$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa File: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (raw, json) Hash identifier: zAf/v9HFssHYv5BzcHnAs4954W/hXLYB3m3cp1J/xaE= Subject key identifier: F5:E5:33:7E:9C:07:27:AA:1A:95:EC:65:D1:07:AA:83:73:E5:66:FA Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0B0C Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa Signing time: Wed 28 Jan 2026 19:16:32 +0000 ROA not before: Wed 28 Jan 2026 19:16:31 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 139870 IP address blocks: 103.146.42.0/23 maxlen: 23 103.146.42.0/24 maxlen: 24 103.146.43.0/24 maxlen: 24 103.244.140.0/22 maxlen: 22 103.244.140.0/24 maxlen: 24 103.244.141.0/24 maxlen: 24 103.244.142.0/24 maxlen: 24 103.244.143.0/24 maxlen: 24 2001:df2:4380::/48 maxlen: 48 2400:5fa0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 18:57:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2828 (0xb0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Jan 28 19:16:31 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697a608f-f391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:e7:36:f6:e5:6a:40:ab:3a:3c:e3:6a:d2: bf:5f:47:23:9c:20:c9:fb:e7:63:68:72:d8:d8:f7: 11:f0:85:14:39:5f:fd:55:ba:e1:89:1b:49:07:50: 00:a7:e9:3b:14:21:24:74:ad:35:fc:12:f0:a0:99: a4:bc:53:0e:8d:0a:46:21:39:7e:3f:66:b7:60:6e: e6:82:7d:e0:6c:89:eb:ec:af:47:cc:1d:07:6f:56: e6:e8:e1:75:28:f2:27:a7:50:37:ca:9e:8b:c6:98: f3:a7:a1:83:85:ad:b5:7e:3b:88:4f:8f:8f:c8:0b: ad:24:de:53:6f:22:2a:12:6f:3a:af:c6:70:13:fa: 5c:03:a7:80:98:44:e8:dc:cd:09:2f:49:8d:79:94: 87:82:75:1c:48:da:5a:3f:d4:10:f8:56:35:db:f2: 2e:35:58:42:53:b7:09:9c:77:20:05:e5:e3:25:22: a5:bb:ff:8e:e6:4c:7e:4d:57:97:19:c4:c4:56:57: ca:c6:16:ec:85:35:c8:19:66:93:9a:0a:43:87:54: fe:fe:92:85:22:c2:f3:15:f7:02:bc:36:05:b0:46: 49:cb:27:92:c9:27:1f:c4:66:62:f7:29:1e:7e:c8: e8:6b:ca:8d:4d:9b:c9:fa:33:7b:ea:04:d7:4b:a8: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E5:33:7E:9C:07:27:AA:1A:95:EC:65:D1:07:AA:83:73:E5:66:FA X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.42.0/23 103.244.140.0/22 IPv6: 2001:df2:4380::/48 2400:5fa0::/32 Signature Algorithm: sha256WithRSAEncryption 49:d7:67:e4:5e:9e:03:43:20:ee:6b:0e:03:84:80:5a:cd:b4: e3:f8:e3:57:30:a1:3f:65:ae:de:f4:ed:6c:c2:a4:08:83:83: c1:bc:8a:f4:8c:20:3f:66:17:38:47:74:f5:72:80:f7:90:aa: 41:91:99:fd:ef:b6:58:ff:fc:08:35:96:74:05:aa:e0:42:dd: ea:76:60:0a:d8:60:23:84:69:13:de:8a:bc:f6:a5:a0:20:e2: 7d:8a:4e:7e:4d:ff:e7:47:aa:a1:58:f0:83:46:9f:e9:21:60: b6:27:17:75:3c:e4:c4:bc:ce:5b:38:1b:7e:2a:fe:0e:f9:e0: fa:ca:2b:c0:e5:d1:f3:b1:f1:ee:44:fb:85:0b:f6:ec:a9:d8: f9:1b:cc:ff:7b:f9:34:b7:a7:c4:8f:a5:cd:c0:43:f1:66:77: a5:55:3a:78:66:01:58:51:b2:dd:b7:63:c3:35:ec:eb:74:05: 0a:99:ac:cd:d6:56:32:06:e3:7c:5d:c8:3c:a1:2b:3d:56:d3: e6:40:00:6f:1d:30:f5:f9:11:ad:c9:09:21:0f:b4:0c:d4:01: 97:ff:85:a5:b2:7d:cd:34:21:26:50:4c:b8:3e:e7:79:f4:b0: fd:17:f6:92:d2:ba:9c:10:d5:83:e9:c4:95:63:37:6c:41:41: db:6c:ec:20 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICCwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjYwMTI4MTkxNjMxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhNjA4Zi1mMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSHnNvblakCrOjzjatK/X0cjnCDJ++djaHLY2PcR8IUUOV/9VbrhiRtJB1AA p+k7FCEkdK01/BLwoJmkvFMOjQpGITl+P2a3YG7mgn3gbInr7K9HzB0Hb1bm6OF1 KPInp1A3yp6Lxpjzp6GDha21fjuIT4+PyAutJN5TbyIqEm86r8ZwE/pcA6eAmETo 3M0JL0mNeZSHgnUcSNpaP9QQ+FY12/IuNVhCU7cJnHcgBeXjJSKlu/+O5kx+TVeX GcTEVlfKxhbshTXIGWaTmgpDh1T+/pKFIsLzFfcCvDYFsEZJyyeSyScfxGZi9yke fsjoa8qNTZvJ+jN76gTXS6gPzwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFPXlM36c ByeqGpXsZdEHqoNz5Wb6MB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdGRUEvMUVFM0FFRUM2MDQ4MTFFQThDNjkwQjM4QzRGOUFFMDIvQUY1QUM2QjY5 RTNGMTFFRUE2QjZDQjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMBIEAgABMAwDBAFnkioDBAJn9IwwFgQCAAIwEAMHACABDfJDgAMFACQAX6Aw DQYJKoZIhvcNAQELBQADggEBAEnXZ+RengNDIO5rDgOEgFrNtOP441cwoT9lrt70 7WzCpAiDg8G8ivSMID9mFzhHdPVygPeQqkGRmf3vtlj//Ag1lnQFquBC3ep2YArY YCOEaRPeirz2paAg4n2KTn5N/+dHqqFY8INGn+khYLYnF3U85MS8zls4G34q/g75 4PrKK8Dl0fOx8e5E+4UL9uyp2PkbzP97+TS3p8SPpc3AQ/Fmd6VVOnhmAVhRst23 Y8M17Ot0BQqZrM3WVjIG43xdyDyhKz1W0+ZAAG8dMPX5Ea3JCSEPtAzUAZf/haWy fc00ISZQTLg+53n0sP0X9pLSupwQ1YPpxJVjN2xBQdts7CA= -----END CERTIFICATE-----Generated at Thu Feb 19 19:57:53 2026 by rpki-client