$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/05EBB6CEFEF811EFB0C52572C4F9AE02.roa File: 05EBB6CEFEF811EFB0C52572C4F9AE02.roa (raw, json) Hash identifier: YgdZkpaRGf3qZu8ORhNwjKQyDofcMXRWEr4dow0fuZY= Subject key identifier: A7:F1:61:45:26:82:D9:A4:A3:C9:4E:23:0D:49:CD:27:36:99:7A:49 Certificate issuer: /CN=A91F8282/serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Certificate serial: C3 Authority key identifier: 9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/05EBB6CEFEF811EFB0C52572C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:05:33 +0000 ROA not before: Mon 17 Nov 2025 04:52:35 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 7514 IP address blocks: 103.144.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8282, serialNumber=9F7B42EF18D342FDD56A9FDC5F3D801E2D2C1AB7 Validity Not Before: Nov 17 04:52:35 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a5a73d-7d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d8:ff:23:1a:7e:e3:4b:87:50:c5:7e:e1:ef: 6e:0f:f9:cd:19:08:25:48:b3:50:ef:49:28:de:60: 56:94:54:da:8b:29:71:0f:d8:cc:9c:7c:5b:b7:84: ea:7d:71:09:04:47:85:c3:3a:6e:b1:95:c2:87:02: 70:28:92:66:3f:36:49:d5:dc:e5:0b:09:be:a4:97: f6:7d:a8:ef:1e:47:05:20:9f:47:1c:b9:c4:d7:7e: c8:4a:4b:2f:ce:95:de:af:c9:cb:d5:10:78:18:70: e2:1b:a6:cd:18:79:d2:0f:61:78:03:58:13:80:b4: a7:08:53:b7:e5:ca:80:47:dd:14:64:88:e3:f7:ba: 26:9f:3d:83:7f:34:13:07:16:b2:9b:a4:c0:62:f1: 60:c8:c2:36:27:65:9c:89:f3:36:16:a9:c4:47:af: 17:12:f4:0b:60:ef:f0:1d:d5:78:1b:2d:79:ae:3b: ee:62:6a:6b:b2:21:3b:dd:78:4a:cc:d6:93:7b:74: 34:70:1a:28:8e:94:6d:bf:55:f1:62:38:9b:12:55: 55:6c:01:29:75:6d:52:1d:67:24:e7:13:d7:2b:54: f7:e1:28:58:16:44:5d:3d:26:2f:13:fe:10:38:da: ac:74:2d:4a:d4:8c:1e:ac:04:f6:62:da:4d:fd:5a: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:61:45:26:82:D9:A4:A3:C9:4E:23:0D:49:CD:27:36:99:7A:49 X509v3 Authority Key Identifier: keyid:9F:7B:42:EF:18:D3:42:FD:D5:6A:9F:DC:5F:3D:80:1E:2D:2C:1A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/n3tC7xjTQv3Vap_cXz2AHi0sGrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n3tC7xjTQv3Vap_cXz2AHi0sGrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/061AAB52FBFE11EFB5520A12C4F9AE02/05EBB6CEFEF811EFB0C52572C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.144.6.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:95:83:41:38:e9:1f:ef:d4:6e:76:1c:27:08:fb:bf:bc:52: b2:12:0a:f7:5c:a7:72:66:23:f3:51:5b:c8:dc:b4:70:4b:83: d7:30:17:b8:7b:40:38:a1:c5:58:e2:aa:22:d4:80:51:08:ff: 2a:ee:6b:b7:a5:5c:30:2a:9e:1b:b5:30:4c:73:71:dc:f1:36: 6c:99:0b:74:cb:f2:09:e8:59:00:58:a7:b1:7b:7f:fd:70:fe: 94:17:a0:aa:e3:92:dd:6f:a1:d5:69:63:96:70:24:d0:bc:84: 55:2c:06:20:87:6d:c7:5d:be:2d:cb:9f:b4:5d:01:5b:d6:41: 84:47:20:f5:f1:c8:19:19:e2:6b:de:67:1a:b9:86:be:53:5c: 20:41:3f:3c:88:11:2f:00:51:97:41:07:41:91:c4:e3:c0:0f: fe:44:e6:26:e3:4d:fa:bc:c4:cf:84:e4:76:7c:ab:19:86:8b: 77:98:a4:46:d3:b9:f8:3a:6d:1f:e0:97:c4:cc:9e:76:16:0c: dd:5d:cf:42:36:5b:73:b1:d6:62:ba:fc:5c:28:51:6e:87:dc: a2:26:d8:af:f5:92:c4:ef:32:20:2c:28:22:b1:ee:b2:32:95: 8f:d4:ec:e5:74:07:ac:88:15:df:db:cf:1b:97:d3:c0:16:1e: e1:2c:ee:9e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyODIxMTAvBgNVBAUTKDlGN0I0MkVGMThEMzQyRkRENTZBOUZEQzVGM0Q4MDFF MkQyQzFBQjcwHhcNMjUxMTE3MDQ1MjM1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTczZC03ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9dj/Ixp+40uHUMV+4e9uD/nNGQglSLNQ70ko3mBWlFTaiylxD9jMnHxbt4Tq fXEJBEeFwzpusZXChwJwKJJmPzZJ1dzlCwm+pJf2fajvHkcFIJ9HHLnE137ISksv zpXer8nL1RB4GHDiG6bNGHnSD2F4A1gTgLSnCFO35cqAR90UZIjj97omnz2DfzQT Bxaym6TAYvFgyMI2J2WcifM2FqnER68XEvQLYO/wHdV4Gy15rjvuYmprsiE73XhK zNaTe3Q0cBoojpRtv1XxYjibElVVbAEpdW1SHWck5xPXK1T34ShYFkRdPSYvE/4Q ONqsdC1K1IwerAT2YtpN/VoykQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKfxYUUm gtmko8lOIw1JzSc2mXpJMB8GA1UdIwQYMBaAFJ97Qu8Y00L91Wqf3F89gB4tLBq3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODI4Mi8wNjFBQUI1MkZC RkUxMUVGQjU1MjBBMTJDNEY5QUUwMi9uM3RDN3hqVFF2M1ZhcF9jWHoyQUhpMHNH cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24zdEM3eGpUUXYzVmFwX2NYejJBSGkwc0dyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgyODIvMDYxQUFCNTJGQkZFMTFFRkI1NTIwQTEyQzRGOUFFMDIvMDVFQkI2Q0VG RUY4MTFFRkIwQzUyNTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5AGMA0GCSqGSIb3DQEBCwUAA4IBAQCPlYNBOOkf79RudhwnCPu/ vFKyEgr3XKdyZiPzUVvI3LRwS4PXMBe4e0A4ocVY4qoi1IBRCP8q7mu3pVwwKp4b tTBMc3Hc8TZsmQt0y/IJ6FkAWKexe3/9cP6UF6Cq45Ldb6HVaWOWcCTQvIRVLAYg h23HXb4ty5+0XQFb1kGERyD18cgZGeJr3mcauYa+U1wgQT88iBEvAFGXQQdBkcTj wA/+ROYm4036vMTPhOR2fKsZhot3mKRG07n4Om0f4JfEzJ52FgzdXc9CNltzsdZi uvxcKFFuh9yiJtiv9ZLE7zIgLCgise6yMpWP1OzldAesiBXf288bl9PAFh7hLO6e -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:36 2026 by rpki-client