$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa File: 94817492A7AF11EE9ABC7953C4F9AE02.roa (raw, json) Hash identifier: yf0Oo5JKnAXnHA1zKWUXPgaFuyk4K46gjJlcCe2TbRU= Subject key identifier: 7C:8B:93:48:DB:EC:F1:37:2A:AA:20:64:FD:02:92:6F:1B:81:BE:1A Certificate issuer: /CN=A91583E4/serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Certificate serial: 0252 Authority key identifier: 8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:24:50 +0000 ROA not before: Sun 01 Mar 2026 03:22:57 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150738 IP address blocks: 103.76.194.0/23 maxlen: 23 103.76.194.0/24 maxlen: 24 103.76.195.0/24 maxlen: 24 2001:df1:e1c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:51:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E4, serialNumber=8A74EF40E65A127C0E666B14A6C6574A536F3673 Validity Not Before: Mar 1 03:22:57 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a61c42-5f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:00:b4:c6:4c:3a:8a:ea:3f:2c:d3:9a:83: e6:70:69:f6:df:8b:a1:b3:2a:4b:18:74:c8:3a:f4: d2:34:92:1d:44:36:8b:d8:30:a6:d8:f1:75:13:b9: 50:4b:b3:4b:8b:81:59:4e:4f:f2:da:a6:7d:77:0a: 2f:43:73:b9:03:a4:62:8f:58:ec:c0:8c:6f:9b:f3: fa:9e:06:a9:c1:23:9f:0f:ab:35:57:2e:9e:b5:85: 33:7c:fd:45:30:90:1c:c9:0a:e0:53:f0:52:25:fe: 14:4f:a1:7e:6d:65:bf:2e:06:77:68:c3:23:29:ee: 11:25:96:12:67:1d:38:8c:03:ec:a4:ca:5a:c0:7c: 30:06:1d:a5:9b:e8:ff:76:ff:e7:bf:8a:b6:b1:0b: 75:33:9e:08:2b:44:02:9d:dc:35:1d:15:3d:ca:12: 0c:be:e9:d4:e4:fc:d7:c5:24:7c:2c:14:fe:6d:97: 65:f3:e6:b8:e8:17:c9:07:fa:36:c3:49:d9:08:92: e7:ec:2c:e2:62:c8:9e:cf:75:c7:f7:e6:85:38:24: b8:2a:3b:49:94:4a:67:8c:75:58:4e:e6:16:9d:7a: 11:7d:ff:76:8d:90:dc:61:24:55:3e:ba:e7:2f:c9: 51:7c:cc:04:d6:cf:62:b7:70:76:ff:9f:61:01:3b: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:8B:93:48:DB:EC:F1:37:2A:AA:20:64:FD:02:92:6F:1B:81:BE:1A X509v3 Authority Key Identifier: keyid:8A:74:EF:40:E6:5A:12:7C:0E:66:6B:14:A6:C6:57:4A:53:6F:36:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/inTvQOZaEnwOZmsUpsZXSlNvNnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inTvQOZaEnwOZmsUpsZXSlNvNnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E4/05FEF44A9E0C11EDBA9D1D26C4F9AE02/94817492A7AF11EE9ABC7953C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.76.194.0/23 IPv6: 2001:df1:e1c0::/48 Signature Algorithm: sha256WithRSAEncryption 0a:0c:9d:31:b2:ce:1e:c1:be:8d:07:a2:56:64:32:51:f0:0e: e3:d9:fd:56:4b:22:b1:92:05:b3:2d:45:1f:bc:bb:99:36:89: 54:ca:d4:58:b5:24:8d:6d:e9:88:6d:d3:44:14:70:89:04:1c: 0b:5a:c3:b6:d3:da:b8:18:c4:0b:ed:50:67:0f:bd:74:c3:62: d4:5b:30:db:3e:cb:2b:c9:68:a0:1a:f9:e3:b1:c3:de:6d:c7: 35:ba:99:95:27:37:29:4e:26:6a:bd:ee:e6:c9:98:4f:6f:49: 19:fb:21:c2:ed:5e:ad:6f:34:a8:97:7e:ab:db:84:62:d0:d1: 73:19:b3:36:38:56:27:be:1d:ac:61:05:8a:c7:b9:2b:85:ec: 3f:a9:30:77:df:0d:ca:ab:c1:d1:54:c9:18:a3:0e:19:03:75: 8f:ca:15:5f:4b:1b:5c:ad:33:c1:90:89:21:8b:7b:39:a1:2d: b1:52:c8:2b:20:4b:0f:b0:71:38:61:1b:5b:f3:17:cc:12:02: 60:3d:4f:7a:4d:67:25:4e:93:80:0e:fe:ff:f4:2f:34:7f:e3: b3:7d:76:8a:1f:10:c5:9f:9b:57:8d:c6:b8:d7:0d:fe:11:91: 99:dc:87:50:91:92:b8:d2:6d:b2:7f:60:56:52:12:b8:d2:32: 1f:d1:17:4c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgzRTQxMTAvBgNVBAUTKDhBNzRFRjQwRTY1QTEyN0MwRTY2NkIxNEE2QzY1NzRB NTM2RjM2NzMwHhcNMjYwMzAxMDMyMjU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWM0Mi01Zjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHUAtMZMOorqPyzTmoPmcGn234uhsypLGHTIOvTSNJIdRDaL2DCm2PF1E7lQ S7NLi4FZTk/y2qZ9dwovQ3O5A6Rij1jswIxvm/P6ngapwSOfD6s1Vy6etYUzfP1F MJAcyQrgU/BSJf4UT6F+bWW/LgZ3aMMjKe4RJZYSZx04jAPspMpawHwwBh2lm+j/ dv/nv4q2sQt1M54IK0QCndw1HRU9yhIMvunU5PzXxSR8LBT+bZdl8+a46BfJB/o2 w0nZCJLn7CziYsiez3XH9+aFOCS4KjtJlEpnjHVYTuYWnXoRff92jZDcYSRVPrrn L8lRfMwE1s9it3B2/59hATtdPwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHyLk0jb 7PE3KqogZP0Ckm8bgb4aMB8GA1UdIwQYMBaAFIp070DmWhJ8DmZrFKbGV0pTbzZz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODNFNC8wNUZFRjQ0QTlF MEMxMUVEQkE5RDFEMjZDNEY5QUUwMi9pblR2UU9aYUVud09abXNVcHNaWFNsTnZO bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luVHZRT1phRW53T1ptc1Vwc1pYU2xOdk5uTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgzRTQvMDVGRUY0NEE5RTBDMTFFREJBOUQxRDI2QzRGOUFFMDIvOTQ4MTc0OTJB N0FGMTFFRTlBQkM3OTUzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ0zCMA8EAgACMAkDBwAgAQ3x4cAwDQYJKoZIhvcNAQELBQADggEB AAoMnTGyzh7Bvo0HolZkMlHwDuPZ/VZLIrGSBbMtRR+8u5k2iVTK1Fi1JI1t6Yht 00QUcIkEHAtaw7bT2rgYxAvtUGcPvXTDYtRbMNs+yyvJaKAa+eOxw95txzW6mZUn NylOJmq97ubJmE9vSRn7IcLtXq1vNKiXfqvbhGLQ0XMZszY4Vie+HaxhBYrHuSuF 7D+pMHffDcqrwdFUyRijDhkDdY/KFV9LG1ytM8GQiSGLezmhLbFSyCsgSw+wcThh G1vzF8wSAmA9T3pNZyVOk4AO/v/0LzR/47N9doofEMWfm1eNxrjXDf4RkZnch1CR krjSbbJ/YFZSErjSMh/RF0w= -----END CERTIFICATE-----Generated at Sat Mar 28 15:56:10 2026 by rpki-client