$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa File: CDEFCF14801F11EF99206C47C4F9AE02.roa (raw, json) Hash identifier: yAC42o0GCentKPi1Q1E5pRFDa4P3oaEdwK2Wy0iE8M4= Subject key identifier: D4:D0:8D:8C:F4:4B:7F:25:33:76:85:3D:B8:2B:45:43:14:71:50:20 Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0B7E Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa Signing time: Fri 06 Feb 2026 19:16:16 +0000 ROA not before: Fri 06 Feb 2026 19:16:16 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138556 IP address blocks: 103.132.224.0/24 maxlen: 24 103.132.225.0/24 maxlen: 24 103.132.226.0/24 maxlen: 24 2404:4140::/32 maxlen: 32 2404:4140::/36 maxlen: 36 2404:4140:1000::/36 maxlen: 36 2404:4140:2000::/36 maxlen: 36 2404:4140:3000::/36 maxlen: 36 2404:4140:4000::/36 maxlen: 36 2404:4140:5000::/36 maxlen: 36 2404:4140:6000::/36 maxlen: 36 2404:4140:7000::/36 maxlen: 36 2404:4140:8000::/36 maxlen: 36 2404:4140:9000::/36 maxlen: 36 2404:4140:a000::/36 maxlen: 36 2404:4140:b000::/36 maxlen: 36 2404:4140:c000::/36 maxlen: 36 2404:4140:d000::/36 maxlen: 36 2404:4140:e000::/36 maxlen: 36 2404:4140:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 18:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2942 (0xb7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: Feb 6 19:16:16 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69863e00-d269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4c:59:28:91:c6:ab:e9:79:58:30:16:7e:51: a4:8c:eb:1c:88:aa:25:3c:1d:6d:08:da:d1:05:22: 6e:21:e1:51:09:f5:19:57:f7:64:89:ec:b4:17:f7: 4d:ac:8f:a7:d0:07:b3:94:f5:6b:4d:60:b2:cf:7d: f7:e1:d8:fb:60:39:ab:c8:d1:b8:16:8c:55:c0:67: e3:0a:f5:91:7f:3c:c3:b3:42:f8:c1:bf:f6:15:e4: 0a:71:61:65:88:5f:1d:9c:5d:94:f6:c7:99:8d:7d: 3b:34:c3:14:c3:24:6c:3a:60:f6:02:d6:c5:01:59: fb:8a:77:23:c4:81:45:76:ef:95:4f:79:fd:10:8a: 20:eb:d7:e0:9f:84:4a:45:b5:37:2d:2d:87:9f:d5: 37:4b:b3:96:22:3b:5a:25:55:c2:16:8c:08:09:93: d5:cb:c3:23:ef:26:72:11:22:db:45:11:80:82:15: d4:58:eb:40:6d:c2:cd:e2:91:4c:62:3b:26:ab:bb: 98:a5:59:c6:d8:f3:c5:b4:15:36:f5:d4:eb:d7:93: 09:ed:37:d7:d4:5d:85:3c:28:fb:20:15:01:52:4a: 75:70:36:2b:96:f5:49:28:b1:92:cd:7f:91:70:fb: 86:a7:60:e0:b0:7f:b1:ab:16:c6:a4:b1:77:f8:c3: c4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D0:8D:8C:F4:4B:7F:25:33:76:85:3D:B8:2B:45:43:14:71:50:20 X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.224.0-103.132.226.255 IPv6: 2404:4140::/32 Signature Algorithm: sha256WithRSAEncryption 0f:98:b1:5b:f3:d7:d8:14:dd:c2:31:fa:c6:df:32:1c:60:55: d7:f7:16:82:57:69:7f:64:45:8c:c9:28:24:b8:ee:0d:8c:de: 8a:fd:18:d8:26:e2:bd:8e:24:f6:08:85:37:12:b1:16:db:4b: 37:b0:7b:72:4c:1b:d6:49:7e:86:9c:f7:e3:b8:f0:6f:2b:44: 92:a2:21:78:3b:6a:df:56:45:ab:6a:09:a8:16:48:ec:de:6e: 84:7a:9a:e4:c5:57:89:87:d1:c8:11:c7:50:6f:f6:93:9a:b8: 56:cc:5c:75:30:f7:9b:1c:7b:6d:c3:ba:a1:91:c7:4c:70:e6: f6:48:c7:c5:b7:b3:34:d8:50:6d:52:ae:16:21:64:c8:e1:37: 58:f7:48:e4:0a:f7:26:fc:12:ea:b0:a7:cc:88:0f:1c:b7:53: 02:cc:09:fe:fb:f5:9f:3a:8b:e1:f4:45:b0:e3:4a:9b:7c:24: 1c:84:b8:03:3f:62:fe:8a:ba:de:11:cd:c1:17:96:ec:3d:59: 10:4e:95:42:06:91:2b:6b:0e:b3:84:82:f8:14:dc:67:05:ba: 24:87:0e:26:83:0d:8d:7b:8a:fc:b5:de:26:e4:85:d3:00:e5: e9:84:23:9d:a4:38:21:28:eb:ae:e2:8e:57:6c:c4:bc:3f:d3: f0:91:11:bf -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjYwMjA2MTkxNjE2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTg2M2UwMC1kMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUxZKJHGq+l5WDAWflGkjOsciKolPB1tCNrRBSJuIeFRCfUZV/dkiey0F/dN rI+n0AezlPVrTWCyz3334dj7YDmryNG4FoxVwGfjCvWRfzzDs0L4wb/2FeQKcWFl iF8dnF2U9seZjX07NMMUwyRsOmD2AtbFAVn7incjxIFFdu+VT3n9EIog69fgn4RK RbU3LS2Hn9U3S7OWIjtaJVXCFowICZPVy8Mj7yZyESLbRRGAghXUWOtAbcLN4pFM Yjsmq7uYpVnG2PPFtBU29dTr15MJ7TfX1F2FPCj7IBUBUkp1cDYrlvVJKLGSzX+R cPuGp2DgsH+xqxbGpLF3+MPE4QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFNTQjYz0 S38lM3aFPbgrRUMUcVAgMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY5MDUvMUZBN0M0NkM0OEQzMTFFQThBQUU0NjY4QzRGOUFFMDIvQ0RFRkNGMTQ4 MDFGMTFFRjk5MjA2QzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEBWeE4AMEAGeE4jANBAIAAjAHAwUAJARBQDANBgkqhkiG 9w0BAQsFAAOCAQEAD5ixW/PX2BTdwjH6xt8yHGBV1/cWgldpf2RFjMkoJLjuDYze iv0Y2CbivY4k9giFNxKxFttLN7B7ckwb1kl+hpz347jwbytEkqIheDtq31ZFq2oJ qBZI7N5uhHqa5MVXiYfRyBHHUG/2k5q4VsxcdTD3mxx7bcO6oZHHTHDm9kjHxbez NNhQbVKuFiFkyOE3WPdI5Ar3JvwS6rCnzIgPHLdTAswJ/vv1nzqL4fRFsONKm3wk HIS4Az9i/oq63hHNwReW7D1ZEE6VQgaRK2sOs4SC+BTcZwW6JIcOJoMNjXuK/LXe JuSF0wDl6YQjnaQ4ISjrruKOV2zEvD/T8JERvw== -----END CERTIFICATE-----Generated at Fri Feb 20 00:46:52 2026 by rpki-client