$ rpki-client -vvf rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/CBECEF26736C11F0AB1C0331C4F9AE02.roa File: CBECEF26736C11F0AB1C0331C4F9AE02.roa (raw, json) Hash identifier: NSXDDAq8nX85x5kt9In+oT+8R1Iyp1p7SGrj1C1gVOY= Subject key identifier: 1D:D5:86:53:57:60:E6:85:99:14:7C:FC:7F:73:84:D8:69:C8:49:EE Certificate issuer: /CN=A91706CE/serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Certificate serial: 0210 Authority key identifier: CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/CBECEF26736C11F0AB1C0331C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:15:32 +0000 ROA not before: Wed 03 Sep 2025 03:51:26 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153952 IP address blocks: 103.155.90.0/23 maxlen: 23 103.155.90.0/24 maxlen: 24 103.155.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706CE, serialNumber=CAA41532B7F72AA2C3E2AD6DF40B8D4D1EB03597 Validity Not Before: Sep 3 03:51:26 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a411c4-e2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:fd:93:a0:47:14:cd:33:b4:a7:93:fa:49: b3:bc:48:4f:f0:9d:c6:b0:7e:73:6d:be:11:f3:aa: b2:4f:78:1c:7b:54:c5:54:4c:47:01:a5:1d:38:40: 48:fc:c7:9c:ac:48:0b:d1:ae:82:69:5c:ec:d6:ad: 23:1d:b6:1c:b7:44:6c:86:31:df:67:2d:b7:dd:d5: b6:5e:8e:76:7a:f4:cc:1e:0b:00:4f:dd:f5:5f:a8: 8c:b3:c1:e0:cc:68:15:56:51:b4:4c:97:fe:ad:c7: 7d:44:4e:ad:40:5b:1a:e5:80:c0:75:6f:2e:12:94: e7:63:53:45:38:7d:1f:f9:53:5b:e6:1c:14:90:ee: 16:85:a0:82:26:19:82:27:e7:10:92:cd:5b:c0:92: 71:10:41:2c:d7:58:94:2c:5f:65:5a:ff:e1:3c:e4: 28:c9:f1:e5:d3:91:94:b8:67:4b:22:3a:5a:c1:64: 8d:b3:8a:3d:b9:6a:cb:d2:8c:1c:55:5e:42:48:8c: a2:95:39:8c:8e:14:85:3e:07:10:cc:fc:fc:8b:7c: 78:18:b2:94:97:c8:23:09:95:e4:1c:f9:2d:99:31: f1:b1:b7:25:f8:ec:28:95:b3:ef:66:4f:9f:3b:f1: d9:99:7d:9a:9a:eb:ab:2c:c3:00:83:18:8e:74:f5: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D5:86:53:57:60:E6:85:99:14:7C:FC:7F:73:84:D8:69:C8:49:EE X509v3 Authority Key Identifier: keyid:CA:A4:15:32:B7:F7:2A:A2:C3:E2:AD:6D:F4:0B:8D:4D:1E:B0:35:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/yqQVMrf3KqLD4q1t9AuNTR6wNZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqQVMrf3KqLD4q1t9AuNTR6wNZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706CE/E90BD6680F8611EEA56EBB22C4F9AE02/CBECEF26736C11F0AB1C0331C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.155.90.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:18:4f:f5:fb:19:63:fd:d7:53:2e:6b:f6:63:e3:ce:ce:b9: 5b:29:7c:98:03:48:19:34:84:b4:3c:39:0d:64:99:75:c7:03: ef:91:ca:f6:ee:46:5c:e6:76:8d:27:1e:ab:72:11:0f:97:4e: cd:17:33:45:3c:4d:82:52:2a:ff:60:19:f2:e9:0b:eb:35:31: 12:c4:11:eb:12:a3:cf:a5:1f:63:42:6e:2b:b9:51:ed:ae:a3: e3:b2:ab:09:42:80:17:a0:54:0f:38:71:44:76:b2:ca:2e:e7: 91:44:7a:93:e4:7e:a3:fd:f0:40:6c:5b:c7:70:10:da:8b:8b: a2:eb:5a:e4:c6:32:6e:2c:0f:7a:b7:a7:fd:6c:20:c5:d7:bb: 39:6e:33:73:51:26:fc:6a:3a:e3:2e:34:5d:23:1e:c7:6c:4f: f6:75:f1:1a:1d:ad:f5:65:f9:60:c1:0c:45:20:77:a9:aa:99: a6:f9:a8:34:af:af:c9:ad:41:73:64:47:42:43:ac:d6:24:bc: da:e1:ee:c6:03:f6:47:c9:6d:ba:99:d6:d7:f6:b7:f8:b4:b2: 30:5a:84:93:f2:45:e4:11:fc:1e:0e:f7:79:a7:21:5b:08:86: 45:02:5b:ad:94:65:ac:05:68:aa:c0:b3:7e:21:e6:25:01:cc: 41:86:e4:a8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2Q0UxMTAvBgNVBAUTKENBQTQxNTMyQjdGNzJBQTJDM0UyQUQ2REY0MEI4RDRE MUVCMDM1OTcwHhcNMjUwOTAzMDM1MTI2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTFjNC1lMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0T9k6BHFM0ztKeT+kmzvEhP8J3GsH5zbb4R86qyT3gce1TFVExHAaUdOEBI /MecrEgL0a6CaVzs1q0jHbYct0RshjHfZy233dW2Xo52evTMHgsAT931X6iMs8Hg zGgVVlG0TJf+rcd9RE6tQFsa5YDAdW8uEpTnY1NFOH0f+VNb5hwUkO4WhaCCJhmC J+cQks1bwJJxEEEs11iULF9lWv/hPOQoyfHl05GUuGdLIjpawWSNs4o9uWrL0owc VV5CSIyilTmMjhSFPgcQzPz8i3x4GLKUl8gjCZXkHPktmTHxsbcl+OwolbPvZk+f O/HZmX2amuurLMMAgxiOdPVO+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB3VhlNX YOaFmRR8/H9zhNhpyEnuMB8GA1UdIwQYMBaAFMqkFTK39yqiw+KtbfQLjU0esDWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZDRS9FOTBCRDY2ODBG ODYxMUVFQTU2RUJCMjJDNEY5QUUwMi95cVFWTXJmM0txTEQ0cTF0OUF1TlRSNndO WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lxUVZNcmYzS3FMRDRxMXQ5QXVOVFI2d05aYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA2Q0UvRTkwQkQ2NjgwRjg2MTFFRUE1NkVCQjIyQzRGOUFFMDIvQ0JFQ0VGMjY3 MzZDMTFGMEFCMUMwMzMxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ5taMA0GCSqGSIb3DQEBCwUAA4IBAQB+GE/1+xlj/ddTLmv2Y+PO zrlbKXyYA0gZNIS0PDkNZJl1xwPvkcr27kZc5naNJx6rchEPl07NFzNFPE2CUir/ YBny6QvrNTESxBHrEqPPpR9jQm4ruVHtrqPjsqsJQoAXoFQPOHFEdrLKLueRRHqT 5H6j/fBAbFvHcBDai4ui61rkxjJuLA96t6f9bCDF17s5bjNzUSb8ajrjLjRdIx7H bE/2dfEaHa31ZflgwQxFIHepqpmm+ag0r6/JrUFzZEdCQ6zWJLza4e7GA/ZHyW26 mdbX9rf4tLIwWoST8kXkEfweDvd5pyFbCIZFAlutlGWsBWiqwLN+IeYlAcxBhuSo -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:13 2026 by rpki-client