$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/599F65C652C011EEAAE0CD34C4F9AE02.roa File: 599F65C652C011EEAAE0CD34C4F9AE02.roa (raw, json) Hash identifier: r8/9peTSjQhr0FyyL8WXDBdFlkEwEDLfGXbQKn3ob18= Subject key identifier: 55:93:C5:D3:06:5B:A9:DA:A3:3C:70:62:BB:61:9E:09:EA:3A:6B:B9 Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Certificate serial: 01D8 Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/599F65C652C011EEAAE0CD34C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:38:50 +0000 ROA not before: Sun 01 Mar 2026 05:23:13 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 58610 IP address blocks: 103.76.205.0/24 maxlen: 24 103.76.247.0/24 maxlen: 24 103.77.4.0/23 maxlen: 23 116.12.56.0/21 maxlen: 21 116.12.56.0/24 maxlen: 24 116.12.57.0/24 maxlen: 24 116.12.58.0/24 maxlen: 24 116.12.59.0/24 maxlen: 24 116.12.60.0/24 maxlen: 24 116.12.61.0/24 maxlen: 24 116.12.62.0/24 maxlen: 24 116.12.63.0/24 maxlen: 24 116.206.160.0/22 maxlen: 22 116.206.160.0/23 maxlen: 23 116.206.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Validity Not Before: Mar 1 05:23:13 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3defa-bec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:0e:ac:ac:cc:be:c8:cf:d0:31:88:57:e7: 93:fb:9e:b7:35:ac:77:6a:50:17:6a:f2:16:0d:96: e8:1f:2f:fc:81:9e:3c:a2:43:ca:a3:5d:78:87:c8: 17:46:b7:aa:ed:ca:a5:bd:4f:1b:51:53:d2:c2:89: 1e:ec:01:8d:5e:bd:34:ba:c3:21:2a:c1:d2:5c:3d: d1:fc:82:32:3a:4b:89:0d:b9:f8:77:4f:0e:6f:74: bc:9a:b6:67:90:a1:01:3a:28:6a:75:1b:f4:fa:42: 46:98:87:96:16:9b:d9:e0:3e:bd:88:fe:9b:c9:a1: 03:80:11:93:b5:43:91:ba:5d:46:f1:ad:59:e4:07: 85:ab:d4:92:0a:4d:92:48:0f:7e:0e:f1:9e:ad:b7: 1f:02:bb:f4:fd:6f:ce:39:5f:ba:d8:c8:5b:95:06: 09:a8:1a:93:58:f6:de:40:53:19:dd:f9:89:91:68: ea:7c:aa:f5:ac:49:de:da:ed:bb:f9:50:e9:17:e9: ec:27:0e:ac:40:14:b8:27:48:87:12:31:9b:2a:2e: 28:73:44:48:24:ff:77:eb:9a:9a:b9:75:a8:51:ad: f8:aa:61:66:0d:b3:27:13:18:3f:84:f8:7a:a3:ff: f2:d2:36:78:3c:85:8f:47:de:d1:b6:23:5d:46:c0: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:93:C5:D3:06:5B:A9:DA:A3:3C:70:62:BB:61:9E:09:EA:3A:6B:B9 X509v3 Authority Key Identifier: keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/599F65C652C011EEAAE0CD34C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.76.205.0/24 103.76.247.0/24 103.77.4.0/23 116.12.56.0/21 116.206.160.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:04:0b:ba:55:b3:94:3e:51:ee:19:c7:8f:4d:af:1f:68:6b: f0:88:46:be:08:71:32:34:90:4b:18:8b:3f:09:d8:be:ad:f4: 62:be:ee:84:36:5a:6e:0e:79:6d:ca:50:ac:01:32:e8:c4:7c: 4d:21:85:4f:29:39:ee:b1:f1:e6:cd:16:33:10:2d:be:24:c3: 88:f7:9f:30:b8:47:0e:24:6c:12:0e:79:3e:ee:15:15:fa:e8: a6:7c:89:0f:42:88:9c:ee:b1:73:01:70:0a:c0:ec:ae:c2:bc: 91:f5:e0:fc:a0:c7:98:04:47:e0:28:b1:c9:08:4b:43:43:fc: f9:83:31:7e:e5:9f:27:62:0c:38:90:09:c5:82:d2:13:e7:74: 7b:88:95:94:76:34:2b:bc:43:26:4a:2c:ee:dc:a0:2b:65:c4: c2:86:12:a3:a5:9c:8d:23:0d:ce:2d:ac:7d:fa:dc:b5:b0:21: 12:e3:1e:fe:87:44:81:c4:29:56:46:a5:0f:96:32:b1:62:15: 04:da:6d:46:ba:b3:97:a9:07:63:3b:11:0d:34:62:a3:4a:c5: 95:93:50:bc:05:2a:e1:87:32:82:71:86:8b:9f:73:df:3f:5a: 96:a1:5c:93:fe:d7:9d:44:e0:2e:10:5b:bb:fa:db:b9:01:ea: c3:09:00:3b -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4MDQxMTAvBgNVBAUTKEEwRkE2NkY2OTM0QUEyODEzRTFBMUYwMDczOTU5MEM2 MzU3RDQwREEwHhcNMjYwMzAxMDUyMzEzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZGVmYS1iZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ0OrKzMvsjP0DGIV+eT+563Nax3alAXavIWDZboHy/8gZ48okPKo114h8gX Rreq7cqlvU8bUVPSwoke7AGNXr00usMhKsHSXD3R/IIyOkuJDbn4d08Ob3S8mrZn kKEBOihqdRv0+kJGmIeWFpvZ4D69iP6byaEDgBGTtUORul1G8a1Z5AeFq9SSCk2S SA9+DvGerbcfArv0/W/OOV+62MhblQYJqBqTWPbeQFMZ3fmJkWjqfKr1rEne2u27 +VDpF+nsJw6sQBS4J0iHEjGbKi4oc0RIJP9365qauXWoUa34qmFmDbMnExg/hPh6 o//y0jZ4PIWPR97RtiNdRsBfoQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFFWTxdMG W6naozxwYrthngnqOmu5MB8GA1UdIwQYMBaAFKD6ZvaTSqKBPhofAHOVkMY1fUDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgwNC9DMjEzOEQ0MDUy QkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29vRS1HaDhBYzVXUXhqVjlR Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QcG05cE5Lb29FLUdoOEFjNVdReGpWOVFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU4MDQvQzIxMzhENDA1MkJGMTFFRThFNDRBQTFCQzRGOUFFMDIvNTk5RjY1QzY1 MkMwMTFFRUFBRTBDRDM0QzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQAZ0zNAwQAZ0z3AwQBZ00EAwQDdAw4AwQCdM6gMA0GCSqGSIb3DQEB CwUAA4IBAQAeBAu6VbOUPlHuGcePTa8faGvwiEa+CHEyNJBLGIs/Cdi+rfRivu6E NlpuDnltylCsATLoxHxNIYVPKTnusfHmzRYzEC2+JMOI958wuEcOJGwSDnk+7hUV +uimfIkPQoic7rFzAXAKwOyuwryR9eD8oMeYBEfgKLHJCEtDQ/z5gzF+5Z8nYgw4 kAnFgtIT53R7iJWUdjQrvEMmSizu3KArZcTChhKjpZyNIw3OLax9+ty1sCES4x7+ h0SBxClWRqUPljKxYhUE2m1GurOXqQdjOxENNGKjSsWVk1C8BSrhhzKCcYaLn3Pf P1qWoVyT/tedROAuEFu7+tu5AerDCQA7 -----END CERTIFICATE-----Generated at Sat Mar 28 12:08:17 2026 by rpki-client