$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa File: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (raw, json) Hash identifier: tI3EUiCfHK04nl9+b6UyZostJUVQgb90pSapo0zb3DE= Subject key identifier: 20:23:41:43:4F:F4:C8:A4:7F:FE:30:75:00:71:28:7C:FF:5A:19:7A Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 0429 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa Signing time: Fri 01 May 2026 00:32:02 +0000 ROA not before: Fri 01 May 2026 00:32:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149649 IP address blocks: 103.184.94.0/23 maxlen: 23 103.184.94.0/24 maxlen: 24 103.184.95.0/24 maxlen: 24 2001:df0:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: May 1 00:32:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f3f482-6e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:37:28:44:42:23:ca:ee:d7:b3:2c:1c:4b: a8:25:7a:3c:f4:0f:1b:72:ee:00:14:b3:55:60:26: 12:80:72:46:9a:27:dc:71:05:e0:0e:04:93:1e:e5: 39:b6:d4:d2:4a:6f:d1:7e:aa:60:27:8b:8b:31:56: 2e:74:42:01:31:e7:69:11:e4:2a:29:6d:d0:c3:c3: 4b:e7:bc:26:d0:f4:d2:49:64:81:fb:24:0a:de:07: 66:4b:fb:17:57:c2:0b:d0:40:3f:ab:48:f6:39:af: da:b6:01:12:f7:db:9a:7a:d0:a7:3e:97:68:20:a3: c8:34:f9:34:77:22:c1:6d:f2:73:ac:b1:45:68:e2: cf:9a:16:54:d2:24:4e:b9:70:f5:d8:5d:ce:a1:f0: 06:83:6e:e3:67:e0:14:b1:8e:d6:0d:6e:15:b7:b2: 93:48:5c:6b:f1:2f:f4:3e:90:ad:4a:11:1a:08:66: 6a:77:7c:6f:38:12:af:b6:1a:a4:77:bb:9c:46:3f: 14:33:fb:f2:00:71:5d:a0:e3:6f:4f:27:f9:d0:85: 38:3a:d5:19:15:e8:6c:fd:31:6f:98:11:a5:a7:72: 55:ac:11:cf:fd:8c:23:8c:0e:e1:54:6c:5f:e9:65: bf:e9:67:36:27:d0:a4:33:5c:a7:3e:c0:80:b1:d6: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:23:41:43:4F:F4:C8:A4:7F:FE:30:75:00:71:28:7C:FF:5A:19:7A X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.184.94.0/23 IPv6: 2001:df0:8f40::/48 Signature Algorithm: sha256WithRSAEncryption 01:8e:c4:22:de:75:05:38:cb:67:05:48:88:af:4d:7a:83:62: 03:2f:e2:f7:b7:54:49:a4:41:3e:dc:13:a9:17:33:52:7c:22: 81:6a:6e:98:91:5a:78:f5:33:26:41:eb:8e:7d:f8:a4:e2:e4: 6d:cf:4d:e9:e8:d5:04:e8:06:59:0d:b9:8b:70:f5:59:b6:e6: 50:6f:b0:6f:f9:0a:c7:c1:1c:5f:95:5a:40:fd:27:84:ff:7f: 71:11:46:60:fa:f7:ad:a0:cc:c5:f2:49:7c:71:f0:9a:f9:db: 89:38:91:93:3f:ff:80:95:9c:a2:d3:06:68:86:17:fb:71:02: 59:fd:d7:8d:61:f4:cc:24:72:b0:56:dc:0b:c8:09:65:50:ca: 40:98:1a:62:30:db:6a:f0:58:5a:16:58:50:13:bd:07:a0:13: 3c:92:1a:d0:6a:67:f9:25:b1:b2:e3:53:67:60:19:91:0b:c2: 98:ec:1c:68:0e:03:8a:91:e1:28:31:4c:7e:c0:48:a0:22:ba: df:8d:a8:99:bd:30:1a:c7:9a:ff:e9:f2:22:6b:f7:4e:3c:c7: 93:36:01:af:93:45:59:db:3b:ff:6f:04:0c:59:73:e3:98:97: c9:39:1e:73:be:b1:dd:9a:43:ca:c6:09:7b:8b:87:54:87:54: 07:17:af:c2 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjYwNTAxMDAzMjAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYzZjQ4Mi02ZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJk3KERCI8ru17MsHEuoJXo89A8bcu4AFLNVYCYSgHJGmifccQXgDgSTHuU5 ttTSSm/RfqpgJ4uLMVYudEIBMedpEeQqKW3Qw8NL57wm0PTSSWSB+yQK3gdmS/sX V8IL0EA/q0j2Oa/atgES99uaetCnPpdoIKPINPk0dyLBbfJzrLFFaOLPmhZU0iRO uXD12F3OofAGg27jZ+AUsY7WDW4Vt7KTSFxr8S/0PpCtShEaCGZqd3xvOBKvthqk d7ucRj8UM/vyAHFdoONvTyf50IU4OtUZFehs/TFvmBGlp3JVrBHP/YwjjA7hVGxf 6WW/6Wc2J9CkM1ynPsCAsdaYSwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFCAjQUNP 9Mikf/4wdQBxKHz/Whl6MB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFFMUMvRjA3NDczQUVBQTYyMTFFQ0I4RTExODMyQzRGOUFFMDIvNEJENzY0RThB QTY1MTFFQzlBMzU0QzMzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ7heMA8EAgACMAkDBwAgAQ3wj0AwDQYJKoZIhvcNAQELBQADggEB AAGOxCLedQU4y2cFSIivTXqDYgMv4ve3VEmkQT7cE6kXM1J8IoFqbpiRWnj1MyZB 6459+KTi5G3PTeno1QToBlkNuYtw9Vm25lBvsG/5CsfBHF+VWkD9J4T/f3ERRmD6 962gzMXySXxx8Jr524k4kZM//4CVnKLTBmiGF/txAln9141h9MwkcrBW3AvICWVQ ykCYGmIw22rwWFoWWFATvQegEzySGtBqZ/klsbLjU2dgGZELwpjsHGgOA4qR4Sgx TH7ASKAiut+NqJm9MBrHmv/p8iJr9048x5M2Aa+TRVnbO/9vBAxZc+OYl8k5HnO+ sd2aQ8rGCXuLh1SHVAcXr8I= -----END CERTIFICATE-----Generated at Wed May 13 08:55:20 2026 by rpki-client