$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa File: 029310329B1911EFA0BD6470C4F9AE02.roa (raw, json) Hash identifier: sF4XH0IQ21oQ8m5K9x+3vDfpTIdkfnTIhVS8Hca4fYI= Subject key identifier: FD:0F:B0:1E:5E:5E:16:D2:BA:7A:C1:9F:F3:66:61:F0:19:39:26:B5 Certificate issuer: /CN=A91A8047/serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Certificate serial: 011E Authority key identifier: 88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa Signing time: Sat 21 Mar 2026 05:42:10 +0000 ROA not before: Sat 21 Mar 2026 05:42:10 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 9303 IP address blocks: 103.209.224.0/22 maxlen: 22 203.18.59.0/24 maxlen: 24 203.25.187.0/24 maxlen: 24 203.189.24.0/24 maxlen: 24 203.190.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8047, serialNumber=8848AACDF2951303E7098F419D8CA00422890C69 Validity Not Before: Mar 21 05:42:10 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69be2fb2-cf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:53:72:45:0f:f0:df:eb:4d:33:c6:d3:43: c9:e4:aa:65:13:ba:f7:87:19:c6:06:8c:bb:5c:6d: 20:42:ff:b1:db:04:97:5f:0b:25:51:d8:8c:e0:86: c3:75:d9:07:73:84:33:cd:a5:b5:2a:7b:bb:ef:f4: d2:b5:17:1a:d7:55:88:7e:19:79:64:06:6f:4d:50: 00:31:71:3a:c0:5f:e1:8c:34:d0:85:5b:37:b3:0b: cb:ed:2c:12:f6:51:1d:e9:60:fe:fb:7c:2d:70:cb: 54:70:83:8d:df:29:9a:c1:2c:fc:e2:cc:92:6d:6b: 92:ff:ae:01:fa:8d:4b:dc:e4:9d:ac:56:03:c5:fc: 4c:8c:3f:ee:5e:fb:2a:24:73:6d:e2:37:d3:48:4f: c0:bd:21:4c:ab:0a:f1:43:77:e4:df:b8:fe:9a:74: 02:1e:6d:30:56:fd:b2:e6:f9:19:74:69:b0:86:fb: 5a:a5:d5:61:b2:a8:e5:a0:06:50:4b:5d:a7:9e:a3: a7:f1:53:02:7d:1b:cd:db:40:fd:2b:df:10:89:04: 75:f7:27:1c:e4:34:b2:82:cd:c9:ef:97:0a:ff:a6: 08:ed:8f:a7:57:78:31:db:c0:e8:4f:3d:8e:74:e6: c2:9e:2c:93:8e:b9:46:6c:64:c2:e4:52:25:68:7b: 2e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0F:B0:1E:5E:5E:16:D2:BA:7A:C1:9F:F3:66:61:F0:19:39:26:B5 X509v3 Authority Key Identifier: keyid:88:48:AA:CD:F2:95:13:03:E7:09:8F:41:9D:8C:A0:04:22:89:0C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/iEiqzfKVEwPnCY9BnYygBCKJDGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEiqzfKVEwPnCY9BnYygBCKJDGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8047/344A01A29B1511EF86EB3746C4F9AE02/029310329B1911EFA0BD6470C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.209.224.0/22 203.18.59.0/24 203.25.187.0/24 203.189.24.0/24 203.190.217.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:62:75:bf:fd:a9:a9:a0:a1:96:56:ce:ea:df:35:a4:e7:04: af:40:55:cd:c0:6e:8e:1e:c0:15:06:4e:69:92:66:a3:8e:8d: 93:1e:58:34:94:c8:4d:ba:48:fa:2f:0d:a6:ea:d6:23:a7:cd: 3b:c8:01:0f:23:e9:81:c4:c5:af:0f:97:0e:13:78:c8:1e:ad: 10:07:fe:bb:b6:e1:1a:aa:cd:6d:cd:3d:20:77:b7:88:65:91: 70:e6:53:c3:35:81:32:bb:dd:55:98:0e:91:d8:4f:a7:23:92: bb:c5:ff:18:34:4c:9e:cf:89:48:f6:44:92:9b:d0:b2:eb:38: fe:eb:de:25:9f:4e:90:a0:03:a1:69:5f:47:25:ea:17:7f:62: e6:6f:89:ff:89:08:2d:43:dd:4c:11:d6:98:fb:fc:e8:96:a1: c8:10:ff:3d:d7:f4:23:30:c6:53:eb:d0:10:3a:01:3b:6b:36: e9:e7:a7:2d:77:21:ce:98:19:22:f9:de:64:f8:68:20:83:5d: 62:d0:26:96:92:61:8c:fb:d4:43:5b:9d:65:14:fe:5d:80:c0: cf:e7:50:c6:03:6c:e4:ea:12:ed:c0:c1:c8:1b:46:e1:5c:b7: 59:5f:80:53:c1:f8:11:f9:47:f0:72:b0:7e:df:85:2d:78:1e: 3d:59:ac:63 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwNDcxMTAvBgNVBAUTKDg4NDhBQUNERjI5NTEzMDNFNzA5OEY0MTlEOENBMDA0 MjI4OTBDNjkwHhcNMjYwMzIxMDU0MjEwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWJlMmZiMi1jZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnhTckUP8N/rTTPG00PJ5KplE7r3hxnGBoy7XG0gQv+x2wSXXwslUdiM4IbD ddkHc4QzzaW1Knu77/TStRca11WIfhl5ZAZvTVAAMXE6wF/hjDTQhVs3swvL7SwS 9lEd6WD++3wtcMtUcION3ymawSz84sySbWuS/64B+o1L3OSdrFYDxfxMjD/uXvsq JHNt4jfTSE/AvSFMqwrxQ3fk37j+mnQCHm0wVv2y5vkZdGmwhvtapdVhsqjloAZQ S12nnqOn8VMCfRvN20D9K98QiQR19ycc5DSygs3J75cK/6YI7Y+nV3gx28DoTz2O dObCniyTjrlGbGTC5FIlaHsulQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFP0PsB5e XhbSunrBn/NmYfAZOSa1MB8GA1UdIwQYMBaAFIhIqs3ylRMD5wmPQZ2MoAQiiQxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODA0Ny8zNDRBMDFBMjlC MTUxMUVGODZFQjM3NDZDNEY5QUUwMi9pRWlxemZLVkV3UG5DWTlCbll5Z0JDS0pE R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lFaXF6ZktWRXdQbkNZOUJuWXlnQkNLSkRHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTgwNDcvMzQ0QTAxQTI5QjE1MTFFRjg2RUIzNzQ2QzRGOUFFMDIvMDI5MzEwMzI5 QjE5MTFFRkEwQkQ2NDcwQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQCZ9HgAwQAyxI7AwQAyxm7AwQAy70YAwQAy77ZMA0GCSqGSIb3DQEB CwUAA4IBAQBLYnW//ampoKGWVs7q3zWk5wSvQFXNwG6OHsAVBk5pkmajjo2THlg0 lMhNukj6Lw2m6tYjp807yAEPI+mBxMWvD5cOE3jIHq0QB/67tuEaqs1tzT0gd7eI ZZFw5lPDNYEyu91VmA6R2E+nI5K7xf8YNEyez4lI9kSSm9Cy6zj+694ln06QoAOh aV9HJeoXf2Lmb4n/iQgtQ91MEdaY+/zolqHIEP891/QjMMZT69AQOgE7azbp56ct dyHOmBki+d5k+Gggg11i0CaWkmGM+9RDW51lFP5dgMDP51DGA2zk6hLtwMHIG0bh XLdZX4BTwfgR+UfwcrB+34UteB49Waxj -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:10 2026 by rpki-client