$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa File: 37759456617811ECBB095A62C4F9AE02.roa (raw, json) Hash identifier: +R4LaSdSdI4rptj9gcyqC1YCWuipohsg4zPzzR0FvRU= Subject key identifier: 4A:9E:AA:BD:A6:8C:7D:A8:50:B7:D7:9D:51:B1:7F:F3:BD:4A:83:A8 Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Certificate serial: 0CFC Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa Signing time: Wed 22 Apr 2026 18:22:41 +0000 ROA not before: Wed 22 Apr 2026 18:22:41 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 132169 IP address blocks: 103.138.202.0/23 maxlen: 23 103.138.202.0/24 maxlen: 24 103.138.203.0/24 maxlen: 24 2001:df0:5280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Validity Not Before: Apr 22 18:22:41 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69e911f0-8a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1a:08:0b:95:f8:3f:c8:26:96:89:6d:a7:e7: 8e:3a:c3:09:ae:40:33:27:8e:aa:5a:5d:d9:d9:00: 51:f4:04:6b:a8:d3:bc:b5:70:de:50:65:2e:77:ba: 6f:db:8d:f9:04:7a:0e:0b:10:1f:b9:14:b3:60:4f: 35:84:5b:2d:6c:88:ce:45:27:56:53:6d:82:88:a8: 64:a3:1e:20:4d:57:85:f6:a6:d3:81:ff:ac:61:c4: a5:a1:3d:de:b0:8a:00:52:95:fc:b3:e3:32:de:84: 43:a9:1c:e2:b9:34:f5:20:0e:65:46:8f:3d:a5:fd: 9a:15:fa:dd:b8:4f:e4:7a:f1:f4:9c:08:d1:d1:ff: cf:9f:c4:fa:45:a2:58:a1:11:4b:0e:85:b2:f1:7d: ca:1c:b4:13:4f:06:c2:1b:23:d4:95:70:05:74:fc: fa:25:ed:35:60:08:9e:87:31:5c:64:07:76:0e:73: 1f:28:00:47:f1:76:d9:d6:45:b4:1e:b9:33:cd:54: b8:e6:25:1c:4c:48:ff:88:90:bf:79:0e:17:a0:c6: 41:d3:10:09:83:eb:45:c1:b9:6c:17:e8:c8:00:21: 41:dc:69:5e:1d:aa:b3:54:4d:79:c2:29:c2:77:0c: cf:0a:97:a2:9f:45:d5:3b:ea:45:ce:a2:2b:6d:d7: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:AA:BD:A6:8C:7D:A8:50:B7:D7:9D:51:B1:7F:F3:BD:4A:83:A8 X509v3 Authority Key Identifier: keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/37759456617811ECBB095A62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.202.0/23 IPv6: 2001:df0:5280::/48 Signature Algorithm: sha256WithRSAEncryption 8e:30:b4:70:65:f5:35:f5:a3:1e:fc:72:f4:90:42:c3:4a:b7: 9a:fb:bb:b1:fd:30:7d:84:6a:7f:8c:2c:3b:d0:2a:8d:02:9c: 80:99:54:9d:ec:d8:b2:dd:30:29:44:49:62:28:1e:8f:64:2c: 11:aa:fd:0e:5c:bd:28:7a:a2:4a:91:7d:09:cd:d1:1b:33:48: 4f:37:dc:1b:64:ab:7c:85:d3:a2:0a:36:06:ca:4d:1b:5a:aa: 2f:cc:a5:c0:b5:4b:b8:0b:99:f9:ab:3d:6c:27:18:4c:ee:4c: f2:13:ac:76:44:21:e4:a7:b0:72:8a:d2:18:7f:43:1e:a2:00: 6e:8b:29:ac:f3:8b:48:49:71:44:61:22:56:5a:b8:91:03:13: 09:c6:97:6b:4d:9a:0e:b1:f3:33:f9:a8:a5:7f:5d:bb:56:78: 96:12:02:2d:39:21:37:7f:9a:a2:5a:7e:ee:69:03:f0:06:07: 94:35:2d:51:28:1a:7c:70:6e:12:9d:80:9d:a8:9d:4f:7b:32: 26:e4:66:48:52:d6:dd:7c:67:3a:76:cb:89:7c:43:2c:fb:ad: fc:c4:fe:88:61:2b:98:38:57:09:2b:2a:c2:02:e5:d4:c1:3e: 9e:a6:aa:d4:2a:79:53:b4:d1:31:c9:6c:75:93:7d:af:c8:17: a1:de:dd:b6 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyOUExMTAvBgNVBAUTKDg5NUU2QkNBN0E1QzM2RDlGMzA0NDcyRDBEMjcxM0E0 ODJDOURCMjUwHhcNMjYwNDIyMTgyMjQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWU5MTFmMC04YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRoIC5X4P8gmloltp+eOOsMJrkAzJ46qWl3Z2QBR9ARrqNO8tXDeUGUud7pv 2435BHoOCxAfuRSzYE81hFstbIjORSdWU22CiKhkox4gTVeF9qbTgf+sYcSloT3e sIoAUpX8s+My3oRDqRziuTT1IA5lRo89pf2aFfrduE/kevH0nAjR0f/Pn8T6RaJY oRFLDoWy8X3KHLQTTwbCGyPUlXAFdPz6Je01YAiehzFcZAd2DnMfKABH8XbZ1kW0 HrkzzVS45iUcTEj/iJC/eQ4XoMZB0xAJg+tFwblsF+jIACFB3GleHaqzVE15winC dwzPCpein0XVO+pFzqIrbdd7AQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEqeqr2m jH2oULfXnVGxf/O9SoOoMB8GA1UdIwQYMBaAFIlea8p6XDbZ8wRHLQ0nE6SCydsl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI5QS8xRjIzRTA1ODA1 N0YxMUVBQTU1MTZCM0ZDNEY5QUUwMi9pVjVyeW5wY050bnpCRWN0RFNjVHBJTEoy eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWNXJ5bnBjTnRuekJFY3REU2NUcElMSjJ5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgyOUEvMUYyM0UwNTgwNTdGMTFFQUE1NTE2QjNGQzRGOUFFMDIvMzc3NTk0NTY2 MTc4MTFFQ0JCMDk1QTYyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4rKMA8EAgACMAkDBwAgAQ3wUoAwDQYJKoZIhvcNAQELBQADggEB AI4wtHBl9TX1ox78cvSQQsNKt5r7u7H9MH2Ean+MLDvQKo0CnICZVJ3s2LLdMClE SWIoHo9kLBGq/Q5cvSh6okqRfQnN0RszSE833Btkq3yF06IKNgbKTRtaqi/MpcC1 S7gLmfmrPWwnGEzuTPITrHZEIeSnsHKK0hh/Qx6iAG6LKazzi0hJcURhIlZauJED EwnGl2tNmg6x8zP5qKV/XbtWeJYSAi05ITd/mqJafu5pA/AGB5Q1LVEoGnxwbhKd gJ2onU97MibkZkhS1t18Zzp2y4l8Qyz7rfzE/ohhK5g4VwkrKsIC5dTBPp6mqtQq eVO00THJbHWTfa/IF6He3bY= -----END CERTIFICATE-----Generated at Wed May 13 09:33:17 2026 by rpki-client