$ rpki-client -vvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/38CAF4EC52B911EAACE8041BC4F9AE02.roa File: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (raw, json) Hash identifier: ujeUTP56Z66beEqAmdIwzEcYV4pQg/db+qJ48FDN5s0= Subject key identifier: 63:5D:BB:C3:1E:8C:19:AC:03:12:DC:02:B3:BD:FE:B4:97:EF:AB:CB Certificate issuer: /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Certificate serial: 0B6D Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/38CAF4EC52B911EAACE8041BC4F9AE02.roa Signing time: Thu 30 Apr 2026 19:23:40 +0000 ROA not before: Thu 30 Apr 2026 19:23:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45665 IP address blocks: 103.209.244.0/22 maxlen: 24 203.10.3.0/24 maxlen: 24 203.11.75.0/24 maxlen: 24 203.11.218.0/24 maxlen: 24 2001:df0:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2925 (0xb6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91594AE, serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Validity Not Before: Apr 30 19:23:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f3ac3c-b2f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:81:96:0c:82:a6:c1:c7:77:ec:1f:91:b2: aa:d0:d4:42:b4:60:5d:54:6e:a8:5b:db:e3:9f:8f: 94:b0:6a:4f:f6:c4:7b:51:4d:01:17:c7:66:99:a2: 56:d7:de:98:f2:3f:9e:40:1e:82:bc:01:88:25:a2: 89:b1:e3:7c:1d:f2:68:f3:2e:2b:91:83:51:97:4a: 64:15:a9:cb:43:b1:5a:ac:3b:28:73:ff:e3:84:1b: 9d:86:d1:37:e0:68:7d:e1:ae:74:8e:0b:ac:73:fb: e0:7d:da:b7:9b:74:05:5e:fc:d5:71:fa:96:b5:30: 2a:09:8f:a0:26:6d:a5:7c:aa:8d:b7:34:fc:bc:da: 64:f1:0f:37:d8:2d:98:52:61:eb:2c:fe:fa:03:50: 42:cc:b5:9d:a6:36:8c:0a:b0:75:79:ef:56:6e:40: e4:67:cf:53:79:1c:89:ee:69:1d:0e:81:ec:dd:dc: 6d:86:32:04:e8:86:73:52:ae:5f:58:68:30:6b:2c: 4a:93:71:c2:b8:22:75:23:82:1f:76:3f:97:bd:9d: a8:78:20:f5:7d:20:1d:cf:3b:0b:58:3c:cb:23:f5: 9e:90:f6:00:53:21:fd:eb:eb:3d:4b:13:6e:bc:e0: 5e:96:78:e5:69:1c:6c:b1:f8:b9:f1:3a:a8:cf:09: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5D:BB:C3:1E:8C:19:AC:03:12:DC:02:B3:BD:FE:B4:97:EF:AB:CB X509v3 Authority Key Identifier: keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/38CAF4EC52B911EAACE8041BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.244.0/22 203.10.3.0/24 203.11.75.0/24 203.11.218.0/24 IPv6: 2001:df0:71::/48 Signature Algorithm: sha256WithRSAEncryption 27:7e:ed:30:a5:2b:34:2d:6d:52:42:76:8d:c4:94:fd:2b:15: a0:1e:e2:fb:59:0d:fd:27:bf:77:d4:7c:91:a1:b3:44:99:7a: 29:be:bc:f4:9e:6e:bf:c0:7c:f4:31:d7:a3:2f:f6:c4:ec:da: ca:61:a9:9e:d1:91:c8:02:f6:a2:ba:c4:a7:06:8d:4a:ad:81: 12:ad:3f:a4:b1:9e:e7:ea:5c:e4:4f:bc:d1:d0:63:c0:96:45: 3e:0b:bf:d5:70:d3:de:40:c8:7c:5b:aa:b9:59:e9:90:e6:cd: 16:b8:7a:64:a9:cf:34:87:8d:e8:1a:2e:3a:49:fb:fd:41:db: b7:52:70:f6:a1:fe:a7:cd:82:f7:dc:d7:e8:10:24:96:5b:51: 08:88:7a:58:e0:cc:64:e2:9d:1a:9a:9e:f7:6c:21:4b:f5:29: 36:ec:21:4c:08:dc:80:d7:0d:0d:0d:ae:86:c4:a5:05:f3:d3: 0d:e1:8c:8c:a3:95:c7:02:68:9b:c3:f3:5e:f8:5f:9d:4a:d4: 42:87:31:46:5f:9e:ac:61:1e:00:b4:21:f6:74:d8:2f:ce:05: e6:89:bf:a9:3b:be:40:27:a9:7a:db:e4:99:92:59:7c:de:90: 54:49:f8:e0:0d:80:2e:72:58:fe:7e:d0:75:56:ee:a0:2a:fc: 89:35:12:ea -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk0QUUxMTAvBgNVBAUTKENEQTQ3RTBBMUVFQjUyNUYzQjVBMEZBRkIyRkEwREJC MzYzQkZBNEQwHhcNMjYwNDMwMTkyMzQwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYzYWMzYy1iMmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxr2BlgyCpsHHd+wfkbKq0NRCtGBdVG6oW9vjn4+UsGpP9sR7UU0BF8dmmaJW 196Y8j+eQB6CvAGIJaKJseN8HfJo8y4rkYNRl0pkFanLQ7FarDsoc//jhBudhtE3 4Gh94a50jgusc/vgfdq3m3QFXvzVcfqWtTAqCY+gJm2lfKqNtzT8vNpk8Q832C2Y UmHrLP76A1BCzLWdpjaMCrB1ee9WbkDkZ89TeRyJ7mkdDoHs3dxthjIE6IZzUq5f WGgwayxKk3HCuCJ1I4Ifdj+XvZ2oeCD1fSAdzzsLWDzLI/WekPYAUyH96+s9SxNu vOBelnjlaRxssfi58TqozwkbXQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFGNdu8Me jBmsAxLcArO9/rSX76vLMB8GA1UdIwQYMBaAFM2kfgoe61JfO1oPr7L6Dbs2O/pN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTRBRS8zRDhCOEM0ODUy QjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVsODdXZy12c3ZvTnV6WTct azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phUi1DaDdyVWw4N1dnLXZzdm9OdXpZNy1rMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTk0QUUvM0Q4QjhDNDg1MkI1MTFFQUE0QTlEMjBFQzRGOUFFMDIvMzhDQUY0RUM1 MkI5MTFFQUFDRTgwNDFCQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe BAIAATAYAwQCZ9H0AwQAywoDAwQAywtLAwQAywvaMA8EAgACMAkDBwAgAQ3wAHEw DQYJKoZIhvcNAQELBQADggEBACd+7TClKzQtbVJCdo3ElP0rFaAe4vtZDf0nv3fU fJGhs0SZeim+vPSebr/AfPQx16Mv9sTs2sphqZ7RkcgC9qK6xKcGjUqtgRKtP6Sx nufqXORPvNHQY8CWRT4Lv9Vw095AyHxbqrlZ6ZDmzRa4emSpzzSHjegaLjpJ+/1B 27dScPah/qfNgvfc1+gQJJZbUQiIeljgzGTinRqanvdsIUv1KTbsIUwI3IDXDQ0N robEpQXz0w3hjIyjlccCaJvD8174X51K1EKHMUZfnqxhHgC0IfZ02C/OBeaJv6k7 vkAnqXrb5JmSWXzekFRJ+OANgC5yWP5+0HVW7qAq/Ik1Euo= -----END CERTIFICATE-----Generated at Wed May 13 09:42:41 2026 by rpki-client