$ rpki-client -vvf rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/591A8C06BE4D11EC8DADB22CC4F9AE02.roa File: 591A8C06BE4D11EC8DADB22CC4F9AE02.roa (raw, json) Hash identifier: EiXaWk8MN8PRU4m8/hbOE0IqPBgeOCBNgzztG3jvQeA= Subject key identifier: C7:9C:55:2E:27:A0:70:58:12:21:B9:D9:1B:10:3F:0A:49:3F:0C:5E Certificate issuer: /CN=A91366F8/serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Certificate serial: 03E3 Authority key identifier: 73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/591A8C06BE4D11EC8DADB22CC4F9AE02.roa Signing time: Fri 06 Mar 2026 10:21:50 +0000 ROA not before: Fri 06 Mar 2026 10:21:50 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 8849 IP address blocks: 103.88.26.0/24 maxlen: 24 103.109.236.0/24 maxlen: 24 103.172.116.0/23 maxlen: 24 110.44.108.0/22 maxlen: 22 110.44.108.0/23 maxlen: 24 203.190.0.0/22 maxlen: 22 203.190.0.0/24 maxlen: 24 203.190.1.0/24 maxlen: 24 203.190.2.0/24 maxlen: 24 203.190.3.0/24 maxlen: 24 2407:d140::/32 maxlen: 32 2407:d140::/36 maxlen: 36 2407:d140:1000::/36 maxlen: 36 2407:d140:2000::/36 maxlen: 36 2407:d140:3000::/36 maxlen: 36 2407:d140:4000::/35 maxlen: 36 2407:d140:6000::/36 maxlen: 36 2407:d140:7000::/36 maxlen: 36 2407:d140:8000::/34 maxlen: 34 2407:d140:8000::/36 maxlen: 36 2407:d140:9000::/36 maxlen: 36 2407:d140:a000::/36 maxlen: 36 2407:d140:b000::/36 maxlen: 36 2407:d140:c000::/36 maxlen: 36 2407:d140:d000::/36 maxlen: 36 2407:d140:e000::/36 maxlen: 36 2407:d140:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91366F8, serialNumber=73914D1410A1CD3F85AD1E1B0A50FF3F8BD60C10 Validity Not Before: Mar 6 10:21:50 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69aaaabe-31dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d0:1a:b9:49:57:3b:c7:08:15:53:4a:2f:0f: eb:2e:18:71:a2:3b:97:12:11:33:f7:0d:ca:c7:3e: 22:8e:bd:96:a1:ad:f1:f1:f2:9b:9d:73:2a:c0:c4: ca:26:e4:35:e7:8c:55:50:9c:67:59:92:00:90:7f: f0:b6:18:6d:91:be:9e:23:45:6f:a2:fd:a9:e6:51: b1:3d:b0:12:25:31:80:68:30:bf:6f:94:5f:04:30: 49:11:f7:31:50:1e:f9:39:4f:d8:c5:c9:ef:fa:47: 80:f4:ef:7e:49:ea:78:d4:87:c4:07:c6:e8:31:81: 6d:a7:27:ec:49:74:48:c7:97:c1:cf:fd:76:21:be: d3:9e:0b:eb:a4:2b:05:38:57:1f:e4:7a:3f:73:65: bd:9c:19:0b:75:5c:5e:cf:08:97:5b:2a:28:fd:9b: 1f:f6:ff:43:f9:36:11:7b:4e:61:ad:ad:e2:74:25: 04:93:90:0f:61:83:b9:0d:65:b1:6b:f2:7b:c7:ae: cc:21:53:69:cd:19:d9:18:11:53:6a:52:67:2c:8a: dd:3f:8e:3a:bb:17:ab:cc:11:d4:20:9b:a3:3c:df: 64:30:ca:ea:f0:de:d8:f4:b9:ea:f4:4d:3f:09:e5: 8c:59:6c:32:17:e2:fa:8d:33:df:f1:be:75:d8:75: 46:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9C:55:2E:27:A0:70:58:12:21:B9:D9:1B:10:3F:0A:49:3F:0C:5E X509v3 Authority Key Identifier: keyid:73:91:4D:14:10:A1:CD:3F:85:AD:1E:1B:0A:50:FF:3F:8B:D6:0C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/c5FNFBChzT-FrR4bClD_P4vWDBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5FNFBChzT-FrR4bClD_P4vWDBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91366F8/A4243970BE4A11ECB279552AC4F9AE02/591A8C06BE4D11EC8DADB22CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.26.0/24 103.109.236.0/24 103.172.116.0/23 110.44.108.0/22 203.190.0.0/22 IPv6: 2407:d140::/32 Signature Algorithm: sha256WithRSAEncryption 52:92:f4:29:63:59:a6:ee:52:f0:bf:bb:78:d9:af:7a:ce:e4: 0d:1b:95:3d:75:88:85:73:c4:ec:ca:cb:4f:0b:f6:20:21:83: 9f:65:e8:f1:d3:89:44:a3:ad:73:e6:22:ef:19:fb:35:38:4a: 12:4f:bc:ac:83:53:60:49:3f:1e:dc:de:e6:d8:27:0e:1d:0a: f6:f9:7d:89:76:61:98:8b:43:01:2d:93:47:90:86:03:62:e8: e9:6e:3d:be:7b:28:33:81:c0:2a:7b:94:c4:3c:c4:8a:1c:4c: bd:2b:06:ba:9b:99:8d:0c:9d:92:f2:aa:c2:26:e1:25:55:b4: 8d:9b:7d:9f:7a:86:22:4a:36:1c:ea:ae:2b:b8:52:ea:60:b7: 22:0f:0d:ed:df:20:3d:14:1f:0e:da:a9:f6:cc:36:77:92:85: d7:a5:98:e7:8c:47:6d:2b:8a:fe:06:f7:77:78:97:f6:7e:c1: 64:72:07:3d:76:f1:91:8d:06:e2:c0:83:78:1d:de:6e:44:24: b9:88:11:f4:cb:e5:d0:30:1d:1d:6e:d8:90:44:5a:03:0c:17: 70:47:c5:33:e2:69:22:08:0f:8b:f8:0e:24:e3:46:03:3d:98: 68:39:17:8f:a3:06:8b:58:35:c7:bc:1b:5f:ba:57:59:74:08: f6:29:1e:ca -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2RjgxMTAvBgNVBAUTKDczOTE0RDE0MTBBMUNEM0Y4NUFEMUUxQjBBNTBGRjNG OEJENjBDMTAwHhcNMjYwMzA2MTAyMTUwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFhYWFiZS0zMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dAauUlXO8cIFVNKLw/rLhhxojuXEhEz9w3Kxz4ijr2Woa3x8fKbnXMqwMTK JuQ154xVUJxnWZIAkH/wthhtkb6eI0Vvov2p5lGxPbASJTGAaDC/b5RfBDBJEfcx UB75OU/Yxcnv+keA9O9+Sep41IfEB8boMYFtpyfsSXRIx5fBz/12Ib7TngvrpCsF OFcf5Ho/c2W9nBkLdVxezwiXWyoo/Zsf9v9D+TYRe05hra3idCUEk5APYYO5DWWx a/J7x67MIVNpzRnZGBFTalJnLIrdP446uxerzBHUIJujPN9kMMrq8N7Y9Lnq9E0/ CeWMWWwyF+L6jTPf8b512HVG7QIDAQABo4IChzCCAoMwHQYDVR0OBBYEFMecVS4n oHBYEiG52RsQPwpJPwxeMB8GA1UdIwQYMBaAFHORTRQQoc0/ha0eGwpQ/z+L1gwQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjZGOC9BNDI0Mzk3MEJF NEExMUVDQjI3OTU1MkFDNEY5QUUwMi9jNUZORkJDaHpULUZyUjRiQ2xEX1A0dldE QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M1Rk5GQkNoelQtRnJSNGJDbERfUDR2V0RCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzY2RjgvQTQyNDM5NzBCRTRBMTFFQ0IyNzk1NTJBQzRGOUFFMDIvNTkxQThDMDZC RTREMTFFQzhEQURCMjJDQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk BAIAATAeAwQAZ1gaAwQAZ23sAwQBZ6x0AwQCbixsAwQCy74AMA0EAgACMAcDBQAk B9FAMA0GCSqGSIb3DQEBCwUAA4IBAQBSkvQpY1mm7lLwv7t42a96zuQNG5U9dYiF c8TsystPC/YgIYOfZejx04lEo61z5iLvGfs1OEoST7ysg1NgST8e3N7m2CcOHQr2 +X2JdmGYi0MBLZNHkIYDYujpbj2+eygzgcAqe5TEPMSKHEy9Kwa6m5mNDJ2S8qrC JuElVbSNm32feoYiSjYc6q4ruFLqYLciDw3t3yA9FB8O2qn2zDZ3koXXpZjnjEdt K4r+Bvd3eJf2fsFkcgc9dvGRjQbiwIN4Hd5uRCS5iBH0y+XQMB0dbtiQRFoDDBdw R8Uz4mkiCA+L+A4k40YDPZhoORePowaLWDXHvBtfuldZdAj2KR7K -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:59 2026 by rpki-client