$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa File: 4FC8108A295B11EF8A0CF149C4F9AE02.roa (raw, json) Hash identifier: k3rZo5oh+JiJvVb+dVExYurHR67riMip+ZFSYyeukzg= Subject key identifier: 9D:49:7F:A0:13:39:A6:5D:C7:14:37:A4:4D:17:D6:02:DC:81:C9:07 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DF7 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:16:12 +0000 ROA not before: Thu 28 Aug 2025 14:53:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135956 IP address blocks: 103.124.60.0/22 maxlen: 24 2001:df7:1700::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24055 (0x5df7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60c2c-b7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:f6:f2:5d:c9:90:52:0a:84:b3:04:a2:1e: 08:07:33:92:4d:73:dc:ee:ec:24:12:e5:53:55:21: c0:1b:9c:c2:4a:21:a3:25:65:d8:c7:cf:64:03:3f: 30:75:5c:aa:6b:73:b7:dd:a3:59:d0:dd:ff:91:93: 3e:cf:de:d5:f3:a6:1c:87:7c:00:d6:8d:a9:0b:3d: 45:04:22:1a:17:32:5a:4c:3e:89:07:43:04:69:80: d0:77:90:4f:74:58:3a:55:52:0b:60:46:97:78:c3: fc:09:74:5e:b2:da:8f:7e:4d:be:eb:2e:5b:c8:ef: 5a:ad:b3:8c:23:a9:03:b5:a9:23:2c:7d:2d:ef:e4: 0f:70:6a:2e:66:a4:4e:4c:ca:d5:ed:b4:44:2f:68: 4c:58:ed:ed:32:fb:b8:fa:95:13:0a:63:a5:88:cf: 47:1d:df:4f:78:f7:94:03:54:c9:f4:75:09:10:06: e8:dc:6c:e7:47:22:83:9e:6a:34:26:d7:0e:16:cd: 3d:82:4d:ed:9a:04:07:f9:d1:96:00:f5:5b:f7:c3: 12:78:8f:9b:85:d0:c2:f3:6c:fc:c9:a2:1f:49:90: d6:c6:48:5b:b3:76:b2:3e:ea:07:cd:6d:dd:9f:90: 9c:e0:93:1b:3b:f3:c6:d7:9e:d6:0d:86:1c:de:94: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:49:7F:A0:13:39:A6:5D:C7:14:37:A4:4D:17:D6:02:DC:81:C9:07 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4FC8108A295B11EF8A0CF149C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.124.60.0/22 IPv6: 2001:df7:1700::/48 Signature Algorithm: sha256WithRSAEncryption 63:8a:07:31:b6:9e:ad:53:00:48:98:ab:31:4e:10:8d:8c:72: 00:7f:52:81:65:77:90:8d:de:bb:c3:f3:bd:39:06:e6:22:7f: 1c:c3:f9:19:aa:24:8f:b0:c2:8d:c9:c2:43:0e:ce:35:ef:f9: c1:db:ed:d7:4c:81:a0:c7:ec:60:7a:dd:10:6c:47:fb:5d:27: 27:f8:44:d3:7b:cc:44:50:e1:fb:6a:25:16:a8:a2:a0:4e:cd: 8d:ab:09:05:65:7e:1b:d1:56:0b:b7:53:06:72:cd:95:aa:02: a1:9e:7c:ea:85:82:aa:19:fc:88:3f:44:ad:84:97:09:7f:ea: c9:82:13:ef:82:d5:2c:da:f1:04:c5:3c:6b:ca:1f:8d:80:31: fa:af:07:69:98:1c:81:03:e9:4f:60:88:51:c5:e5:d9:cf:25: 1c:42:6c:72:9e:2c:4e:61:8c:07:56:0b:0f:24:e6:1f:2a:6d: d7:1e:9f:6f:63:84:84:03:1b:8e:f7:27:e4:d8:ba:7a:92:47: 79:1f:3e:a4:ee:08:aa:c6:fd:19:ba:59:35:ae:e6:62:df:54: 47:05:11:ab:1c:bb:b1:0c:31:ae:57:41:16:dc:47:72:8b:17: 74:64:78:7e:90:be:a5:94:42:1e:88:06:0a:e9:2d:e6:f4:fd: 2b:d2:75:7b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICXfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGMyYy1iN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTr28l3JkFIKhLMEoh4IBzOSTXPc7uwkEuVTVSHAG5zCSiGjJWXYx89kAz8w dVyqa3O33aNZ0N3/kZM+z97V86Ych3wA1o2pCz1FBCIaFzJaTD6JB0MEaYDQd5BP dFg6VVILYEaXeMP8CXRestqPfk2+6y5byO9arbOMI6kDtakjLH0t7+QPcGouZqRO TMrV7bREL2hMWO3tMvu4+pUTCmOliM9HHd9PePeUA1TJ9HUJEAbo3GznRyKDnmo0 JtcOFs09gk3tmgQH+dGWAPVb98MSeI+bhdDC82z8yaIfSZDWxkhbs3ayPuoHzW3d n5Cc4JMbO/PG157WDYYc3pTUQQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJ1Jf6AT OaZdxxQ3pE0X1gLcgckHMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEZDODEwOEEy OTVCMTFFRjhBMENGMTQ5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ3w8MA8EAgACMAkDBwAgAQ33FwAwDQYJKoZIhvcNAQELBQADggEB AGOKBzG2nq1TAEiYqzFOEI2McgB/UoFld5CN3rvD8705BuYifxzD+RmqJI+wwo3J wkMOzjXv+cHb7ddMgaDH7GB63RBsR/tdJyf4RNN7zERQ4ftqJRaooqBOzY2rCQVl fhvRVgu3UwZyzZWqAqGefOqFgqoZ/Ig/RK2Elwl/6smCE++C1Sza8QTFPGvKH42A MfqvB2mYHIED6U9giFHF5dnPJRxCbHKeLE5hjAdWCw8k5h8qbdcen29jhIQDG473 J+TYunqSR3kfPqTuCKrG/Rm6WTWu5mLfVEcFEascu7EMMa5XQRbcR3KLF3RkeH6Q vqWUQh6IBgrpLeb0/SvSdXs= -----END CERTIFICATE-----Generated at Sat Mar 7 22:44:58 2026 by rpki-client