$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa File: CAD00992C9C611F09C9EF018C4F9AE02.roa (raw, json) Hash identifier: 8OJ26B5UO2rTyI40OnCtvLR3wsdIViHzi+pX/yk29Dk= Subject key identifier: C6:C0:0F:DB:CA:AD:C1:A7:9D:16:F5:5A:4F:C6:E7:71:03:76:68:3D Certificate issuer: /CN=A91A98E5/serialNumber=03C8560034E917F48406B40469500B23F3956B5D Certificate serial: 37 Authority key identifier: 03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:55:07 +0000 ROA not before: Tue 25 Nov 2025 06:20:09 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 151615 IP address blocks: 103.238.154.0/23 maxlen: 24 2401:1920::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=03C8560034E917F48406B40469500B23F3956B5D Validity Not Before: Nov 25 06:20:09 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a588ab-231c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b3:93:7e:12:32:2e:b4:17:03:e8:a9:9a:6a: 67:84:52:0d:72:8b:1f:fe:58:44:7f:a5:23:b6:8f: a9:23:89:da:5c:e0:77:94:96:d5:b3:1c:ca:25:60: 9d:94:15:c4:d2:80:39:22:f6:dc:49:76:bb:18:68: 58:32:70:ac:b0:a0:46:73:2b:20:8e:4f:d9:e3:30: 8c:11:ff:ba:88:8d:c1:a3:8e:46:7d:80:26:d6:58: dc:ed:44:19:56:82:fb:b6:ca:12:09:89:70:bf:b2: d7:a9:3d:4d:2f:d1:7e:49:d8:83:9e:a0:ec:c4:5c: 72:f2:e7:03:68:0f:fd:6d:ec:7e:95:4e:58:51:2c: 94:0f:0c:47:4d:c1:d2:33:76:c5:67:7e:ee:48:c1: bb:29:41:e2:4a:95:91:01:c5:80:01:57:14:0f:67: 12:d6:bc:50:11:5d:af:ad:7f:41:00:5b:89:b5:3b: 98:04:d7:84:c7:36:65:b0:1b:ce:5e:d0:ad:2b:db: 5d:f4:66:88:89:a5:c3:10:c9:8a:fd:ba:3f:c3:97: 8d:99:36:a3:c6:be:e5:b7:99:9e:18:40:d9:5e:cd: d8:9c:b7:27:af:40:cb:ac:a3:86:cd:96:9a:3b:dc: c4:ab:17:26:fb:f9:dc:53:00:08:35:75:8a:88:1b: 1b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C0:0F:DB:CA:AD:C1:A7:9D:16:F5:5A:4F:C6:E7:71:03:76:68:3D X509v3 Authority Key Identifier: keyid:03:C8:56:00:34:E9:17:F4:84:06:B4:04:69:50:0B:23:F3:95:6B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/A8hWADTpF_SEBrQEaVALI_OVa10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8hWADTpF_SEBrQEaVALI_OVa10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/CAD00992C9C611F09C9EF018C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.238.154.0/23 IPv6: 2401:1920::/32 Signature Algorithm: sha256WithRSAEncryption 9b:88:a8:05:db:cb:09:c0:54:18:39:e9:b3:93:1d:69:82:42: 0f:55:80:ed:86:21:9f:71:0a:85:bf:5f:41:83:16:ca:b2:d6: a6:6e:8c:91:ee:bf:8b:fe:d8:d7:5c:a3:f5:8a:91:21:e6:0a: 0d:50:22:b7:a8:6a:75:99:c7:2b:db:e3:1b:16:f0:b1:2b:06: 86:d1:16:4e:ac:de:a3:50:9e:9a:e8:b5:a3:ff:8f:0d:27:b0: 2a:d0:6c:11:d4:41:ff:7a:c0:6d:7f:58:0b:94:19:c3:bd:08: 4d:b6:ea:1f:a3:17:9a:de:fd:c0:4f:4e:30:8e:6c:66:30:40: 9b:2c:1f:f9:2c:cc:ef:98:38:1e:f8:5c:c7:67:0c:b3:2c:b6: 48:12:e0:eb:b1:ee:ea:0a:b9:28:25:9e:a6:f7:ec:f3:33:31: 0f:23:5c:e8:59:14:fa:78:fa:bb:82:8e:fc:d9:e9:bb:82:91: 40:11:dc:24:b3:2a:51:25:de:37:c8:fa:af:0e:b1:f3:49:ba: f1:b8:d5:ad:8e:e4:4b:7a:f9:00:20:94:35:16:f9:03:cb:a2: 50:ed:fb:69:ea:71:bd:19:2f:7d:e0:6e:ed:7b:49:e5:04:8b: bd:ab:d7:42:68:e2:0f:d4:8d:57:7b:6a:24:9d:4b:f1:90:4e: 30:47:98:b3 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OThFNTExMC8GA1UEBRMoMDNDODU2MDAzNEU5MTdGNDg0MDZCNDA0Njk1MDBCMjNG Mzk1NkI1RDAeFw0yNTExMjUwNjIwMDlaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU4OGFiLTIzMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6s5N+EjIutBcD6KmaameEUg1yix/+WER/pSO2j6kjidpc4HeUltWzHMolYJ2U FcTSgDki9txJdrsYaFgycKywoEZzKyCOT9njMIwR/7qIjcGjjkZ9gCbWWNztRBlW gvu2yhIJiXC/stepPU0v0X5J2IOeoOzEXHLy5wNoD/1t7H6VTlhRLJQPDEdNwdIz dsVnfu5IwbspQeJKlZEBxYABVxQPZxLWvFARXa+tf0EAW4m1O5gE14THNmWwG85e 0K0r2130ZoiJpcMQyYr9uj/Dl42ZNqPGvuW3mZ4YQNlezdictyevQMuso4bNlpo7 3MSrFyb7+dxTAAg1dYqIGxvtAgMBAAGjggJvMIICazAdBgNVHQ4EFgQUxsAP28qt waedFvVaT8bncQN2aD0wHwYDVR0jBBgwFoAUA8hWADTpF/SEBrQEaVALI/OVa10w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5OEU1LzE2ODRDMDc4NDA0 NzExRUVBQkMwRTI0Q0M0RjlBRTAyL0E4aFdBRFRwRl9TRUJyUUVhVkFMSV9PVmEx MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQThoV0FEVHBGX1NFQnJRRWFWQUxJX09WYTEwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9DQUQwMDk5MkM5 QzYxMUYwOUM5RUYwMThDNEY5QUUwMi5yb2EwLgYIKwYBBQUHAQcBAf8EHzAdMAwE AgABMAYDBAFn7powDQQCAAIwBwMFACQBGSAwDQYJKoZIhvcNAQELBQADggEBAJuI qAXbywnAVBg56bOTHWmCQg9VgO2GIZ9xCoW/X0GDFsqy1qZujJHuv4v+2Ndco/WK kSHmCg1QIreoanWZxyvb4xsW8LErBobRFk6s3qNQnprotaP/jw0nsCrQbBHUQf96 wG1/WAuUGcO9CE226h+jF5re/cBPTjCObGYwQJssH/kszO+YOB74XMdnDLMstkgS 4Oux7uoKuSglnqb37PMzMQ8jXOhZFPp4+ruCjvzZ6buCkUAR3CSzKlEl3jfI+q8O sfNJuvG41a2O5Et6+QAglDUW+QPLolDt+2nqcb0ZL33gbu17SeUEi72r10Jo4g/U jVd7aiSdS/GQTjBHmLM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:48 2026 by rpki-client