$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/AF5A6ADAC0F411EF88E4255EC4F9AE02.roa File: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (raw, json) Hash identifier: cQZLyZDU2l1kr310PmWKXvvFPQd2FZx1CPNtvRTlGpU= Subject key identifier: 1F:44:44:C6:CF:03:DB:31:3E:2D:90:39:B2:CC:DF:6D:BF:C9:CC:DC Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 077F Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/AF5A6ADAC0F411EF88E4255EC4F9AE02.roa Signing time: Mon 26 Jan 2026 21:18:21 +0000 ROA not before: Mon 26 Jan 2026 21:18:21 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 134505 IP address blocks: 103.161.104.0/23 maxlen: 23 103.161.104.0/24 maxlen: 24 103.161.105.0/24 maxlen: 24 2001:df4:cdc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 21:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1919 (0x77f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Jan 26 21:18:21 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6977da1d-4ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:d0:22:e6:05:63:81:fe:ca:0a:5b:19:83: eb:a5:17:a7:37:cb:99:9b:ba:e4:b4:54:46:f4:6b: 37:ff:92:d7:3d:34:72:13:3d:a3:48:2b:2a:69:53: 2d:4e:07:fa:cf:5d:54:5c:f1:b4:56:d3:ff:06:52: eb:05:f7:21:60:38:cd:f0:45:04:d5:27:3f:93:54: 3b:51:ce:e4:59:b8:da:14:ca:07:2a:fa:23:97:f3: fe:79:94:87:62:f8:d7:0b:a2:d5:98:ef:44:bb:bf: e2:d2:01:92:cd:75:22:f2:f9:e1:55:2b:31:eb:3e: 2f:70:66:4a:69:15:9a:3f:59:33:be:10:2c:ff:a8: 17:f6:4d:c4:95:cb:44:ff:8e:5c:d4:49:0e:f2:ae: 7e:10:97:a7:03:e5:e2:31:ce:36:dd:70:48:78:01: 02:3b:4c:ee:02:b9:04:cc:5c:99:7d:c8:37:23:47: 41:83:4f:1a:cb:a9:95:a3:ae:7b:9d:3b:4d:e1:10: fb:69:20:9b:ec:83:cb:b5:a2:a1:8d:fd:fc:73:19: fe:b6:67:b1:af:af:fd:18:cb:a3:fe:71:d7:b7:d8: 6e:aa:f8:3a:fe:11:bc:f3:b0:7e:89:14:b0:0d:e3: 4d:78:f9:56:cc:08:62:31:d2:42:27:57:8a:b8:67: fb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:44:44:C6:CF:03:DB:31:3E:2D:90:39:B2:CC:DF:6D:BF:C9:CC:DC X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/AF5A6ADAC0F411EF88E4255EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.104.0/23 IPv6: 2001:df4:cdc0::/48 Signature Algorithm: sha256WithRSAEncryption 36:79:08:42:a0:ac:9e:c0:bc:35:8f:33:af:a1:a4:26:7b:92: 00:1c:65:35:35:f3:1a:8b:47:d4:39:6e:e0:a8:b0:51:1d:81: 91:75:45:ff:e7:a1:26:76:4b:9d:4e:a7:31:b5:3a:6b:e2:53: 0a:99:a2:0b:e7:88:fa:b1:0c:8c:8f:22:7c:79:51:d9:0f:92: 44:4b:6d:14:69:d1:62:ce:86:6a:7e:cf:0d:34:84:8e:7f:62: 66:be:41:56:f8:54:48:39:5b:3e:de:72:54:0a:08:44:cb:b8: 59:df:b3:94:81:fa:ea:07:cf:1c:61:a2:a4:4c:76:55:6c:ad: 32:76:55:b4:df:6f:cc:4e:c9:f4:ac:b5:dc:23:af:f6:4f:db: b8:b2:78:94:d1:49:d0:f8:6b:02:9c:84:dc:55:cd:4c:6e:d7: 1c:7b:61:d0:b6:06:de:35:52:b9:ec:d9:ac:ad:83:4b:93:dc: 62:9e:5c:ed:88:7d:82:a0:0d:2a:31:00:f1:dd:84:b4:9d:b4: 74:75:7d:99:10:f6:5a:0c:df:9c:6d:de:0d:d8:64:ee:0e:d3: 05:5a:34:cd:47:88:bb:97:91:7e:96:4e:6f:4b:82:83:d0:a7: fc:63:6f:fc:5d:20:de:bf:aa:f0:91:b9:55:20:eb:84:f2:44: e8:41:d2:b0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjYwMTI2MjExODIxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTc3ZGExZC00YmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnxnQIuYFY4H+ygpbGYPrpRenN8uZm7rktFRG9Gs3/5LXPTRyEz2jSCsqaVMt Tgf6z11UXPG0VtP/BlLrBfchYDjN8EUE1Sc/k1Q7Uc7kWbjaFMoHKvojl/P+eZSH YvjXC6LVmO9Eu7/i0gGSzXUi8vnhVSsx6z4vcGZKaRWaP1kzvhAs/6gX9k3ElctE /45c1EkO8q5+EJenA+XiMc423XBIeAECO0zuArkEzFyZfcg3I0dBg08ay6mVo657 nTtN4RD7aSCb7IPLtaKhjf38cxn+tmexr6/9GMuj/nHXt9huqvg6/hG887B+iRSw DeNNePlWzAhiMdJCJ1eKuGf71wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB9ERMbP A9sxPi2QObLM322/yczcMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU0RkUvRkVEREMwQzA1MTEzMTFFQkFGMjhDQTBEQzRGOUFFMDIvQUY1QTZBREFD MEY0MTFFRjg4RTQyNTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnoWgwDwQCAAIwCQMHACABDfTNwDANBgkqhkiG9w0BAQsF AAOCAQEANnkIQqCsnsC8NY8zr6GkJnuSABxlNTXzGotH1Dlu4KiwUR2BkXVF/+eh JnZLnU6nMbU6a+JTCpmiC+eI+rEMjI8ifHlR2Q+SREttFGnRYs6Gan7PDTSEjn9i Zr5BVvhUSDlbPt5yVAoIRMu4Wd+zlIH66gfPHGGipEx2VWytMnZVtN9vzE7J9Ky1 3COv9k/buLJ4lNFJ0PhrApyE3FXNTG7XHHth0LYG3jVSuezZrK2DS5PcYp5c7Yh9 gqANKjEA8d2EtJ20dHV9mRD2WgzfnG3eDdhk7g7TBVo0zUeIu5eRfpZOb0uCg9Cn /GNv/F0g3r+q8JG5VSDrhPJE6EHSsA== -----END CERTIFICATE-----Generated at Thu Feb 19 20:34:08 2026 by rpki-client