$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/525D3FA866D811F0A962E05FC4F9AE02.roa File: 525D3FA866D811F0A962E05FC4F9AE02.roa (raw, json) Hash identifier: UAltEWoF96unr8usrRV0Z6ZZUnui0znCfXvCNBRello= Subject key identifier: 86:DA:A5:36:6F:4D:4E:57:31:10:C2:41:58:43:52:66:74:42:3C:17 Certificate issuer: /CN=A91B9E19/serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Certificate serial: 0E7C Authority key identifier: 25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/525D3FA866D811F0A962E05FC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:47:57 +0000 ROA not before: Tue 22 Jul 2025 09:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 18186 IP address blocks: 103.88.95.0/24 maxlen: 24 220.158.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3708 (0xe7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9E19, serialNumber=255290A01AA9B9118B66EEDA0F905F6D40DB05AE Validity Not Before: Jul 22 09:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4438d-2c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:ba:28:0b:a3:a6:1b:09:90:70:73:11:fd: 99:29:56:27:b0:83:51:37:ae:06:7d:ac:d7:ce:d9: 78:2d:5a:d2:48:d2:12:28:57:78:aa:48:3e:cd:61: a7:2e:ba:98:47:58:4d:25:36:e5:86:0e:f2:dd:7b: 63:56:4e:cc:96:76:0d:6d:d5:0c:1e:3f:01:37:d3: 2f:05:11:f7:c0:fe:37:30:25:17:83:9d:bb:a5:8d: 5b:7f:c3:88:04:94:2d:d4:35:58:7f:c1:5f:40:2b: fe:99:83:bc:82:12:aa:b3:77:4c:f1:aa:4e:2d:4d: 4e:54:db:b1:a9:4f:c1:c8:87:a4:52:46:98:3a:58: 4a:33:ad:b4:33:94:c2:4e:f5:e2:81:b2:70:01:9d: d8:fb:63:f0:b6:b7:41:49:f2:1e:2b:80:23:73:3a: c4:4a:06:70:f4:44:9c:d2:dc:96:ca:79:ff:ef:b1: 1b:cf:6f:82:9b:d0:a3:1a:54:52:25:c8:83:c9:0a: 07:f6:3e:65:db:91:af:1a:95:af:30:aa:32:4a:bb: f5:39:e2:0b:d5:c3:62:d0:98:7d:be:27:60:2d:3e: e2:d4:87:4f:ae:8e:71:c6:45:1e:0f:fe:7f:98:23: 71:81:66:dd:6a:90:69:11:72:b3:36:f0:75:58:39: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DA:A5:36:6F:4D:4E:57:31:10:C2:41:58:43:52:66:74:42:3C:17 X509v3 Authority Key Identifier: keyid:25:52:90:A0:1A:A9:B9:11:8B:66:EE:DA:0F:90:5F:6D:40:DB:05:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/JVKQoBqpuRGLZu7aD5BfbUDbBa4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JVKQoBqpuRGLZu7aD5BfbUDbBa4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9E19/356F2F3EC1A511E9A8B8F336C4F9AE02/525D3FA866D811F0A962E05FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.88.95.0/24 220.158.195.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f8:43:ff:1f:0d:e7:dd:b7:b2:75:59:f0:64:9c:02:86:9d: 76:83:ee:2f:ba:b4:e3:f0:43:50:53:53:7c:4b:26:53:d9:9d: c7:2c:55:e8:ab:47:9a:9e:fc:13:f8:1d:ed:cf:4f:93:61:62: fa:60:dc:8e:ca:d1:ad:b5:0a:5c:5f:64:d7:ed:c4:c8:f5:16: aa:27:15:3d:fc:1f:18:3d:72:bf:ec:54:0c:d3:93:0b:b4:84: 2c:79:b9:8c:f2:4f:00:b2:71:f8:f3:3c:e6:54:1e:70:97:5d: 4b:4d:57:5b:3f:5c:3a:0b:38:ec:9a:f4:89:4b:07:71:a7:52: c4:0c:cc:0a:ed:22:5b:6b:00:8b:06:7a:26:9d:ff:68:a0:a6: 3b:0a:48:1a:8f:68:b0:f4:e9:82:05:0f:58:49:ab:57:bf:6c: 53:9b:7f:c6:6d:46:b5:ba:a6:f9:6c:b7:31:e5:2a:0b:6a:05: 53:9b:82:e6:61:6b:d6:1d:38:09:34:58:1c:d4:af:e6:40:f3: 79:4c:9c:f9:ff:f0:a7:d1:68:65:ad:31:c1:c1:2c:aa:c0:24: c9:29:f0:15:a3:d8:de:33:b8:e6:e3:40:7e:e5:97:d7:16:7a: bc:e8:cb:bf:4a:a7:bf:21:95:16:13:fd:6b:bb:cc:b7:9f:63: c9:a2:00:a5 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlFMTkxMTAvBgNVBAUTKDI1NTI5MEEwMUFBOUI5MTE4QjY2RUVEQTBGOTA1RjZE NDBEQjA1QUUwHhcNMjUwNzIyMDkzNjM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDM4ZC0yYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Jq6KAujphsJkHBzEf2ZKVYnsINRN64GfazXztl4LVrSSNISKFd4qkg+zWGn LrqYR1hNJTblhg7y3XtjVk7MlnYNbdUMHj8BN9MvBRH3wP43MCUXg527pY1bf8OI BJQt1DVYf8FfQCv+mYO8ghKqs3dM8apOLU1OVNuxqU/ByIekUkaYOlhKM620M5TC TvXigbJwAZ3Y+2PwtrdBSfIeK4AjczrESgZw9ESc0tyWynn/77Ebz2+Cm9CjGlRS JciDyQoH9j5l25GvGpWvMKoySrv1OeIL1cNi0Jh9vidgLT7i1IdPro5xxkUeD/5/ mCNxgWbdapBpEXKzNvB1WDkVIQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIbapTZv TU5XMRDCQVhDUmZ0QjwXMB8GA1UdIwQYMBaAFCVSkKAaqbkRi2bu2g+QX21A2wWu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUUxOS8zNTZGMkYzRUMx QTUxMUU5QThCOEYzMzZDNEY5QUUwMi9KVktRb0JxcHVSR0xadTdhRDVCZmJVRGJC YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pWS1FvQnFwdVJHTFp1N2FENUJmYlVEYkJhNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjlFMTkvMzU2RjJGM0VDMUE1MTFFOUE4QjhGMzM2QzRGOUFFMDIvNTI1RDNGQTg2 NkQ4MTFGMEE5NjJFMDVGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAZ1hfAwQA3J7DMA0GCSqGSIb3DQEBCwUAA4IBAQCB+EP/Hw3n3bey dVnwZJwChp12g+4vurTj8ENQU1N8SyZT2Z3HLFXoq0eanvwT+B3tz0+TYWL6YNyO ytGttQpcX2TX7cTI9RaqJxU9/B8YPXK/7FQM05MLtIQsebmM8k8AsnH48zzmVB5w l11LTVdbP1w6CzjsmvSJSwdxp1LEDMwK7SJbawCLBnomnf9ooKY7Ckgaj2iw9OmC BQ9YSatXv2xTm3/GbUa1uqb5bLcx5SoLagVTm4LmYWvWHTgJNFgc1K/mQPN5TJz5 //Cn0WhlrTHBwSyqwCTJKfAVo9jeM7jm40B+5ZfXFnq86Mu/Sqe/IZUWE/1ru8y3 n2PJogCl -----END CERTIFICATE-----Generated at Thu Mar 26 09:02:42 2026 by rpki-client