$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/98152E6C480111EFB2976238C4F9AE02.roa File: 98152E6C480111EFB2976238C4F9AE02.roa (raw, json) Hash identifier: IKCcqa9PRpmxLis3qIFeDEu3OJpDaH1bF5IhwAN/3Yc= Subject key identifier: 4E:8D:D7:3A:1D:F0:C7:7D:9B:1C:B5:1D:76:3E:CA:5E:D4:2F:D0:96 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 0290 Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/98152E6C480111EFB2976238C4F9AE02.roa Signing time: Sun 05 Jul 2026 02:28:30 +0000 ROA not before: Sun 05 Jul 2026 02:28:30 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133955 IP address blocks: 103.235.4.0/24 maxlen: 24 103.235.5.0/24 maxlen: 24 103.235.6.0/24 maxlen: 24 103.235.7.0/24 maxlen: 24 150.129.208.0/24 maxlen: 24 150.129.209.0/24 maxlen: 24 150.129.210.0/24 maxlen: 24 150.129.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 656 (0x290) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Jul 5 02:28:30 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a49c14e-d4d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:a4:df:59:37:57:59:dd:c3:89:27:37:c8: 7b:7e:62:73:33:88:70:ef:4b:89:e3:9f:47:fd:6f: c8:b9:7b:50:24:4d:8a:40:51:dd:bb:18:0e:a7:5d: a7:1f:86:4e:42:20:f7:b2:08:88:b2:58:cd:43:d3: 44:56:d4:0c:b6:53:e1:8e:38:72:d9:a8:db:14:14: 44:6c:29:40:cc:31:73:5a:d2:5b:42:e2:86:ac:c6: 16:c1:83:fc:0d:94:a6:48:27:8c:12:77:43:37:a9: 5c:38:27:f0:d6:15:3f:ec:7f:42:0f:aa:05:30:8b: 65:94:9f:37:c9:64:52:59:09:07:02:f4:0a:cf:e9: b9:64:5a:cb:7c:52:54:93:81:c2:a4:6f:a3:8c:32: c2:65:91:51:e5:7e:5f:af:7c:13:cf:3f:db:80:98: 6f:a2:58:fc:28:8a:ed:f6:54:5f:5f:ad:a7:bc:d3: 57:00:5b:bd:9a:9d:f4:3a:7a:48:55:b3:04:4f:a3: a8:28:f5:12:e6:06:3f:6d:94:32:fa:c4:1c:28:73: 47:32:c1:21:59:42:7b:ce:d3:cf:05:8b:cb:de:39: 90:39:df:f8:84:81:c8:11:9a:74:6e:5e:81:c3:75: f6:bc:fe:ce:87:7a:4b:71:04:bc:c7:7d:fc:42:ba: 4d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8D:D7:3A:1D:F0:C7:7D:9B:1C:B5:1D:76:3E:CA:5E:D4:2F:D0:96 X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/98152E6C480111EFB2976238C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.235.4.0/22 150.129.208.0/22 Signature Algorithm: sha256WithRSAEncryption 63:77:13:bc:3e:19:bf:56:a1:a1:17:6c:55:68:7d:4a:03:c0: 5e:06:24:1d:51:cf:09:07:9a:5b:df:58:55:aa:e0:3f:f7:ed: 22:cf:3e:01:79:80:86:b6:8f:b6:63:a3:32:22:18:d9:16:85: 11:dd:3e:34:86:66:43:f1:fb:22:2a:96:41:ad:e1:52:1d:71: 96:91:2a:00:71:e8:1b:e2:24:93:3c:01:f7:02:f5:f4:7d:0c: 72:a9:7a:a9:7a:7e:af:70:73:f7:fd:d6:41:90:56:8d:73:70: 61:36:95:f1:2e:26:01:f0:a3:f4:27:93:98:1d:53:8f:23:21: 0c:aa:d1:14:ac:a2:9f:d7:32:5d:89:06:28:b2:e6:fb:83:84: d5:45:b2:f3:ac:4a:c2:8b:08:bb:f9:01:08:5f:6c:1d:c2:1a: 74:9a:95:cc:6a:2f:94:20:ca:50:37:91:03:65:3c:a4:80:01: 63:20:0c:c3:7a:2b:25:ee:97:67:ad:52:8a:df:f2:0d:fd:e7: cf:8b:1b:45:b1:95:f7:8b:7c:9b:e4:15:e4:6d:56:63:99:a6: b8:58:8f:20:c2:b1:98:a5:f2:61:16:a2:0d:19:c1:73:d9:f0: 58:d0:8d:0f:31:f7:8f:9b:ba:28:4c:45:d2:d1:e2:63:4b:78: f8:0d:b9:d4 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjYwNzA1MDIyODMwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5YzE0ZS1kNGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTmk31k3V1ndw4knN8h7fmJzM4hw70uJ459H/W/IuXtQJE2KQFHduxgOp12n H4ZOQiD3sgiIsljNQ9NEVtQMtlPhjjhy2ajbFBREbClAzDFzWtJbQuKGrMYWwYP8 DZSmSCeMEndDN6lcOCfw1hU/7H9CD6oFMItllJ83yWRSWQkHAvQKz+m5ZFrLfFJU k4HCpG+jjDLCZZFR5X5fr3wTzz/bgJhvolj8KIrt9lRfX62nvNNXAFu9mp30OnpI VbMET6OoKPUS5gY/bZQy+sQcKHNHMsEhWUJ7ztPPBYvL3jmQOd/4hIHIEZp0bl6B w3X2vP7Oh3pLcQS8x338QrpNawIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFE6N1zod 8Md9mxy1HXY+yl7UL9CWMB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI1QTkvMjYxODg0MEVCMTQzMTFFRDg3RDA3Njc4QzRGOUFFMDIvOTgxNTJFNkM0 ODAxMTFFRkIyOTc2MjM4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZ+sEAwQCloHQMA0GCSqGSIb3DQEBCwUAA4IBAQBjdxO8Phm/VqGh F2xVaH1KA8BeBiQdUc8JB5pb31hVquA/9+0izz4BeYCGto+2Y6MyIhjZFoUR3T40 hmZD8fsiKpZBreFSHXGWkSoAcegb4iSTPAH3AvX0fQxyqXqpen6vcHP3/dZBkFaN c3BhNpXxLiYB8KP0J5OYHVOPIyEMqtEUrKKf1zJdiQYosub7g4TVRbLzrErCiwi7 +QEIX2wdwhp0mpXMai+UIMpQN5EDZTykgAFjIAzDeisl7pdnrVKK3/IN/efPixtF sZX3i3yb5BXkbVZjmaa4WI8gwrGYpfJhFqINGcFz2fBY0I0PMfePm7ooTEXS0eJj S3j4DbnU -----END CERTIFICATE-----Generated at Fri Jul 24 10:12:06 2026 by rpki-client