$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa File: 1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa (raw, json) Hash identifier: M9i9QDbDc82krk9A9Knag81DdM+jOOIZmjFELryyrT0= Subject key identifier: CA:D5:5E:32:47:43:4C:AD:3E:DC:22:59:F1:EC:84:4B:51:38:13:6A Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DAC Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:14:57 +0000 ROA not before: Thu 28 Aug 2025 14:52:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131366 IP address blocks: 103.146.22.0/23 maxlen: 24 103.153.68.0/23 maxlen: 24 103.163.214.0/23 maxlen: 23 103.176.20.0/23 maxlen: 24 2400:ab60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23980 (0x5dac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60be1-d867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ae:67:75:5a:ae:c9:00:e3:96:74:e7:e8:c4: 6d:19:9f:5a:f1:d4:92:e4:5b:f8:ac:b1:00:6c:47: 7a:43:6d:7c:dd:00:03:1f:ba:e5:8a:e7:5e:99:4e: 3f:6b:93:a5:21:64:7d:52:11:df:42:f8:65:1a:74: 76:f7:48:21:1b:03:4a:45:17:c9:5b:77:03:0a:45: ec:af:02:0e:1d:e3:24:ed:68:d6:e1:fe:64:ea:3c: 4d:70:51:c1:fb:d6:9f:0e:56:a1:2a:a9:f3:35:20: fb:4f:43:ae:56:8b:7f:18:2b:ae:94:15:d5:f4:d7: 04:2c:86:4b:18:c0:c8:f9:70:3c:1c:e6:67:09:1f: 43:dd:41:7f:be:8a:cf:04:fe:13:0d:98:90:16:75: 27:f1:c2:14:b4:85:0f:da:68:af:9b:51:4f:93:09: 85:8b:34:61:b5:3d:02:e7:6d:09:53:16:8d:32:02: cd:75:63:8a:c8:d2:0c:5d:bd:07:c2:98:26:f1:c8: 56:34:ec:4c:47:a3:e4:b3:fa:cf:77:f9:61:c5:b1: 37:64:10:40:55:85:d9:0d:a9:3a:64:e5:3b:aa:21: ac:99:bb:9c:eb:87:7a:52:32:bd:41:23:81:a3:7f: df:4a:37:d6:2e:d6:3b:eb:00:38:f3:b7:41:c9:69: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D5:5E:32:47:43:4C:AD:3E:DC:22:59:F1:EC:84:4B:51:38:13:6A X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.146.22.0/23 103.153.68.0/23 103.163.214.0/23 103.176.20.0/23 IPv6: 2400:ab60::/48 Signature Algorithm: sha256WithRSAEncryption 0f:f9:8f:5d:0e:de:d6:04:a2:b6:b4:16:11:78:66:ab:3e:ef: e8:f3:74:a7:e5:a8:c5:f6:84:61:21:ab:5b:4d:fa:cd:0f:fd: c4:98:1c:29:d9:58:98:df:e8:69:41:a7:e4:45:e2:44:89:ac: cb:f0:48:a7:29:32:c1:9e:9c:71:96:12:f3:9a:59:45:67:67: cc:41:e1:8e:4c:fe:1c:e2:58:3d:4b:c6:9c:02:b2:9d:d3:71: 55:8d:f3:7c:40:17:2d:cf:71:32:c4:85:85:1f:20:ed:8a:ce: 7d:d7:26:b1:5e:96:8c:33:82:f7:69:86:58:5e:62:c6:d0:31: b2:ac:01:72:17:80:be:21:bf:cd:39:8b:dc:a5:9e:fd:dc:77: 39:c0:a5:67:1c:d5:b1:62:7e:76:c1:60:3b:35:60:44:05:49: f2:ee:b2:a1:2c:e4:25:b3:1e:49:7c:a9:5e:56:df:cb:58:00: 58:94:4c:95:eb:f5:b2:93:fe:fd:86:42:8c:66:cc:b8:cc:32: e0:22:d3:f8:b6:4b:4a:0a:48:19:b1:3e:c5:92:97:b2:dc:d3: 52:3a:33:13:e5:de:31:45:70:c7:b2:f1:e2:e5:d5:c3:b7:c5: 54:d4:7e:78:28:bc:f7:25:09:5b:a0:11:90:87:d3:8a:69:96: 54:17:6d:9e -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICXawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGJlMS1kODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxq5ndVquyQDjlnTn6MRtGZ9a8dSS5Fv4rLEAbEd6Q2183QADH7rliudemU4/ a5OlIWR9UhHfQvhlGnR290ghGwNKRRfJW3cDCkXsrwIOHeMk7WjW4f5k6jxNcFHB +9afDlahKqnzNSD7T0OuVot/GCuulBXV9NcELIZLGMDI+XA8HOZnCR9D3UF/vorP BP4TDZiQFnUn8cIUtIUP2mivm1FPkwmFizRhtT0C520JUxaNMgLNdWOKyNIMXb0H wpgm8chWNOxMR6Pks/rPd/lhxbE3ZBBAVYXZDak6ZOU7qiGsmbuc64d6UjK9QSOB o3/fSjfWLtY76wA487dByWm0eQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFMrVXjJH Q0ytPtwiWfHshEtROBNqMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMUZBODJGNENB NDFDMTFFQkJCRjFDQTdDQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQBZ5IWAwQBZ5lEAwQBZ6PWAwQBZ7AUMA8EAgACMAkDBwAkAKtgAAAw DQYJKoZIhvcNAQELBQADggEBAA/5j10O3tYEora0FhF4Zqs+7+jzdKflqMX2hGEh q1tN+s0P/cSYHCnZWJjf6GlBp+RF4kSJrMvwSKcpMsGenHGWEvOaWUVnZ8xB4Y5M /hziWD1LxpwCsp3TcVWN83xAFy3PcTLEhYUfIO2Kzn3XJrFelowzgvdphlheYsbQ MbKsAXIXgL4hv805i9ylnv3cdznApWcc1bFifnbBYDs1YEQFSfLusqEs5CWzHkl8 qV5W38tYAFiUTJXr9bKT/v2GQoxmzLjMMuAi0/i2S0oKSBmxPsWSl7Lc01I6MxPl 3jFFcMey8eLl1cO3xVTUfngovPclCVugEZCH04ppllQXbZ4= -----END CERTIFICATE-----Generated at Sat Mar 7 22:48:14 2026 by rpki-client