$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/5DCB0A0C410C11EA8A6C412DC4F9AE02.roa File: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (raw, json) Hash identifier: 4eqOlSLRPKjeL1TFzyh0NXLTAo0Vu3W9omx4TqqCWjg= Subject key identifier: 6C:63:67:A1:C5:D9:E4:FA:FE:76:77:EC:94:AE:EE:A8:7A:F2:55:7C Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0BB3 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/5DCB0A0C410C11EA8A6C412DC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:16:50 +0000 ROA not before: Tue 04 Nov 2025 19:38:06 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 63844 IP address blocks: 103.41.244.0/23 maxlen: 24 103.77.252.0/23 maxlen: 24 116.206.252.0/22 maxlen: 24 2405:9140::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2995 (0xbb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Nov 4 19:38:06 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a51d42-f064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:0f:97:6c:a5:9d:81:66:60:24:56:d6:97: 95:92:fe:45:fa:16:b3:25:91:fc:7c:8a:ab:4a:05: eb:9f:26:aa:0d:59:31:bd:79:40:de:5b:0e:55:2b: 64:57:2d:af:e3:c4:0b:5e:00:b9:42:f6:17:a6:52: 6c:76:eb:06:c2:0a:cf:c4:b7:58:ad:07:db:9f:72: bb:43:54:c2:81:5f:01:1a:66:96:a0:7a:47:76:b1: 9b:13:2a:56:80:c3:ed:d4:6c:00:0f:ad:85:6e:64: 57:8a:08:6e:ed:72:19:7d:21:0d:4f:2b:17:85:75: fa:ec:62:bc:e1:d6:03:2e:34:ad:5b:85:e6:f7:37: e5:b3:27:98:08:ac:ee:fd:eb:00:5e:e6:bf:de:37: 7b:01:28:32:c4:d0:9a:4a:6f:49:ce:bd:c3:42:1b: 65:7d:8a:26:23:07:09:f0:f6:3c:99:6c:cf:86:0a: 92:f1:76:93:31:6e:18:4c:e6:03:06:6e:30:ba:16: 2a:52:50:d0:33:22:61:4a:01:7e:08:6f:12:48:1d: f2:0e:ff:ce:62:47:eb:3d:59:31:8e:85:83:76:0b: 8d:b9:f2:f5:18:6c:bd:59:06:1b:a9:68:33:5b:95: dd:fb:ed:18:1b:4a:a4:74:d7:1d:94:d6:7c:61:56: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:63:67:A1:C5:D9:E4:FA:FE:76:77:EC:94:AE:EE:A8:7A:F2:55:7C X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/5DCB0A0C410C11EA8A6C412DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.41.244.0/23 103.77.252.0/23 116.206.252.0/22 IPv6: 2405:9140::/32 Signature Algorithm: sha256WithRSAEncryption 78:a1:f5:79:f4:31:e9:d0:b2:07:85:06:47:5b:e5:68:48:b4: a8:9f:b4:1c:bd:b2:82:7d:81:07:78:37:3c:73:57:38:df:57: f0:7a:b4:fe:16:ce:c5:09:17:72:0f:a7:44:f9:44:d1:09:c2: 6c:05:02:47:c7:c9:2b:69:9f:f4:71:c3:44:bb:cd:dc:99:16: f1:f1:7c:7f:d8:72:69:2f:99:8c:68:9e:48:d8:c0:87:d1:72: 57:67:4a:11:e2:55:f4:ae:89:2a:75:a2:d7:05:87:fd:21:4e: 7c:f4:41:c5:fe:e5:40:64:a3:98:c1:72:1d:39:fe:f6:37:aa: 15:38:0e:fa:1b:bf:e7:a1:32:ba:07:1e:69:f7:20:f3:d3:78: 19:1c:0a:82:5d:1f:20:81:1d:dc:9c:25:56:25:da:f7:94:3e: 39:41:0a:fa:8e:14:47:cc:01:b3:64:78:e8:4f:62:72:3e:2e: 65:0b:42:0e:fa:99:5d:b2:33:2c:a3:52:68:67:54:b1:92:e2: 34:de:c6:e5:7e:37:c4:85:cb:65:12:95:5b:4a:59:9d:35:76: 17:e2:80:51:35:a8:c6:6d:d2:c5:f9:b2:75:29:75:5f:3d:22: 98:a1:96:50:b2:b7:4a:41:30:aa:5a:be:1c:89:0b:2f:61:24: 38:fd:83:94 -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUxMTA0MTkzODA2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWQ0Mi1mMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JQPl2ylnYFmYCRW1peVkv5F+hazJZH8fIqrSgXrnyaqDVkxvXlA3lsOVStk Vy2v48QLXgC5QvYXplJsdusGwgrPxLdYrQfbn3K7Q1TCgV8BGmaWoHpHdrGbEypW gMPt1GwAD62FbmRXighu7XIZfSENTysXhXX67GK84dYDLjStW4Xm9zflsyeYCKzu /esAXua/3jd7ASgyxNCaSm9Jzr3DQhtlfYomIwcJ8PY8mWzPhgqS8XaTMW4YTOYD Bm4wuhYqUlDQMyJhSgF+CG8SSB3yDv/OYkfrPVkxjoWDdguNufL1GGy9WQYbqWgz W5Xd++0YG0qkdNcdlNZ8YVbxTQIDAQABo4ICezCCAncwHQYDVR0OBBYEFGxjZ6HF 2eT6/nZ37JSu7qh68lV8MB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA4QkUvQTJDODI3RUU0MTBCMTFFQUI2OTU0QTJDQzRGOUFFMDIvNURDQjBBMEM0 MTBDMTFFQThBNkM0MTJEQzRGOUFFMDIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQBZyn0AwQBZ038AwQCdM78MA0EAgACMAcDBQAkBZFAMA0GCSqGSIb3 DQEBCwUAA4IBAQB4ofV59DHp0LIHhQZHW+VoSLSon7QcvbKCfYEHeDc8c1c431fw erT+Fs7FCRdyD6dE+UTRCcJsBQJHx8kraZ/0ccNEu83cmRbx8Xx/2HJpL5mMaJ5I 2MCH0XJXZ0oR4lX0rokqdaLXBYf9IU589EHF/uVAZKOYwXIdOf72N6oVOA76G7/n oTK6Bx5p9yDz03gZHAqCXR8ggR3cnCVWJdr3lD45QQr6jhRHzAGzZHjoT2JyPi5l C0IO+pldsjMso1JoZ1SxkuI03sblfjfEhctlEpVbSlmdNXYX4oBRNajGbdLF+bJ1 KXVfPSKYoZZQsrdKQTCqWr4ciQsvYSQ4/YOU -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:45 2026 by rpki-client