$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa File: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (raw, json) Hash identifier: ux98ZA0wQgB4FkaCCMLS/K2q+Dgh8iXTzVCbgOOhli4= Subject key identifier: 57:BE:BB:82:F2:20:C7:7D:0E:FD:A4:14:62:19:09:A8:01:5F:19:E5 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 0512 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:03:11 +0000 ROA not before: Sat 31 Jan 2026 23:19:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 149015 IP address blocks: 103.176.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1298 (0x512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Jan 31 23:19:45 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5a6af-48bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:b8:ea:32:1b:11:fc:b0:6f:1c:34:57:df: 57:d1:f0:21:1c:0a:c6:00:46:d6:49:1f:77:7c:d1: 7b:66:ff:9b:4a:44:a8:5b:8f:33:79:61:2b:39:6c: ec:64:d5:e4:45:cb:b1:9b:ed:8a:cb:d1:a6:00:c2: 62:8a:32:b7:5d:1c:37:82:95:d7:62:f6:93:b5:9a: 51:47:ba:c8:99:78:bb:67:3e:74:32:59:58:80:ff: 8e:b0:71:b0:2a:a3:80:b4:76:92:83:52:42:2a:09: ab:6c:10:11:c5:35:7f:79:58:7d:20:b2:9e:37:c7: 44:e1:6a:5a:df:dc:9b:d5:9b:51:e5:1d:77:0d:f6: 0c:3d:1e:49:fb:a0:7d:3e:ba:21:9d:97:e3:1c:d9: aa:6c:a0:20:1d:c9:4c:8a:45:03:b9:bd:e8:52:c7: 56:1e:87:e0:9a:62:ef:83:e3:99:a8:47:15:a4:27: e8:3e:c9:38:5f:3a:29:31:1b:84:81:27:bc:c7:6d: 8d:69:5c:6d:0f:76:79:71:22:00:2c:aa:46:95:56: b2:d6:d0:a2:52:dc:fb:be:86:96:bc:2d:dc:7b:a2: 14:1f:13:d5:40:b3:ed:27:fb:d1:45:78:bd:d4:27: b8:9d:7c:1f:b6:15:75:e0:be:60:8f:7a:d1:86:dc: f5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BE:BB:82:F2:20:C7:7D:0E:FD:A4:14:62:19:09:A8:01:5F:19:E5 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/D3C965FA45F611EC9FB3BB49C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.176.86.0/23 Signature Algorithm: sha256WithRSAEncryption b9:a4:69:5a:1a:b3:7c:87:37:4b:d6:ad:a9:3e:a9:17:ef:59: 26:61:1e:12:46:fc:06:bf:f4:1d:11:ec:a6:80:0b:79:4e:3c: 94:39:64:f3:68:b8:2e:a7:3f:95:76:fb:e2:73:08:5d:22:dc: 43:7b:b6:14:8f:5f:d8:7d:87:69:3d:ec:75:fd:85:f6:f5:71: dd:b2:66:e6:d4:b5:41:93:4b:b9:7b:74:b4:b3:65:6e:19:27: 43:d2:c3:22:cc:34:1d:78:f8:bd:08:29:87:10:3b:b5:48:4e: e2:ca:ee:58:23:4f:cf:be:77:19:19:c6:f7:dd:54:f5:0b:34: 84:b2:db:6c:9c:56:ce:26:d5:73:60:d4:62:87:43:2a:46:fb: f0:40:bf:02:ba:b3:cf:23:f4:f2:c7:77:a8:66:4b:1b:35:8d: 52:a2:86:c6:48:a7:1a:21:86:fc:a4:b0:70:6d:71:d4:14:2b: f0:6b:04:ac:ea:96:4d:1c:29:ab:a1:c4:e2:4d:e8:29:8c:71: 67:14:c4:76:f2:7e:7f:bd:a5:5a:e1:6e:3c:98:f8:79:be:f4: 9c:06:71:bb:d9:9e:4c:1c:5f:2e:60:20:41:1f:18:20:1b:75: 3f:45:0b:cc:5a:b1:a3:95:38:d3:97:1d:49:88:84:35:6a:e5: 4d:29:dd:4c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjYwMTMxMjMxOTQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTZhZi00OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvju46jIbEfywbxw0V99X0fAhHArGAEbWSR93fNF7Zv+bSkSoW48zeWErOWzs ZNXkRcuxm+2Ky9GmAMJiijK3XRw3gpXXYvaTtZpRR7rImXi7Zz50MllYgP+OsHGw KqOAtHaSg1JCKgmrbBARxTV/eVh9ILKeN8dE4Wpa39yb1ZtR5R13DfYMPR5J+6B9 ProhnZfjHNmqbKAgHclMikUDub3oUsdWHofgmmLvg+OZqEcVpCfoPsk4XzopMRuE gSe8x22NaVxtD3Z5cSIALKpGlVay1tCiUtz7voaWvC3ce6IUHxPVQLPtJ/vRRXi9 1Ce4nXwfthV14L5gj3rRhtz1MwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFe+u4Ly IMd9Dv2kFGIZCagBXxnlMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFFRDkvNkE3NjVBQUE0NURDMTFFQ0E4QTMxNDZEQzRGOUFFMDIvRDNDOTY1RkE0 NUY2MTFFQzlGQjNCQjQ5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ7BWMA0GCSqGSIb3DQEBCwUAA4IBAQC5pGlaGrN8hzdL1q2pPqkX 71kmYR4SRvwGv/QdEeymgAt5TjyUOWTzaLgupz+VdvvicwhdItxDe7YUj1/YfYdp Pex1/YX29XHdsmbm1LVBk0u5e3S0s2VuGSdD0sMizDQdePi9CCmHEDu1SE7iyu5Y I0/PvncZGcb33VT1CzSEsttsnFbOJtVzYNRih0MqRvvwQL8CurPPI/Tyx3eoZksb NY1SoobGSKcaIYb8pLBwbXHUFCvwawSs6pZNHCmrocTiTegpjHFnFMR28n5/vaVa 4W48mPh5vvScBnG72Z5MHF8uYCBBHxggG3U/RQvMWrGjlTjTlx1JiIQ1auVNKd1M -----END CERTIFICATE-----Generated at Sat Mar 28 13:40:55 2026 by rpki-client