$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/D875D57EF30611EEAFFC0C66C4F9AE02.roa File: D875D57EF30611EEAFFC0C66C4F9AE02.roa (raw, json) Hash identifier: dLUeKe6QaZ4GPKIE3nlD7SGlABym7P6qS+9RNwN3OQ8= Subject key identifier: 86:DE:27:17:AC:E8:7F:FA:C6:8B:75:D4:B3:04:C7:07:84:B4:B7:10 Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Certificate serial: 01D5 Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/D875D57EF30611EEAFFC0C66C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:19:54 +0000 ROA not before: Tue 07 Oct 2025 04:01:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138311 IP address blocks: 103.6.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365 Validity Not Before: Oct 7 04:01:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a412ca-6b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:45:27:17:3b:50:ba:c4:2c:41:16:56:41: e7:13:79:26:95:36:56:1b:76:6e:ca:b9:19:ea:9f: 3e:f7:9c:30:67:d5:cc:c0:97:83:bc:17:c2:7e:1c: cb:49:21:6a:92:b0:c7:38:ca:a8:3a:2f:ca:80:e3: da:b6:d6:5f:47:df:e4:8a:1e:a6:9d:00:a3:38:08: c2:25:77:89:1e:8b:25:d7:67:a9:67:47:78:b3:a4: e1:15:d8:0b:06:34:d3:ed:a3:b0:b7:ec:b1:5f:ba: 25:a8:38:2e:5f:10:ca:38:1d:1c:3d:8c:cb:96:ab: e2:ee:57:f5:33:88:8d:5b:cc:39:02:9e:55:b5:79: 10:1f:8e:fe:51:fb:86:90:66:e7:6f:c6:fb:3b:b0: 26:66:da:b4:2d:32:ba:71:74:95:9a:36:2c:9f:8f: 8f:f0:37:39:43:a3:2e:22:37:15:4a:1e:25:6c:37: 17:bc:a0:a5:61:ed:e7:79:4d:bc:0f:df:50:23:a2: 5a:21:d4:b3:ac:90:d6:55:1c:24:c2:e3:bf:bd:13: 4d:3e:4f:a6:05:5d:b4:57:b0:ae:16:81:4f:c7:de: a0:0c:e4:4d:e2:8c:a1:3a:95:52:ca:b4:6c:1e:3c: 34:27:de:09:c6:f7:cd:a4:b7:2d:9e:2c:f9:65:a2: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DE:27:17:AC:E8:7F:FA:C6:8B:75:D4:B3:04:C7:07:84:B4:B7:10 X509v3 Authority Key Identifier: keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/D875D57EF30611EEAFFC0C66C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.6.120.0/23 Signature Algorithm: sha256WithRSAEncryption 30:64:8a:fa:12:ed:c5:ef:4b:f5:82:d0:54:1d:ec:df:44:bb: 6d:02:a8:25:43:34:bc:94:a8:01:e0:14:7e:d2:19:43:78:13: 3b:87:ac:48:92:eb:da:dc:1f:bd:d8:a6:94:d1:34:21:be:1a: 90:58:53:a6:13:ed:f3:b2:11:60:cb:60:95:83:f0:b8:32:72: 41:1d:01:3f:98:de:13:b2:20:47:3f:fe:a3:72:ac:35:a1:9a: 25:33:a7:94:ba:c6:bf:af:06:55:32:85:df:56:fc:71:64:ef: 34:8a:06:98:7f:51:62:bb:c5:c7:97:ce:25:8f:57:51:01:00: 4c:17:28:30:e2:9c:0b:00:40:0c:69:ce:f9:d9:e0:66:7c:58: 01:21:95:a6:d8:ff:a2:c7:50:d2:79:66:64:ad:46:f0:2e:64: 29:35:94:15:b7:d8:29:a3:7d:68:3e:c3:51:f5:b5:5b:0b:53: d3:42:ab:03:df:46:3e:eb:f9:ea:8a:39:b6:c6:47:4b:dc:f7: fb:4f:d8:cf:0c:08:5c:5a:28:9c:8c:74:d8:b7:f9:ec:a9:c7: f3:02:6c:ea:3f:93:13:12:63:c4:74:f3:9d:0e:79:f6:fe:d3: 1c:8a:a6:23:d7:a6:62:52:02:e7:17:7c:0e:2b:8b:b6:1a:80: ec:fe:be:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRCM0YxMTAvBgNVBAUTKDRFNzU0RjdCMDhDODAwMDY3Q0UwNzEwOTdBRDM5NDY4 OTBEQUEzNjUwHhcNMjUxMDA3MDQwMTIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTJjYS02YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpJFJxc7ULrELEEWVkHnE3kmlTZWG3ZuyrkZ6p8+95wwZ9XMwJeDvBfCfhzL SSFqkrDHOMqoOi/KgOPattZfR9/kih6mnQCjOAjCJXeJHosl12epZ0d4s6ThFdgL BjTT7aOwt+yxX7olqDguXxDKOB0cPYzLlqvi7lf1M4iNW8w5Ap5VtXkQH47+UfuG kGbnb8b7O7AmZtq0LTK6cXSVmjYsn4+P8Dc5Q6MuIjcVSh4lbDcXvKClYe3neU28 D99QI6JaIdSzrJDWVRwkwuO/vRNNPk+mBV20V7CuFoFPx96gDORN4oyhOpVSyrRs Hjw0J94JxvfNpLctniz5ZaL8YQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIbeJxes 6H/6xot11LMExweEtLcQMB8GA1UdIwQYMBaAFE51T3sIyAAGfOBxCXrTlGiQ2qNl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIzRi8xQ0RGODdFNDUx NjAxMUVFQjBBNTgyNkFDNEY5QUUwMi9UblZQZXdqSUFBWjg0SEVKZXRPVWFKRGFv MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RuVlBld2pJQUFaODRIRUpldE9VYUpEYW8yVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjRCM0YvMUNERjg3RTQ1MTYwMTFFRUIwQTU4MjZBQzRGOUFFMDIvRDg3NUQ1N0VG MzA2MTFFRUFGRkMwQzY2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZwZ4MA0GCSqGSIb3DQEBCwUAA4IBAQAwZIr6Eu3F70v1gtBUHezf RLttAqglQzS8lKgB4BR+0hlDeBM7h6xIkuva3B+92KaU0TQhvhqQWFOmE+3zshFg y2CVg/C4MnJBHQE/mN4TsiBHP/6jcqw1oZolM6eUusa/rwZVMoXfVvxxZO80igaY f1Fiu8XHl84lj1dRAQBMFygw4pwLAEAMac752eBmfFgBIZWm2P+ix1DSeWZkrUbw LmQpNZQVt9gpo31oPsNR9bVbC1PTQqsD30Y+6/nqijm2xkdL3Pf7T9jPDAhcWiic jHTYt/nsqcfzAmzqP5MTEmPEdPOdDnn2/tMciqYj16ZiUgLnF3wOK4u2GoDs/r7p -----END CERTIFICATE-----Generated at Thu Mar 26 11:12:40 2026 by rpki-client