$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/E51ECC8610E711EBAD066E1DC4F9AE02.roa File: E51ECC8610E711EBAD066E1DC4F9AE02.roa (raw, json) Hash identifier: wjDSbRQKtPAWbh/Hzs+97MdegPLfvSS74VnDP3uybto= Subject key identifier: 60:05:AD:6F:B4:DA:39:C4:6A:14:42:A3:26:EA:5C:A3:D8:01:EC:F4 Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568 Certificate serial: 0829 Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/E51ECC8610E711EBAD066E1DC4F9AE02.roa Signing time: Fri 20 Mar 2026 21:27:36 +0000 ROA not before: Fri 20 Mar 2026 21:27:36 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55720 IP address blocks: 103.106.248.0/24 maxlen: 24 103.106.249.0/24 maxlen: 24 103.106.250.0/24 maxlen: 24 103.106.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2089 (0x829) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568 Validity Not Before: Mar 20 21:27:36 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69bdbbc8-b93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:ac:c6:9b:2c:91:9c:e9:3e:d7:6a:6d:8e: 82:2f:e3:57:e5:1e:e1:08:8f:fc:7b:42:b5:9f:fa: 1a:1e:ae:83:9f:70:97:b2:0e:fd:a6:d2:ba:69:33: 91:2e:92:44:2a:59:8e:29:fc:39:bf:53:36:63:8d: 2f:c1:2e:54:d0:ea:be:88:b1:b3:a3:5a:62:8e:39: 5c:f8:5a:5c:52:b0:34:82:2d:8a:73:80:6c:8e:95: 5c:61:d1:a8:53:26:39:2e:27:1f:aa:32:4b:99:ee: 38:86:be:54:34:be:8e:a6:db:0b:3c:51:76:c3:8c: c0:a0:25:36:b7:7a:d3:19:bc:a9:b4:de:ea:0e:99: b8:e9:1b:90:3e:08:e1:bf:30:c1:6a:26:eb:34:06: 8f:7f:74:12:43:19:06:c5:c4:34:43:2e:62:94:5a: f1:75:2f:54:60:85:1e:2a:79:e4:25:dd:49:00:74: d4:66:5a:10:17:d8:b3:46:fc:62:ef:27:6f:9d:a6: 1c:2e:63:0d:41:92:65:73:c7:d2:40:03:85:be:28: 21:3e:f8:6d:d4:c6:a2:e9:aa:61:d6:86:b2:b2:f6: 36:f9:c2:d3:43:2b:4d:02:22:71:93:03:19:75:e2: ec:1e:24:eb:5d:dc:da:81:7e:6e:b7:6a:cf:cd:8b: 3f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:05:AD:6F:B4:DA:39:C4:6A:14:42:A3:26:EA:5C:A3:D8:01:EC:F4 X509v3 Authority Key Identifier: keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/E51ECC8610E711EBAD066E1DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.106.248.0/22 Signature Algorithm: sha256WithRSAEncryption a8:78:a4:b7:6d:24:d0:8e:3e:57:f7:aa:d9:53:ec:76:f0:ad: 74:a7:53:8d:4f:28:7d:72:c4:96:86:51:a0:6e:00:f7:08:86: 39:4b:e5:0b:ec:d0:05:aa:bb:4e:c9:0f:f3:f9:a4:c2:d7:84: dd:52:5f:7a:63:b2:84:bc:8f:b4:74:2e:ac:5c:6a:8c:8d:e3: 4f:2b:e4:90:8c:5c:11:f9:65:b5:ce:24:ec:31:8d:d4:33:aa: d8:65:b4:78:4e:cd:ca:16:47:8d:40:74:8b:94:de:72:31:9e: 46:5a:6a:53:3c:41:bc:de:8b:de:65:62:c8:b9:c6:54:a4:8d: 0c:d5:1b:73:58:ee:99:d7:f5:fb:d3:7a:d8:ec:1a:cf:4a:75: ce:ac:ea:3d:1f:2c:37:31:9e:83:c0:28:0c:36:38:e4:7a:e1: aa:fd:34:d7:d7:23:74:e5:9e:f4:d0:f3:9d:b4:e4:e4:a5:a5: 2c:cf:b2:a3:ef:8a:bb:bc:af:91:bc:8a:e3:ea:d9:d3:b5:b4: 92:27:6d:67:fe:87:c7:80:2d:88:68:f9:f3:07:f6:09:a4:12: 88:4b:51:d6:9e:97:8b:f3:5e:34:c0:c1:de:b1:fb:ac:c9:9f: 7b:1d:f9:fe:35:a6:52:58:60:fd:0f:30:e4:9a:40:67:c9:ed: b5:81:87:b3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QkIxMTAvBgNVBAUTKEI0OUU4RUU4MTcwM0E0QTBCQUNDQTgyNDM3ODAyRkI1 QzMwQjY1NjgwHhcNMjYwMzIwMjEyNzM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJkYmJjOC1iOTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwiCsxpsskZzpPtdqbY6CL+NX5R7hCI/8e0K1n/oaHq6Dn3CXsg79ptK6aTOR LpJEKlmOKfw5v1M2Y40vwS5U0Oq+iLGzo1pijjlc+FpcUrA0gi2Kc4BsjpVcYdGo UyY5LicfqjJLme44hr5UNL6OptsLPFF2w4zAoCU2t3rTGbyptN7qDpm46RuQPgjh vzDBaibrNAaPf3QSQxkGxcQ0Qy5ilFrxdS9UYIUeKnnkJd1JAHTUZloQF9izRvxi 7ydvnaYcLmMNQZJlc8fSQAOFvighPvht1Mai6aph1oaysvY2+cLTQytNAiJxkwMZ deLsHiTrXdzagX5ut2rPzYs/fwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGAFrW+0 2jnEahRCoybqXKPYAez0MB8GA1UdIwQYMBaAFLSejugXA6SgusyoJDeAL7XDC2Vo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCQi9GQzczRkEwNjEw RTYxMUVCQjRBMjUyMURDNEY5QUUwMi90SjZPNkJjRHBLQzZ6S2drTjRBdnRjTUxa V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKNk82QmNEcEtDNnpLZ2tONEF2dGNNTFpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODk3QkIvRkM3M0ZBMDYxMEU2MTFFQkI0QTI1MjFEQzRGOUFFMDIvRTUxRUNDODYx MEU3MTFFQkFEMDY2RTFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2r4MA0GCSqGSIb3DQEBCwUAA4IBAQCoeKS3bSTQjj5X96rZU+x2 8K10p1ONTyh9csSWhlGgbgD3CIY5S+UL7NAFqrtOyQ/z+aTC14TdUl96Y7KEvI+0 dC6sXGqMjeNPK+SQjFwR+WW1ziTsMY3UM6rYZbR4Ts3KFkeNQHSLlN5yMZ5GWmpT PEG83oveZWLIucZUpI0M1RtzWO6Z1/X703rY7BrPSnXOrOo9Hyw3MZ6DwCgMNjjk euGq/TTX1yN05Z700POdtOTkpaUsz7Kj74q7vK+RvIrj6tnTtbSSJ21n/ofHgC2I aPnzB/YJpBKIS1HWnpeL8140wMHesfusyZ97Hfn+NaZSWGD9DzDkmkBnye21gYez -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:21 2026 by rpki-client