$ rpki-client -vvf rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/084D41C6407111EFB0944C40C4F9AE02.roa File: 084D41C6407111EFB0944C40C4F9AE02.roa (raw, json) Hash identifier: NxzkE3G6k7uKaBQgTyXi96jp5VcOIi/OIHejJcnWXxw= Subject key identifier: 98:B7:73:27:90:0D:6E:96:BA:4A:A6:89:BB:EF:97:83:83:8D:61:21 Certificate issuer: /CN=A91F495C/serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Certificate serial: 0146 Authority key identifier: D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/084D41C6407111EFB0944C40C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:41:33 +0000 ROA not before: Fri 05 Dec 2025 03:13:13 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136023 IP address blocks: 103.80.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F495C, serialNumber=D6C80C5D38AA3F10D1EB0E139B9E494EBF6C6421 Validity Not Before: Dec 5 03:13:13 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5a19d-2aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:3a:48:68:21:9f:02:97:40:73:e6:0b:d6: fc:4e:81:ba:a6:f1:ad:d6:56:61:64:f1:73:28:95: 9d:20:14:c9:34:ab:e6:b0:96:a9:f4:ae:cb:1b:0b: 5c:ad:90:72:3e:de:57:07:1e:72:85:dc:a7:75:fa: 0d:c2:0d:c0:1a:9e:21:ad:c7:0e:d9:21:ab:0f:39: bd:53:7f:0b:eb:19:0f:10:80:b0:28:fc:59:63:c2: f5:2c:bb:88:9c:ed:8f:dd:77:28:27:ec:fe:0f:28: 96:a1:0d:51:b2:3c:dc:b3:57:58:20:54:4c:7b:67: 40:09:dd:c2:bd:a7:ca:5d:ba:eb:30:db:b1:c4:52: 8e:ba:8a:8e:df:f7:60:00:62:d6:2e:d1:6c:0d:44: 62:2c:6d:f7:b0:5e:c3:69:48:91:0f:76:46:0f:a2: 55:9c:ae:fa:06:fa:7b:27:77:0c:fe:58:c5:76:9b: 28:01:21:7f:7c:95:fe:e9:04:75:69:70:58:7c:cf: af:da:8f:11:6a:7c:1b:2d:29:46:1c:ef:01:3f:88: 34:ab:b2:d3:f3:be:28:3f:b9:3e:97:fd:d2:a4:44: 07:87:ec:10:d1:1e:a6:81:35:8b:9b:2c:a4:49:1f: f0:a3:5f:e9:43:a1:d7:2b:14:a7:44:51:7a:43:66: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B7:73:27:90:0D:6E:96:BA:4A:A6:89:BB:EF:97:83:83:8D:61:21 X509v3 Authority Key Identifier: keyid:D6:C8:0C:5D:38:AA:3F:10:D1:EB:0E:13:9B:9E:49:4E:BF:6C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/1sgMXTiqPxDR6w4Tm55JTr9sZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sgMXTiqPxDR6w4Tm55JTr9sZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F495C/5BC63EF4406511EF856C9E29C4F9AE02/084D41C6407111EFB0944C40C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.80.48.0/22 Signature Algorithm: sha256WithRSAEncryption 63:0b:2e:67:3e:f7:33:cc:17:92:96:88:02:d9:64:d2:06:66: 57:93:69:dd:1b:d8:4d:1f:25:21:b6:b1:c8:87:c1:b5:2d:cd: 7a:96:29:82:ec:55:6c:99:42:e5:70:41:1e:8c:53:45:db:dc: 96:fd:26:04:f2:96:f5:17:a2:79:51:21:30:1a:8d:fe:20:5c: 3f:1b:32:c5:bc:65:89:b5:ac:5a:b5:68:b1:5e:0e:ea:2b:e8: 2f:75:2a:7f:2c:90:e1:4c:2b:da:e9:14:8c:e3:11:db:d6:88: 1a:92:af:5c:d1:a7:d5:a4:eb:22:8b:e8:d8:dc:01:7f:4d:b8: 51:7d:8a:2b:29:0f:97:4a:20:a2:97:1c:62:63:c1:f5:b8:74: c5:83:19:28:e2:ab:92:2d:60:2c:86:ea:96:f5:20:fe:9d:4e: 48:2b:12:59:37:dc:69:bc:75:18:76:2b:e6:4a:ae:dc:5f:98: 8b:f2:f7:29:5c:f4:d7:d2:92:bb:6e:20:8d:05:77:b1:37:c0: 00:ba:4f:3b:1e:0f:76:ac:39:6e:c0:17:a6:c0:20:ea:99:01: d5:4f:98:f8:ca:01:ea:bd:cc:fc:98:5f:27:f2:3e:13:2f:e0: 73:6d:e2:70:f3:24:38:9b:c9:d3:83:e4:25:a2:1e:86:01:7f: 72:88:b7:db -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NUMxMTAvBgNVBAUTKEQ2QzgwQzVEMzhBQTNGMTBEMUVCMEUxMzlCOUU0OTRF QkY2QzY0MjEwHhcNMjUxMjA1MDMxMzEzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTE5ZC0yYWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2q06SGghnwKXQHPmC9b8ToG6pvGt1lZhZPFzKJWdIBTJNKvmsJap9K7LGwtc rZByPt5XBx5yhdyndfoNwg3AGp4hrccO2SGrDzm9U38L6xkPEICwKPxZY8L1LLuI nO2P3XcoJ+z+DyiWoQ1Rsjzcs1dYIFRMe2dACd3CvafKXbrrMNuxxFKOuoqO3/dg AGLWLtFsDURiLG33sF7DaUiRD3ZGD6JVnK76Bvp7J3cM/ljFdpsoASF/fJX+6QR1 aXBYfM+v2o8RanwbLSlGHO8BP4g0q7LT874oP7k+l/3SpEQHh+wQ0R6mgTWLmyyk SR/wo1/pQ6HXKxSnRFF6Q2Yr1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJi3cyeQ DW6Wukqmibvvl4ODjWEhMB8GA1UdIwQYMBaAFNbIDF04qj8Q0esOE5ueSU6/bGQh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Qy81QkM2M0VGNDQw NjUxMUVGODU2QzlFMjlDNEY5QUUwMi8xc2dNWFRpcVB4RFI2dzRUbTU1SlRyOXNa Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzZ01YVGlxUHhEUjZ3NFRtNTVKVHI5c1pDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQ5NUMvNUJDNjNFRjQ0MDY1MTFFRjg1NkM5RTI5QzRGOUFFMDIvMDg0RDQxQzY0 MDcxMTFFRkIwOTQ0QzQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ1AwMA0GCSqGSIb3DQEBCwUAA4IBAQBjCy5nPvczzBeSlogC2WTS BmZXk2ndG9hNHyUhtrHIh8G1Lc16limC7FVsmULlcEEejFNF29yW/SYE8pb1F6J5 USEwGo3+IFw/GzLFvGWJtaxatWixXg7qK+gvdSp/LJDhTCva6RSM4xHb1ogakq9c 0afVpOsii+jY3AF/TbhRfYorKQ+XSiCilxxiY8H1uHTFgxko4quSLWAshuqW9SD+ nU5IKxJZN9xpvHUYdivmSq7cX5iL8vcpXPTX0pK7biCNBXexN8AAuk87Hg92rDlu wBemwCDqmQHVT5j4ygHqvcz8mF8n8j4TL+BzbeJw8yQ4m8nTg+Qloh6GAX9yiLfb -----END CERTIFICATE-----Generated at Fri Mar 27 10:00:05 2026 by rpki-client