$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa File: AF95CCA0A08711EC88A88D39C4F9AE02.roa (raw, json) Hash identifier: 9lzXvcPlg/l/tlAmlqyfga76fKpdYYXjmSDlWTcG17o= Subject key identifier: 55:B3:51:DF:71:E8:4B:24:21:CF:C5:9A:F2:6D:F9:FA:33:E4:F9:28 Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 0434 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa Signing time: Tue 31 Mar 2026 00:31:45 +0000 ROA not before: Tue 31 Mar 2026 00:31:45 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 149643 IP address blocks: 103.183.106.0/23 maxlen: 24 2400:6260::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1076 (0x434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Mar 31 00:31:45 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cb15f1-aa19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:99:27:d9:6a:d9:cf:97:9e:f1:4a:05:5f: 16:5f:ac:18:52:09:7c:c5:80:e9:62:3a:cd:22:fc: c9:69:b8:38:11:3f:ef:63:d9:76:da:88:1a:56:fd: 11:ad:f8:ea:3d:ee:3c:34:56:11:60:3b:c5:02:af: 69:22:12:34:c4:28:1e:64:fb:ca:60:7f:39:51:69: f2:41:04:ce:e0:8d:83:da:8a:02:8b:fa:4c:38:dd: a7:0a:92:40:8a:29:d9:a7:af:3a:59:ed:44:f3:c9: 57:d9:79:be:57:2b:3f:15:cb:d4:99:af:0e:4b:f0: 6e:fa:0a:9e:e9:ac:3c:08:67:ed:c0:0b:96:bc:a2: c8:6c:27:fc:ed:67:03:df:d6:48:46:91:76:56:a1: cf:26:1c:e2:56:79:f6:ba:3f:6d:1d:73:95:de:80: 88:a6:0c:8e:58:5d:6d:37:33:77:6d:89:95:b8:3c: d1:93:65:03:33:33:f0:34:13:a2:06:0c:2a:24:4b: c3:4e:64:8f:75:54:20:58:8b:a5:58:4d:f6:9e:97: 84:87:98:e2:f0:12:b6:9d:16:ee:8a:4f:59:ea:1c: 47:e7:50:82:b7:e6:d2:84:e1:3b:56:32:16:be:fd: d2:91:f4:5d:e1:90:2c:66:56:a3:bb:ab:5b:33:de: 48:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B3:51:DF:71:E8:4B:24:21:CF:C5:9A:F2:6D:F9:FA:33:E4:F9:28 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/AF95CCA0A08711EC88A88D39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.183.106.0/23 IPv6: 2400:6260::/32 Signature Algorithm: sha256WithRSAEncryption 9b:81:90:6e:9e:c7:b4:52:83:32:0f:af:15:f7:e9:3f:ad:2e: a3:d6:08:df:15:0e:ce:41:5b:aa:fa:12:97:1a:2a:a9:8c:f4: 18:d6:ae:83:6b:06:85:a7:14:93:e2:c2:24:9d:03:72:21:20: 70:b2:aa:43:fd:e7:05:fc:b8:2b:f1:89:5a:90:e2:5a:10:14: 81:6c:f4:4a:46:7d:eb:b2:cd:a0:6b:19:34:d5:90:39:a2:33: 64:5b:d5:b8:41:0f:46:1c:92:19:ca:5b:5c:aa:32:47:a9:30: 1b:60:74:bb:c3:2a:f1:00:b0:93:36:91:ce:99:82:18:c9:fd: 28:d8:4a:f9:d4:dc:8e:69:f1:16:a4:54:93:e0:6a:e4:ca:29: 16:3e:2e:a3:3f:70:a0:fd:07:4b:f2:f1:f3:9f:02:4f:1a:5d: c0:b5:8c:54:1b:ae:f8:0d:73:57:a5:78:07:3d:d9:cf:37:8b: 79:f8:5e:ba:00:cc:17:62:5a:c8:7c:68:1b:b6:96:62:15:46: f0:dd:83:99:c0:c7:2e:cd:96:b2:69:cd:b1:ff:be:2c:25:3d: 45:85:b4:bc:ee:c3:62:7b:2f:e2:f9:77:f5:61:3c:7b:84:7c: dd:7b:20:0f:af:fd:4b:30:7a:eb:3d:b5:a9:02:35:98:c7:b1: b9:c9:22:27 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjYwMzMxMDAzMTQ1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiMTVmMS1hYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsqZJ9lq2c+XnvFKBV8WX6wYUgl8xYDpYjrNIvzJabg4ET/vY9l22ogaVv0R rfjqPe48NFYRYDvFAq9pIhI0xCgeZPvKYH85UWnyQQTO4I2D2ooCi/pMON2nCpJA iinZp686We1E88lX2Xm+Vys/FcvUma8OS/Bu+gqe6aw8CGftwAuWvKLIbCf87WcD 39ZIRpF2VqHPJhziVnn2uj9tHXOV3oCIpgyOWF1tNzN3bYmVuDzRk2UDMzPwNBOi BgwqJEvDTmSPdVQgWIulWE32npeEh5ji8BK2nRbuik9Z6hxH51CCt+bShOE7VjIW vv3SkfRd4ZAsZlaju6tbM95ItwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFWzUd9x 6EskIc/FmvJt+foz5PkoMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQ1NkYvRDMzRkM4MkFBMDg0MTFFQzk0QUQyQTM3QzRGOUFFMDIvQUY5NUNDQTBB MDg3MTFFQzg4QTg4RDM5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ7dqMA0EAgACMAcDBQAkAGJgMA0GCSqGSIb3DQEBCwUAA4IBAQCb gZBunse0UoMyD68V9+k/rS6j1gjfFQ7OQVuq+hKXGiqpjPQY1q6DawaFpxST4sIk nQNyISBwsqpD/ecF/Lgr8YlakOJaEBSBbPRKRn3rss2gaxk01ZA5ojNkW9W4QQ9G HJIZyltcqjJHqTAbYHS7wyrxALCTNpHOmYIYyf0o2Er51NyOafEWpFST4GrkyikW Pi6jP3Cg/QdL8vHznwJPGl3AtYxUG674DXNXpXgHPdnPN4t5+F66AMwXYlrIfGgb tpZiFUbw3YOZwMcuzZayac2x/74sJT1FhbS87sNiey/i+Xf1YTx7hHzdeyAPr/1L MHrrPbWpAjWYx7G5ySIn -----END CERTIFICATE-----Generated at Mon Apr 6 10:08:25 2026 by rpki-client