$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/94C13908C4AF11EDBCC55111C4F9AE02.roa File: 94C13908C4AF11EDBCC55111C4F9AE02.roa (raw, json) Hash identifier: m+YMSjzVUuc73W6hTfDFbMi0+yUuBUpgBYQofvaW6Ow= Subject key identifier: 30:15:96:F0:CF:7D:B1:2A:73:F9:3F:3E:63:2C:3F:E6:58:25:94:6A Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 03D7 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/94C13908C4AF11EDBCC55111C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:13:41 +0000 ROA not before: Wed 03 Sep 2025 03:20:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 39486 IP address blocks: 43.228.237.0/24 maxlen: 24 103.109.244.0/24 maxlen: 24 103.192.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587, serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Validity Not Before: Sep 3 03:20:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a481d5-9753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:b9:4b:99:d7:3a:73:98:8b:c2:1c:7a:91: 4c:11:27:30:d1:68:5e:2d:fd:5b:9d:6f:58:72:fc: 2f:c1:1b:c7:e4:52:4b:39:46:72:d2:33:a9:ef:d1: d1:65:79:31:55:b8:bf:5a:2a:c6:17:de:05:12:b2: 0a:85:d1:92:e8:46:fc:fe:c7:ba:bf:73:07:a0:89: 9b:64:08:cb:f3:00:8a:b6:88:85:48:03:13:40:61: 68:7b:ec:28:d0:16:c1:79:b4:e8:65:74:44:be:79: c3:96:ff:98:20:d0:75:33:88:97:d7:d3:8b:fa:9c: 1d:cb:15:a2:cc:d6:09:53:5e:b2:d3:01:cb:ca:10: 86:cb:24:71:5b:bd:87:39:4a:05:b8:37:63:d7:c0: 7f:dd:d9:bb:85:d1:e0:c2:d2:80:91:81:48:77:2a: b7:f9:67:60:40:61:a4:c3:b8:a8:ac:32:5e:ef:5e: 58:af:48:a5:82:51:2a:84:c6:07:e6:45:20:81:4a: 12:6f:30:9c:a5:c0:36:c4:ad:ba:5f:e7:4c:61:aa: 9f:67:b9:ab:e4:33:ab:a9:34:71:99:fc:e6:9f:8c: bf:00:72:8c:16:84:4d:d2:54:b1:56:20:9a:22:41: 10:1b:a8:fb:36:c8:e7:ac:f7:2a:d4:c6:6b:08:0e: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:15:96:F0:CF:7D:B1:2A:73:F9:3F:3E:63:2C:3F:E6:58:25:94:6A X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/94C13908C4AF11EDBCC55111C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.228.237.0/24 103.109.244.0/24 103.192.205.0/24 Signature Algorithm: sha256WithRSAEncryption 41:41:01:3e:78:6d:cf:b4:c2:a7:5c:82:bd:95:77:b0:68:1b: d1:eb:21:27:fe:73:ed:ea:f8:3b:2e:d2:37:f9:ef:9d:7e:c3: a1:74:d6:34:5c:0e:42:1b:d6:38:b7:d2:87:a2:0f:7f:2e:7f: 8b:1b:5c:1c:d2:99:cc:93:1e:6c:ce:5b:40:43:49:c4:6a:a5: f5:a5:a6:ba:9b:14:a5:85:58:b9:a9:0a:9f:12:bb:10:92:db: 4b:61:89:38:9c:b2:67:e8:75:5c:5c:e6:dd:cf:73:22:27:22: 1c:e5:86:74:c0:40:2e:44:c4:b2:b5:0c:50:f7:8a:ee:e1:3f: 98:4e:ab:c0:00:e9:c0:78:a9:02:a1:c6:c0:70:01:f4:0f:e7: 05:3a:c0:6a:15:9e:11:2d:df:97:f5:ba:78:c6:aa:45:a2:be: a3:d5:79:66:e8:f7:e6:eb:1b:6d:21:8d:bb:85:d8:87:66:ca: 5c:85:93:98:d4:d0:21:ef:2a:23:8f:c5:22:92:f8:a6:c7:cd: 0a:5c:40:6b:41:5f:c9:51:b0:c8:e7:67:91:c7:38:11:85:a9: 9b:8f:33:72:4a:24:fa:f4:7a:22:63:24:81:2f:d0:e4:60:35: 9f:96:7e:9f:1f:0d:63:8e:62:0e:53:2a:4e:6b:b1:a7:e2:8e: 20:7c:d1:5b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwOTAzMDMyMDE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODFkNS05NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGG5S5nXOnOYi8IcepFMEScw0WheLf1bnW9YcvwvwRvH5FJLOUZy0jOp79HR ZXkxVbi/WirGF94FErIKhdGS6Eb8/se6v3MHoImbZAjL8wCKtoiFSAMTQGFoe+wo 0BbBebToZXREvnnDlv+YINB1M4iX19OL+pwdyxWizNYJU16y0wHLyhCGyyRxW72H OUoFuDdj18B/3dm7hdHgwtKAkYFIdyq3+WdgQGGkw7iorDJe715Yr0ilglEqhMYH 5kUggUoSbzCcpcA2xK26X+dMYaqfZ7mr5DOrqTRxmfzmn4y/AHKMFoRN0lSxViCa IkEQG6j7NsjnrPcq1MZrCA6U0QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDAVlvDP fbEqc/k/PmMsP+ZYJZRqMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvOTRDMTM5MDhD NEFGMTFFREJDQzU1MTExQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAK+TtAwQAZ230AwQAZ8DNMA0GCSqGSIb3DQEBCwUAA4IBAQBBQQE+ eG3PtMKnXIK9lXewaBvR6yEn/nPt6vg7LtI3+e+dfsOhdNY0XA5CG9Y4t9KHog9/ Ln+LG1wc0pnMkx5szltAQ0nEaqX1paa6mxSlhVi5qQqfErsQkttLYYk4nLJn6HVc XObdz3MiJyIc5YZ0wEAuRMSytQxQ94ru4T+YTqvAAOnAeKkCocbAcAH0D+cFOsBq FZ4RLd+X9bp4xqpFor6j1Xlm6Pfm6xttIY27hdiHZspchZOY1NAh7yojj8Uikvim x80KXEBrQV/JUbDI52eRxzgRhambjzNySiT69HoiYySBL9DkYDWfln6fHw1jjmIO UypOa7Gn4o4gfNFb -----END CERTIFICATE-----Generated at Thu Mar 26 05:37:07 2026 by rpki-client