a:c4:71:93:2c:0d:a6:e7:bd:e2:6f:64: c0:dd:87:6c:f6:65:93:a0:f6:35:25:8c:7f:f8:dd:dd:b0:e6: a2:34:5d:0c:0d:e9:eb:fe:37:dc:97:15:43:e9:81:a9:00:db: dc:e8:d3:93:57:d1:99:1e:f7:b4:45:4f:2b:f0:df:34:23:2f: 63:b7:d3:79 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlERjgxMTAvBgNVBAUTKDk1MDY4QkIzMEFCQzdFMDA3RkQ4Mzg3RTRERTBBODNF RkFBREQ0NzIwHhcNMjUxMTEwMjE0MjQ5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzJiYS05YjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1C6pLyJgXvFZTAn7ydap1mH5J7YrpThWBNLFQACMI2swdxlq3WHXv535wtfj 3I8fHBH5ln8dZz3jawpW2noVnMEFPfNoY4U393O09Q1gPtTxwyKVlqt2vOn9g7wp tixE7WNAVDY4X2/auTjojqGXZPsKHMg7KMlJVROgi8YpgNp2GTHy7MhbTJKjeDiS MQr0u4XRYxTYb4XZcDxeWhxkz4rqF6NKtb6gVKvwgiafM4etPQxKH3qCmUQHAiSy wculNemo7Glie/ZgzIY1phDmzergUVD6kPIb9taRE4tg3KI9EZQIcy1h7EDhQ0hH MUJzhnaqWB8W5DWX7Mi6xbEZVwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFH+rBvYZ OYncefwBguTzulm68ZqnMB8GA1UdIwQYMBaAFJUGi7MKvH4Af9g4fk3gqD76rdRy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOURGOC80QjNCODgxRUI2 RDkxMUVCOEY4NjU1NTRDNEY5QUUwMi9sUWFMc3dxOGZnQl8yRGgtVGVDb1B2cXQx SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRYUxzd3E4ZmdCXzJEaC1UZUNvUHZxdDFISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTlERjgvNEIzQjg4MUVCNkQ5MTFFQjhGODY1NTU0QzRGOUFFMDIvQTgwODY3MzJC NkRBMTFFQkI3QjY3OTU0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ2UQMA0EAgACMAcDBQAkAzJAMA0GCSqGSIb3DQEBCwUAA4IBAQAy Qc9G6KQ+3r0vH9thntn01TxWWE9PgBPQNbYgR25WV3rH3NNbXsX42BVxt6chvEle wvPqGi9xQYCikSXrpjwFIqrnF6NX8iQGSEK0rSiVPzYsS80kc5EfS75ezovg/LuB YRcbPrrrcuyCJu7y/Vmn0IR3xGtcN5JEs/lJi5Q0Yo2ioeVydJGZ8SWreclPbV3v LEMrYwgSaZXYxw5Lxu0yVF/kN3tTGuGx8A/mQ+wrfi+AMXTqbr5iqsMqxHGTLA2m 573ib2TA3Yds9mWToPY1JYx/+N3dsOaiNF0MDenr/jfclxVD6YGpANvc6NOTV9GZ Hve0RU8r8N80Iy9jt9N5 -----END CERTIFICATE-----Generated at Fri Mar 27 00:09:56 2026 by rpki-client