$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/84121C245CE111E9824BCF76C4F9AE02.roa File: 84121C245CE111E9824BCF76C4F9AE02.roa (raw, json) Hash identifier: 6P0QZul7deP/5azgpjbHdDKzo/8UCrH1J+Uoz59/kWw= Subject key identifier: A3:62:02:3F:35:6D:77:D7:F3:B2:30:11:D9:4F:98:02:AA:30:1D:98 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 1221 Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/84121C245CE111E9824BCF76C4F9AE02.roa Signing time: Wed 18 Mar 2026 17:21:42 +0000 ROA not before: Wed 18 Mar 2026 17:21:42 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 38447 IP address blocks: 103.134.64.0/24 maxlen: 24 203.84.132.0/24 maxlen: 24 2404:5f40::/48 maxlen: 48 2404:5f40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4641 (0x1221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Mar 18 17:21:42 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69badf26-31c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:41:57:68:62:24:ce:85:ee:2e:21:2b:21: 2d:da:fa:8f:53:a6:78:8d:5e:c1:ca:7d:f3:2f:c1: 2a:99:ec:34:50:78:45:97:f7:4a:26:38:d2:f8:60: 7e:a0:17:bb:b8:ee:95:dc:1a:5c:01:19:82:5b:e0: a5:dc:06:92:c4:66:b2:40:cb:72:39:f9:80:1b:78: 24:c9:33:17:46:a2:7c:41:93:23:0c:43:5f:13:90: 7a:41:1e:27:93:a8:b7:a7:d7:e3:a5:dd:a9:99:8b: 9d:8a:a7:5d:e8:f7:ed:17:e6:1c:b0:67:4f:e9:dd: 34:9c:5d:99:a3:62:8f:2e:88:e4:08:84:39:ad:20: dc:8b:34:49:7d:02:c0:3d:53:57:73:9d:47:26:6a: 2e:0a:43:6b:11:76:46:f9:f6:70:d8:37:8c:4c:a2: d6:6a:05:3e:6b:93:f1:ab:0a:ed:68:c1:47:38:f5: 02:35:f4:63:78:15:05:cd:27:1c:65:ab:50:1d:8b: f6:b0:97:ad:1f:14:c6:44:a5:2e:e8:0e:9e:e5:c6: b1:d4:db:f3:ea:b3:76:68:4b:18:53:2e:cf:b9:dd: cc:e2:7e:22:71:50:df:63:fd:94:1a:a9:f9:53:3f: 63:d5:e5:77:76:69:30:88:d4:9f:70:b1:cd:82:eb: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:62:02:3F:35:6D:77:D7:F3:B2:30:11:D9:4F:98:02:AA:30:1D:98 X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/84121C245CE111E9824BCF76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.134.64.0/24 203.84.132.0/24 IPv6: 2404:5f40::/48 2404:5f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 86:83:a9:86:84:df:2d:c8:bc:3d:9a:2a:5d:f4:55:9f:52:e0: 9e:2c:46:3d:5f:9a:29:48:d8:cd:33:2a:92:a0:ea:0c:17:9c: d5:50:5a:f6:74:f2:f6:6c:34:41:e0:2f:8c:41:04:90:84:53: d1:4f:28:d7:4f:51:a9:11:b7:3d:95:8d:ee:35:10:bf:9e:2c: af:70:d6:54:79:b4:60:f4:c3:f1:71:7e:08:99:4d:15:ee:46: b9:97:ef:04:f0:ec:86:d6:5d:c0:e0:73:16:23:ae:9e:5e:b3: d4:26:19:ca:8c:6e:9a:09:32:89:fb:ec:ef:85:a4:5e:37:80: a3:35:18:6f:17:6f:7c:26:9f:e7:b6:a0:5f:9e:a8:60:f6:e7: 33:9a:73:0f:50:5b:b3:af:13:68:ef:e0:0d:9d:f0:4d:47:a2: f1:9a:9a:0f:f5:50:03:f7:58:30:7d:e8:39:c3:3c:06:eb:98: 80:6c:eb:04:a3:4c:01:39:01:a3:87:f5:57:4c:c6:8f:e3:7e: f0:7b:73:2c:6c:fc:e0:a8:fa:73:ce:34:f0:3f:b0:82:70:16: 7b:06:4e:6b:84:43:20:a5:b6:ff:03:2c:25:bd:b3:8e:d3:18: e7:18:4a:66:69:76:6f:66:49:bf:b0:0f:c5:6d:cd:48:5a:2d: ae:e9:00:ce -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICEiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjYwMzE4MTcyMTQyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJhZGYyNi0zMWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnNBV2hiJM6F7i4hKyEt2vqPU6Z4jV7Byn3zL8Eqmew0UHhFl/dKJjjS+GB+ oBe7uO6V3BpcARmCW+Cl3AaSxGayQMtyOfmAG3gkyTMXRqJ8QZMjDENfE5B6QR4n k6i3p9fjpd2pmYudiqdd6PftF+YcsGdP6d00nF2Zo2KPLojkCIQ5rSDcizRJfQLA PVNXc51HJmouCkNrEXZG+fZw2DeMTKLWagU+a5PxqwrtaMFHOPUCNfRjeBUFzScc ZatQHYv2sJetHxTGRKUu6A6e5cax1Nvz6rN2aEsYUy7Pud3M4n4icVDfY/2UGqn5 Uz9j1eV3dmkwiNSfcLHNgusTQQIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFKNiAj81 bXfX87IwEdlPmAKqMB2YMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI3QkQvNDMxNzI3OENGRTkwMTFFOEJCQjk1QTE0QzRGOUFFMDIvODQxMjFDMjQ1 Q0UxMTFFOTgyNEJDRjc2QzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAS BAIAATAMAwQAZ4ZAAwQAy1SEMBgEAgACMBIDBwAkBF9AAAADBwAkBF9AAAIwDQYJ KoZIhvcNAQELBQADggEBAIaDqYaE3y3IvD2aKl30VZ9S4J4sRj1fmilI2M0zKpKg 6gwXnNVQWvZ08vZsNEHgL4xBBJCEU9FPKNdPUakRtz2Vje41EL+eLK9w1lR5tGD0 w/FxfgiZTRXuRrmX7wTw7IbWXcDgcxYjrp5es9QmGcqMbpoJMon77O+FpF43gKM1 GG8Xb3wmn+e2oF+eqGD25zOacw9QW7OvE2jv4A2d8E1HovGamg/1UAP3WDB96DnD PAbrmIBs6wSjTAE5AaOH9VdMxo/jfvB7cyxs/OCo+nPONPA/sIJwFnsGTmuEQyCl tv8DLCW9s47TGOcYSmZpdm9mSb+wD8VtzUhaLa7pAM4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:56:05 2026 by rpki-client