$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/91A286509F0811ECAE659F82C4F9AE02.roa File: 91A286509F0811ECAE659F82C4F9AE02.roa (raw, json) Hash identifier: 3jewHBb77PCvairN2996ZvKaBpoln62DoJ8FtmWYmYo= Subject key identifier: DD:BA:E3:CD:8E:BE:1B:37:47:F1:DD:C0:13:C9:D7:7D:2A:9E:B0:0C Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 04A7 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/91A286509F0811ECAE659F82C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:37:03 +0000 ROA not before: Thu 04 Dec 2025 23:35:38 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 136038 IP address blocks: 103.91.217.0/24 maxlen: 24 103.99.208.0/23 maxlen: 23 103.99.208.0/24 maxlen: 24 103.99.209.0/24 maxlen: 24 103.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1191 (0x4a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Dec 4 23:35:38 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4793f-6193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4f:6c:da:4a:ea:fb:9d:f6:29:6d:2a:34:4f: 1a:77:01:59:9f:a3:68:f9:a8:c2:7f:23:79:0e:f9: 88:35:4b:f5:cb:42:a5:fe:f4:f7:97:0d:c8:31:ca: 6e:63:29:b4:8c:9d:60:63:7c:4d:2d:37:7b:92:ad: 79:24:64:83:d4:cf:53:79:5e:04:33:a3:0f:43:14: 85:e2:b9:4c:99:70:59:e4:b5:c2:d9:96:a1:46:0e: ed:f4:67:c3:25:80:01:1b:95:0e:ff:42:a8:ae:c1: 6f:8e:a3:ef:2d:d7:79:6c:1b:36:8a:88:86:7d:09: b9:49:86:5f:34:61:b7:fd:bb:a5:20:6c:a4:e0:94: 0f:ad:0a:f6:61:9b:e9:75:b2:ea:c1:c2:f6:6b:7c: 79:6c:c7:f4:9f:de:c8:4b:4a:c5:46:04:be:0a:30: 4d:6d:3f:5d:9d:ac:3c:53:c3:21:f7:2e:21:03:14: bf:dc:70:a7:bb:0f:fb:44:68:77:94:eb:7e:e0:73: fb:b1:20:41:78:b7:12:5d:95:e5:19:3b:c6:6e:8d: d6:ab:2c:c9:d9:be:1b:5f:c1:c7:35:dc:cb:53:ca: 90:48:2c:d4:24:11:50:c4:c3:85:b0:1f:a8:5f:c7: d7:e3:2a:e5:30:d4:88:ec:39:09:25:9b:1d:c4:cf: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BA:E3:CD:8E:BE:1B:37:47:F1:DD:C0:13:C9:D7:7D:2A:9E:B0:0C X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/91A286509F0811ECAE659F82C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.217.0/24 103.99.208.0-103.99.210.255 Signature Algorithm: sha256WithRSAEncryption a5:e7:88:aa:2d:4d:90:fe:fe:d5:5e:5b:64:9e:c0:a4:52:a5: a7:52:84:59:9a:91:80:88:c6:d6:12:52:13:62:f3:d9:6e:f2: 92:0b:16:c4:c3:be:00:c5:64:85:8a:8d:44:c5:b8:60:85:08: 1c:67:2d:b8:1c:ed:d3:b7:46:3f:99:ea:d5:a9:4f:15:10:dd: 12:3a:b8:7d:3c:1c:2a:85:8b:d5:4f:7f:d9:89:e6:c8:b3:cc: da:c9:5f:13:77:60:46:7f:0e:7e:2c:d7:df:91:31:95:01:87: 0e:7a:8f:70:71:e5:9d:20:a0:8a:de:c4:80:9c:f3:2c:7b:01: 73:d8:50:df:88:9c:7c:de:06:81:94:8f:09:33:5d:a6:ef:e9: d8:9e:f1:bf:04:97:0e:d9:17:82:3d:5f:7c:0e:b9:f7:14:f8: ad:a8:84:df:af:70:b8:94:44:ab:55:66:e0:1d:72:c4:16:f5: 1e:ae:4d:cb:3e:3d:f3:45:f1:20:05:a5:d5:8f:c2:a4:bf:e9: 0d:43:15:23:0e:e0:46:ad:43:84:36:4b:74:35:b3:28:53:8c: be:d1:64:5b:c2:38:2d:1e:75:1f:07:8b:57:e8:7e:f9:b9:8f: 49:fe:88:bb:c2:0e:3f:69:50:3a:e5:9c:8a:1b:7f:c2:34:19: 4b:d6:ce:6f -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICBKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjUxMjA0MjMzNTM4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzkzZi02MTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi09s2krq+532KW0qNE8adwFZn6No+ajCfyN5DvmINUv1y0Kl/vT3lw3IMcpu Yym0jJ1gY3xNLTd7kq15JGSD1M9TeV4EM6MPQxSF4rlMmXBZ5LXC2ZahRg7t9GfD JYABG5UO/0KorsFvjqPvLdd5bBs2ioiGfQm5SYZfNGG3/bulIGyk4JQPrQr2YZvp dbLqwcL2a3x5bMf0n97IS0rFRgS+CjBNbT9dnaw8U8Mh9y4hAxS/3HCnuw/7RGh3 lOt+4HP7sSBBeLcSXZXlGTvGbo3WqyzJ2b4bX8HHNdzLU8qQSCzUJBFQxMOFsB+o X8fX4yrlMNSI7DkJJZsdxM+vrQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFN26482O vhs3R/HdwBPJ130qnrAMMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEU5QzEvRUU3MDJGNDQ3QUM5MTFFQzlEQTU1QjQ2QzRGOUFFMDIvOTFBMjg2NTA5 RjA4MTFFQ0FFNjU5RjgyQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAZ1vZMAwDBARnY9ADBABnY9IwDQYJKoZIhvcNAQELBQADggEBAKXn iKotTZD+/tVeW2SewKRSpadShFmakYCIxtYSUhNi89lu8pILFsTDvgDFZIWKjUTF uGCFCBxnLbgc7dO3Rj+Z6tWpTxUQ3RI6uH08HCqFi9VPf9mJ5sizzNrJXxN3YEZ/ Dn4s19+RMZUBhw56j3Bx5Z0goIrexICc8yx7AXPYUN+InHzeBoGUjwkzXabv6die 8b8Elw7ZF4I9X3wOufcU+K2ohN+vcLiURKtVZuAdcsQW9R6uTcs+PfNF8SAFpdWP wqS/6Q1DFSMO4EatQ4Q2S3Q1syhTjL7RZFvCOC0edR8Hi1fofvm5j0n+iLvCDj9p UDrlnIobf8I0GUvWzm8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:10 2026 by rpki-client