$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB6DF6D6F8E611EFA560FD72C4F9AE02.roa File: CB6DF6D6F8E611EFA560FD72C4F9AE02.roa (raw, json) Hash identifier: cV3MB9LnL6wGIS7lwopgGLTs+1O9TQCQBTPQOmDLoLE= Subject key identifier: 4C:A3:31:F5:3A:61:2A:BE:0A:13:2A:E8:B2:19:F2:F7:8B:30:56:38 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5F1F Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB6DF6D6F8E611EFA560FD72C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:21:09 +0000 ROA not before: Thu 28 Aug 2025 14:57:57 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63743 IP address blocks: 103.220.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24351 (0x5f1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:57:57 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60d55-e815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:46:a0:6c:89:48:7f:3b:a2:06:05:8b:43: d5:6e:ef:0e:6d:b3:6a:59:a6:3b:2d:63:f2:5b:47: 81:b3:ba:6b:97:37:6f:73:1c:ca:1e:10:dc:ef:51: 9c:cd:ad:b0:f0:b6:f8:ea:25:66:9f:9b:43:74:37: 45:a8:e3:35:ea:fe:9c:88:99:c7:8c:bf:4c:e4:01: af:eb:b1:ff:62:03:4e:6d:95:d9:49:fa:9f:c2:e3: 9d:01:14:00:cd:6f:32:c6:ad:de:d8:eb:13:86:81: 70:1f:b6:21:a2:a8:eb:91:04:76:03:48:45:a9:eb: b8:f6:8a:47:ec:83:5e:d4:f6:44:b3:f5:fb:e2:1e: 7b:aa:34:96:c5:cb:0f:5e:4f:63:8f:eb:c6:13:6c: a0:d4:32:93:4c:d7:52:f7:bc:f5:51:0f:7c:88:9a: 5b:34:02:e7:a5:95:57:4b:d2:02:70:06:4f:0b:ea: a8:92:97:9a:a9:f3:49:f7:1c:cd:d7:71:3b:f1:a0: 85:3e:70:14:6c:35:40:59:e9:2a:79:23:d5:2e:9c: 4d:9d:41:72:c4:65:ff:e8:93:94:47:47:bd:9a:17: bf:ba:8c:c3:ec:7c:c0:46:c5:90:68:fc:e9:bb:35: 00:1d:96:91:58:65:82:1a:4d:73:1a:76:73:74:fe: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A3:31:F5:3A:61:2A:BE:0A:13:2A:E8:B2:19:F2:F7:8B:30:56:38 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/CB6DF6D6F8E611EFA560FD72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.220.84.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:d7:9b:64:a0:e8:64:95:34:2d:bb:2a:52:01:2f:1c:47:62: 91:64:99:f6:3f:12:ba:dd:6c:fa:8a:5a:25:c6:0f:3a:06:be: 4c:67:ef:3e:f9:9c:97:f1:86:4f:bb:a6:99:42:1a:3b:78:66: 29:e9:94:6c:90:ff:cf:0d:8b:31:64:01:32:95:55:17:01:ca: c9:50:8b:d6:cd:53:11:58:dc:f4:2f:b2:35:61:64:8c:c8:0c: c4:6e:f1:75:a8:bc:0b:b3:70:65:20:2b:03:21:ee:5e:63:31: c3:f8:ed:c3:8d:29:a9:63:ad:29:75:7b:88:fe:78:09:43:1c: 85:ca:64:76:39:7c:83:20:bd:ee:d7:4e:29:26:1f:e4:b4:a2: 1e:06:59:85:ab:46:a1:a5:de:2d:5e:12:84:fc:f4:0b:d5:8a: 70:ad:57:13:f0:1b:95:43:e2:30:34:78:95:ff:57:04:78:e5: 9c:54:41:63:3c:82:d1:ed:2d:27:7c:9c:b8:99:ae:2d:0a:ef: 65:56:af:da:44:75:90:4a:ed:40:2e:9d:16:d3:1c:ba:a5:e6: 8a:16:9a:3c:73:2c:c6:9a:c9:cf:3e:a9:92:b6:0e:96:8e:e0: bd:85:05:63:cc:c1:38:ec:63:f0:48:aa:20:8b:ed:67:10:35: 1b:d3:ef:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICXx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NzU3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGQ1NS1lODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5VGoGyJSH87ogYFi0PVbu8ObbNqWaY7LWPyW0eBs7prlzdvcxzKHhDc71Gc za2w8Lb46iVmn5tDdDdFqOM16v6ciJnHjL9M5AGv67H/YgNObZXZSfqfwuOdARQA zW8yxq3e2OsThoFwH7YhoqjrkQR2A0hFqeu49opH7INe1PZEs/X74h57qjSWxcsP Xk9jj+vGE2yg1DKTTNdS97z1UQ98iJpbNALnpZVXS9ICcAZPC+qokpeaqfNJ9xzN 13E78aCFPnAUbDVAWekqeSPVLpxNnUFyxGX/6JOUR0e9mhe/uozD7HzARsWQaPzp uzUAHZaRWGWCGk1zGnZzdP4ZxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEyjMfU6 YSq+ChMq6LIZ8veLMFY4MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQ0I2REY2RDZG OEU2MTFFRkE1NjBGRDcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ9xUMA0GCSqGSIb3DQEBCwUAA4IBAQAu15tkoOhklTQtuypSAS8c R2KRZJn2PxK63Wz6ilolxg86Br5MZ+8++ZyX8YZPu6aZQho7eGYp6ZRskP/PDYsx ZAEylVUXAcrJUIvWzVMRWNz0L7I1YWSMyAzEbvF1qLwLs3BlICsDIe5eYzHD+O3D jSmpY60pdXuI/ngJQxyFymR2OXyDIL3u104pJh/ktKIeBlmFq0ahpd4tXhKE/PQL 1YpwrVcT8BuVQ+IwNHiV/1cEeOWcVEFjPILR7S0nfJy4ma4tCu9lVq/aRHWQSu1A Lp0W0xy6peaKFpo8cyzGmsnPPqmStg6WjuC9hQVjzME47GPwSKogi+1nEDUb0+9v -----END CERTIFICATE-----Generated at Sat Mar 7 22:49:20 2026 by rpki-client