$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/5D4B0B5E153611ECA897546BC4F9AE02.roa File: 5D4B0B5E153611ECA897546BC4F9AE02.roa (raw, json) Hash identifier: 0SaqMb330usfcrtRPgjBAgbasyEjNprf9GgoNQTfu2o= Subject key identifier: 08:EC:F2:64:03:A8:04:C3:3B:B8:02:B8:C1:2B:86:47:5D:47:72:CB Certificate issuer: /CN=A91124CC/serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Certificate serial: 0587 Authority key identifier: 39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/5D4B0B5E153611ECA897546BC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:55:36 +0000 ROA not before: Tue 29 Jul 2025 00:35:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 140927 IP address blocks: 103.152.216.0/23 maxlen: 23 103.152.216.0/24 maxlen: 24 103.152.217.0/24 maxlen: 24 2001:df4:4680::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CC, serialNumber=39BB0BFF14FB6B4B5F86137274D42513F3753A47 Validity Not Before: Jul 29 00:35:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40d18-5fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7d:1f:4b:bd:61:5d:15:84:1f:92:8e:ef:4d: 22:79:04:45:c2:71:cc:f4:15:df:d9:2e:e4:56:04: b3:12:14:e1:01:d6:e4:d9:11:34:26:b0:36:e7:ca: 46:c9:ca:0a:65:89:0a:8c:48:a3:3c:51:61:d0:90: c4:36:07:f2:43:05:15:a9:42:d0:f1:2f:fe:53:da: 7d:e0:cb:40:8d:c3:cf:4a:9c:c5:92:97:2e:e0:14: 16:7b:c6:14:81:b0:99:30:ca:b9:2f:d6:8e:6a:ac: 0a:4d:5e:5e:1a:ce:af:89:f1:8f:0a:76:c6:9e:b8: d6:71:d7:b9:d8:a7:16:d5:9a:d2:11:b1:ff:88:57: e9:9d:97:12:85:b8:aa:36:ca:e6:59:12:e9:0b:0b: 3f:6b:5e:5c:5e:b0:96:7c:3a:94:d5:d0:b8:81:fb: 89:a6:38:fd:d0:a3:2b:77:ba:05:ce:e6:25:b6:29: e8:00:fa:22:13:e1:e7:e4:b4:79:52:02:3a:81:f7: 6c:e5:30:a3:c3:74:d9:0f:39:fb:30:a5:0e:31:4b: 82:9b:59:c1:70:48:04:73:9c:80:83:98:b3:21:98: 2a:30:36:3d:42:45:d0:37:de:3c:42:39:56:ca:43: 4a:05:15:37:a5:13:29:52:ff:8f:93:55:91:3f:f2: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EC:F2:64:03:A8:04:C3:3B:B8:02:B8:C1:2B:86:47:5D:47:72:CB X509v3 Authority Key Identifier: keyid:39:BB:0B:FF:14:FB:6B:4B:5F:86:13:72:74:D4:25:13:F3:75:3A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/ObsL_xT7a0tfhhNydNQlE_N1Okc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ObsL_xT7a0tfhhNydNQlE_N1Okc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CC/F89C3EB6153111ECB594FB7DC4F9AE02/5D4B0B5E153611ECA897546BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.152.216.0/23 IPv6: 2001:df4:4680::/48 Signature Algorithm: sha256WithRSAEncryption 9f:13:78:35:be:a5:3d:da:ad:2a:62:ef:7c:7e:58:08:d8:3e: 87:da:e9:d3:41:0d:0b:de:51:41:10:70:39:47:e6:c3:db:ed: 77:dd:fa:bb:d4:42:67:98:37:7b:17:b2:34:db:dd:2f:ba:68: df:4e:5c:b7:f7:75:18:3e:63:52:26:77:08:48:8e:9f:86:66: ff:73:7e:03:63:1f:59:d1:40:78:ac:5e:5a:dc:c4:b3:2b:fc: 0e:1f:5f:27:eb:94:30:41:d1:74:b5:be:05:c1:50:d7:b6:b8: 09:e4:cb:88:12:40:ee:a4:11:e2:53:81:7e:14:a1:61:7c:87: 99:2f:fb:5a:fb:65:93:6a:7a:ac:f1:d4:ad:aa:fb:c4:ea:f5: 19:86:b4:15:bf:e9:ba:08:7d:4f:08:b9:22:d0:2c:6f:21:40: a7:de:76:e0:d6:4c:38:81:02:5c:86:e3:3e:2a:4f:3f:1b:62: c0:0e:bb:30:95:c5:e3:a8:d6:b9:93:56:9f:e0:89:62:fb:44: 13:ec:47:0d:5d:c0:00:f2:a1:73:ae:db:e7:7a:6a:5a:e5:7f: 87:5c:81:cd:3c:8c:a5:8f:7d:93:c5:99:82:45:a3:85:2c:04: e7:89:e6:fb:fc:8c:5c:e6:c4:9e:b3:7a:81:cd:f2:79:80:1a: b0:a0:68:f6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0MxMTAvBgNVBAUTKDM5QkIwQkZGMTRGQjZCNEI1Rjg2MTM3Mjc0RDQyNTEz RjM3NTNBNDcwHhcNMjUwNzI5MDAzNTM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGQxOC01ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArH0fS71hXRWEH5KO700ieQRFwnHM9BXf2S7kVgSzEhThAdbk2RE0JrA258pG ycoKZYkKjEijPFFh0JDENgfyQwUVqULQ8S/+U9p94MtAjcPPSpzFkpcu4BQWe8YU gbCZMMq5L9aOaqwKTV5eGs6vifGPCnbGnrjWcde52KcW1ZrSEbH/iFfpnZcShbiq NsrmWRLpCws/a15cXrCWfDqU1dC4gfuJpjj90KMrd7oFzuYltinoAPoiE+Hn5LR5 UgI6gfds5TCjw3TZDzn7MKUOMUuCm1nBcEgEc5yAg5izIZgqMDY9QkXQN948QjlW ykNKBRU3pRMpUv+Pk1WRP/IwjwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFAjs8mQD qATDO7gCuMErhkddR3LLMB8GA1UdIwQYMBaAFDm7C/8U+2tLX4YTcnTUJRPzdTpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDQy9GODlDM0VCNjE1 MzExMUVDQjU5NEZCN0RDNEY5QUUwMi9PYnNMX3hUN2EwdGZoaE55ZE5RbEVfTjFP a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09ic0xfeFQ3YTB0ZmhoTnlkTlFsRV9OMU9rYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTI0Q0MvRjg5QzNFQjYxNTMxMTFFQ0I1OTRGQjdEQzRGOUFFMDIvNUQ0QjBCNUUx NTM2MTFFQ0E4OTc1NDZCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5jYMA8EAgACMAkDBwAgAQ30RoAwDQYJKoZIhvcNAQELBQADggEB AJ8TeDW+pT3arSpi73x+WAjYPofa6dNBDQveUUEQcDlH5sPb7Xfd+rvUQmeYN3sX sjTb3S+6aN9OXLf3dRg+Y1ImdwhIjp+GZv9zfgNjH1nRQHisXlrcxLMr/A4fXyfr lDBB0XS1vgXBUNe2uAnky4gSQO6kEeJTgX4UoWF8h5kv+1r7ZZNqeqzx1K2q+8Tq 9RmGtBW/6boIfU8IuSLQLG8hQKfeduDWTDiBAlyG4z4qTz8bYsAOuzCVxeOo1rmT Vp/giWL7RBPsRw1dwADyoXOu2+d6alrlf4dcgc08jKWPfZPFmYJFo4UsBOeJ5vv8 jFzmxJ6zeoHN8nmAGrCgaPY= -----END CERTIFICATE-----Generated at Sat Mar 28 13:39:53 2026 by rpki-client