$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/EF44A44E51EB11EABC11800DC4F9AE02.roa File: EF44A44E51EB11EABC11800DC4F9AE02.roa (raw, json) Hash identifier: ppoejX3uGUvimonjJPPKOd/thialy4STjxbD0m/dKFY= Subject key identifier: FB:95:86:87:FE:76:30:6D:08:55:00:42:A3:51:0E:FD:D5:99:64:A5 Certificate issuer: /CN=A91FD378/serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Certificate serial: 0B45 Authority key identifier: 99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/EF44A44E51EB11EABC11800DC4F9AE02.roa Signing time: Wed 28 Jan 2026 19:16:19 +0000 ROA not before: Wed 28 Jan 2026 19:16:19 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133192 IP address blocks: 103.255.24.0/24 maxlen: 24 103.255.25.0/24 maxlen: 24 103.255.26.0/24 maxlen: 24 103.255.27.0/24 maxlen: 24 163.47.164.0/24 maxlen: 24 163.47.165.0/24 maxlen: 24 163.47.166.0/24 maxlen: 24 163.47.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 18:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2885 (0xb45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD378, serialNumber=99BE085D1C696CBC21B678F9188ECCE5DBCDD4CA Validity Not Before: Jan 28 19:16:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=697a6083-f9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:dc:21:f3:e8:7e:87:e8:3c:b4:ae:d2:50: 38:8a:2e:af:77:d5:aa:92:78:89:74:6a:cd:44:d1: 53:ed:5d:7e:49:78:16:72:39:69:58:09:58:fb:98: 68:88:6a:7e:b3:78:40:58:f8:9d:07:98:6b:05:79: 2a:93:42:7f:a9:fc:cd:49:a0:af:d1:89:78:05:3b: 4a:48:c5:0e:e9:2c:76:12:34:6b:ba:cd:08:28:41: bb:d1:7c:cf:25:59:71:ba:61:8b:a4:89:80:71:df: a7:85:fe:04:1f:22:6f:a3:d7:01:08:45:34:f4:df: d7:eb:a3:2a:40:54:ae:f9:f4:1a:00:eb:14:0e:af: 51:48:3d:0e:ec:1a:bd:4f:41:91:4d:61:b4:e9:51: 4f:0a:19:1f:12:8e:7f:59:99:90:c1:aa:03:21:49: 05:bd:e1:43:e5:8c:8a:0c:c9:4e:cb:1e:0c:38:93: de:46:74:53:e6:13:cf:b1:73:e8:1f:e4:2f:ce:c9: 29:7b:40:4a:28:11:d2:c7:f5:28:7e:df:80:3f:5b: 4b:ca:de:cf:76:b7:68:87:96:1c:49:d4:bd:46:a5: fa:5b:9a:a8:03:25:0d:fd:56:28:03:d6:cd:a8:94: 16:d4:01:cd:e6:b9:e8:fc:ce:1e:72:0a:cc:96:b1: 3f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:86:87:FE:76:30:6D:08:55:00:42:A3:51:0E:FD:D5:99:64:A5 X509v3 Authority Key Identifier: keyid:99:BE:08:5D:1C:69:6C:BC:21:B6:78:F9:18:8E:CC:E5:DB:CD:D4:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mb4IXRxpbLwhtnj5GI7M5dvN1Mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD378/632FA8CE51EA11EAB6A5CD86C4F9AE02/EF44A44E51EB11EABC11800DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.255.24.0/22 163.47.164.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:60:82:83:18:a9:f9:a2:16:92:d8:1e:aa:f0:9c:0b:f8:0e: c7:f2:e5:27:50:75:15:bd:7f:b9:dd:2f:65:c4:95:92:cf:5a: 0a:88:17:1c:03:34:ee:2f:a7:39:65:4a:1c:e7:5c:90:96:21: d3:99:ef:f2:86:86:06:cf:a1:52:1a:2e:a1:68:38:b2:22:22: b4:46:68:69:fd:f5:33:41:2b:e4:42:a3:3f:52:55:83:41:cb: c5:c7:59:d5:80:67:e3:64:28:84:1e:f0:2b:2d:6d:e2:42:ad: f3:8b:02:f1:d8:c9:bc:0a:52:10:5c:7b:f6:62:b5:e4:19:f2: 4a:76:2c:43:42:64:d6:c7:b8:51:ab:60:10:83:0d:57:eb:81: c1:b5:7e:e0:a4:f5:e6:ec:19:1f:55:38:37:d6:26:51:25:7e: 3f:78:48:87:f9:da:da:48:d3:79:15:5a:d8:a6:a0:31:4e:9b: 8d:94:09:3c:bd:42:b7:da:fb:9f:19:1c:4a:c9:e0:22:b6:16: 75:1c:3f:a7:87:cf:4d:f1:ce:48:8d:41:82:fc:0e:aa:f2:73: ae:4c:d0:24:94:bc:94:a4:4c:9a:6c:fd:cc:89:ad:a4:41:b2: 7e:79:b6:f4:dc:30:39:be:25:b1:0c:30:91:f1:2c:f8:31:35: a7:33:51:71 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx RkQzNzgxMTAvBgNVBAUTKDk5QkUwODVEMUM2OTZDQkMyMUI2NzhGOTE4OEVDQ0U1 REJDREQ0Q0EwHhcNMjYwMTI4MTkxNjE5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdhNjA4My1mOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdrcIfPofofoPLSu0lA4ii6vd9WqkniJdGrNRNFT7V1+SXgWcjlpWAlY+5ho iGp+s3hAWPidB5hrBXkqk0J/qfzNSaCv0Yl4BTtKSMUO6Sx2EjRrus0IKEG70XzP JVlxumGLpImAcd+nhf4EHyJvo9cBCEU09N/X66MqQFSu+fQaAOsUDq9RSD0O7Bq9 T0GRTWG06VFPChkfEo5/WZmQwaoDIUkFveFD5YyKDMlOyx4MOJPeRnRT5hPPsXPo H+Qvzskpe0BKKBHSx/Uoft+AP1tLyt7Pdrdoh5YcSdS9RqX6W5qoAyUN/VYoA9bN qJQW1AHN5rno/M4ecgrMlrE/EwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPuVhof+ djBtCFUAQqNRDv3VmWSlMB8GA1UdIwQYMBaAFJm+CF0caWy8IbZ4+RiOzOXbzdTK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM3OC82MzJGQThDRTUx RUExMUVBQjZBNUNEODZDNEY5QUUwMi9tYjRJWFJ4cGJMd2h0bmo1R0k3TTVkdk4x TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iNElYUnhwYkx3aHRuajVHSTdNNWR2TjFNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkQzNzgvNjMyRkE4Q0U1MUVBMTFFQUI2QTVDRDg2QzRGOUFFMDIvRUY0NEE0NEU1 MUVCMTFFQUJDMTE4MDBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn/xgDBAKjL6QwDQYJKoZIhvcNAQELBQADggEBAFpggoMY qfmiFpLYHqrwnAv4Dsfy5SdQdRW9f7ndL2XElZLPWgqIFxwDNO4vpzllShznXJCW IdOZ7/KGhgbPoVIaLqFoOLIiIrRGaGn99TNBK+RCoz9SVYNBy8XHWdWAZ+NkKIQe 8CstbeJCrfOLAvHYybwKUhBce/ZiteQZ8kp2LENCZNbHuFGrYBCDDVfrgcG1fuCk 9ebsGR9VODfWJlElfj94SIf52tpI03kVWtimoDFOm42UCTy9Qrfa+58ZHErJ4CK2 FnUcP6eHz03xzkiNQYL8Dqryc65M0CSUvJSkTJps/cyJraRBsn55tvTcMDm+JbEM MJHxLPgxNaczUXE= -----END CERTIFICATE-----Generated at Fri Feb 20 02:44:43 2026 by rpki-client