$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa File: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (raw, json) Hash identifier: qztcPxWfOBH20v/AQRCZMhTGPu9BskK55/ATj9+qP3Y= Subject key identifier: 4E:3A:B5:46:9F:F1:54:CF:0B:7A:36:18:16:99:91:08:5B:69:22:4B Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Certificate serial: 0991 Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa Signing time: Fri 06 Feb 2026 20:17:01 +0000 ROA not before: Fri 06 Feb 2026 20:17:01 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138663 IP address blocks: 43.239.204.0/24 maxlen: 24 43.239.205.0/24 maxlen: 24 103.106.6.0/23 maxlen: 24 103.117.164.0/23 maxlen: 24 203.78.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 19:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2449 (0x991) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Validity Not Before: Feb 6 20:17:01 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69864c3d-3e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:f5:1e:4c:d3:b7:a4:0b:b2:a0:f0:57:1f: 92:8b:1c:9f:3a:4c:cd:c9:cb:c8:91:b9:41:a2:9b: e5:5e:17:fa:ad:d4:75:95:7c:1c:04:86:1b:67:33: 4c:58:4e:83:66:6d:96:8c:86:3f:93:6e:ed:29:6a: 84:0d:8e:2e:cb:62:36:d6:b6:cd:3d:aa:72:de:d8: c0:57:51:8e:f1:8c:9a:5c:3f:15:c9:bc:c2:53:08: c8:ff:10:5c:5f:c5:14:23:e5:d2:b3:31:b8:14:be: ca:5d:88:29:ec:2d:01:74:04:14:a9:20:2c:ee:be: ff:c4:ec:d1:95:73:eb:71:2f:66:a3:01:e3:f2:ea: b7:10:e0:8e:45:c5:48:d4:4e:56:93:07:89:0f:a4: 3f:b6:e6:a6:51:c3:2f:3d:3b:26:bc:cb:21:ee:f1: c4:ed:af:b8:32:1d:07:c5:cd:ff:6e:f4:26:12:e8: c4:90:b7:a3:d1:a7:6e:0e:2d:0d:03:c3:4b:ce:58: f7:8c:b3:08:d8:fc:64:cc:07:2d:71:9c:19:11:0f: 44:5f:6f:c4:21:63:1b:a3:e0:75:4b:e4:e7:7b:7b: 0d:38:b7:34:e9:18:a3:3f:2f:ff:8e:9c:f3:5c:42: 43:c1:a2:13:9e:ca:c8:25:bd:ef:04:3c:8c:dd:aa: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:B5:46:9F:F1:54:CF:0B:7A:36:18:16:99:91:08:5B:69:22:4B X509v3 Authority Key Identifier: keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.204.0/23 103.106.6.0/23 103.117.164.0/23 203.78.162.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:68:ed:db:b7:62:9a:43:bd:d9:4a:d4:14:1f:05:9f:cc:4f: 93:df:d8:8d:80:95:14:1e:67:c6:2d:42:62:f6:f9:81:38:b9: 1e:df:6d:0f:2d:31:9b:4f:30:38:0d:c5:6b:e3:fb:d1:87:3b: 1a:1c:03:91:41:52:8f:12:24:33:fd:f4:6a:0e:b0:26:fd:b3: 4c:88:77:65:e0:1e:14:e9:ba:da:09:4c:3f:74:13:8b:54:9e: ce:03:07:32:7e:20:ba:0f:c5:b0:04:49:3c:11:1b:37:d6:48: 15:2d:d8:78:b2:ab:4b:25:e9:e8:67:8e:44:c3:51:56:54:48: 4b:31:db:5c:24:db:c9:a1:3a:9c:1b:0c:9f:dc:4e:fb:8b:2c: d9:bc:3b:a1:df:5f:17:2c:dd:8c:36:7a:04:59:63:61:34:7c: 14:74:3e:d0:e2:97:14:bb:2b:ba:c9:30:d6:b6:14:44:ea:57: 2b:a9:a0:2b:3d:7d:2e:2f:6e:80:3a:fa:42:ee:be:bc:d7:9a: d0:23:19:c0:92:41:dc:6f:a2:52:c4:93:9e:06:27:e7:6e:54: eb:cc:b3:ad:c1:73:ae:13:21:8a:94:b0:38:5e:d5:55:4d:62: 2e:4d:22:6a:6b:91:ba:93:eb:d3:fa:e1:e6:dc:90:e5:42:d4: 50:8a:3e:75 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx REQwQTQxMTAvBgNVBAUTKDdFMjcwOUEyOUU0NjIwRTU0MjdGNzM1RjM3QzAzNDcz RTM2QjU5N0EwHhcNMjYwMjA2MjAxNzAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTg2NGMzZC0zZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLz1HkzTt6QLsqDwVx+SixyfOkzNycvIkblBopvlXhf6rdR1lXwcBIYbZzNM WE6DZm2WjIY/k27tKWqEDY4uy2I21rbNPapy3tjAV1GO8YyaXD8VybzCUwjI/xBc X8UUI+XSszG4FL7KXYgp7C0BdAQUqSAs7r7/xOzRlXPrcS9mowHj8uq3EOCORcVI 1E5WkweJD6Q/tuamUcMvPTsmvMsh7vHE7a+4Mh0Hxc3/bvQmEujEkLej0aduDi0N A8NLzlj3jLMI2PxkzActcZwZEQ9EX2/EIWMbo+B1S+Tne3sNOLc06RijPy//jpzz XEJDwaITnsrIJb3vBDyM3aoeUQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFE46tUaf 8VTPC3o2GBaZkQhbaSJLMB8GA1UdIwQYMBaAFH4nCaKeRiDlQn9zXzfANHPja1l6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDBBNC85NUQ1RTM5MkFB NzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lPVkNmM05mTjhBMGMtTnJX WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZpY0pvcDVHSU9WQ2YzTmZOOEEwYy1OcldYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQwQTQvOTVENUUzOTJBQTczMTFFQUExMEFDQzg0QzRGOUFFMDIvQzhDQ0UyQ0NB QTc0MTFFQTlERjJFNjg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAEr78wDBAFnagYDBAFndaQDBADLTqIwDQYJKoZIhvcNAQEL BQADggEBAB9o7du3YppDvdlK1BQfBZ/MT5Pf2I2AlRQeZ8YtQmL2+YE4uR7fbQ8t MZtPMDgNxWvj+9GHOxocA5FBUo8SJDP99GoOsCb9s0yId2XgHhTputoJTD90E4tU ns4DBzJ+ILoPxbAESTwRGzfWSBUt2Hiyq0sl6ehnjkTDUVZUSEsx21wk28mhOpwb DJ/cTvuLLNm8O6HfXxcs3Yw2egRZY2E0fBR0PtDilxS7K7rJMNa2FETqVyupoCs9 fS4vboA6+kLuvrzXmtAjGcCSQdxvolLEk54GJ+duVOvMs63Bc64TIYqUsDhe1VVN Yi5NImprkbqT69P64ebckOVC1FCKPnU= -----END CERTIFICATE-----Generated at Fri Feb 20 03:47:12 2026 by rpki-client