$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa File: C10D2C4002B311EAABAF727DC4F9AE02.roa (raw, json) Hash identifier: PO5NtRD87mrV7jcOB3vTKQ4iyi5S6EBAtu3hGqNnqRU= Subject key identifier: 81:9A:CB:63:F3:C4:7B:FB:8F:38:D6:FB:8D:FA:9F:2D:17:EA:11:CE Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0CF5 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:39:31 +0000 ROA not before: Sun 18 May 2025 18:12:32 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134841 IP address blocks: 103.139.132.0/24 maxlen: 24 103.139.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3317 (0xcf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: May 18 18:12:32 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42573-f4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:fd:21:b8:5c:37:77:d5:e7:9e:fd:a7:7b: 97:ed:b5:03:a0:cf:b5:7c:bc:1b:32:3a:0f:14:01: 6a:cc:41:3c:a6:5b:d0:55:83:20:93:e8:b0:0e:1c: 38:af:44:3b:d8:14:01:57:81:41:00:a3:40:5a:c8: 2d:48:18:16:1d:a3:31:8a:80:b2:04:fb:69:e6:00: 11:7f:d1:5b:0e:1c:80:53:28:ce:13:a5:fc:28:b9: 8a:d9:51:3b:e9:70:ba:ac:4f:75:ec:67:a8:c3:e3: d4:1f:d4:25:dd:ca:07:ac:5b:6f:4f:48:4c:d4:09: 2a:95:dc:be:08:5c:12:28:19:16:e5:40:51:2a:6e: 37:cd:23:24:f2:69:32:fe:22:f3:16:42:f4:46:7d: ce:cf:be:05:6e:38:96:c8:df:22:f6:d5:26:41:d4: b6:b3:54:a5:29:57:41:9a:d4:dd:88:4a:4a:7b:21: 25:e5:7b:f0:02:4b:65:5a:4e:4f:8f:82:35:14:e3: 2e:bf:2c:ee:ca:70:4a:f8:bf:c8:5f:6b:64:73:bf: 12:55:0b:ce:1c:0b:56:f6:9b:40:f0:e4:ea:f0:a0: 7d:cf:aa:f7:30:37:6a:a7:d3:ab:67:49:ad:5f:57: 1b:64:63:67:53:17:55:f9:24:db:6f:73:59:a6:5d: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9A:CB:63:F3:C4:7B:FB:8F:38:D6:FB:8D:FA:9F:2D:17:EA:11:CE X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.132.0/23 Signature Algorithm: sha256WithRSAEncryption 04:b1:5e:9b:20:b7:db:db:52:c9:73:2a:b1:c4:4b:9a:39:d8: 6a:38:ec:fe:cf:66:37:b4:51:ea:e6:44:a2:54:39:c4:2f:3b: d2:18:cf:1e:1d:3e:ca:e5:32:8c:09:62:8e:39:80:43:4e:85: 0d:d9:bd:d9:8a:d6:2e:42:0b:78:ed:bb:90:52:e9:ea:ea:7d: db:43:65:92:5b:d6:d9:6b:a8:c2:81:f2:bb:af:1d:9b:1f:0f: f5:73:ac:d6:7f:44:b6:98:fe:82:f6:df:4e:1c:2f:54:6e:99: 8d:6a:57:b1:57:e1:96:a6:51:13:9d:3a:c7:e3:64:28:81:8c: a3:f3:e5:16:f5:66:00:27:8c:87:12:97:f3:7b:6d:45:97:45: fa:ee:30:67:6a:d7:83:4f:fa:b7:9f:89:3d:2d:e9:34:c0:8f: 93:ea:56:8e:e2:44:28:3d:9c:0b:d0:28:68:7e:52:78:39:67: a8:dd:df:61:31:0c:ec:e2:56:18:be:d3:46:79:d8:7d:0b:3b: 85:1e:b1:da:51:fd:4f:21:ba:87:b9:5c:c4:35:ef:04:64:f8: 97:ec:68:7d:74:f1:01:05:b2:0a:9c:7a:87:14:be:1d:ea:ce: 21:e0:7c:a4:ec:09:67:61:b9:a1:5f:c9:c0:e1:cb:5c:76:b8: 3e:91:cd:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUwNTE4MTgxMjMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjU3My1mNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/z9IbhcN3fV5579p3uX7bUDoM+1fLwbMjoPFAFqzEE8plvQVYMgk+iwDhw4 r0Q72BQBV4FBAKNAWsgtSBgWHaMxioCyBPtp5gARf9FbDhyAUyjOE6X8KLmK2VE7 6XC6rE917Geow+PUH9Ql3coHrFtvT0hM1Akqldy+CFwSKBkW5UBRKm43zSMk8mky /iLzFkL0Rn3Oz74FbjiWyN8i9tUmQdS2s1SlKVdBmtTdiEpKeyEl5XvwAktlWk5P j4I1FOMuvyzuynBK+L/IX2tkc78SVQvOHAtW9ptA8OTq8KB9z6r3MDdqp9OrZ0mt X1cbZGNnUxdV+STbb3NZpl2ZQQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIGay2Pz xHv7jzjW+436ny0X6hHOMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZDMUQvNURDQ0Y3MjgwMkIzMTFFQTlFNzc0QjdEQzRGOUFFMDIvQzEwRDJDNDAw MkIzMTFFQUFCQUY3MjdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ4uEMA0GCSqGSIb3DQEBCwUAA4IBAQAEsV6bILfb21LJcyqxxEua OdhqOOz+z2Y3tFHq5kSiVDnELzvSGM8eHT7K5TKMCWKOOYBDToUN2b3ZitYuQgt4 7buQUunq6n3bQ2WSW9bZa6jCgfK7rx2bHw/1c6zWf0S2mP6C9t9OHC9UbpmNalex V+GWplETnTrH42QogYyj8+UW9WYAJ4yHEpfze21Fl0X67jBnateDT/q3n4k9Lek0 wI+T6laO4kQoPZwL0ChoflJ4OWeo3d9hMQzs4lYYvtNGedh9CzuFHrHaUf1PIbqH uVzENe8EZPiX7Gh9dPEBBbIKnHqHFL4d6s4h4Hyk7AlnYbmhX8nA4ctcdrg+kc1t -----END CERTIFICATE-----Generated at Thu Mar 26 07:58:31 2026 by rpki-client