$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/CAB386681C3311F19EABC196373D8C67.roa File: CAB386681C3311F19EABC196373D8C67.roa (raw, json) Hash identifier: J4riWubPKr57eZVqrue5ySz8Y0IlTyIyrOs2tnZFI0k= Subject key identifier: D3:BE:F4:43:88:03:CC:17:74:4D:C7:9B:BD:E0:48:FD:35:48:06:65 Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C16 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/CAB386681C3311F19EABC196373D8C67.roa Signing time: Tue 10 Mar 2026 03:46:59 +0000 ROA not before: Tue 10 Mar 2026 03:46:59 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 7361 IP address blocks: 103.229.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3094 (0xc16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Mar 10 03:46:59 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69af9433-8869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:52:5e:09:5a:0c:90:97:65:6e:c9:18:37: 0d:84:07:7d:77:38:16:27:57:02:ea:2b:19:d0:0b: 55:9a:03:11:88:47:33:10:3b:e2:0e:1f:20:71:cb: 2d:9b:e5:4b:a2:55:25:37:8c:32:53:b8:a5:3e:7e: 81:52:7b:d9:a2:b2:eb:5b:10:7b:b3:26:9e:7e:e6: 8b:6e:34:7f:bf:f0:95:99:f3:48:53:94:a0:83:0f: c7:28:1b:8f:fc:23:dc:96:dc:55:24:a4:e1:38:f3: 68:4e:07:eb:3e:b5:12:c5:37:c4:87:ea:47:e7:5c: 3d:44:22:e4:0a:e8:2f:5e:a0:94:40:a5:97:d0:43: c1:1e:fe:9f:2f:64:13:b2:2f:98:8d:3d:8f:e1:ee: 92:2a:5c:af:a3:fe:cc:7a:e7:df:db:39:f2:62:6b: fc:97:23:c3:d2:a4:22:3b:39:6e:fa:21:88:fe:c4: 3c:32:de:c0:9d:6e:15:0d:39:c8:2d:d6:72:34:5b: 94:eb:48:22:6e:71:8f:bc:2b:27:30:ee:56:ec:97: d5:23:01:1d:df:9c:5f:4a:47:d9:6c:f7:01:e1:77: 8e:09:f7:d9:e5:63:bf:e0:08:05:93:12:0d:ba:cb: 19:03:51:57:f0:2c:82:10:ae:5b:7f:7f:b9:f6:84: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BE:F4:43:88:03:CC:17:74:4D:C7:9B:BD:E0:48:FD:35:48:06:65 X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/CAB386681C3311F19EABC196373D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.229.198.0/24 Signature Algorithm: sha256WithRSAEncryption 30:77:84:e8:29:e0:e6:c8:17:19:91:8a:9e:62:8b:d7:fb:e3: 26:6e:ab:4f:a6:e9:7e:47:ef:e0:fc:16:09:89:bf:9d:19:79: 56:99:85:05:fb:59:06:4d:4a:fc:0e:86:33:c5:e6:42:16:c6: 7a:2a:75:d7:52:48:de:36:76:35:96:31:0c:7c:27:2f:b9:9e: 4a:a3:5b:9c:bd:81:1b:24:7e:d4:2c:72:cd:16:3f:81:4f:80: 0b:e3:13:45:33:98:17:d6:bb:c7:36:ec:9d:01:c1:26:e5:71: 6f:89:f9:33:10:74:83:af:6a:56:74:4d:54:98:84:e4:9b:57: f3:70:1e:92:17:ff:2e:96:b5:e6:ed:6b:0c:82:ce:cb:84:ad: 11:a4:3a:f3:23:cb:9c:01:c2:95:d3:2d:d8:a6:0b:d0:8c:e3: 00:5f:26:f5:9a:82:77:47:a7:e7:9c:71:d1:e5:3b:ac:46:41: 5f:5b:8c:fd:c5:04:ce:e2:e4:71:e6:1e:7c:15:22:a4:83:21: 30:53:0d:ce:8e:8e:92:54:31:53:50:d5:4c:10:74:2f:c3:d2: aa:e2:e6:64:89:11:6e:6d:bf:1a:8b:c1:a0:03:2a:28:6f:c7: ac:c2:14:b6:6e:0e:61:f0:99:df:ce:d4:30:35:3c:b5:02:62: 5a:10:ff:5f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwMzEwMDM0NjU5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFmOTQzMy04ODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKhSXglaDJCXZW7JGDcNhAd9dzgWJ1cC6isZ0AtVmgMRiEczEDviDh8gccst m+VLolUlN4wyU7ilPn6BUnvZorLrWxB7syaefuaLbjR/v/CVmfNIU5Sggw/HKBuP /CPcltxVJKThOPNoTgfrPrUSxTfEh+pH51w9RCLkCugvXqCUQKWX0EPBHv6fL2QT si+YjT2P4e6SKlyvo/7Meuff2znyYmv8lyPD0qQiOzlu+iGI/sQ8Mt7AnW4VDTnI LdZyNFuU60gibnGPvCsnMO5W7JfVIwEd35xfSkfZbPcB4XeOCffZ5WO/4AgFkxIN ussZA1FX8CyCEK5bf3+59oQw2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNO+9EOI A8wXdE3Hm73gSP01SAZlMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNCOEEvMDhDNDM5MjQzODREMTFFQUE0RjU1QjczQzRGOUFFMDIvQ0FCMzg2Njgx QzMzMTFGMTlFQUJDMTk2MzczRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ+XGMA0GCSqGSIb3DQEBCwUAA4IBAQAwd4ToKeDmyBcZkYqeYovX ++MmbqtPpul+R+/g/BYJib+dGXlWmYUF+1kGTUr8DoYzxeZCFsZ6KnXXUkjeNnY1 ljEMfCcvuZ5Ko1ucvYEbJH7ULHLNFj+BT4AL4xNFM5gX1rvHNuydAcEm5XFvifkz EHSDr2pWdE1UmITkm1fzcB6SF/8ulrXm7WsMgs7LhK0RpDrzI8ucAcKV0y3YpgvQ jOMAXyb1moJ3R6fnnHHR5TusRkFfW4z9xQTO4uRx5h58FSKkgyEwUw3Ojo6SVDFT UNVMEHQvw9Kq4uZkiRFubb8ai8GgAyoob8eswhS2bg5h8JnfztQwNTy1AmJaEP9f -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:54 2026 by rpki-client