$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/8AB7936E5FF111F092635949C4F9AE02.roa File: 8AB7936E5FF111F092635949C4F9AE02.roa (raw, json) Hash identifier: B+tg3MGzU6RZBeuCdNyRx0cM0Jlgf3lhdx/0R3MqTSY= Subject key identifier: 3C:D7:CE:B4:F8:B8:22:44:04:43:A0:2E:6E:B4:91:6C:6F:EA:ED:B0 Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Certificate serial: 0486 Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/8AB7936E5FF111F092635949C4F9AE02.roa Signing time: Tue 03 Mar 2026 00:32:55 +0000 ROA not before: Tue 03 Mar 2026 00:32:55 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 149480 IP address blocks: 103.180.206.0/23 maxlen: 24 2001:df0:6040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDCFE, serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334 Validity Not Before: Mar 3 00:32:55 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a62c37-d32f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:78:5d:80:a9:11:01:1f:fe:6d:f7:78:62:f5: 4d:11:3f:ea:38:5f:91:d8:26:fd:69:27:4b:87:7a: fd:2b:3e:01:06:f0:79:ec:74:91:d9:07:9b:27:f2: 3a:c3:41:2f:6c:c9:e4:74:b9:5d:f6:58:e6:8a:ca: 29:af:0b:1d:82:16:91:6b:50:22:1d:46:99:ff:0f: b6:20:38:98:ca:f5:f1:c0:dc:ea:98:7c:4f:63:03: b2:cb:bc:6a:42:19:fe:90:3a:f6:9d:d4:80:5f:a5: 1d:33:98:65:62:bc:68:27:df:f9:c5:50:fa:4f:e4: 53:5b:e7:05:4e:61:40:21:7b:8e:3e:17:15:03:8e: bb:03:d9:b3:06:ce:39:de:70:ec:61:57:51:cf:5c: 20:13:7f:c4:3f:a0:ec:5b:c4:1e:0c:53:c7:73:a3: 14:29:80:e6:b8:93:76:30:89:1e:e8:8f:d8:ab:60: 0c:c4:4f:4d:89:6a:44:e0:c7:09:7f:9e:55:dc:d9: 4e:6f:94:87:df:3e:4e:aa:0d:2b:46:38:f5:e8:28: 7a:fd:16:3c:6f:e2:0d:8a:11:29:14:92:3b:10:77: d7:61:d7:86:87:32:05:3e:a1:63:16:c1:19:1e:f8: d6:f5:61:14:c6:2e:09:09:ac:c1:f5:75:f7:d7:e6: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D7:CE:B4:F8:B8:22:44:04:43:A0:2E:6E:B4:91:6C:6F:EA:ED:B0 X509v3 Authority Key Identifier: keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/8AB7936E5FF111F092635949C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.180.206.0/23 IPv6: 2001:df0:6040::/48 Signature Algorithm: sha256WithRSAEncryption 28:81:e8:78:1a:9d:41:a9:00:62:21:06:63:45:90:54:3a:7f: 3e:66:7d:43:d5:49:17:b5:a0:bf:61:ff:81:99:6a:52:a0:fb: 44:e1:86:94:03:45:08:76:b0:3a:55:ac:99:20:99:6d:a7:26: 3d:39:71:33:0b:be:42:0c:af:06:d1:2a:e4:a7:97:bd:74:d6: 91:12:b3:cb:51:5c:88:0a:f8:ab:fe:7b:da:26:b5:22:f7:e8: d3:ad:88:62:18:d0:a9:96:b3:d2:40:42:7c:ac:26:69:8f:4f: cd:2c:8a:52:52:f9:72:2e:35:e0:dc:d7:5e:e0:9f:bd:bf:03: 9d:f4:86:f4:16:25:4e:e7:c7:8d:b5:7b:13:91:c4:5d:92:8c: 0c:62:bf:f3:60:9a:f8:c5:eb:ef:41:7d:bd:67:0d:54:eb:ad: 67:e0:87:9f:ec:ef:32:1d:2a:6c:e6:05:d3:9f:82:6d:d7:44: f3:f2:10:40:2e:e5:f7:2c:9e:f5:88:13:4f:d9:74:12:ed:03: 79:41:48:ed:83:72:ce:eb:9a:67:b4:c0:9f:fb:e3:ab:04:8c: c4:39:c4:f3:66:90:d1:ca:0a:68:c5:a9:c0:da:ae:7b:1f:81: 09:bc:64:46:e8:44:ff:b5:73:44:e8:c8:78:0d:92:10:d2:88: 96:7c:61:e9 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG OTNBNTIzMzQwHhcNMjYwMzAzMDAzMjU1WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MmMzNy1kMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnhdgKkRAR/+bfd4YvVNET/qOF+R2Cb9aSdLh3r9Kz4BBvB57HSR2QebJ/I6 w0EvbMnkdLld9ljmisoprwsdghaRa1AiHUaZ/w+2IDiYyvXxwNzqmHxPYwOyy7xq Qhn+kDr2ndSAX6UdM5hlYrxoJ9/5xVD6T+RTW+cFTmFAIXuOPhcVA467A9mzBs45 3nDsYVdRz1wgE3/EP6DsW8QeDFPHc6MUKYDmuJN2MIke6I/Yq2AMxE9NiWpE4McJ f55V3NlOb5SH3z5Oqg0rRjj16Ch6/RY8b+INihEpFJI7EHfXYdeGhzIFPqFjFsEZ HvjW9WEUxi4JCazB9XX31+ZVvwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDzXzrT4 uCJEBEOgLm60kWxv6u2wMB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRDRkUvOTY1MDVCMjQ4MEU0MTFFQ0I5MkRDQjREQzRGOUFFMDIvOEFCNzkzNkU1 RkYxMTFGMDkyNjM1OTQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7TOMA8EAgACMAkDBwAgAQ3wYEAwDQYJKoZIhvcNAQELBQADggEB ACiB6HganUGpAGIhBmNFkFQ6fz5mfUPVSRe1oL9h/4GZalKg+0ThhpQDRQh2sDpV rJkgmW2nJj05cTMLvkIMrwbRKuSnl7101pESs8tRXIgK+Kv+e9omtSL36NOtiGIY 0KmWs9JAQnysJmmPT80silJS+XIuNeDc117gn72/A530hvQWJU7nx421exORxF2S jAxiv/NgmvjF6+9Bfb1nDVTrrWfgh5/s7zIdKmzmBdOfgm3XRPPyEEAu5fcsnvWI E0/ZdBLtA3lBSO2Dcs7rmme0wJ/746sEjMQ5xPNmkNHKCmjFqcDarnsfgQm8ZEbo RP+1c0ToyHgNkhDSiJZ8Yek= -----END CERTIFICATE-----Generated at Thu Mar 26 13:59:01 2026 by rpki-client