$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa File: 38EC4D321F2711EB93A71042C4F9AE02.roa (raw, json) Hash identifier: Sblu535PzvGVdxFBEruufBhd0MyzgVdZtuh1fI35ITw= Subject key identifier: 2E:E3:3D:8A:81:99:4F:77:73:2B:88:BE:BA:00:56:43:82:F9:0C:B7 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 0A0D Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa Signing time: Wed 22 Apr 2026 20:25:07 +0000 ROA not before: Wed 22 Apr 2026 20:25:07 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 393954 IP address blocks: 103.149.76.0/24 maxlen: 24 2405:e640:c0fd::/48 maxlen: 48 2405:e640:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Apr 22 20:25:07 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69e92ea3-32d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3e:62:db:76:bb:be:69:72:76:fc:c9:ea:b6: 5e:30:ec:80:79:5b:81:47:14:97:2e:e6:90:bc:25: b1:32:40:54:e8:56:f0:d4:09:b0:ec:f6:88:a9:ea: da:c9:2d:85:b8:09:c4:95:30:90:36:7f:d4:ac:10: 06:34:de:30:1f:09:fc:71:ae:9e:88:23:82:9f:3e: ab:2e:e4:c6:aa:a7:79:c7:39:36:fc:88:3c:f6:f8: 35:a9:b2:a1:c0:71:2e:26:96:f1:49:48:ec:3e:33: a7:2f:ed:67:77:2e:dc:c7:32:9d:e8:14:72:1f:a8: e3:4c:15:fe:48:7b:99:f3:8c:b3:cd:e0:18:15:af: 80:37:d4:37:71:9a:d0:0d:07:d7:a8:fe:a2:42:bc: c2:e8:1e:ad:2a:9e:e0:c8:a2:12:22:3b:a1:44:5d: 79:40:95:0b:bb:c3:4f:12:a0:50:9f:ff:55:36:c8: ec:6e:05:30:2a:3d:3c:23:92:f9:67:22:23:8b:e5: 66:42:2c:93:7b:8d:a9:51:13:ca:ab:ad:8a:5b:54: a1:c0:54:88:a9:1b:cd:9e:57:0d:fd:e3:2b:ed:b2: 68:78:89:14:ab:88:61:20:3e:27:ac:49:7a:15:3c: fd:cf:d3:26:75:46:dd:d5:d5:0f:74:65:7e:f2:c6: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E3:3D:8A:81:99:4F:77:73:2B:88:BE:BA:00:56:43:82:F9:0C:B7 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.76.0/24 IPv6: 2405:e640:c0fd::/48 2405:e640:d000::/36 Signature Algorithm: sha256WithRSAEncryption ac:53:cf:93:33:42:42:2d:3c:b2:fa:a7:5c:2a:32:9d:71:61: 40:2a:8a:a3:a8:41:ec:8c:ac:60:c5:52:70:2d:d9:41:0b:f9: d2:e9:2c:c7:0c:dd:c7:51:fe:da:af:03:ec:82:8a:61:5b:80: 81:38:4d:61:e9:a7:b3:64:2a:71:31:cc:78:ea:5e:c1:aa:5a: 6a:78:c7:74:95:50:88:84:40:66:6e:c8:5b:22:94:65:ed:57: ee:53:b0:74:68:58:62:51:cc:46:2d:4e:6a:32:9d:b0:ee:fa: ae:5d:f7:89:0f:3e:b0:48:2e:75:35:97:9c:f3:4a:d4:ce:1b: 03:bb:21:be:d9:ff:11:95:86:ef:aa:04:7f:c6:ad:d1:ef:c9: a1:f1:d6:f8:e6:af:c8:73:49:5e:cc:37:51:9e:9f:c0:ad:ef: 13:80:29:56:09:a6:e8:00:92:d5:db:9d:5a:ab:d5:5d:85:72: 11:1c:4a:d2:4b:8e:f1:05:d6:d4:d6:04:e5:df:ba:e9:c5:d6: 33:a3:4f:7d:b6:eb:22:cf:f2:96:d2:33:f2:88:63:6b:dd:74: dc:bd:0c:03:11:9e:7c:e4:b5:e2:ac:88:fc:72:30:77:5a:ee: 3a:64:e3:ab:fa:7b:f5:5b:9d:a6:41:c9:89:4e:4d:aa:4b:40: 8b:3b:39:f9 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjYwNDIyMjAyNTA3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWU5MmVhMy0zMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9j5i23a7vmlydvzJ6rZeMOyAeVuBRxSXLuaQvCWxMkBU6Fbw1Amw7PaIqera yS2FuAnElTCQNn/UrBAGNN4wHwn8ca6eiCOCnz6rLuTGqqd5xzk2/Ig89vg1qbKh wHEuJpbxSUjsPjOnL+1ndy7cxzKd6BRyH6jjTBX+SHuZ84yzzeAYFa+AN9Q3cZrQ DQfXqP6iQrzC6B6tKp7gyKISIjuhRF15QJULu8NPEqBQn/9VNsjsbgUwKj08I5L5 ZyIji+VmQiyTe42pURPKq62KW1ShwFSIqRvNnlcN/eMr7bJoeIkUq4hhID4nrEl6 FTz9z9MmdUbd1dUPdGV+8sZUbQIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFC7jPYqB mU93cyuIvroAVkOC+Qy3MB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ3RUYvOEEyOTEwNDY5OTE2MTFFQTk5NTVENTBCQzRGOUFFMDIvMzhFQzREMzIx RjI3MTFFQjkzQTcxMDQyQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAM BAIAATAGAwQAZ5VMMBcEAgACMBEDBwAkBeZAwP0DBgQkBeZA0DANBgkqhkiG9w0B AQsFAAOCAQEArFPPkzNCQi08svqnXCoynXFhQCqKo6hB7IysYMVScC3ZQQv50uks xwzdx1H+2q8D7IKKYVuAgThNYemns2QqcTHMeOpewapaanjHdJVQiIRAZm7IWyKU Ze1X7lOwdGhYYlHMRi1OajKdsO76rl33iQ8+sEgudTWXnPNK1M4bA7shvtn/EZWG 76oEf8at0e/JofHW+OavyHNJXsw3UZ6fwK3vE4ApVgmm6ACS1dudWqvVXYVyERxK 0kuO8QXW1NYE5d+66cXWM6NPfbbrIs/yltIz8ohja9103L0MAxGefOS14qyI/HIw d1ruOmTjq/p79VudpkHJiU5NqktAizs5+Q== -----END CERTIFICATE-----Generated at Wed May 13 11:02:55 2026 by rpki-client