$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/F7F03FB2EF3211EDA614D473C4F9AE02.roa File: F7F03FB2EF3211EDA614D473C4F9AE02.roa (raw, json) Hash identifier: 9Bz+Cab50iI4Zf4Xz+8IzaIlXk+ZVZDvrpvWEDr7xpY= Subject key identifier: 45:77:FD:95:11:B0:2A:1C:E0:B1:4D:6D:A8:E5:CA:DC:74:0E:6F:E9 Certificate issuer: /CN=A91CBB22/serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Certificate serial: 06B7 Authority key identifier: 1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/F7F03FB2EF3211EDA614D473C4F9AE02.roa Signing time: Sat 04 Apr 2026 22:29:21 +0000 ROA not before: Sat 04 Apr 2026 22:29:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 140525 IP address blocks: 103.166.86.0/23 maxlen: 23 103.166.86.0/24 maxlen: 24 103.166.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB22, serialNumber=1F5AC506B01130C82E5E4731603BA264CED84866 Validity Not Before: Apr 4 22:29:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d190c1-afd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3e:07:3c:04:78:f6:b9:99:eb:cf:34:f3:a9: 6b:22:a5:9e:e5:10:68:f3:8a:3a:93:6c:c1:8a:aa: 74:b4:9f:97:d6:30:39:51:87:90:92:ee:20:56:d5: c6:67:11:b8:9a:df:01:de:04:a1:05:19:38:b3:69: f5:d1:f2:f8:00:54:0f:f7:d5:60:f3:37:8d:95:9a: 6b:76:ba:27:61:f9:db:d4:53:ff:1b:7c:58:b2:9c: 2b:e8:8a:3b:fc:49:a6:a5:f1:72:95:32:ed:f5:58: 93:2e:47:ce:6f:5f:74:9a:8f:0f:14:9c:f3:77:c9: b8:4d:32:ba:16:41:b8:2e:4c:b6:0f:5e:ae:e6:7e: b7:54:c6:fe:14:4e:a3:09:52:fc:60:36:34:c6:d2: ad:28:0f:1c:90:88:d0:d9:97:43:d4:4a:64:34:b1: 5c:c4:83:1d:79:53:8b:66:a4:66:8e:f9:1d:5f:7a: cf:8e:9f:4c:bd:16:de:e9:6a:f0:c4:b2:fa:a9:0c: 34:0a:d3:a5:0c:59:8d:bb:0f:fd:04:05:5e:0c:9c: af:fc:7f:7d:2a:14:72:4e:be:a6:c2:fb:85:cf:65: 8c:1a:52:75:69:0f:8d:af:df:63:6c:5a:3e:0b:ec: b7:7d:5e:83:9a:35:d1:1a:b2:2d:fd:ea:35:4e:10: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:77:FD:95:11:B0:2A:1C:E0:B1:4D:6D:A8:E5:CA:DC:74:0E:6F:E9 X509v3 Authority Key Identifier: keyid:1F:5A:C5:06:B0:11:30:C8:2E:5E:47:31:60:3B:A2:64:CE:D8:48:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/H1rFBrARMMguXkcxYDuiZM7YSGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H1rFBrARMMguXkcxYDuiZM7YSGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB22/C3BC75F4A19011EB9BE9AD32C4F9AE02/F7F03FB2EF3211EDA614D473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.166.86.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:1f:a5:d3:78:2d:73:40:fc:1b:25:1d:56:43:c2:9d:e6:5c: 77:f5:cb:4c:c6:42:e0:e4:1a:db:84:99:1a:bc:1c:aa:a1:a2: cb:36:d1:14:53:70:24:d9:bd:b7:6d:e5:f2:89:42:63:ea:2f: bf:fb:ac:5b:2a:9b:0d:b3:5a:74:44:2a:9b:a5:1f:62:c4:3e: 35:93:3c:ad:c6:36:3d:d9:28:28:1b:14:d6:47:df:1b:5d:53: 37:ec:28:95:75:dd:c1:05:e1:db:8e:28:92:67:37:51:bf:01: 34:bd:98:a8:7d:53:36:12:67:6c:fa:ab:53:fa:f7:c0:d5:e2: 06:80:90:d4:d4:c3:60:e4:b8:be:bf:d8:db:4b:12:b4:63:f7: 0a:a7:a3:59:88:f8:2a:7a:0f:ee:e8:b0:d8:ea:fe:5a:91:6c: 59:ad:d8:2f:24:25:9c:55:2f:e5:d9:31:80:d0:c5:36:db:0f: 92:65:02:67:e7:bc:d4:6e:a8:86:d8:c2:07:e9:a1:0a:0f:1c: a4:6b:e8:e7:29:f3:6a:4c:fd:07:c0:94:68:85:5b:d7:17:e7: 21:93:15:98:95:f9:fc:91:60:6a:53:d8:3b:72:38:d5:c2:d2: 41:8b:e2:f7:79:f4:51:ad:22:2c:66:9a:f6:f8:98:c5:f6:1e: 66:23:26:4e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCMjIxMTAvBgNVBAUTKDFGNUFDNTA2QjAxMTMwQzgyRTVFNDczMTYwM0JBMjY0 Q0VEODQ4NjYwHhcNMjYwNDA0MjIyOTIxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQxOTBjMS1hZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj4HPAR49rmZ688086lrIqWe5RBo84o6k2zBiqp0tJ+X1jA5UYeQku4gVtXG ZxG4mt8B3gShBRk4s2n10fL4AFQP99Vg8zeNlZprdronYfnb1FP/G3xYspwr6Io7 /EmmpfFylTLt9ViTLkfOb190mo8PFJzzd8m4TTK6FkG4Lky2D16u5n63VMb+FE6j CVL8YDY0xtKtKA8ckIjQ2ZdD1EpkNLFcxIMdeVOLZqRmjvkdX3rPjp9MvRbe6Wrw xLL6qQw0CtOlDFmNuw/9BAVeDJyv/H99KhRyTr6mwvuFz2WMGlJ1aQ+Nr99jbFo+ C+y3fV6DmjXRGrIt/eo1ThD5CwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEV3/ZUR sCoc4LFNbajlytx0Dm/pMB8GA1UdIwQYMBaAFB9axQawETDILl5HMWA7omTO2Ehm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkIyMi9DM0JDNzVGNEEx OTAxMUVCOUJFOUFEMzJDNEY5QUUwMi9IMXJGQnJBUk1NZ3VYa2N4WUR1aVpNN1lT R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gxckZCckFSTU1ndVhrY3hZRHVpWk03WVNHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JCMjIvQzNCQzc1RjRBMTkwMTFFQjlCRTlBRDMyQzRGOUFFMDIvRjdGMDNGQjJF RjMyMTFFREE2MTRENDczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ6ZWMA0GCSqGSIb3DQEBCwUAA4IBAQANH6XTeC1zQPwbJR1WQ8Kd 5lx39ctMxkLg5BrbhJkavByqoaLLNtEUU3Ak2b23beXyiUJj6i+/+6xbKpsNs1p0 RCqbpR9ixD41kzytxjY92SgoGxTWR98bXVM37CiVdd3BBeHbjiiSZzdRvwE0vZio fVM2Emds+qtT+vfA1eIGgJDU1MNg5Li+v9jbSxK0Y/cKp6NZiPgqeg/u6LDY6v5a kWxZrdgvJCWcVS/l2TGA0MU22w+SZQJn57zUbqiG2MIH6aEKDxyka+jnKfNqTP0H wJRohVvXF+chkxWYlfn8kWBqU9g7cjjVwtJBi+L3efRRrSIsZpr2+JjF9h5mIyZO -----END CERTIFICATE-----Generated at Mon Apr 6 12:37:54 2026 by rpki-client