$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/8F5EABBE919F11EDA7387A37C4F9AE02.roa File: 8F5EABBE919F11EDA7387A37C4F9AE02.roa (raw, json) Hash identifier: mD2HqpNx7VAE/fzRvuWKCUkO1WROa4R3hNCfEouu84g= Subject key identifier: 49:C7:69:2C:C2:27:58:90:5F:FA:6D:C2:09:49:FC:AA:AD:EA:7A:AA Certificate issuer: /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Certificate serial: 045C Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/8F5EABBE919F11EDA7387A37C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:39:15 +0000 ROA not before: Sun 21 Dec 2025 00:20:38 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136166 IP address blocks: 103.82.176.0/22 maxlen: 25 2400:8740::/40 maxlen: 40 2400:8740:1000::/40 maxlen: 40 2400:8740:1000::/48 maxlen: 48 2400:8740:2000::/40 maxlen: 40 2400:8740:2000::/48 maxlen: 48 2400:8740:3000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 23:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1116 (0x45c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5F2D, serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748 Validity Not Before: Dec 21 00:20:38 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a46bb3-9775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:0b:57:8f:91:89:50:da:c5:0c:b9:85:8e: 61:67:d2:d6:8d:0e:ac:6a:b5:7c:80:73:ba:75:80: 21:5c:cf:c8:2f:dd:47:63:7e:f2:4d:1b:3b:33:a5: 26:b2:3f:5a:7a:78:eb:a9:1b:8b:a0:b2:cb:41:02: 7e:b2:6e:83:5c:85:6e:78:29:06:99:ee:fc:ea:26: bf:4a:39:dd:d0:c8:73:97:5d:60:86:a1:81:a0:60: c5:cc:93:5b:fa:3a:a9:b7:01:d1:9b:65:c4:e6:0a: 12:e3:30:8f:9d:c7:34:ab:d7:ef:9c:f3:94:e3:51: 67:32:7a:da:e0:96:ed:d1:9f:61:d4:b7:86:64:4a: 2d:be:eb:c5:12:74:7e:66:96:a8:12:f7:20:c7:3b: 51:c4:d0:3d:a8:7a:38:80:41:6f:32:a0:59:4b:9f: ef:39:ca:37:6f:1f:99:f3:ad:47:e0:b7:f0:1b:7e: 70:fd:87:2f:93:4c:92:f6:3d:48:92:a5:45:77:78: 87:79:97:11:7c:c6:9d:36:e9:33:7b:c4:f1:e4:f6: 79:9e:6d:d2:52:ff:fa:1a:e5:3d:14:e1:63:ee:6c: 14:bf:0f:76:4b:a0:54:b7:56:2e:9d:b8:f4:86:e4: 3c:21:e3:c0:e7:2b:a1:2c:5b:5c:ee:95:85:a4:ce: 21:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C7:69:2C:C2:27:58:90:5F:FA:6D:C2:09:49:FC:AA:AD:EA:7A:AA X509v3 Authority Key Identifier: keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/8F5EABBE919F11EDA7387A37C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.82.176.0/22 IPv6: 2400:8740::/40 2400:8740:1000::/40 2400:8740:2000::/40 2400:8740:3000::/40 Signature Algorithm: sha256WithRSAEncryption 5b:c2:e2:32:61:58:8b:43:22:31:ac:50:01:09:b3:7b:3c:8b: 63:ac:ab:b8:1a:3d:97:22:00:1f:0f:d6:17:1d:fc:d0:fa:2b: 74:53:a8:e5:ef:c2:61:ea:ca:9e:bb:dd:5e:26:1a:af:38:03: f4:c3:9b:6d:8b:c4:15:95:2d:70:a7:20:26:b3:76:46:c0:43: dd:fb:50:bc:69:6e:e5:28:fb:7b:a3:29:5e:0a:32:b6:8d:96: bb:ad:7b:27:21:f4:bf:f8:df:5a:33:47:d6:a3:59:45:cb:ce: 51:3b:0e:e3:52:f8:68:3b:58:29:61:2f:29:7a:3e:80:8b:7a: 47:dd:41:8a:c7:7c:2f:a3:8d:7f:92:93:86:13:72:d9:bc:3c: 87:3c:0a:46:b2:ea:95:5a:fc:dd:4d:24:a8:54:d9:dc:65:7e: f4:80:d1:10:0b:b8:00:28:23:79:8c:83:27:6d:0c:4d:7d:ea: af:5d:92:9d:9e:01:a5:34:ad:df:c2:7e:45:b4:e8:89:1c:04: 2e:54:d0:92:e8:a2:29:d5:a9:a8:a9:98:20:2d:17:02:2f:a8: e7:1b:2e:b7:33:4e:cc:f3:fd:dc:99:f8:24:dd:9f:46:ea:b0: 81:1b:cf:f4:c2:19:fc:a1:cc:1b:e3:a4:20:b3:4d:c2:73:bf: a5:8d:50:0e -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgICBFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVGMkQxMTAvBgNVBAUTKEEwMTNCMTM4OEEzOTMzQkUxMDZCRUFFRERGRTlGM0I4 MzQ2RDM3NDgwHhcNMjUxMjIxMDAyMDM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmJiMy05Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmkLV4+RiVDaxQy5hY5hZ9LWjQ6sarV8gHO6dYAhXM/IL91HY37yTRs7M6Um sj9aenjrqRuLoLLLQQJ+sm6DXIVueCkGme786ia/Sjnd0Mhzl11ghqGBoGDFzJNb +jqptwHRm2XE5goS4zCPncc0q9fvnPOU41FnMnra4Jbt0Z9h1LeGZEotvuvFEnR+ ZpaoEvcgxztRxNA9qHo4gEFvMqBZS5/vOco3bx+Z861H4LfwG35w/Ycvk0yS9j1I kqVFd3iHeZcRfMadNukze8Tx5PZ5nm3SUv/6GuU9FOFj7mwUvw92S6BUt1Yunbj0 huQ8IePA5yuhLFtc7pWFpM4hdwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFEnHaSzC J1iQX/ptwglJ/Kqt6nqqMB8GA1UdIwQYMBaAFKATsTiKOTO+EGvq7d/p87g0bTdI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUYyRC9DRDZENkU1Njk4 OTIxMUVDOEY5MzU3M0JDNEY5QUUwMi9vQk94T0lvNU03NFFhLXJ0My1uenVEUnRO MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CT3hPSW81TTc0UWEtcnQzLW56dURSdE4wZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVGMkQvQ0Q2RDZFNTY5ODkyMTFFQzhGOTM1NzNCQzRGOUFFMDIvOEY1RUFCQkU5 MTlGMTFFREE3Mzg3QTM3QzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjAM BAIAATAGAwQCZ1KwMCYEAgACMCADBgAkAIdAAAMGACQAh0AQAwYAJACHQCADBgAk AIdAMDANBgkqhkiG9w0BAQsFAAOCAQEAW8LiMmFYi0MiMaxQAQmzezyLY6yruBo9 lyIAHw/WFx380PordFOo5e/CYerKnrvdXiYarzgD9MObbYvEFZUtcKcgJrN2RsBD 3ftQvGlu5Sj7e6MpXgoyto2Wu617JyH0v/jfWjNH1qNZRcvOUTsO41L4aDtYKWEv KXo+gIt6R91Bisd8L6ONf5KThhNy2bw8hzwKRrLqlVr83U0kqFTZ3GV+9IDREAu4 ACgjeYyDJ20MTX3qr12SnZ4BpTSt38J+RbToiRwELlTQkuiiKdWpqKmYIC0XAi+o 5xsutzNOzPP93Jn4JN2fRuqwgRvP9MIZ/KHMG+OkILNNwnO/pY1QDg== -----END CERTIFICATE-----Generated at Sat Mar 7 11:22:19 2026 by rpki-client