$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa File: F8071E24DC1111EC80AE816DC4F9AE02.roa (raw, json) Hash identifier: diQEJwaRZGmvk+KKJJNr2sqtXhHrrXlc+8yBz+g5Wd0= Subject key identifier: 89:18:67:17:19:27:AE:79:CA:49:5E:EB:B8:4A:E7:72:AC:ED:0F:4C Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Certificate serial: 0435 Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:23:52 +0000 ROA not before: Wed 11 Feb 2026 00:20:44 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135097 IP address blocks: 103.233.8.0/22 maxlen: 24 2001:df5:f580::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 21:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593 Validity Not Before: Feb 11 00:20:44 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a58f68-9cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:ea:69:31:07:a1:83:ea:28:bf:a3:f2:4e: af:30:75:5b:15:6d:f9:c5:41:c6:91:f3:0d:74:19: d0:31:70:4c:e0:d0:f4:9f:46:16:2e:fa:23:60:a6: 26:eb:04:b5:a2:12:c2:a8:82:ab:e8:c1:f7:95:18: 89:bd:30:35:64:43:8f:e9:54:44:a2:a9:f0:f5:29: 73:e6:a7:98:a9:c3:b0:36:e2:b3:76:bd:0c:de:8e: fc:a4:c4:ca:e6:63:63:b9:c8:73:ab:3e:2d:2d:5f: a6:8d:ab:2d:7e:a7:38:2a:49:5e:14:3f:b6:75:c3: 94:0e:d3:5d:48:17:de:53:f7:87:2a:30:51:bd:06: 8d:7f:c2:d7:21:69:48:d8:a6:1f:69:2e:6c:d8:3f: d0:27:3c:45:1d:06:4d:47:f7:5b:94:3c:11:01:cb: 69:a1:2f:0b:9f:94:ec:21:20:53:02:d5:f0:ba:3a: 2f:5f:a3:16:fb:af:ba:34:bd:fb:f6:48:11:c5:4a: 28:ef:70:ee:5f:b1:29:3d:57:97:52:30:e2:1e:d4: d4:3b:bc:d3:53:ab:76:7a:df:5a:47:ea:4a:b7:45: 73:8a:9f:8b:7a:d4:07:63:f8:4c:a2:e2:7e:f4:2f: b0:d0:d2:f7:2d:4e:88:51:98:de:18:c1:b3:c6:d6: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:18:67:17:19:27:AE:79:CA:49:5E:EB:B8:4A:E7:72:AC:ED:0F:4C X509v3 Authority Key Identifier: keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/F8071E24DC1111EC80AE816DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.233.8.0/22 IPv6: 2001:df5:f580::/48 Signature Algorithm: sha256WithRSAEncryption 72:84:d2:5e:a0:d0:4d:d9:ab:fa:2f:9b:7f:68:c3:ea:c0:02: 62:dc:d4:e0:63:17:90:d0:6f:81:15:d6:5d:a7:44:ba:ce:65: 12:64:eb:0a:4d:9f:3f:fa:51:3b:dc:36:f2:74:1a:39:f4:22: b7:ef:9f:c6:9a:97:ce:a5:fc:8b:87:7e:b1:ee:7c:95:66:30: 52:ec:06:33:bd:d1:1a:9d:c1:40:72:96:8c:11:f5:59:0b:c3: d8:b8:04:cf:47:ee:60:f9:13:89:e6:ff:51:f3:59:f1:9b:90: 80:7b:4a:84:97:82:84:d8:3f:0f:16:39:14:bd:e3:e4:a5:3e: f8:39:96:e8:ab:b3:f0:3a:7a:1e:33:93:e2:9d:35:85:58:a7: af:c0:c7:56:30:3c:70:fc:e3:26:dd:0b:f7:52:26:fe:1a:65: ec:1e:3b:72:47:cc:d6:96:04:12:07:59:81:32:5d:e2:aa:32: a0:96:59:e2:64:b7:7b:28:cf:89:b1:bc:63:f9:57:5e:53:35: 2b:da:9c:96:87:e0:e1:c4:61:2c:41:0a:2f:36:33:08:f3:64: fb:d8:54:6a:ed:2f:0c:62:85:af:0c:38:1d:0f:fd:f8:90:b9: 15:f4:dc:07:0e:94:ec:6c:ac:e3:dc:54:98:d7:ab:12:3b:5f: 7f:47:e3:0b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4 RjIxQkI1OTMwHhcNMjYwMjExMDAyMDQ0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGY2OC05Y2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23rqaTEHoYPqKL+j8k6vMHVbFW35xUHGkfMNdBnQMXBM4ND0n0YWLvojYKYm 6wS1ohLCqIKr6MH3lRiJvTA1ZEOP6VREoqnw9Slz5qeYqcOwNuKzdr0M3o78pMTK 5mNjuchzqz4tLV+mjastfqc4KkleFD+2dcOUDtNdSBfeU/eHKjBRvQaNf8LXIWlI 2KYfaS5s2D/QJzxFHQZNR/dblDwRActpoS8Ln5TsISBTAtXwujovX6MW+6+6NL37 9kgRxUoo73DuX7EpPVeXUjDiHtTUO7zTU6t2et9aR+pKt0Vzip+LetQHY/hMouJ+ 9C+w0NL3LU6IUZjeGMGzxtZ6jwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIkYZxcZ J655ykle67hK53Ks7Q9MMB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU3RDkvMDcxN0U5RUU5RjVEMTFFQ0JCQ0E5NjE4QzRGOUFFMDIvRjgwNzFFMjRE QzExMTFFQzgwQUU4MTZEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQCZ+kIMA8EAgACMAkDBwAgAQ319YAwDQYJKoZIhvcNAQELBQADggEB AHKE0l6g0E3Zq/ovm39ow+rAAmLc1OBjF5DQb4EV1l2nRLrOZRJk6wpNnz/6UTvc NvJ0Gjn0Irfvn8aal86l/IuHfrHufJVmMFLsBjO90RqdwUBylowR9VkLw9i4BM9H 7mD5E4nm/1HzWfGbkIB7SoSXgoTYPw8WORS94+SlPvg5luirs/A6eh4zk+KdNYVY p6/Ax1YwPHD84ybdC/dSJv4aZeweO3JHzNaWBBIHWYEyXeKqMqCWWeJkt3soz4mx vGP5V15TNSvanJaH4OHEYSxBCi82MwjzZPvYVGrtLwxiha8MOB0P/fiQuRX03AcO lOxsrOPcVJjXqxI7X39H4ws= -----END CERTIFICATE-----Generated at Fri Mar 13 01:28:24 2026 by rpki-client