$ rpki-client -vvf rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa File: 4EF483C64C2911E78BF1BD13C4F9AE02.roa (raw, json) Hash identifier: te4uWB0jXaN5MAh9dRrKutkLXrpOzUKxCHNdQMjzpZI= Subject key identifier: D4:F0:CA:FF:C0:17:E8:51:C9:61:A2:15:4A:FA:7E:B1:47:89:CC:8E Certificate issuer: /CN=A91505AB/serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Certificate serial: 1AB5 Authority key identifier: 84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:13:03 +0000 ROA not before: Tue 24 Jun 2025 16:26:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 133450 IP address blocks: 103.94.128.0/22 maxlen: 22 103.94.128.0/23 maxlen: 23 103.94.128.0/24 maxlen: 24 103.94.129.0/24 maxlen: 24 103.94.130.0/23 maxlen: 23 103.94.130.0/24 maxlen: 24 103.94.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6837 (0x1ab5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91505AB, serialNumber=84018C083D10A39E7F685C41AE166370C6D77AC4 Validity Not Before: Jun 24 16:26:35 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5a8ff-4b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:43:82:0c:cc:55:23:51:36:30:8f:67:17: f1:72:d7:ad:80:46:a8:4c:8d:e1:19:6c:7f:53:32: d1:7d:d4:9b:e4:cd:3f:b7:a1:e1:1a:74:c8:31:17: 86:15:e0:e2:ee:03:d2:68:ab:ac:d9:fc:5f:db:fa: f1:0c:3a:e1:e6:49:a7:31:36:3a:5e:4c:2d:53:3c: 9d:20:e4:79:ea:61:2e:8e:0b:c4:1e:44:1e:00:e7: 69:9a:77:ed:96:0e:f6:9a:69:b0:97:72:9b:f1:36: 9f:3f:09:30:d0:8a:9e:14:4e:41:45:f9:d4:e0:13: 04:b2:ca:41:55:34:77:d6:4d:e9:f9:58:da:47:59: d1:e4:40:1b:0a:22:53:d9:13:d2:50:0a:e5:86:f1: 40:d3:f5:ef:cb:5c:08:69:d9:d8:f9:81:a6:7d:67: 20:68:24:c5:2f:3c:55:b2:9b:86:71:02:5f:1e:ea: c2:43:96:f8:e9:73:d0:82:03:70:c1:e4:38:ac:4f: 0e:f7:72:d8:b7:8f:ef:4e:04:bb:5e:82:81:40:87: f4:f7:7d:3e:64:a8:6b:47:ae:47:64:1c:1a:ce:03: 67:75:c0:5e:f1:3d:4f:8a:d6:11:b1:05:ff:de:c9: 47:4d:7a:1c:9c:aa:a7:78:0a:2b:00:0d:93:2e:07: 40:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F0:CA:FF:C0:17:E8:51:C9:61:A2:15:4A:FA:7E:B1:47:89:CC:8E X509v3 Authority Key Identifier: keyid:84:01:8C:08:3D:10:A3:9E:7F:68:5C:41:AE:16:63:70:C6:D7:7A:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/hAGMCD0Qo55_aFxBrhZjcMbXesQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hAGMCD0Qo55_aFxBrhZjcMbXesQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91505AB/05243AC64C2811E7968AD211C4F9AE02/4EF483C64C2911E78BF1BD13C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.94.128.0/22 Signature Algorithm: sha256WithRSAEncryption 88:42:f8:72:ee:f2:ae:21:a1:0a:cc:15:60:70:12:13:a8:ec: 02:12:62:2f:a1:ed:45:7c:bc:1a:ed:74:0a:04:b4:fc:56:e7: ac:73:94:5c:9b:d1:c7:75:3f:55:c8:03:0f:58:8c:a0:ff:af: e9:8f:bb:b7:8d:d0:dd:13:05:df:2c:82:fd:95:03:94:9e:d2: c5:a2:c4:8f:27:c0:de:46:d0:3d:1a:e9:38:5e:69:97:a2:f8: 9d:92:6c:12:bc:41:87:4b:98:f7:0f:6e:a5:c0:50:08:84:70: fd:9c:b0:8a:52:83:a5:e6:47:f0:b3:f8:b5:c0:7d:26:8e:b7: ae:6e:7a:eb:50:35:0e:55:57:57:a7:b0:60:aa:d2:dc:db:b8: 34:07:d6:78:81:c8:a2:d4:35:c6:ea:ea:76:88:dd:5a:4c:33: 0c:a2:b4:d5:46:50:85:37:ee:f5:8f:cc:70:bb:7c:ab:ff:64: ff:ce:10:fc:f0:2f:aa:57:4f:32:e3:ad:ac:e5:79:a9:d1:83: a8:51:ed:74:fc:53:0e:af:81:6a:d0:7e:84:b8:ce:2c:73:f8: b2:ca:09:6a:eb:26:bb:92:11:0b:dd:dc:ab:b4:20:07:01:1e: b4:6c:15:1f:a0:4a:a3:78:bd:52:72:46:09:00:8a:a3:90:ad: 35:74:bc:0b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA1QUIxMTAvBgNVBAUTKDg0MDE4QzA4M0QxMEEzOUU3RjY4NUM0MUFFMTY2Mzcw QzZENzdBQzQwHhcNMjUwNjI0MTYyNjM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YThmZi00Yjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFJDggzMVSNRNjCPZxfxctetgEaoTI3hGWx/UzLRfdSb5M0/t6HhGnTIMReG FeDi7gPSaKus2fxf2/rxDDrh5kmnMTY6XkwtUzydIOR56mEujgvEHkQeAOdpmnft lg72mmmwl3Kb8TafPwkw0IqeFE5BRfnU4BMEsspBVTR31k3p+VjaR1nR5EAbCiJT 2RPSUArlhvFA0/Xvy1wIadnY+YGmfWcgaCTFLzxVspuGcQJfHurCQ5b46XPQggNw weQ4rE8O93LYt4/vTgS7XoKBQIf0930+ZKhrR65HZBwazgNndcBe8T1PitYRsQX/ 3slHTXocnKqneAorAA2TLgdAdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNTwyv/A F+hRyWGiFUr6frFHicyOMB8GA1UdIwQYMBaAFIQBjAg9EKOef2hcQa4WY3DG13rE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDVBQi8wNTI0M0FDNjRD MjgxMUU3OTY4QUQyMTFDNEY5QUUwMi9oQUdNQ0QwUW81NV9hRnhCcmhaamNNYlhl c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hBR01DRDBRbzU1X2FGeEJyaFpqY01iWGVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA1QUIvMDUyNDNBQzY0QzI4MTFFNzk2OEFEMjExQzRGOUFFMDIvNEVGNDgzQzY0 QzI5MTFFNzhCRjFCRDEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ16AMA0GCSqGSIb3DQEBCwUAA4IBAQCIQvhy7vKuIaEKzBVgcBIT qOwCEmIvoe1FfLwa7XQKBLT8Vuesc5Rcm9HHdT9VyAMPWIyg/6/pj7u3jdDdEwXf LIL9lQOUntLFosSPJ8DeRtA9Guk4XmmXovidkmwSvEGHS5j3D26lwFAIhHD9nLCK UoOl5kfws/i1wH0mjreubnrrUDUOVVdXp7BgqtLc27g0B9Z4gcii1DXG6up2iN1a TDMMorTVRlCFN+71j8xwu3yr/2T/zhD88C+qV08y462s5Xmp0YOoUe10/FMOr4Fq 0H6EuM4sc/iyyglq6ya7khEL3dyrtCAHAR60bBUfoEqjeL1SckYJAIqjkK01dLwL -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:53 2026 by rpki-client