$ rpki-client -vvf rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/690390E80FAA11EB8B893F1EC4F9AE02.roa File: 690390E80FAA11EB8B893F1EC4F9AE02.roa (raw, json) Hash identifier: e/Pn5qPd83tgfAM5gG7LPu5WMIBT6NEqspZed3qdjbs= Subject key identifier: 3D:CA:66:A7:19:3C:2F:A2:4E:DC:03:69:6F:BA:77:E4:A6:0A:32:49 Certificate issuer: /CN=A91B624E/serialNumber=54244F645DEA0D509668580D138E825279FB5678 Certificate serial: 0D9A Authority key identifier: 54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/690390E80FAA11EB8B893F1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:38:22 +0000 ROA not before: Fri 06 Jun 2025 18:22:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136480 IP address blocks: 103.116.56.0/22 maxlen: 22 103.116.56.0/23 maxlen: 23 103.116.56.0/24 maxlen: 24 103.116.57.0/24 maxlen: 24 103.116.58.0/23 maxlen: 23 103.116.58.0/24 maxlen: 24 103.116.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B624E, serialNumber=54244F645DEA0D509668580D138E825279FB5678 Validity Not Before: Jun 6 18:22:40 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4252e-34b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:48:a8:85:f4:73:2c:6b:19:59:bb:84:10: f7:11:b2:3d:c9:69:0f:c9:75:49:b1:b6:fe:17:fb: 64:20:1c:59:63:97:21:fd:dc:0b:98:e2:d6:6f:b2: ef:be:96:63:e6:8e:67:88:b4:d2:af:84:bc:45:c2: d2:05:6d:fd:68:49:76:69:3a:92:77:6e:c4:ab:6a: b4:c6:b3:11:67:fc:09:df:f6:96:72:b3:84:e7:46: c7:c0:73:5f:22:b8:de:5a:64:0d:36:ad:de:51:be: 9a:b5:a4:ac:52:b0:ea:31:5a:ec:2f:4a:a0:ce:b8: 40:cc:bd:58:4a:7d:c3:8f:3e:36:d7:73:28:e3:30: c6:29:ce:f1:c1:3f:45:6b:77:47:ee:7e:23:37:67: 89:6b:8d:9e:25:2c:d0:ec:9a:1b:c2:2a:06:22:fe: 46:dd:34:fe:86:fa:87:ae:1a:7c:cb:ee:5e:45:6c: 89:c3:ab:1c:74:bc:f9:f2:86:82:80:d3:b4:fb:36: eb:67:9d:54:83:ba:aa:41:16:2f:5e:65:16:3d:9d: d0:bd:5f:8a:c6:c0:88:db:42:ca:bd:78:aa:f2:1e: 0c:61:22:17:64:72:16:44:e6:a3:53:8b:89:17:27: d5:14:04:f4:51:e0:82:cf:37:ec:46:7e:4a:88:98: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CA:66:A7:19:3C:2F:A2:4E:DC:03:69:6F:BA:77:E4:A6:0A:32:49 X509v3 Authority Key Identifier: keyid:54:24:4F:64:5D:EA:0D:50:96:68:58:0D:13:8E:82:52:79:FB:56:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/VCRPZF3qDVCWaFgNE46CUnn7Vng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCRPZF3qDVCWaFgNE46CUnn7Vng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B624E/BD95C38EE03E11E9B2B9DA11C4F9AE02/690390E80FAA11EB8B893F1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.116.56.0/22 Signature Algorithm: sha256WithRSAEncryption 89:c0:00:38:f8:73:9a:64:8f:61:c5:be:85:25:9c:54:8f:72: bf:f6:cf:2d:3d:c4:0c:e8:21:65:6b:62:7b:fb:f2:ff:f7:d0: 23:41:b4:09:d2:4a:8f:5b:d7:6e:31:d1:b0:61:b0:c7:14:ea: 9c:49:e9:ab:dc:01:ef:51:82:1d:86:69:8d:d8:b5:26:29:a0: e6:64:da:46:71:d3:33:ba:cb:14:b6:fd:8b:db:3e:35:98:10: 02:8b:b5:bf:ef:36:42:4f:1a:95:26:33:0c:cd:a1:31:3b:2d: c7:50:e9:c0:58:e1:3a:b8:69:ed:be:5a:a8:bb:89:3c:e1:18: 7f:10:56:c8:f8:0d:07:4c:61:e4:37:19:9d:7f:d7:be:d9:6f: 5a:f3:94:7a:ee:72:e7:bb:a6:7d:17:67:fc:61:65:26:93:81: d9:cd:b5:51:88:8a:5a:8f:cd:44:4f:77:88:98:33:0c:2e:4e: 00:ec:20:65:42:21:34:66:99:db:95:2a:94:fa:c5:26:37:d3: 0b:f1:7c:77:65:4c:2c:24:b5:57:8c:18:fd:a4:19:ac:e1:da: fb:52:2c:fc:51:87:a5:45:08:df:5c:fa:a1:57:47:e4:85:cf: 3d:89:25:79:2b:3d:90:82:27:66:9a:90:7d:87:07:30:bd:de: 25:99:db:9f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjYyNEUxMTAvBgNVBAUTKDU0MjQ0RjY0NURFQTBENTA5NjY4NTgwRDEzOEU4MjUy NzlGQjU2NzgwHhcNMjUwNjA2MTgyMjQwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjUyZS0zNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApVtIqIX0cyxrGVm7hBD3EbI9yWkPyXVJsbb+F/tkIBxZY5ch/dwLmOLWb7Lv vpZj5o5niLTSr4S8RcLSBW39aEl2aTqSd27Eq2q0xrMRZ/wJ3/aWcrOE50bHwHNf IrjeWmQNNq3eUb6ataSsUrDqMVrsL0qgzrhAzL1YSn3Djz4213Mo4zDGKc7xwT9F a3dH7n4jN2eJa42eJSzQ7JobwioGIv5G3TT+hvqHrhp8y+5eRWyJw6scdLz58oaC gNO0+zbrZ51Ug7qqQRYvXmUWPZ3QvV+KxsCI20LKvXiq8h4MYSIXZHIWROajU4uJ FyfVFAT0UeCCzzfsRn5KiJhuXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD3KZqcZ PC+iTtwDaW+6d+SmCjJJMB8GA1UdIwQYMBaAFFQkT2Rd6g1QlmhYDROOglJ5+1Z4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI0RS9CRDk1QzM4RUUw M0UxMUU5QjJCOURBMTFDNEY5QUUwMi9WQ1JQWkYzcURWQ1dhRmdORTQ2Q1VubjdW bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDUlBaRjNxRFZDV2FGZ05FNDZDVW5uN1ZuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjYyNEUvQkQ5NUMzOEVFMDNFMTFFOUIyQjlEQTExQzRGOUFFMDIvNjkwMzkwRTgw RkFBMTFFQjhCODkzRjFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ3Q4MA0GCSqGSIb3DQEBCwUAA4IBAQCJwAA4+HOaZI9hxb6FJZxU j3K/9s8tPcQM6CFla2J7+/L/99AjQbQJ0kqPW9duMdGwYbDHFOqcSemr3AHvUYId hmmN2LUmKaDmZNpGcdMzussUtv2L2z41mBACi7W/7zZCTxqVJjMMzaExOy3HUOnA WOE6uGntvlqou4k84Rh/EFbI+A0HTGHkNxmdf9e+2W9a85R67nLnu6Z9F2f8YWUm k4HZzbVRiIpaj81ET3eImDMMLk4A7CBlQiE0ZpnblSqU+sUmN9ML8Xx3ZUwsJLVX jBj9pBms4dr7Uiz8UYelRQjfXPqhV0fkhc89iSV5Kz2QgidmmpB9hwcwvd4lmduf -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:24 2026 by rpki-client