$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/94A1F97A369711EA866E381CC4F9AE02.roa File: 94A1F97A369711EA866E381CC4F9AE02.roa (raw, json) Hash identifier: 6HQUJT9HfaQ0kHLipfm5EZcRoS4c3RMqyseCSnA5uo4= Subject key identifier: C5:BB:EE:6C:04:4C:C2:2C:07:26:99:39:C8:4B:A1:66:18:23:33:41 Certificate issuer: /CN=A91589E7/serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA Certificate serial: 1876 Authority key identifier: 45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/94A1F97A369711EA866E381CC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:31:26 +0000 ROA not before: Sat 14 Jun 2025 17:06:57 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 131310 IP address blocks: 103.21.252.0/22 maxlen: 24 103.246.88.0/22 maxlen: 24 2404:6300::/32 maxlen: 126 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6262 (0x1876) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=45805B5580D515197D1A615AD66C8B9D4854F5EA Validity Not Before: Jun 14 17:06:57 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4238e-55cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:b8:ee:ca:c2:40:ff:30:e4:0b:2b:c5:05: f3:68:20:a2:d2:e0:18:39:98:3a:3c:08:76:00:c0: 37:d9:9a:82:a5:eb:ee:7f:4d:30:54:9d:18:e2:78: 34:6a:07:97:3a:b5:47:e4:98:4b:32:c2:90:a1:4b: 21:09:e9:7f:9f:23:6b:82:28:e4:c3:27:3c:52:93: 27:ed:ac:fa:ea:29:4f:df:3b:04:cb:fd:68:74:27: 62:fd:bd:9d:f5:70:d6:da:b4:2d:cd:31:06:80:cd: 48:f5:b7:22:a0:cc:77:ee:79:73:c3:e3:e0:d9:af: d8:32:3f:fd:16:af:6f:82:d4:07:8d:18:7e:97:a0: 28:22:57:0b:e7:4a:b6:b1:fc:d1:29:28:6b:8a:d5: 31:dd:2d:9b:6a:85:e7:ac:66:73:d3:36:e3:11:7f: f2:8b:5b:1f:cf:21:54:f3:75:69:04:62:ac:54:f8: cb:e0:c6:e3:8c:f1:50:f2:e0:c6:21:b2:d6:a5:ae: 62:be:a1:04:31:da:93:49:91:42:2c:a1:bc:e7:cc: 1f:82:ad:b2:ff:64:c2:db:f0:bb:69:7e:7e:3e:a1: 52:8b:c2:85:2f:7b:23:61:07:21:98:82:4c:e7:83: 57:b1:4c:71:e8:8b:41:dc:c4:be:4b:fd:42:ad:2a: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BB:EE:6C:04:4C:C2:2C:07:26:99:39:C8:4B:A1:66:18:23:33:41 X509v3 Authority Key Identifier: keyid:45:80:5B:55:80:D5:15:19:7D:1A:61:5A:D6:6C:8B:9D:48:54:F5:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/RYBbVYDVFRl9GmFa1myLnUhU9eo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RYBbVYDVFRl9GmFa1myLnUhU9eo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/F8FF1522BDFB11E7B873FE27C4F9AE02/94A1F97A369711EA866E381CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.21.252.0/22 103.246.88.0/22 IPv6: 2404:6300::/32 Signature Algorithm: sha256WithRSAEncryption e2:66:12:61:7a:e5:29:59:a0:9c:83:82:69:42:c9:aa:95:87: bd:58:c2:67:82:56:3e:b4:54:bc:df:47:8d:b3:b9:1c:a5:66: 5f:cf:0d:72:94:e1:52:85:78:1c:ca:cd:1f:1b:00:07:5f:65: 9e:1c:16:ee:67:01:ee:c2:71:a9:a4:66:9c:38:bd:95:62:f0: 75:8d:ad:b8:03:42:9f:be:f1:1e:28:8a:98:87:ba:2a:26:7f: a5:13:92:c0:ba:44:c4:5a:84:f8:5f:ff:a7:fd:08:05:0e:01: bf:22:66:7e:ca:47:1a:49:17:6f:1a:44:75:30:93:17:67:cd: 38:12:8d:ac:40:ab:37:5b:d6:db:45:d8:7d:cd:ee:1e:b0:a0: a2:6f:b2:9d:f9:11:cd:12:c2:b1:9e:ae:68:d7:af:31:ed:f7: 75:9a:5b:34:18:73:5d:04:ca:bd:1b:34:69:aa:d7:d1:a0:64: 20:65:18:14:29:26:3a:a7:35:8c:53:38:27:07:96:dc:3e:ad: c8:fd:ff:6d:fd:ef:e9:f7:78:64:5d:42:7e:c2:cf:ca:21:5b: f8:b9:36:c9:c9:02:04:ae:d6:8c:92:53:9f:2a:f9:86:e2:7e: 5b:e2:89:f4:fa:08:12:d7:c3:52:3f:2f:fe:6d:9f:2a:45:ef: e4:0b:9a:a0 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICGHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDQ1ODA1QjU1ODBENTE1MTk3RDFBNjE1QUQ2NkM4QjlE NDg1NEY1RUEwHhcNMjUwNjE0MTcwNjU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM4ZS01NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxre47srCQP8w5AsrxQXzaCCi0uAYOZg6PAh2AMA32ZqCpevuf00wVJ0Y4ng0 ageXOrVH5JhLMsKQoUshCel/nyNrgijkwyc8UpMn7az66ilP3zsEy/1odCdi/b2d 9XDW2rQtzTEGgM1I9bcioMx37nlzw+Pg2a/YMj/9Fq9vgtQHjRh+l6AoIlcL50q2 sfzRKShritUx3S2baoXnrGZz0zbjEX/yi1sfzyFU83VpBGKsVPjL4MbjjPFQ8uDG IbLWpa5ivqEEMdqTSZFCLKG858wfgq2y/2TC2/C7aX5+PqFSi8KFL3sjYQchmIJM 54NXsUxx6ItB3MS+S/1CrSo44QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMW77mwE TMIsByaZOchLoWYYIzNBMB8GA1UdIwQYMBaAFEWAW1WA1RUZfRphWtZsi51IVPXq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9GOEZGMTUyMkJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9SWUJiVllEVkZSbDlHbUZhMW15TG5VaFU5 ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JZQmJWWURWRlJsOUdtRmExbXlMblVoVTllby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg5RTcvRjhGRjE1MjJCREZCMTFFN0I4NzNGRTI3QzRGOUFFMDIvOTRBMUY5N0Ez Njk3MTFFQTg2NkUzODFDQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZxX8AwQCZ/ZYMA0EAgACMAcDBQAkBGMAMA0GCSqGSIb3DQEBCwUA A4IBAQDiZhJheuUpWaCcg4JpQsmqlYe9WMJnglY+tFS830eNs7kcpWZfzw1ylOFS hXgcys0fGwAHX2WeHBbuZwHuwnGppGacOL2VYvB1ja24A0KfvvEeKIqYh7oqJn+l E5LAukTEWoT4X/+n/QgFDgG/ImZ+ykcaSRdvGkR1MJMXZ804Eo2sQKs3W9bbRdh9 ze4esKCib7Kd+RHNEsKxnq5o168x7fd1mls0GHNdBMq9GzRpqtfRoGQgZRgUKSY6 pzWMUzgnB5bcPq3I/f9t/e/p93hkXUJ+ws/KIVv4uTbJyQIErtaMklOfKvmG4n5b 4on0+ggS18NSPy/+bZ8qRe/kC5qg -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:04 2026 by rpki-client