$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa File: EB292D8A6BF811EB8E899650C4F9AE02.roa (raw, json) Hash identifier: atWWdhdNCGzw5vFDKmVi5w9vnS6VXFuLxeYuDlcE0MA= Subject key identifier: 9C:41:5B:9B:AD:72:86:10:01:1C:CC:A4:5E:4F:22:30:97:24:9C:8A Certificate issuer: /CN=A91820CE/serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Certificate serial: 0735 Authority key identifier: 72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:28:38 +0000 ROA not before: Mon 02 Mar 2026 22:28:38 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 132745 IP address blocks: 103.24.140.0/22 maxlen: 22 103.162.176.0/24 maxlen: 24 103.162.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CE, serialNumber=72C1BC9C3DB79B43F356F23F9568848C9CFB8DD5 Validity Not Before: Mar 2 22:28:38 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a60f16-1094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e5:6e:ed:ea:3c:30:18:6d:fb:48:e9:59:77: a6:90:1f:43:97:12:07:1b:fc:66:f6:d3:df:99:79: 4b:35:d9:55:a4:06:ba:a7:1d:52:1f:c7:91:73:56: af:ce:9d:84:de:74:f0:57:45:67:d2:27:0b:ec:1a: 25:65:53:b4:72:72:3f:6f:67:f2:51:25:b8:24:05: d6:72:81:1c:d4:88:c9:20:13:93:85:c2:bc:4d:2d: cc:bb:68:69:12:1c:15:90:c0:e0:51:69:8a:bc:41: 6f:9a:43:83:9f:99:cf:43:4f:00:e0:0b:22:e3:77: 20:41:98:45:ad:22:51:2c:cc:45:a6:fe:e4:7a:ce: 34:91:29:53:ce:30:ac:33:a0:82:c4:36:df:ad:dc: 53:bc:da:f3:4e:99:d6:aa:b4:44:c8:ab:11:7a:e5: 3c:9f:5f:ad:ef:1f:b1:3e:89:9f:60:3e:f8:16:67: 46:3d:6a:40:f3:d8:ba:d4:c8:ba:ea:68:6a:03:2a: 8e:03:aa:3c:ff:c7:00:ca:62:c1:93:8a:89:28:2d: 22:17:03:a9:aa:fe:e6:83:62:fb:8a:f8:0a:fc:61: bc:f4:75:2a:eb:10:78:82:01:97:09:48:b7:5e:7b: 33:48:00:de:8d:2a:e5:43:60:37:88:d3:ce:2b:16: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:41:5B:9B:AD:72:86:10:01:1C:CC:A4:5E:4F:22:30:97:24:9C:8A X509v3 Authority Key Identifier: keyid:72:C1:BC:9C:3D:B7:9B:43:F3:56:F2:3F:95:68:84:8C:9C:FB:8D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/csG8nD23m0PzVvI_lWiEjJz7jdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/csG8nD23m0PzVvI_lWiEjJz7jdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CE/B73069C66BE911EBB7D5560DC4F9AE02/EB292D8A6BF811EB8E899650C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.24.140.0/22 103.162.176.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:42:39:ff:59:ac:96:47:ec:be:2a:2a:05:ac:1e:92:37:a3: 05:ec:1d:f2:93:c4:c1:ef:13:ab:a0:ac:7f:79:02:26:8e:33: 11:2f:50:09:3e:2d:37:7b:c2:6e:d7:38:d3:11:69:2c:3d:c3: db:50:19:da:bf:1b:08:a9:63:64:29:94:63:f0:bb:9f:7c:73: 48:5c:2e:a5:f5:31:0b:7b:83:d7:bf:c3:a1:10:15:a6:8c:b9: 79:73:be:b0:d7:86:4d:a7:1d:a6:28:03:c1:54:c2:2f:55:69: 0a:e0:9c:b6:06:d9:75:ac:c0:ab:21:06:d3:bd:1c:98:df:86: 31:b2:40:5f:57:9c:2e:f7:9d:5b:13:0e:f3:b9:0b:33:67:f8: 29:8e:2f:12:1c:78:a6:e6:92:a9:aa:d5:ae:ee:2b:5c:35:04: 64:ce:05:18:8c:4b:7f:21:c6:52:45:4f:be:d8:9d:9c:23:8c: d5:5b:1a:24:d8:fb:4f:b7:d4:ea:76:c7:73:7e:e9:1d:b0:68: f2:23:66:d6:4c:a0:08:38:27:b7:a3:8f:e3:ac:09:75:85:91: 1c:34:c2:ed:a1:f3:90:97:86:43:46:5d:08:ed:1f:a5:e4:07: 30:80:4a:73:84:38:66:53:00:8e:42:39:0b:f6:1f:04:e0:96: 35:a1:5b:70 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0UxMTAvBgNVBAUTKDcyQzFCQzlDM0RCNzlCNDNGMzU2RjIzRjk1Njg4NDhD OUNGQjhERDUwHhcNMjYwMzAyMjIyODM4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGYxNi0xMDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+Vu7eo8MBht+0jpWXemkB9DlxIHG/xm9tPfmXlLNdlVpAa6px1SH8eRc1av zp2E3nTwV0Vn0icL7BolZVO0cnI/b2fyUSW4JAXWcoEc1IjJIBOThcK8TS3Mu2hp EhwVkMDgUWmKvEFvmkODn5nPQ08A4Asi43cgQZhFrSJRLMxFpv7kes40kSlTzjCs M6CCxDbfrdxTvNrzTpnWqrREyKsReuU8n1+t7x+xPomfYD74FmdGPWpA89i61Mi6 6mhqAyqOA6o8/8cAymLBk4qJKC0iFwOpqv7mg2L7ivgK/GG89HUq6xB4ggGXCUi3 XnszSADejSrlQ2A3iNPOKxYdAwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJxBW5ut coYQARzMpF5PIjCXJJyKMB8GA1UdIwQYMBaAFHLBvJw9t5tD81byP5VohIyc+43V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDRS9CNzMwNjlDNjZC RTkxMUVCQjdENTU2MERDNEY5QUUwMi9jc0c4bkQyM20wUHpWdklfbFdpRWpKejdq ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzRzhuRDIzbTBQelZ2SV9sV2lFakp6N2pkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIwQ0UvQjczMDY5QzY2QkU5MTFFQkI3RDU1NjBEQzRGOUFFMDIvRUIyOTJEOEE2 QkY4MTFFQjhFODk5NjUwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZxiMAwQBZ6KwMA0GCSqGSIb3DQEBCwUAA4IBAQAfQjn/WayWR+y+ KioFrB6SN6MF7B3yk8TB7xOroKx/eQImjjMRL1AJPi03e8Ju1zjTEWksPcPbUBna vxsIqWNkKZRj8LuffHNIXC6l9TELe4PXv8OhEBWmjLl5c76w14ZNpx2mKAPBVMIv VWkK4Jy2Btl1rMCrIQbTvRyY34YxskBfV5wu951bEw7zuQszZ/gpji8SHHim5pKp qtWu7itcNQRkzgUYjEt/IcZSRU++2J2cI4zVWxok2PtPt9TqdsdzfukdsGjyI2bW TKAIOCe3o4/jrAl1hZEcNMLtofOQl4ZDRl0I7R+l5AcwgEpzhDhmUwCOQjkL9h8E 4JY1oVtw -----END CERTIFICATE-----Generated at Thu Mar 26 07:58:13 2026 by rpki-client