$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa File: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (raw, json) Hash identifier: 7vpCi6tiC+nYwk1GKGUUszYv1YKzqefKr3Cq0hLOpLI= Subject key identifier: 92:68:7C:82:1E:CF:23:52:51:00:03:50:14:C0:0D:52:3A:D3:98:58 Certificate issuer: /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Certificate serial: 0724 Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:29:08 +0000 ROA not before: Mon 02 Mar 2026 22:29:08 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 133448 IP address blocks: 103.86.85.0/24 maxlen: 24 103.86.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA Validity Not Before: Mar 2 22:29:08 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a60f34-6a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:ed:eb:90:0a:21:dd:a1:a9:a4:3f:e6:10: 2e:b4:55:9b:1f:fc:c9:05:08:aa:c7:5e:bb:53:02: dc:a1:a3:a3:81:35:31:d0:4a:a1:7f:b9:79:9d:e8: 04:d9:f0:13:c3:7a:21:01:49:d3:e2:9f:13:f9:37: 69:e9:8e:c4:a4:74:b9:4a:47:b4:02:42:9a:31:70: 88:ed:2b:cd:e2:97:28:0b:e4:2b:23:cf:27:c1:cf: 17:69:b0:54:58:f2:1b:bd:c5:84:d8:d8:d8:e7:6a: 31:b3:8b:a4:9e:d2:ff:85:83:a2:b0:d0:1b:e0:dc: 9c:06:f1:dd:25:c4:de:72:03:59:46:9f:c2:84:5f: a5:1c:f2:22:c1:3e:cc:71:f0:a8:c6:19:79:33:2a: 57:3a:c1:ee:e5:f4:85:dc:82:27:12:36:9f:84:c9: a5:ad:d2:5e:1a:50:cc:6e:44:44:fe:4e:8a:9c:13: b4:36:ba:62:f3:5a:71:32:d6:78:28:b2:ff:a2:b9: 0f:2b:a5:50:b1:3b:85:20:c8:14:0d:fb:60:ce:18: 5d:b9:8b:63:b5:8e:f0:ae:35:d3:be:64:d7:6e:77: 4b:60:dc:e3:7d:33:3e:b1:53:bb:ea:84:70:ec:11: a7:95:d2:24:25:90:1a:93:5e:8e:8b:8d:2e:76:bf: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:68:7C:82:1E:CF:23:52:51:00:03:50:14:C0:0D:52:3A:D3:98:58 X509v3 Authority Key Identifier: keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/0F0EC4A67A8811EB95169F62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.86.85.0/24 103.86.87.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:c6:e6:3f:8a:ce:e4:5b:32:50:b3:d7:2b:f8:02:e0:52:b9: c8:50:75:a2:d3:40:b0:e0:96:4b:ff:7c:09:f5:53:f7:88:ee: 5c:40:85:26:29:1e:bf:7e:f4:ae:22:71:34:b4:f0:0f:20:07: 21:c0:c8:8d:1a:fd:9c:16:c1:9e:71:99:9f:e9:9c:af:f6:74: df:c4:dd:48:ce:fd:38:79:06:7f:16:60:e2:5e:ab:4e:3b:13: 6e:8a:06:85:00:f2:90:58:fa:a0:d2:94:ef:4b:63:fb:97:66: fe:4a:9f:cf:5d:61:45:f3:58:c0:52:df:de:26:0a:ff:d7:16: 34:b9:4a:9d:1b:53:23:d8:5f:b9:99:49:fb:7b:80:b3:ff:3c: 45:bd:5b:db:63:27:02:44:d3:99:7f:08:17:18:3a:80:84:4a: 62:0e:6f:8d:9e:e5:f2:50:7a:5d:df:07:9e:4e:82:02:29:b3: 84:80:9d:f1:78:5f:70:98:84:05:96:5d:28:53:b1:98:70:10: 7f:8d:79:4d:35:25:0e:69:2e:b5:df:4e:a1:b3:c2:c5:46:a5: 38:d5:04:19:24:cb:01:c9:3a:9f:03:55:2e:ff:7f:f7:b3:16: c6:a2:91:7c:39:54:f5:43:f0:f2:10:69:d6:0b:4b:e0:1f:67: 84:0b:84:9a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5 NTYwRjJCQ0EwHhcNMjYwMzAyMjIyOTA4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGYzNC02YTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlft65AKId2hqaQ/5hAutFWbH/zJBQiqx167UwLcoaOjgTUx0Eqhf7l5negE 2fATw3ohAUnT4p8T+Tdp6Y7EpHS5Ske0AkKaMXCI7SvN4pcoC+QrI88nwc8XabBU WPIbvcWE2NjY52oxs4ukntL/hYOisNAb4NycBvHdJcTecgNZRp/ChF+lHPIiwT7M cfCoxhl5MypXOsHu5fSF3IInEjafhMmlrdJeGlDMbkRE/k6KnBO0Nrpi81pxMtZ4 KLL/orkPK6VQsTuFIMgUDftgzhhduYtjtY7wrjXTvmTXbndLYNzjfTM+sVO76oRw 7BGnldIkJZAak16Oi40udr9PcwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJJofIIe zyNSUQADUBTADVI605hYMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFCQ0IvMzQyRkZGMTg3QTg2MTFFQjk3QUU1MTYwQzRGOUFFMDIvMEYwRUM0QTY3 QTg4MTFFQjk1MTY5RjYyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ1ZVAwQAZ1ZXMA0GCSqGSIb3DQEBCwUAA4IBAQCdxuY/is7kWzJQ s9cr+ALgUrnIUHWi00Cw4JZL/3wJ9VP3iO5cQIUmKR6/fvSuInE0tPAPIAchwMiN Gv2cFsGecZmf6Zyv9nTfxN1Izv04eQZ/FmDiXqtOOxNuigaFAPKQWPqg0pTvS2P7 l2b+Sp/PXWFF81jAUt/eJgr/1xY0uUqdG1Mj2F+5mUn7e4Cz/zxFvVvbYycCRNOZ fwgXGDqAhEpiDm+NnuXyUHpd3weeToICKbOEgJ3xeF9wmIQFll0oU7GYcBB/jXlN NSUOaS61306hs8LFRqU41QQZJMsByTqfA1Uu/3/3sxbGopF8OVT1Q/DyEGnWC0vg H2eEC4Sa -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:44 2026 by rpki-client