$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa File: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (raw, json) Hash identifier: 96/u/vfI+bwY9VG+LkNCPlB++nMFvbH2aJWjRVlgcT0= Subject key identifier: D9:1A:03:62:15:2B:F4:E4:E0:C8:15:B7:13:F0:6B:E8:2F:C3:C6:DE Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 1324 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa Signing time: Mon 02 Mar 2026 13:48:56 +0000 ROA not before: Fri 19 Dec 2025 02:11:32 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 63930 IP address blocks: 45.119.203.0/24 maxlen: 24 103.60.10.0/24 maxlen: 24 119.161.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:52:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4900 (0x1324) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Dec 19 02:11:32 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a59548-d3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:2d:c6:51:f5:37:d1:8c:6d:0b:c7:73:93: 5c:e5:3f:4a:aa:e0:b9:c4:1f:4d:43:8c:4c:1b:57: f0:99:fb:95:29:c7:21:0d:59:67:cb:da:61:7a:d0: 69:89:96:50:f1:34:b4:31:d8:a5:37:f1:73:0a:9f: 86:6d:60:6b:30:08:98:b7:83:38:eb:e9:ff:5e:a3: dd:fc:b4:67:13:3a:7c:5a:35:41:2b:4c:96:6d:c8: 11:41:80:45:b1:ea:31:3a:4c:4b:54:cc:e0:87:a7: ff:da:16:0c:18:1e:a6:ab:5f:fa:8f:68:f2:0e:bf: 8e:05:f7:d3:d5:75:31:d7:d9:93:a5:99:07:14:a0: d5:1e:ed:66:31:b0:ab:b1:f7:33:5e:da:53:6c:09: b2:25:ea:76:f0:97:2b:ce:1c:14:97:b0:b0:8d:1d: fd:5c:1a:13:1e:d0:9b:48:47:4a:e7:db:8b:60:d7: 56:53:db:f1:e1:cb:01:88:4f:a5:71:cd:81:01:65: f8:b8:8c:95:de:c6:82:75:4d:38:28:78:33:64:dc: 6c:45:4f:bc:92:f0:85:27:77:53:94:91:67:15:ad: 84:d7:cb:3e:27:13:84:06:c2:07:5b:c8:04:81:3e: 52:06:6a:cf:57:10:15:1f:25:af:ca:48:57:b1:c6: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:03:62:15:2B:F4:E4:E0:C8:15:B7:13:F0:6B:E8:2F:C3:C6:DE X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/08DCBB24DC8011F0AB4C816E3A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 45.119.203.0/24 103.60.10.0/24 119.161.100.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a6:c0:14:47:88:20:49:ca:5d:1d:6b:6a:da:0e:19:06:04: e9:96:8b:d8:33:7c:05:ea:7c:01:46:be:22:c5:2f:d7:34:33: 22:2a:97:19:4c:30:78:c2:97:35:73:3a:5e:c9:2b:db:0f:d0: 48:5f:b8:db:14:d2:34:13:13:f5:ef:41:fd:ad:ac:12:68:f3: 84:c1:7d:3f:24:8a:68:1d:dc:98:94:0b:c7:97:e9:33:88:b1: 01:40:2e:5c:2b:85:36:53:c7:bf:a0:8a:ba:66:c4:f1:a9:9f: 2c:98:53:13:c7:76:91:db:30:05:9e:40:9a:14:b1:9d:8e:a2: 37:28:d9:81:1e:c9:40:b3:e3:8a:1c:bf:d7:f6:a6:0f:2a:0e: 17:d8:db:c8:ce:45:88:82:20:f4:2f:11:d2:4e:7c:e5:c2:29: c7:77:ae:a6:d1:ce:a9:b6:f9:a7:19:6e:71:9c:9a:47:63:de: 81:52:01:2a:0b:dd:40:08:22:75:dd:18:3e:7e:40:45:6c:ba: 46:6a:ee:f4:bf:2d:0b:42:cc:20:04:53:f1:f5:90:6f:b6:cf: 99:1c:36:4a:62:f4:d1:14:14:81:ea:0f:f9:ab:5d:7c:f2:7e: af:13:dd:d5:04:b9:0b:83:2b:e5:72:cb:d3:b4:43:8b:dc:a1: 34:4e:9c:32 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICEyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUxMjE5MDIxMTMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTU0OC1kM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3YtxlH1N9GMbQvHc5Nc5T9KquC5xB9NQ4xMG1fwmfuVKcchDVlny9phetBp iZZQ8TS0MdilN/FzCp+GbWBrMAiYt4M46+n/XqPd/LRnEzp8WjVBK0yWbcgRQYBF seoxOkxLVMzgh6f/2hYMGB6mq1/6j2jyDr+OBffT1XUx19mTpZkHFKDVHu1mMbCr sfczXtpTbAmyJep28JcrzhwUl7CwjR39XBoTHtCbSEdK59uLYNdWU9vx4csBiE+l cc2BAWX4uIyV3saCdU04KHgzZNxsRU+8kvCFJ3dTlJFnFa2E18s+JxOEBsIHW8gE gT5SBmrPVxAVHyWvykhXscaRRQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNkaA2IV K/Tk4MgVtxPwa+gvw8beMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZFNkEvMUQ2NDMyOEVEMzg3MTFFOEJENzA3NTVDQzRGOUFFMDIvMDhEQ0JCMjRE QzgwMTFGMEFCNEM4MTZFM0E2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQALXfLAwQAZzwKAwQAd6FkMA0GCSqGSIb3DQEBCwUAA4IBAQBdpsAU R4ggScpdHWtq2g4ZBgTplovYM3wF6nwBRr4ixS/XNDMiKpcZTDB4wpc1czpeySvb D9BIX7jbFNI0ExP170H9rawSaPOEwX0/JIpoHdyYlAvHl+kziLEBQC5cK4U2U8e/ oIq6ZsTxqZ8smFMTx3aR2zAFnkCaFLGdjqI3KNmBHslAs+OKHL/X9qYPKg4X2NvI zkWIgiD0LxHSTnzlwinHd66m0c6ptvmnGW5xnJpHY96BUgEqC91ACCJ13Rg+fkBF bLpGau70vy0LQswgBFPx9ZBvts+ZHDZKYvTRFBSB6g/5q1188n6vE93VBLkLgyvl csvTtEOL3KE0Tpwy -----END CERTIFICATE-----Generated at Sun Mar 22 04:31:42 2026 by rpki-client