$ rpki-client -vvf rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa File: 2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa (raw, json) Hash identifier: r/jyldPvZyETIIfh/LFNHKgskXkVuM0DwDXStUTNnhk= Subject key identifier: AB:9B:4F:F0:9E:D7:CA:5F:A6:2E:DA:74:A2:F0:9B:3A:32:56:F2:BA Certificate issuer: /CN=A91B809B/serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Certificate serial: 093E Authority key identifier: 1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:01:32 +0000 ROA not before: Fri 06 Jun 2025 20:48:09 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 136533 IP address blocks: 103.91.240.0/22 maxlen: 22 123.253.72.0/22 maxlen: 22 123.253.74.0/24 maxlen: 24 2401:17c0::/32 maxlen: 32 2401:17c0::/48 maxlen: 48 2401:17c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B809B, serialNumber=1FF4E33ED7730DCE3231D2EDB54D96D9EAB5F7F6 Validity Not Before: Jun 6 20:48:09 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a58a2c-68aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:21:4b:b5:e6:3d:33:df:89:4f:50:55:20: 93:5a:93:b4:cf:80:a6:61:fc:c2:66:43:58:af:fb: 1c:5a:eb:f1:36:18:35:3c:d2:80:b4:fb:03:bf:f4: 90:f1:17:cd:a3:f6:11:91:88:b2:03:50:9f:99:c7: e0:82:2d:6a:df:38:86:72:19:6d:fd:f0:f8:85:be: 4a:05:7e:12:06:bf:48:95:b1:99:97:88:0c:0f:85: 6b:7a:33:26:b6:d4:9b:b0:e4:a5:23:67:c6:e1:46: c4:f1:de:12:89:5c:c9:04:5c:00:b7:2e:d2:69:ab: 1e:e8:1f:66:46:8e:e0:59:6f:10:30:f9:35:27:b1: 35:b0:95:72:2b:ad:5e:0a:7d:82:19:64:28:ff:1f: e6:6d:ba:68:cb:3c:67:9d:0d:0f:7a:f1:da:03:ec: f4:d8:dd:8a:08:4b:94:76:4c:9f:e7:ce:b7:25:e8: ff:d5:ec:36:23:dc:39:9e:75:ac:14:a2:e2:7a:1c: 5e:dc:24:d5:d0:e0:12:94:95:42:a8:6a:30:b9:14: ac:91:dd:d3:60:ea:c8:55:f6:20:e1:81:e6:3d:25: f5:79:1f:1f:6d:8c:9a:dc:d2:e2:15:cd:60:3f:77: 7f:12:9a:23:83:91:21:d7:35:86:5a:73:74:f2:fa: e2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9B:4F:F0:9E:D7:CA:5F:A6:2E:DA:74:A2:F0:9B:3A:32:56:F2:BA X509v3 Authority Key Identifier: keyid:1F:F4:E3:3E:D7:73:0D:CE:32:31:D2:ED:B5:4D:96:D9:EA:B5:F7:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/H_TjPtdzDc4yMdLttU2W2eq19_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H_TjPtdzDc4yMdLttU2W2eq19_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B809B/7678F2FEBA9111EAAAB5CC57C4F9AE02/2D4BDDA29D8E11EDBEBECE73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.240.0/22 123.253.72.0/22 IPv6: 2401:17c0::/32 Signature Algorithm: sha256WithRSAEncryption 66:3f:5f:e7:80:f6:d3:4b:cd:77:06:08:2b:f0:d2:4a:71:f4: 35:78:e9:56:44:8c:eb:1c:e8:6d:05:9b:78:f6:ab:84:46:f4: 2f:6e:dc:b6:73:5a:52:c3:28:88:e8:5f:1f:f5:02:24:8c:df: 7d:c0:32:21:36:17:76:56:60:d6:83:62:cb:eb:92:30:1b:6f: 83:ce:d5:e7:dd:6a:8a:03:e2:a9:8b:8a:24:a1:31:8c:0c:02: 5c:12:09:a8:70:7d:d9:d6:1a:2e:de:18:a2:30:a9:f7:1b:a6: 58:07:a9:f8:95:f9:43:d5:a2:70:86:9c:23:02:1c:64:0d:f9: a8:97:61:8a:ff:31:cf:3c:aa:9e:b9:07:c6:f2:d7:ba:6e:42: c0:00:04:cc:38:2e:73:ce:21:53:16:60:4e:fa:54:b2:2c:aa: 91:2f:77:c5:4a:ad:24:0c:e5:71:c1:77:20:a0:6b:9c:01:66: c2:41:d7:bd:63:c0:80:f2:21:98:f2:be:40:11:6e:9b:bd:b0: da:c4:56:15:ff:c3:07:a1:8a:5c:b5:7e:6f:4c:34:a4:d6:92: 57:59:7b:37:f5:5d:e8:73:7f:05:0b:19:4f:98:5b:1e:b2:fb: 3f:ac:f2:5b:64:d9:63:7b:e2:e7:83:e0:73:e6:9a:f4:5e:7c: c1:16:f3:da -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwOUIxMTAvBgNVBAUTKDFGRjRFMzNFRDc3MzBEQ0UzMjMxRDJFREI1NEQ5NkQ5 RUFCNUY3RjYwHhcNMjUwNjA2MjA0ODA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGEyYy02OGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkr8hS7XmPTPfiU9QVSCTWpO0z4CmYfzCZkNYr/scWuvxNhg1PNKAtPsDv/SQ 8RfNo/YRkYiyA1Cfmcfggi1q3ziGchlt/fD4hb5KBX4SBr9IlbGZl4gMD4VrejMm ttSbsOSlI2fG4UbE8d4SiVzJBFwAty7Saase6B9mRo7gWW8QMPk1J7E1sJVyK61e Cn2CGWQo/x/mbbpoyzxnnQ0PevHaA+z02N2KCEuUdkyf5863Jej/1ew2I9w5nnWs FKLiehxe3CTV0OASlJVCqGowuRSskd3TYOrIVfYg4YHmPSX1eR8fbYya3NLiFc1g P3d/Epojg5Eh1zWGWnN08vricwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFKubT/Ce 18pfpi7adKLwmzoyVvK6MB8GA1UdIwQYMBaAFB/04z7Xcw3OMjHS7bVNltnqtff2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODA5Qi83Njc4RjJGRUJB OTExMUVBQUFCNUNDNTdDNEY5QUUwMi9IX1RqUHRkekRjNHlNZEx0dFUyVzJlcTE5 X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hfVGpQdGR6RGM0eU1kTHR0VTJXMmVxMTlfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwOUIvNzY3OEYyRkVCQTkxMTFFQUFBQjVDQzU3QzRGOUFFMDIvMkQ0QkREQTI5 RDhFMTFFREJFQkVDRTczQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ1vwAwQCe/1IMA0EAgACMAcDBQAkARfAMA0GCSqGSIb3DQEBCwUA A4IBAQBmP1/ngPbTS813Bggr8NJKcfQ1eOlWRIzrHOhtBZt49quERvQvbty2c1pS wyiI6F8f9QIkjN99wDIhNhd2VmDWg2LL65IwG2+DztXn3WqKA+Kpi4okoTGMDAJc EgmocH3Z1hou3hiiMKn3G6ZYB6n4lflD1aJwhpwjAhxkDfmol2GK/zHPPKqeuQfG 8te6bkLAAATMOC5zziFTFmBO+lSyLKqRL3fFSq0kDOVxwXcgoGucAWbCQde9Y8CA 8iGY8r5AEW6bvbDaxFYV/8MHoYpctX5vTDSk1pJXWXs39V3oc38FCxlPmFsesvs/ rPJbZNlje+Lng+Bz5pr0XnzBFvPa -----END CERTIFICATE-----Generated at Thu Mar 26 11:53:58 2026 by rpki-client