$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/291E55288C7111EBA752313FC4F9AE02.roa File: 291E55288C7111EBA752313FC4F9AE02.roa (raw, json) Hash identifier: Psgba/J6D2Rc4QvTasd4fTFxXwiZJRSLuDPikpsNKlE= Subject key identifier: 60:A1:9E:ED:2A:6E:9F:34:79:FD:18:EB:B7:A9:95:4B:FB:95:54:69 Certificate issuer: /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Certificate serial: 06E2 Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/291E55288C7111EBA752313FC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:45:46 +0000 ROA not before: Tue 02 Sep 2025 22:43:46 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132464 IP address blocks: 103.73.58.0/24 maxlen: 24 103.145.187.0/24 maxlen: 24 2400:7de0::/32 maxlen: 32 2400:7de0::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690 Validity Not Before: Sep 2 22:43:46 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a40aca-b0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:2e:c3:4a:31:c1:69:ab:0b:5e:b4:e7:5c: bd:8d:3e:16:c4:b1:53:b9:7d:2e:2a:3e:65:bb:2e: 18:3f:5b:41:17:62:e3:bc:87:7e:7a:1b:c5:33:b0: 19:fa:0e:b2:1a:a5:c2:f0:a9:2e:7c:f4:ae:76:b5: fc:6e:68:15:d7:05:62:f3:12:e7:95:44:9c:bd:b2: f3:32:e4:7e:c2:c1:24:31:fb:e5:4d:d6:fe:77:10: a8:44:96:1b:a0:67:6b:58:aa:64:e8:a5:3b:da:3a: e2:1c:37:cd:ea:ab:42:30:4b:84:ad:64:cb:4a:c7: 18:d4:92:fb:20:66:12:7e:58:3f:14:2e:17:9b:b1: 35:8c:bc:2f:8e:da:1f:3a:5d:70:3d:6e:af:77:2b: 8f:f1:ea:8e:f9:d1:8b:11:77:1e:3c:1b:b3:73:21: 51:6e:c9:86:10:b2:21:fa:44:7a:cb:d3:ad:66:60: c5:59:94:41:b8:5b:ed:d8:41:95:cb:87:2e:e3:11: 66:33:d0:eb:10:19:b7:8b:f6:32:ad:e6:db:28:84: aa:07:f9:9c:16:ac:88:80:fe:2b:b9:08:12:f2:89: ad:43:9a:9d:1b:2d:1d:dd:93:f0:90:68:b0:d9:45: a5:ee:61:5d:74:01:27:d2:26:a6:00:0c:6e:e9:2e: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:9E:ED:2A:6E:9F:34:79:FD:18:EB:B7:A9:95:4B:FB:95:54:69 X509v3 Authority Key Identifier: keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/291E55288C7111EBA752313FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.73.58.0/24 103.145.187.0/24 IPv6: 2400:7de0::/32 Signature Algorithm: sha256WithRSAEncryption 93:40:56:6a:83:3e:19:66:81:08:89:0f:58:dc:0f:b7:fb:39: e7:9c:ad:ae:20:db:f5:df:ee:15:f8:90:37:5e:43:08:35:52: 9f:c5:e0:b1:88:54:aa:dc:b7:a8:ad:6d:af:14:5a:db:5a:52: 44:95:f3:dd:12:f1:55:9d:c8:5a:ff:4c:b5:25:4d:b0:fc:90: 21:a0:61:a9:30:a5:27:53:b1:8e:e2:ef:9d:53:f8:ad:52:bd: 9f:7d:f3:04:1e:83:1a:e0:82:62:05:cb:27:e1:ea:8f:7c:d1: 3d:ee:96:38:c1:c9:9c:2f:db:df:d7:1d:89:81:2a:8e:6f:88: 6e:d5:78:c6:df:dd:43:4e:34:a3:db:6b:bb:48:80:ea:6d:a8: 5b:19:2e:40:47:29:91:fe:ce:a9:a3:2e:90:60:4b:82:b7:1e: ba:5f:7e:cb:d7:99:09:df:cc:ba:71:ce:56:25:54:5b:fd:00: 17:b9:23:26:03:0a:30:29:b7:4e:d0:b9:70:e6:c2:58:31:65: 72:9b:51:2d:4e:88:af:45:8b:34:22:bf:94:4c:ca:54:73:6e: 1d:92:b6:9d:3f:9c:e3:31:83:2f:a9:84:5f:74:f4:a6:f2:36: 69:40:2c:54:06:e5:fa:fd:68:57:a4:99:e5:fa:35:f1:44:fc: 46:78:05:0f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzMTcxMTAvBgNVBAUTKDc3OUNEOTIxNTY5RTkzRjlEMjZCMTNBNUFBN0UzNzZD RkI1RjA2OTAwHhcNMjUwOTAyMjI0MzQ2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGFjYS1iMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOsuw0oxwWmrC16051y9jT4WxLFTuX0uKj5luy4YP1tBF2LjvId+ehvFM7AZ +g6yGqXC8KkufPSudrX8bmgV1wVi8xLnlUScvbLzMuR+wsEkMfvlTdb+dxCoRJYb oGdrWKpk6KU72jriHDfN6qtCMEuErWTLSscY1JL7IGYSflg/FC4Xm7E1jLwvjtof Ol1wPW6vdyuP8eqO+dGLEXcePBuzcyFRbsmGELIh+kR6y9OtZmDFWZRBuFvt2EGV y4cu4xFmM9DrEBm3i/YyrebbKISqB/mcFqyIgP4ruQgS8omtQ5qdGy0d3ZPwkGiw 2UWl7mFddAEn0iamAAxu6S6RJQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFGChnu0q bp80ef0Y67eplUv7lVRpMB8GA1UdIwQYMBaAFHec2SFWnpP50msTpap+N2z7XwaQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjMxNy80RkQ1NzY4MDhD NkYxMUVCQkE4MTlGMzFDNEY5QUUwMi9kNXpaSVZhZWtfblNheE9scW40M2JQdGZC cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q1elpJVmFla19uU2F4T2xxbjQzYlB0ZkJwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYzMTcvNEZENTc2ODA4QzZGMTFFQkJBODE5RjMxQzRGOUFFMDIvMjkxRTU1Mjg4 QzcxMTFFQkE3NTIzMTNGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQAZ0k6AwQAZ5G7MA0EAgACMAcDBQAkAH3gMA0GCSqGSIb3DQEBCwUA A4IBAQCTQFZqgz4ZZoEIiQ9Y3A+3+znnnK2uINv13+4V+JA3XkMINVKfxeCxiFSq 3LeorW2vFFrbWlJElfPdEvFVncha/0y1JU2w/JAhoGGpMKUnU7GO4u+dU/itUr2f ffMEHoMa4IJiBcsn4eqPfNE97pY4wcmcL9vf1x2JgSqOb4hu1XjG391DTjSj22u7 SIDqbahbGS5ARymR/s6poy6QYEuCtx66X37L15kJ38y6cc5WJVRb/QAXuSMmAwow KbdO0Llw5sJYMWVym1EtToivRYs0Ir+UTMpUc24dkradP5zjMYMvqYRfdPSm8jZp QCxUBuX6/WhXpJnl+jXxRPxGeAUP -----END CERTIFICATE-----Generated at Sat Mar 28 11:47:47 2026 by rpki-client