$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa File: 86550F680B4311EE8ABEE820C4F9AE02.roa (raw, json) Hash identifier: zyYzT/V9u8dqJ4WQrQE3OrZiw2M5A6hoVzyDJPpodFk= Subject key identifier: 08:CB:57:EC:B0:83:3C:70:EB:7B:05:32:79:39:08:DC:79:49:FC:BF Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 0456 Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:50:36 +0000 ROA not before: Mon 17 Mar 2025 00:46:18 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 140630 IP address blocks: 103.84.44.0/24 maxlen: 24 103.84.45.0/24 maxlen: 24 103.84.46.0/24 maxlen: 24 103.84.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 23:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1110 (0x456) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Mar 17 00:46:18 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=69a46e5c-c1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:43:5f:e8:ab:2b:34:4c:90:df:b6:42:50: 9e:17:ad:78:7c:d4:6d:b1:2f:ea:a4:1b:03:f5:3b: 50:47:61:9a:98:d1:0b:fd:6f:e2:16:de:56:a5:5f: 9e:d9:84:6a:cf:10:23:5f:ad:9b:f7:29:57:f7:88: 04:a2:f9:54:4e:82:99:c0:be:9b:b0:31:00:f3:f0: 9b:80:2a:cd:c9:01:fe:fa:5c:86:e5:60:54:36:4f: 0b:08:aa:76:52:ad:ad:34:1c:bc:85:f7:b0:1e:25: ed:e6:27:a5:47:51:3f:0b:3d:f7:dc:e2:76:90:03: 17:3f:7a:f2:1e:a9:9e:3f:76:c7:75:66:3d:04:2c: ab:3b:9c:67:92:9d:bf:85:d5:27:e9:0e:42:2c:cf: c9:f0:cb:c7:24:a3:8b:72:84:79:df:c8:79:df:30: 84:0d:ad:6f:ac:71:67:1f:68:88:14:1f:61:46:0f: 41:4e:c8:a6:6b:ca:5d:6f:c7:74:e5:5c:e6:6d:ca: 5b:0c:24:53:3c:cc:4d:06:60:81:b3:4d:26:20:5b: b7:c2:ae:97:1d:15:26:67:2e:ea:c6:50:32:76:76: 2d:11:c3:b9:89:47:24:bd:d3:87:8b:a4:ad:94:54: f2:79:04:44:11:f3:0e:8d:95:11:f9:f3:c5:ab:f4: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CB:57:EC:B0:83:3C:70:EB:7B:05:32:79:39:08:DC:79:49:FC:BF X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/86550F680B4311EE8ABEE820C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.84.44.0/22 Signature Algorithm: sha256WithRSAEncryption 02:80:d3:eb:02:85:7c:bf:37:51:74:64:b8:44:cc:73:73:d1: 1a:01:09:58:4a:61:10:3c:e8:7d:ad:fb:ba:44:de:1b:c1:7e: 79:cd:31:b1:78:50:08:de:f7:72:0d:0c:b0:4a:29:f3:76:d0: df:2d:01:de:24:92:1e:ed:6d:01:56:f8:c9:69:d6:e7:5a:1b: 13:65:0f:7a:b4:35:f1:c1:c0:20:bf:eb:35:8a:b2:6a:f7:53: 60:bc:0e:47:8b:3f:75:a6:80:94:fb:0f:9b:c0:75:c0:88:6b: d8:ed:7c:88:cd:99:98:00:37:86:7a:ca:81:74:e7:ac:1f:b4: 94:e8:b8:2c:2f:65:cf:2f:4b:11:36:7a:5b:75:77:86:c5:e0: 33:7e:d7:6b:e4:ba:ef:a1:4e:72:76:72:d1:7b:c2:db:99:7b: cb:45:23:c4:7c:aa:9d:9a:e3:94:c3:1b:53:76:3e:04:b2:1b: 9b:96:aa:74:6c:46:d2:bc:7c:d9:41:c5:2e:6d:75:d7:27:7d: 90:85:69:50:59:cf:c0:22:83:6e:bc:40:5d:3b:da:03:89:96: ed:9d:11:5f:0b:93:42:50:4d:3a:f7:83:08:b1:53:79:51:80: 26:df:b2:3d:e0:f9:87:f2:b8:2e:cf:b9:ac:4a:18:a2:33:32: 45:be:37:e0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwMzE3MDA0NjE4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmU1Yy1jMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugZDX+irKzRMkN+2QlCeF614fNRtsS/qpBsD9TtQR2GamNEL/W/iFt5WpV+e 2YRqzxAjX62b9ylX94gEovlUToKZwL6bsDEA8/CbgCrNyQH++lyG5WBUNk8LCKp2 Uq2tNBy8hfewHiXt5ielR1E/Cz333OJ2kAMXP3ryHqmeP3bHdWY9BCyrO5xnkp2/ hdUn6Q5CLM/J8MvHJKOLcoR538h53zCEDa1vrHFnH2iIFB9hRg9BTsima8pdb8d0 5VzmbcpbDCRTPMxNBmCBs00mIFu3wq6XHRUmZy7qxlAydnYtEcO5iUckvdOHi6St lFTyeQREEfMOjZUR+fPFq/R36QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAjLV+yw gzxw63sFMnk5CNx5Sfy/MB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYzQTYvMEQzOUM0RTQ5QTlCMTFFQzgyQzcwQjIwQzRGOUFFMDIvODY1NTBGNjgw QjQzMTFFRThBQkVFODIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ1QsMA0GCSqGSIb3DQEBCwUAA4IBAQACgNPrAoV8vzdRdGS4RMxz c9EaAQlYSmEQPOh9rfu6RN4bwX55zTGxeFAI3vdyDQywSinzdtDfLQHeJJIe7W0B VvjJadbnWhsTZQ96tDXxwcAgv+s1irJq91NgvA5Hiz91poCU+w+bwHXAiGvY7XyI zZmYADeGesqBdOesH7SU6LgsL2XPL0sRNnpbdXeGxeAzftdr5LrvoU5ydnLRe8Lb mXvLRSPEfKqdmuOUwxtTdj4Eshublqp0bEbSvHzZQcUubXXXJ32QhWlQWc/AIoNu vEBdO9oDiZbtnRFfC5NCUE0694MIsVN5UYAm37I94PmH8rguz7msShiiMzJFvjfg -----END CERTIFICATE-----Generated at Wed Mar 11 21:07:03 2026 by rpki-client