$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa File: D76AC8AC2EAB11EF9B369566C4F9AE02.roa (raw, json) Hash identifier: THixLa/45ZK/Pkv9/quk4OO+SRxBsBhh9iA6Q9k83cw= Subject key identifier: DD:39:04:6D:86:32:B8:BA:6E:4D:25:2A:46:E0:66:5B:49:B9:6A:64 Certificate issuer: /CN=A91B7BDC/serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Certificate serial: 0517 Authority key identifier: D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa Signing time: Thu 23 Apr 2026 00:30:32 +0000 ROA not before: Thu 23 Apr 2026 00:30:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132139 IP address blocks: 103.149.62.0/23 maxlen: 23 103.149.62.0/24 maxlen: 24 103.149.63.0/24 maxlen: 24 2405:e440::/32 maxlen: 32 2405:e440::/48 maxlen: 48 2405:e440:1::/48 maxlen: 48 2405:e440:2::/48 maxlen: 48 2405:e440:3::/48 maxlen: 48 2405:e440:4::/46 maxlen: 46 2405:e440:4::/48 maxlen: 48 2405:e440:5::/48 maxlen: 48 2405:e440:6::/48 maxlen: 48 2405:e440:7::/48 maxlen: 48 2405:e440:8::/46 maxlen: 46 2405:e440:8::/48 maxlen: 48 2405:e440:9::/48 maxlen: 48 2405:e440:a::/48 maxlen: 48 2405:e440:b::/48 maxlen: 48 2405:e440:c::/46 maxlen: 46 2405:e440:c::/48 maxlen: 48 2405:e440:d::/48 maxlen: 48 2405:e440:e::/48 maxlen: 48 2405:e440:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 23:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=D43B44D5F937F65E8BAB9B7F987A3DC9D2104A32 Validity Not Before: Apr 23 00:30:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e96827-b141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:59:78:fc:f5:49:03:bf:96:8b:c4:73:e8: 5f:1b:59:d0:6a:ee:96:1c:1d:1f:b7:2c:3e:11:5d: b3:4c:8f:4d:50:ab:24:81:98:1e:24:c5:9c:b1:62: 88:d8:02:89:29:74:2f:71:bb:a2:d8:17:28:43:ad: 58:60:4d:85:ee:44:70:e0:78:3f:69:c0:24:2d:7b: 1f:21:f4:8e:44:04:4a:5a:04:ed:1b:4c:55:f6:8b: ac:84:6d:bd:01:3e:96:aa:38:5e:70:60:0d:c4:8f: 8c:88:f4:37:ad:52:e9:ac:40:01:89:86:9e:ca:ae: 98:a7:56:34:15:b4:ef:4d:9d:17:80:18:71:52:fe: b6:3d:51:3f:b6:15:51:98:24:e5:65:84:9d:72:00: 3a:02:70:5b:b4:08:14:f4:c3:fd:62:4b:c3:68:80: 93:ab:e1:0e:09:c2:da:5e:7f:e8:c0:ec:0d:66:7f: 2e:ac:32:56:7d:11:34:05:e2:95:e6:b5:45:eb:a2: a8:a2:d9:93:4c:2f:d7:6a:af:d5:14:52:30:7d:56: d9:6c:e5:a6:d0:e2:93:ef:94:e7:89:34:0f:8b:12: 46:32:8b:99:f1:77:66:ef:46:58:31:b4:3f:f3:10: d3:5b:c4:02:04:6b:81:e4:55:39:a4:04:6f:f7:00: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:04:6D:86:32:B8:BA:6E:4D:25:2A:46:E0:66:5B:49:B9:6A:64 X509v3 Authority Key Identifier: keyid:D4:3B:44:D5:F9:37:F6:5E:8B:AB:9B:7F:98:7A:3D:C9:D2:10:4A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/1DtE1fk39l6Lq5t_mHo9ydIQSjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1DtE1fk39l6Lq5t_mHo9ydIQSjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/681C8F4658BE11EC8AED5F2CC4F9AE02/D76AC8AC2EAB11EF9B369566C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.62.0/23 IPv6: 2405:e440::/32 Signature Algorithm: sha256WithRSAEncryption 3f:a6:7b:bb:29:56:a5:c4:ee:65:d1:79:55:d3:f1:92:a1:48: 61:24:62:0e:17:ae:ae:c5:8b:d0:8f:a4:69:8e:39:98:8c:22: 37:c5:8c:e7:60:76:09:74:81:3e:28:5a:f4:5c:93:15:c6:1c: 88:5b:7b:30:c5:a7:5f:fe:40:2a:d2:63:53:db:d6:8a:33:5b: 29:ed:83:8f:07:85:2b:56:c6:e9:dc:17:29:43:f1:ef:7d:77: 75:ee:cb:1e:37:d1:8b:d8:67:13:f4:eb:6e:23:8c:1a:28:31: cd:8f:99:15:6f:3a:66:ca:60:ec:96:25:64:75:a7:98:01:7f: 48:f9:d0:33:64:a5:15:e7:09:d5:60:6a:6b:ca:58:ef:b7:78: 9e:aa:0f:91:c6:63:dd:be:7a:ad:d4:92:c4:4d:87:23:9d:1b: 2c:bf:91:9c:19:db:f1:05:fe:b3:b2:25:27:c5:56:0c:be:d6: 8e:d2:32:8e:c5:9b:7e:46:d9:ab:26:bd:67:b4:fc:b4:e8:84: 68:b1:da:ed:15:97:07:55:8b:54:99:f7:2d:d1:6e:c7:ee:3a: 25:47:0b:ce:f7:8e:ce:1f:2c:89:cc:8b:5c:79:cf:26:a5:ab: 0d:c7:2d:a1:ad:2a:c8:97:ce:69:05:53:6f:91:78:8b:78:94: bc:19:80:7e -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEQ0M0I0NEQ1RjkzN0Y2NUU4QkFCOUI3Rjk4N0EzREM5 RDIxMDRBMzIwHhcNMjYwNDIzMDAzMDMyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWU5NjgyNy1iMTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UhZePz1SQO/lovEc+hfG1nQau6WHB0ftyw+EV2zTI9NUKskgZgeJMWcsWKI 2AKJKXQvcbui2BcoQ61YYE2F7kRw4Hg/acAkLXsfIfSORARKWgTtG0xV9oushG29 AT6WqjhecGANxI+MiPQ3rVLprEABiYaeyq6Yp1Y0FbTvTZ0XgBhxUv62PVE/thVR mCTlZYSdcgA6AnBbtAgU9MP9YkvDaICTq+EOCcLaXn/owOwNZn8urDJWfRE0BeKV 5rVF66KootmTTC/Xaq/VFFIwfVbZbOWm0OKT75TniTQPixJGMouZ8Xdm70ZYMbQ/ 8xDTW8QCBGuB5FU5pARv9wC+IQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFN05BG2G Mri6bk0lKkbgZltJuWpkMB8GA1UdIwQYMBaAFNQ7RNX5N/Zei6ubf5h6PcnSEEoy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy82ODFDOEY0NjU4 QkUxMUVDOEFFRDVGMkNDNEY5QUUwMi8xRHRFMWZrMzlsNkxxNXRfbUhvOXlkSVFT akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFEdEUxZmszOWw2THE1dF9tSG85eWRJUVNqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCREMvNjgxQzhGNDY1OEJFMTFFQzhBRUQ1RjJDQzRGOUFFMDIvRDc2QUM4QUMy RUFCMTFFRjlCMzY5NTY2QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5U+MA0EAgACMAcDBQAkBeRAMA0GCSqGSIb3DQEBCwUAA4IBAQA/ pnu7KValxO5l0XlV0/GSoUhhJGIOF66uxYvQj6RpjjmYjCI3xYznYHYJdIE+KFr0 XJMVxhyIW3swxadf/kAq0mNT29aKM1sp7YOPB4UrVsbp3BcpQ/HvfXd17sseN9GL 2GcT9OtuI4waKDHNj5kVbzpmymDsliVkdaeYAX9I+dAzZKUV5wnVYGpryljvt3ie qg+RxmPdvnqt1JLETYcjnRssv5GcGdvxBf6zsiUnxVYMvtaO0jKOxZt+RtmrJr1n tPy06IRosdrtFZcHVYtUmfct0W7H7jolRwvO947OHyyJzItcec8mpasNxy2hrSrI l85pBVNvkXiLeJS8GYB+ -----END CERTIFICATE-----Generated at Wed May 13 05:05:46 2026 by rpki-client