$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/86D7DAE6D1C211EF9AA9410EC4F9AE02.roa File: 86D7DAE6D1C211EF9AA9410EC4F9AE02.roa (raw, json) Hash identifier: w4ebJqxqcYTakZgYgczYh31d+UQ4emy9J0fYQLqlsn0= Subject key identifier: 70:72:FE:34:F0:F3:B0:7C:8E:82:FA:55:6A:8D:3A:0B:A7:82:0B:78 Certificate issuer: /CN=A91B8D33/serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Certificate serial: 01EE Authority key identifier: 08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/86D7DAE6D1C211EF9AA9410EC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:08:50 +0000 ROA not before: Tue 25 Nov 2025 01:49:03 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 14618 IP address blocks: 103.190.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 03:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D33, serialNumber=08D68CF4500745375FF2CC584BA5FBE577BEE33F Validity Not Before: Nov 25 01:49:03 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45682-c316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:2b:8e:77:f1:05:7c:2a:70:7d:b2:c4:8b: 1e:87:9b:3a:bf:c1:a5:e6:3a:e2:f3:13:90:31:90: 94:8a:cb:87:a0:91:f3:f5:4c:8e:68:25:83:20:bb: 72:70:e2:34:91:ef:bc:78:bc:dc:99:b2:c5:06:73: 51:46:eb:42:68:f5:05:d3:aa:2b:57:66:d9:34:c9: 96:a9:83:8d:47:23:31:a5:86:14:39:32:3e:3b:74: a3:c3:41:66:e3:e2:a3:52:46:26:c4:7b:ab:84:ef: 4d:9a:d5:35:3f:22:c1:96:82:0d:9f:96:e2:8a:f5: 1a:12:27:d2:37:06:a1:40:76:cf:ae:55:9c:81:68: 4c:9e:2b:c3:a3:d5:23:41:bf:48:15:1a:35:04:bd: d7:2a:7a:19:c9:9e:9d:e7:a7:20:66:f9:df:a5:76: 98:d6:0a:17:6d:b6:24:43:9d:44:ea:93:8f:3d:8b: d9:ed:b0:5a:42:da:2d:fe:03:57:3b:c3:97:19:ca: 73:9c:c6:f9:d7:23:4f:26:ab:a8:43:75:09:26:5b: 46:6a:b8:01:c4:0d:e3:32:73:f8:0e:fd:c8:ae:f4: 22:d9:61:86:36:3f:c9:9f:81:24:6f:be:80:31:e5: 63:bf:f5:53:95:b5:a4:56:32:ff:c7:08:18:28:39: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:FE:34:F0:F3:B0:7C:8E:82:FA:55:6A:8D:3A:0B:A7:82:0B:78 X509v3 Authority Key Identifier: keyid:08:D6:8C:F4:50:07:45:37:5F:F2:CC:58:4B:A5:FB:E5:77:BE:E3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/CNaM9FAHRTdf8sxYS6X75Xe-4z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNaM9FAHRTdf8sxYS6X75Xe-4z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D33/59626710477711EEA6BD537EC4F9AE02/86D7DAE6D1C211EF9AA9410EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.190.70.0/24 Signature Algorithm: sha256WithRSAEncryption 47:69:03:7f:9d:3e:6c:f9:18:33:76:55:ce:96:e5:fe:13:2b: b2:ab:25:5e:25:49:69:22:87:50:4f:55:67:03:08:8a:4f:5d: 6d:6a:c7:78:c4:9f:0c:97:e6:c9:f0:e0:38:9f:19:24:89:4f: e8:86:23:42:10:13:bf:c8:2e:4b:82:8a:4b:07:c6:5b:2c:2b: 64:e9:e3:3e:82:74:e6:0a:70:11:92:3c:14:5d:df:cd:84:58: 58:ed:88:2d:5a:88:2b:d0:12:3e:a0:0c:b7:58:3f:2a:5b:77: f5:e1:cf:49:c1:2b:42:42:3b:07:d0:e7:0a:7c:77:66:f7:0b: 45:ce:37:c6:94:5e:27:5f:9c:66:79:2f:27:88:ad:47:0d:98: 8c:ff:ca:b6:bb:25:a9:9b:a1:df:6e:4a:cd:5d:73:88:b4:b6: 16:bf:ef:9a:7e:0a:bd:1c:63:8e:7c:85:ef:e1:ba:f2:34:da: 25:00:aa:ce:d9:cf:8a:12:ff:5c:e4:40:91:b1:3e:18:14:e8: 98:05:b7:9d:96:dd:3c:eb:78:f8:a4:c0:95:50:cb:75:56:38: 68:84:da:f0:c3:84:31:0d:45:6c:79:30:77:5f:f9:f8:de:44: 15:cf:01:ba:c4:b5:0c:e1:ee:d3:49:9a:43:db:cb:03:4f:60: 5f:8a:64:4d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhEMzMxMTAvBgNVBAUTKDA4RDY4Q0Y0NTAwNzQ1Mzc1RkYyQ0M1ODRCQTVGQkU1 NzdCRUUzM0YwHhcNMjUxMTI1MDE0OTAzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTY4Mi1jMzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnYrjnfxBXwqcH2yxIseh5s6v8Gl5jri8xOQMZCUisuHoJHz9UyOaCWDILty cOI0ke+8eLzcmbLFBnNRRutCaPUF06orV2bZNMmWqYONRyMxpYYUOTI+O3Sjw0Fm 4+KjUkYmxHurhO9NmtU1PyLBloINn5biivUaEifSNwahQHbPrlWcgWhMnivDo9Uj Qb9IFRo1BL3XKnoZyZ6d56cgZvnfpXaY1goXbbYkQ51E6pOPPYvZ7bBaQtot/gNX O8OXGcpznMb51yNPJquoQ3UJJltGargBxA3jMnP4Dv3IrvQi2WGGNj/Jn4Ekb76A MeVjv/VTlbWkVjL/xwgYKDmQUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHBy/jTw 87B8joL6VWqNOgunggt4MB8GA1UdIwQYMBaAFAjWjPRQB0U3X/LMWEul++V3vuM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQzMy81OTYyNjcxMDQ3 NzcxMUVFQTZCRDUzN0VDNEY5QUUwMi9DTmFNOUZBSFJUZGY4c3hZUzZYNzVYZS00 ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOYU05RkFIUlRkZjhzeFlTNlg3NVhlLTR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjhEMzMvNTk2MjY3MTA0Nzc3MTFFRUE2QkQ1MzdFQzRGOUFFMDIvODZEN0RBRTZE MUMyMTFFRjlBQTk0MTBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ75GMA0GCSqGSIb3DQEBCwUAA4IBAQBHaQN/nT5s+RgzdlXOluX+ EyuyqyVeJUlpIodQT1VnAwiKT11tasd4xJ8Ml+bJ8OA4nxkkiU/ohiNCEBO/yC5L gopLB8ZbLCtk6eM+gnTmCnARkjwUXd/NhFhY7YgtWogr0BI+oAy3WD8qW3f14c9J wStCQjsH0OcKfHdm9wtFzjfGlF4nX5xmeS8niK1HDZiM/8q2uyWpm6HfbkrNXXOI tLYWv++afgq9HGOOfIXv4bryNNolAKrO2c+KEv9c5ECRsT4YFOiYBbedlt0863j4 pMCVUMt1VjhohNrww4QxDUVseTB3X/n43kQVzwG6xLUM4e7TSZpD28sDT2BfimRN -----END CERTIFICATE-----Generated at Thu Mar 5 01:44:22 2026 by rpki-client