$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/6B6060E445A311F093AEF324C4F9AE02.roa File: 6B6060E445A311F093AEF324C4F9AE02.roa (raw, json) Hash identifier: Z080oakKu17Se776qqpj5LDNBkfUF0Gst+D+v6MAhg8= Subject key identifier: A5:C8:DD:B2:3B:A2:1E:CF:D8:43:58:E3:95:79:5B:75:43:8A:40:B5 Certificate issuer: /CN=A91EEA4D/serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Certificate serial: 99 Authority key identifier: D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/6B6060E445A311F093AEF324C4F9AE02.roa Signing time: Mon 02 Mar 2026 19:24:15 +0000 ROA not before: Mon 02 Mar 2026 19:24:15 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138561 IP address blocks: 103.133.4.0/22 maxlen: 22 103.133.4.0/23 maxlen: 23 103.133.4.0/24 maxlen: 24 103.133.5.0/24 maxlen: 24 103.133.6.0/23 maxlen: 23 103.133.6.0/24 maxlen: 24 103.133.7.0/24 maxlen: 24 2404:44c0::/32 maxlen: 32 2404:44c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=D106FB972A71FEB74092E06378D54CD59E59E3A3 Validity Not Before: Mar 2 19:24:15 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a5e3df-5af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:d0:f9:38:a2:a6:7c:6c:9b:a4:d2:ee:1e: df:10:03:53:ee:da:22:20:aa:b5:11:00:3a:18:02: 54:d9:ce:6f:39:52:df:b6:60:69:b0:9a:b4:07:42: 0c:20:3e:ef:cc:7b:84:f6:1c:4e:cd:33:37:75:7d: b2:53:be:f4:a9:1a:e0:bb:e7:ff:5f:7d:36:31:06: 78:81:4b:ec:d9:f0:13:0d:41:39:e8:7f:b7:55:f3: a7:c4:38:77:5e:cb:5a:d5:18:b4:47:d4:71:35:2b: 51:83:72:8e:6e:e3:9c:e8:7a:ad:93:5c:91:27:c4: fd:a7:a9:5d:1e:c2:c9:7a:e5:f0:af:ce:2a:10:aa: ac:6b:b0:38:a9:5b:c7:90:be:2f:dc:ac:cd:30:9f: df:1c:ac:ed:f8:9a:64:5b:58:7d:fa:2f:36:4f:36: b8:20:93:ed:74:49:ac:b4:d2:c2:ac:ff:d9:a4:c4: d8:45:4e:47:9c:d2:97:19:08:a3:03:65:bc:03:b7: cb:72:c1:9d:69:dc:28:4b:6f:44:39:c8:01:d7:0e: 11:d5:36:96:e5:33:1c:30:e8:90:71:26:3e:77:22: dd:14:43:d7:2f:a8:a8:5f:3d:89:0f:f8:5a:b7:cd: ec:58:93:e7:a1:42:20:79:5c:56:3e:23:12:83:59: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C8:DD:B2:3B:A2:1E:CF:D8:43:58:E3:95:79:5B:75:43:8A:40:B5 X509v3 Authority Key Identifier: keyid:D1:06:FB:97:2A:71:FE:B7:40:92:E0:63:78:D5:4C:D5:9E:59:E3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Qb7lypx_rdAkuBjeNVM1Z5Z46M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/6B6060E445A311F093AEF324C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.133.4.0/22 IPv6: 2404:44c0::/32 Signature Algorithm: sha256WithRSAEncryption 23:96:75:35:91:b1:ad:f2:d8:26:14:dd:f4:d0:76:98:78:48: 4d:e8:55:1f:49:ba:30:ce:04:16:ee:4f:8d:20:b1:ea:a3:b0: bf:b6:9c:82:c0:5e:42:60:7b:8d:0b:52:ac:7d:06:18:4d:97: 21:a5:1b:92:50:80:a4:b9:6b:81:db:7d:4b:39:8b:37:5b:c0: 90:a9:a6:a9:81:9b:ec:8a:af:57:18:33:61:3e:bb:4c:0b:33: e3:21:a8:38:24:f0:70:0e:75:12:34:d8:bc:60:8a:57:69:fa: 5d:c8:f4:76:02:45:e1:29:99:ae:95:e9:f1:eb:c1:29:d1:d5: 70:82:bf:99:90:35:53:e3:69:43:19:d8:56:9e:d8:de:22:90: a2:c6:74:d8:f9:00:9e:f1:0b:6b:b5:55:f2:9a:43:ac:ad:f7: 00:0d:53:55:2c:e2:09:4f:13:f3:24:14:d0:7c:b7:54:09:85: 3e:1a:8c:04:e0:d3:ef:1a:90:44:30:5d:84:b5:2c:00:5a:ed: 79:b7:44:d9:d5:b5:9f:f4:3b:ae:c4:4c:e6:86:13:aa:8d:d1: 82:2c:9a:d7:2a:5a:68:6e:03:4a:ea:d3:d9:e7:20:ec:bb:9f: 0d:89:4a:c1:8c:9e:6c:5d:9b:b3:1c:dc:db:e6:32:05:e3:e5: 5e:de:6e:2b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKEQxMDZGQjk3MkE3MUZFQjc0MDkyRTA2Mzc4RDU0Q0Q1 OUU1OUUzQTMwHhcNMjYwMzAyMTkyNDE1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ZTNkZi01YWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8rQ+Tiipnxsm6TS7h7fEANT7toiIKq1EQA6GAJU2c5vOVLftmBpsJq0B0IM ID7vzHuE9hxOzTM3dX2yU770qRrgu+f/X302MQZ4gUvs2fATDUE56H+3VfOnxDh3 Xsta1Ri0R9RxNStRg3KObuOc6Hqtk1yRJ8T9p6ldHsLJeuXwr84qEKqsa7A4qVvH kL4v3KzNMJ/fHKzt+JpkW1h9+i82Tza4IJPtdEmstNLCrP/ZpMTYRU5HnNKXGQij A2W8A7fLcsGdadwoS29EOcgB1w4R1TaW5TMcMOiQcSY+dyLdFEPXL6ioXz2JD/ha t83sWJPnoUIgeVxWPiMSg1kwkwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFKXI3bI7 oh7P2ENY45V5W3VDikC1MB8GA1UdIwQYMBaAFNEG+5cqcf63QJLgY3jVTNWeWeOj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi8wUWI3bHlweF9yZEFrdUJqZU5WTTFaNVo0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBRYjdseXB4X3JkQWt1QmplTlZNMVo1WjQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVBNEQvNjYxRjczRUM0NzM3MTFFQUFCMTZCQjUwQzRGOUFFMDIvNkI2MDYwRTQ0 NUEzMTFGMDkzQUVGMzI0QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4UEMA0EAgACMAcDBQAkBETAMA0GCSqGSIb3DQEBCwUAA4IBAQAj lnU1kbGt8tgmFN300HaYeEhN6FUfSbowzgQW7k+NILHqo7C/tpyCwF5CYHuNC1Ks fQYYTZchpRuSUICkuWuB231LOYs3W8CQqaapgZvsiq9XGDNhPrtMCzPjIag4JPBw DnUSNNi8YIpXafpdyPR2AkXhKZmulenx68Ep0dVwgr+ZkDVT42lDGdhWntjeIpCi xnTY+QCe8QtrtVXymkOsrfcADVNVLOIJTxPzJBTQfLdUCYU+GowE4NPvGpBEMF2E tSwAWu15t0TZ1bWf9DuuxEzmhhOqjdGCLJrXKlpobgNK6tPZ5yDsu58NiUrBjJ5s XZuzHNzb5jIF4+Ve3m4r -----END CERTIFICATE-----Generated at Thu Mar 26 09:03:38 2026 by rpki-client