$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa File: 8C48B22C47E711EE91530D28C4F9AE02.roa (raw, json) Hash identifier: lA0GUtoywdP3W0s4fPvZbdcVPY5+3iGjlHV5SalUa/g= Subject key identifier: 79:AE:9C:0F:CE:F3:4A:5E:B8:8C:AF:54:50:B5:CC:C8:A0:DF:26:FC Certificate issuer: /CN=A91E4C30/serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Certificate serial: 0266 Authority key identifier: 58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:57:36 +0000 ROA not before: Sun 25 Jan 2026 01:21:27 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 138640 IP address blocks: 103.61.240.0/23 maxlen: 23 103.61.240.0/24 maxlen: 24 103.61.241.0/24 maxlen: 24 2001:df1:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 01:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 614 (0x266) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4C30, serialNumber=58A0DDD02555C837486D55435186DCC576A1283E Validity Not Before: Jan 25 01:21:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a437c0-cceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:83:06:f0:56:8a:ae:d2:b6:de:7c:98:95: 25:f9:fa:ba:21:4f:51:03:96:f4:4a:1f:f7:d3:23: e9:2d:77:71:d4:05:d0:70:97:93:f6:83:82:5e:ab: 35:40:88:48:79:07:30:b4:bd:99:04:01:87:a1:2f: 30:8f:47:c6:98:09:25:b3:9e:fc:c2:ce:32:1e:03: 97:17:73:18:8d:4f:7c:cf:3c:6b:b5:85:e3:d5:f0: c1:20:21:8e:03:c8:24:f1:e5:69:45:d0:ef:d2:78: 0a:6a:05:a6:a5:1a:e2:9c:25:ee:85:60:16:76:80: a8:e6:f0:a2:0e:91:e9:65:98:b5:6e:b5:7b:8d:a5: a9:c0:64:5d:92:95:83:7d:c1:35:2a:f1:b9:5b:50: f8:a3:8a:2d:a4:89:44:da:cf:ca:cc:09:56:6a:f0: 40:21:6e:11:25:18:73:9a:58:58:72:a9:fb:44:d2: 55:0d:ad:a2:fc:69:31:6a:97:a9:80:48:43:0c:95: 37:e3:3b:47:64:b0:38:5c:c0:71:c9:92:1c:bf:ba: 3f:93:8e:86:fc:bd:69:53:ee:70:46:6e:72:c0:39: f3:77:ba:82:7f:bd:3a:7a:ec:5d:ba:a4:22:8e:dd: 00:14:fc:5e:62:1d:2b:a8:39:0c:43:4c:54:6d:e4: d4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:9C:0F:CE:F3:4A:5E:B8:8C:AF:54:50:B5:CC:C8:A0:DF:26:FC X509v3 Authority Key Identifier: keyid:58:A0:DD:D0:25:55:C8:37:48:6D:55:43:51:86:DC:C5:76:A1:28:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/WKDd0CVVyDdIbVVDUYbcxXahKD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKDd0CVVyDdIbVVDUYbcxXahKD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4C30/0F1F7CE8964111EDBA9DCC4FC4F9AE02/8C48B22C47E711EE91530D28C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.61.240.0/23 IPv6: 2001:df1:c340::/48 Signature Algorithm: sha256WithRSAEncryption 80:95:8e:ca:86:b9:8e:b2:fb:c1:04:51:93:9d:ae:a9:43:89: e4:d4:21:e2:6a:cd:63:3c:2d:1a:fd:ce:7d:d0:b7:7d:ee:ad: 8c:9f:f8:ae:04:d9:d6:e3:e7:17:b6:85:a7:14:e7:0e:55:9f: 8d:bd:38:81:08:c7:25:d3:54:97:2d:11:e7:d5:0c:00:4e:08: 87:9b:71:e8:80:36:37:85:62:03:54:20:ca:5e:32:59:68:fb: 15:90:ab:8b:c9:f5:75:15:df:c8:8e:5c:29:6c:c0:9a:ac:98: 60:d1:37:dc:d5:90:16:ef:d0:ee:a2:76:e6:a6:4f:b8:2c:ac: 97:3f:dc:8e:b9:bc:00:de:88:00:1e:35:9b:18:94:ee:de:9c: 0a:24:45:31:c9:08:e5:31:68:1f:6c:1a:e3:07:53:67:e8:30: 12:20:6d:70:a4:b5:ce:0e:b2:13:af:62:ad:38:d3:a3:88:15: 68:a9:09:b7:66:8b:66:ed:73:66:55:04:74:9b:7b:7d:7d:73: f2:f5:71:71:30:13:02:e9:71:98:29:48:dc:6b:0b:8e:9f:cd: 7c:24:70:5e:90:71:97:82:6d:18:68:e7:71:9a:73:b3:c0:0b: 3a:23:64:f6:26:45:8e:a3:0a:4f:f1:13:55:9c:20:b2:92:da: 98:13:22:98 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRDMzAxMTAvBgNVBAUTKDU4QTBEREQwMjU1NUM4Mzc0ODZENTU0MzUxODZEQ0M1 NzZBMTI4M0UwHhcNMjYwMTI1MDEyMTI3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzdjMC1jY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucCDBvBWiq7Stt58mJUl+fq6IU9RA5b0Sh/30yPpLXdx1AXQcJeT9oOCXqs1 QIhIeQcwtL2ZBAGHoS8wj0fGmAkls578ws4yHgOXF3MYjU98zzxrtYXj1fDBICGO A8gk8eVpRdDv0ngKagWmpRrinCXuhWAWdoCo5vCiDpHpZZi1brV7jaWpwGRdkpWD fcE1KvG5W1D4o4otpIlE2s/KzAlWavBAIW4RJRhzmlhYcqn7RNJVDa2i/Gkxapep gEhDDJU34ztHZLA4XMBxyZIcv7o/k46G/L1pU+5wRm5ywDnzd7qCf706euxduqQi jt0AFPxeYh0rqDkMQ0xUbeTUiwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHmunA/O 80peuIyvVFC1zMig3yb8MB8GA1UdIwQYMBaAFFig3dAlVcg3SG1VQ1GG3MV2oSg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEMzMC8wRjFGN0NFODk2 NDExMUVEQkE5RENDNEZDNEY5QUUwMi9XS0RkMENWVnlEZEliVlZEVVliY3hYYWhL RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLRGQwQ1ZWeURkSWJWVkRVWWJjeFhhaEtENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTRDMzAvMEYxRjdDRTg5NjQxMTFFREJBOURDQzRGQzRGOUFFMDIvOEM0OEIyMkM0 N0U3MTFFRTkxNTMwRDI4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZz3wMA8EAgACMAkDBwAgAQ3xw0AwDQYJKoZIhvcNAQELBQADggEB AICVjsqGuY6y+8EEUZOdrqlDieTUIeJqzWM8LRr9zn3Qt33urYyf+K4E2dbj5xe2 hacU5w5Vn429OIEIxyXTVJctEefVDABOCIebceiANjeFYgNUIMpeMllo+xWQq4vJ 9XUV38iOXClswJqsmGDRN9zVkBbv0O6iduamT7gsrJc/3I65vADeiAAeNZsYlO7e nAokRTHJCOUxaB9sGuMHU2foMBIgbXCktc4OshOvYq0406OIFWipCbdmi2btc2ZV BHSbe319c/L1cXEwEwLpcZgpSNxrC46fzXwkcF6QcZeCbRho53Gac7PACzojZPYm RY6jCk/xE1WcILKS2pgTIpg= -----END CERTIFICATE-----Generated at Fri Mar 13 19:28:11 2026 by rpki-client