$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa File: CB04F4409BE611EF8AFF947CC4F9AE02.roa (raw, json) Hash identifier: qD+BUgUhK3DI5i4LAigsq9eVcd7R9m6jCEFQfslUH2g= Subject key identifier: 15:CF:76:88:37:AF:08:45:95:A9:70:CF:4D:E2:C0:42:77:CF:76:93 Certificate issuer: /CN=A91415AA/serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Certificate serial: 0102 Authority key identifier: 0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa Signing time: Sun 01 Mar 2026 19:23:51 +0000 ROA not before: Sun 22 Jun 2025 19:44:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139025 IP address blocks: 103.138.155.0/24 maxlen: 24 103.160.158.0/24 maxlen: 24 2001:df2:c080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 19:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=0CFCCC5980F57E6BC84DF11B4C571935D25DACCA Validity Not Before: Jun 22 19:44:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a49247-6f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:6a:e3:3c:38:22:01:74:30:2d:50:41:ef: d4:51:8d:a5:27:63:97:62:35:0e:8f:68:42:ad:b1: b8:66:f9:0e:9b:a2:71:5b:9c:9a:6b:42:21:10:8f: e0:ca:2f:3e:f5:95:94:cd:76:15:cb:4d:8f:24:31: bf:d3:da:59:3a:3a:4a:5d:8a:8a:a6:63:0e:b6:a5: 65:18:8f:b6:44:5a:06:23:58:8e:fd:59:1c:64:40: 54:d4:7c:b6:46:14:02:62:58:ea:22:87:a4:ff:64: 1e:14:3c:df:1f:8b:36:f4:03:b2:61:56:6c:30:3c: 28:89:e2:bc:98:80:72:ef:a7:57:f4:17:3d:2d:e2: f1:67:75:19:d5:88:af:83:9e:e2:44:43:b5:b8:ee: 5e:56:df:c0:98:c9:8a:12:90:20:e7:77:9c:34:a9: 29:c2:a3:90:e2:90:a5:99:d5:2f:89:21:c1:8a:a8: 95:37:02:cf:25:35:8f:88:5f:ae:64:ed:16:63:55: 91:e2:92:4b:39:c5:b1:aa:49:dd:ed:35:6f:ca:53: 2f:22:05:6e:46:d1:5e:73:d3:29:96:5c:f8:95:8d: 6b:94:5d:3c:a8:fe:cd:d1:97:3b:96:3a:f3:36:bf: 26:8f:2e:c9:ec:ab:9d:52:7f:63:75:60:5a:10:57: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CF:76:88:37:AF:08:45:95:A9:70:CF:4D:E2:C0:42:77:CF:76:93 X509v3 Authority Key Identifier: keyid:0C:FC:CC:59:80:F5:7E:6B:C8:4D:F1:1B:4C:57:19:35:D2:5D:AC:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/DPzMWYD1fmvITfEbTFcZNdJdrMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DPzMWYD1fmvITfEbTFcZNdJdrMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/CB04F4409BE611EF8AFF947CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.155.0/24 103.160.158.0/24 IPv6: 2001:df2:c080::/48 Signature Algorithm: sha256WithRSAEncryption 12:fc:42:0f:45:a3:b5:c8:0c:5e:92:b4:61:5d:21:e9:cc:b3: a0:91:38:8e:32:ac:60:ba:65:b4:58:e8:9c:cd:49:ff:81:a6: 5f:3f:d5:9d:bc:90:e4:7c:28:99:4f:f3:dc:60:8c:54:64:e6: 77:d4:cd:51:36:bd:d7:bf:7c:98:18:6b:b1:a6:5e:c7:bb:8d: 93:35:48:39:36:3c:4c:19:f4:26:97:cb:5b:d7:4e:62:26:3c: 18:2c:ac:a6:98:df:f2:01:5d:3e:88:73:73:cc:7f:62:45:51: e6:94:38:b6:bc:20:56:9f:30:f8:a0:06:ad:7c:a0:f0:eb:0e: ec:41:08:22:74:5c:4b:c9:4d:54:8d:23:08:98:f6:a4:84:8d: 30:62:e3:cb:d8:0f:f9:c9:86:78:a3:d3:c3:b2:85:37:8f:b3: e1:3b:89:63:58:2e:be:22:05:d7:4f:82:79:57:bd:09:05:41: bd:b6:dc:e0:dd:fd:9d:4c:43:82:d1:45:df:e4:7f:c4:0a:3e: 11:21:3f:c3:3d:c7:06:04:4f:ae:89:6d:64:88:88:bb:eb:cd: 65:13:2f:d1:b8:f1:cc:f6:fa:35:15:49:84:0d:c8:1a:33:2c: 13:77:18:df:e5:f1:eb:2e:db:96:31:6b:f6:4a:5a:b3:ce:7e: b9:8d:d5:40 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKDBDRkNDQzU5ODBGNTdFNkJDODRERjExQjRDNTcxOTM1 RDI1REFDQ0EwHhcNMjUwNjIyMTk0NDI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTI0Ny02ZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAllRq4zw4IgF0MC1QQe/UUY2lJ2OXYjUOj2hCrbG4ZvkOm6JxW5yaa0IhEI/g yi8+9ZWUzXYVy02PJDG/09pZOjpKXYqKpmMOtqVlGI+2RFoGI1iO/VkcZEBU1Hy2 RhQCYljqIoek/2QeFDzfH4s29AOyYVZsMDwoieK8mIBy76dX9Bc9LeLxZ3UZ1Yiv g57iREO1uO5eVt/AmMmKEpAg53ecNKkpwqOQ4pClmdUviSHBiqiVNwLPJTWPiF+u ZO0WY1WR4pJLOcWxqknd7TVvylMvIgVuRtFec9Mpllz4lY1rlF08qP7N0Zc7ljrz Nr8mjy7J7KudUn9jdWBaEFdBZQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFBXPdog3 rwhFlalwz03iwEJ3z3aTMB8GA1UdIwQYMBaAFAz8zFmA9X5ryE3xG0xXGTXSXazK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi9EUHpNV1lEMWZtdklUZkViVEZjWk5kSmRy TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RQek1XWUQxZm12SVRmRWJURmNaTmRKZHJNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE1QUEvM0VGQTI0MTQ2MkUwMTFFQUE2RDU5QTJDQzRGOUFFMDIvQ0IwNEY0NDA5 QkU2MTFFRjhBRkY5NDdDQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS BAIAATAMAwQAZ4qbAwQAZ6CeMA8EAgACMAkDBwAgAQ3ywIAwDQYJKoZIhvcNAQEL BQADggEBABL8Qg9Fo7XIDF6StGFdIenMs6CROI4yrGC6ZbRY6JzNSf+Bpl8/1Z28 kOR8KJlP89xgjFRk5nfUzVE2vde/fJgYa7GmXse7jZM1SDk2PEwZ9CaXy1vXTmIm PBgsrKaY3/IBXT6Ic3PMf2JFUeaUOLa8IFafMPigBq18oPDrDuxBCCJ0XEvJTVSN IwiY9qSEjTBi48vYD/nJhnij08OyhTePs+E7iWNYLr4iBddPgnlXvQkFQb223ODd /Z1MQ4LRRd/kf8QKPhEhP8M9xwYET66JbWSIiLvrzWUTL9G48cz2+jUVSYQNyBoz LBN3GN/l8esu25Yxa/ZKWrPOfrmN1UA= -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:49 2026 by rpki-client