$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/044E6658915A11ED8D2FBE43C4F9AE02.roa File: 044E6658915A11ED8D2FBE43C4F9AE02.roa (raw, json) Hash identifier: Uip2Lv9d/oDPf+539iV35ORzrigw3vVHfvC4qJz0m5M= Subject key identifier: 31:47:C2:3F:67:89:A7:CB:8A:32:23:03:1A:8B:32:74:1D:95:AC:51 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 023F Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/044E6658915A11ED8D2FBE43C4F9AE02.roa Signing time: Thu 29 Jan 2026 01:22:27 +0000 ROA not before: Thu 29 Jan 2026 01:22:27 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 139238 IP address blocks: 103.66.142.0/23 maxlen: 23 103.66.142.0/24 maxlen: 24 103.66.143.0/24 maxlen: 24 2400:d1e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Feb 2026 01:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Jan 29 01:22:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697ab653-ab7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:58:17:32:4c:63:08:fe:86:7f:db:b0:45: cd:f9:0e:51:aa:c4:eb:95:26:f1:6e:11:a8:22:8e: 8c:b7:aa:63:6b:db:96:4d:fe:60:05:68:00:e0:2a: e2:05:92:b3:64:7c:5a:9a:7e:69:82:b6:be:39:c2: 40:56:8c:c4:c9:38:a0:2c:2c:a7:03:98:68:ea:68: c0:14:c6:94:2f:16:c3:71:71:b9:b0:56:ce:c4:1c: 37:d7:d8:e5:d0:b8:b6:02:fc:65:ea:b0:7b:55:7a: b2:ab:af:48:76:ff:14:38:24:bc:56:1f:3b:2f:91: 17:9b:6a:12:75:49:9b:f5:ff:49:99:92:5d:ee:1f: c1:ac:e6:ea:af:c9:e4:4f:70:a9:fc:ea:62:7d:a2: bc:ba:e6:04:29:83:e7:b8:33:46:9c:41:ae:06:f0: 77:b6:23:b5:68:49:be:80:54:99:dd:13:6c:ef:df: 31:08:53:40:bf:d7:77:74:c2:44:c5:44:1d:93:58: d5:a9:96:db:4b:c7:d4:8a:10:30:0b:d5:8d:52:42: 9d:5f:4a:4e:db:25:2d:46:8a:87:98:a0:1c:2a:cb: 29:11:75:24:28:e0:5a:dc:8b:3a:2e:18:7f:77:cb: be:64:07:ae:34:95:86:5e:ca:37:aa:29:57:5f:56: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:47:C2:3F:67:89:A7:CB:8A:32:23:03:1A:8B:32:74:1D:95:AC:51 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/044E6658915A11ED8D2FBE43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.66.142.0/23 IPv6: 2400:d1e0::/32 Signature Algorithm: sha256WithRSAEncryption 6e:ca:0e:eb:2f:f8:75:a1:53:4c:78:fa:52:92:47:a3:86:40: 6a:0b:ec:96:7f:18:1d:51:59:bc:29:d5:6b:93:8d:f2:52:0d: 43:3b:be:7a:e5:81:f1:b2:1a:cb:71:e7:92:86:d1:14:c9:34: 8e:1c:d4:e6:f7:7b:49:73:f6:d7:9d:be:17:09:de:49:c6:f4: 63:7c:c7:8a:28:40:6f:d0:64:10:b0:fa:55:3d:ac:f8:44:ad: 4b:cc:bb:a6:e0:9c:3b:b3:37:7b:b6:88:1b:24:1d:dd:f4:e0: 2b:72:1e:a1:cb:6b:f3:42:58:5e:ed:88:c9:ea:79:d1:e3:ab: 9d:5b:05:74:ca:56:dc:97:72:e3:76:c1:01:b2:68:06:a8:37: 43:43:79:ba:bb:d3:b1:43:5d:a2:4d:53:06:be:51:bc:28:4b: 22:45:e1:e8:45:59:2b:c4:6c:fd:d4:88:00:82:c6:05:df:c9: fd:1b:dd:24:a9:c9:97:6a:6d:51:72:3a:75:78:07:d2:bc:36: 1b:13:bf:3e:ae:f6:28:16:f3:d1:77:15:5a:bf:b1:b3:65:d2: 2c:d7:d9:70:e8:ef:24:83:29:a1:98:01:e2:4c:60:01:50:b0: d8:62:63:3e:a6:a9:83:cb:5e:99:8f:93:89:4b:dc:b4:69:d5: 1b:26:af:bc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjYwMTI5MDEyMjI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhYjY1My1hYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwVYFzJMYwj+hn/bsEXN+Q5RqsTrlSbxbhGoIo6Mt6pja9uWTf5gBWgA4Cri BZKzZHxamn5pgra+OcJAVozEyTigLCynA5ho6mjAFMaULxbDcXG5sFbOxBw319jl 0Li2Avxl6rB7VXqyq69Idv8UOCS8Vh87L5EXm2oSdUmb9f9JmZJd7h/BrObqr8nk T3Cp/OpifaK8uuYEKYPnuDNGnEGuBvB3tiO1aEm+gFSZ3RNs798xCFNAv9d3dMJE xUQdk1jVqZbbS8fUihAwC9WNUkKdX0pO2yUtRoqHmKAcKsspEXUkKOBa3Is6Lhh/ d8u+ZAeuNJWGXso3qilXX1YKDQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDFHwj9n iafLijIjAxqLMnQdlaxRMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjJCQzkvNjZEMzdBQTY5MTU2MTFFRDhENEI3NzNEQzRGOUFFMDIvMDQ0RTY2NTg5 MTVBMTFFRDhEMkZCRTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnQo4wDQQCAAIwBwMFACQA0eAwDQYJKoZIhvcNAQELBQAD ggEBAG7KDusv+HWhU0x4+lKSR6OGQGoL7JZ/GB1RWbwp1WuTjfJSDUM7vnrlgfGy Gstx55KG0RTJNI4c1Ob3e0lz9tedvhcJ3knG9GN8x4ooQG/QZBCw+lU9rPhErUvM u6bgnDuzN3u2iBskHd304CtyHqHLa/NCWF7tiMnqedHjq51bBXTKVtyXcuN2wQGy aAaoN0NDebq707FDXaJNUwa+UbwoSyJF4ehFWSvEbP3UiACCxgXfyf0b3SSpyZdq bVFyOnV4B9K8NhsTvz6u9igW89F3FVq/sbNl0izX2XDo7ySDKaGYAeJMYAFQsNhi Yz6mqYPLXpmPk4lL3LRp1Rsmr7w= -----END CERTIFICATE-----Generated at Fri Feb 20 00:11:42 2026 by rpki-client