$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa File: C4B561629AFA11EEB91A2174C4F9AE02.roa (raw, json) Hash identifier: aRfQZJBeIUXkRnVBff5AI2UFIz3GN5zYE0o7KWSnJVE= Subject key identifier: F1:1C:98:31:27:38:42:55:4F:41:3F:76:8D:D8:AB:AE:9E:51:D1:9C Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Certificate serial: 01C0 Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:17:32 +0000 ROA not before: Fri 23 Jan 2026 03:23:41 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135330 IP address blocks: 103.79.120.0/24 maxlen: 24 103.79.121.0/24 maxlen: 24 103.79.122.0/24 maxlen: 24 103.79.123.0/24 maxlen: 24 202.91.36.0/24 maxlen: 24 202.91.37.0/24 maxlen: 24 202.91.38.0/24 maxlen: 24 202.91.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 03:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6 Validity Not Before: Jan 23 03:23:41 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a474ac-af7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:b2:11:54:00:44:a9:d8:03:77:42:18:08: a0:92:9c:a5:07:e4:8c:85:39:81:64:8e:f0:e1:b2: 86:0d:66:81:cc:df:87:13:26:a9:49:dc:ee:25:33: 2b:d1:7f:86:97:38:34:67:9d:fd:f3:98:e2:e8:de: 76:fb:78:57:fb:b7:cc:cc:01:f8:b9:6b:f7:32:9a: 88:fe:c8:bc:c9:73:97:db:77:e7:93:28:17:c2:47: 33:e9:05:65:f9:4e:fa:74:e6:33:87:e1:c6:43:de: 9b:d9:a7:69:9c:43:ee:b0:dd:4d:8b:69:d3:22:54: 9a:85:5a:89:18:b2:76:2a:fd:73:9d:a8:59:eb:fc: 91:9b:a4:6a:56:c2:6e:94:72:1b:85:48:05:57:35: 14:5c:bb:0d:55:13:b8:3d:5a:65:c5:a8:30:40:31: 7c:75:04:1c:63:9b:26:cc:ce:d2:f1:15:b1:ba:f0: f7:ba:b8:3f:c8:cd:16:8f:e2:61:fd:be:75:16:5e: 2c:b3:76:c1:7d:0a:ef:ed:88:36:4d:17:46:2b:c2: 20:a8:a1:a5:d4:d9:0f:41:0a:fe:1c:72:13:d0:b4: 51:34:89:a3:4c:78:ed:af:f1:5d:01:6e:61:9e:21: 7b:27:2d:10:ce:7b:56:4f:74:c2:98:36:74:74:18: 4e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1C:98:31:27:38:42:55:4F:41:3F:76:8D:D8:AB:AE:9E:51:D1:9C X509v3 Authority Key Identifier: keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/C4B561629AFA11EEB91A2174C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.79.120.0/22 202.91.36.0/22 Signature Algorithm: sha256WithRSAEncryption 4f:95:fb:0a:00:74:c0:49:27:af:ec:30:7e:33:29:46:9c:b2: 5e:50:35:ad:2b:7d:34:06:47:21:2b:71:ce:90:ea:10:34:2f: 52:ef:f7:c0:38:8b:43:39:ae:78:ad:2f:b7:53:b7:72:65:e7: 11:b1:55:dd:1a:f6:38:21:55:35:82:bd:38:a2:d1:31:96:c0: bf:65:f0:bd:da:f7:6f:31:6e:4c:a7:45:3e:0d:4f:55:e2:8d: aa:15:d1:48:56:ad:23:a6:29:68:1c:68:ad:2a:ce:64:7e:2c: a5:f3:7b:5c:5a:77:94:a4:d5:79:a5:b2:b4:83:8b:49:92:81: 96:c0:a1:dd:c8:b5:12:7d:b8:f4:4b:17:61:6b:d3:c5:e2:04: aa:6a:b5:ca:d1:be:10:50:6f:84:33:96:66:6b:5f:5f:f0:a5: 90:b7:ac:31:3f:77:d5:61:d6:73:67:83:d6:91:d5:8a:71:64: 1d:87:bd:74:cc:2e:33:c0:97:55:e5:c0:23:10:47:22:a3:60: 0b:70:82:c5:e3:6e:24:df:23:d9:6a:14:26:f7:a4:b2:89:f6: 17:0b:f9:df:ca:14:3f:54:07:0d:e7:c2:b9:40:4b:2d:23:40: ff:ac:62:0b:87:21:fd:06:09:34:11:ae:27:ae:b5:f6:64:24: bd:6f:72:e0 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkUxMTAvBgNVBAUTKDRDQUQyNzJCQUQxRDg3MDlCMTZFOTk3NTAwNkUxMjI1 NTIwNUM4RjYwHhcNMjYwMTIzMDMyMzQxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzRhYy1hZjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjmyEVQARKnYA3dCGAigkpylB+SMhTmBZI7w4bKGDWaBzN+HEyapSdzuJTMr 0X+Glzg0Z53985ji6N52+3hX+7fMzAH4uWv3MpqI/si8yXOX23fnkygXwkcz6QVl +U76dOYzh+HGQ96b2adpnEPusN1Ni2nTIlSahVqJGLJ2Kv1znahZ6/yRm6RqVsJu lHIbhUgFVzUUXLsNVRO4PVplxagwQDF8dQQcY5smzM7S8RWxuvD3urg/yM0Wj+Jh /b51Fl4ss3bBfQrv7Yg2TRdGK8IgqKGl1NkPQQr+HHIT0LRRNImjTHjtr/FdAW5h niF7Jy0QzntWT3TCmDZ0dBhOeQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPEcmDEn OEJVT0E/do3Yq66eUdGcMB8GA1UdIwQYMBaAFEytJyutHYcJsW6ZdQBuEiVSBcj2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RS9GNTFGRjg4NjlB RjkxMUVFQTE2REJDNTVDNEY5QUUwMi9USzBuSzYwZGh3bXhicGwxQUc0U0pWSUZ5 UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLMG5LNjBkaHdteGJwbDFBRzRTSlZJRnlQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDlBNkUvRjUxRkY4ODY5QUY5MTFFRUExNkRCQzU1QzRGOUFFMDIvQzRCNTYxNjI5 QUZBMTFFRUI5MUEyMTc0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ094AwQCylskMA0GCSqGSIb3DQEBCwUAA4IBAQBPlfsKAHTASSev 7DB+MylGnLJeUDWtK300BkchK3HOkOoQNC9S7/fAOItDOa54rS+3U7dyZecRsVXd GvY4IVU1gr04otExlsC/ZfC92vdvMW5Mp0U+DU9V4o2qFdFIVq0jpiloHGitKs5k fiyl83tcWneUpNV5pbK0g4tJkoGWwKHdyLUSfbj0Sxdha9PF4gSqarXK0b4QUG+E M5Zma19f8KWQt6wxP3fVYdZzZ4PWkdWKcWQdh710zC4zwJdV5cAjEEcio2ALcILF 424k3yPZahQm96SyifYXC/nfyhQ/VAcN58K5QEstI0D/rGILhyH9Bgk0Ea4nrrX2 ZCS9b3Lg -----END CERTIFICATE-----Generated at Fri Mar 13 11:57:29 2026 by rpki-client