$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa File: C10D2C4002B311EAABAF727DC4F9AE02.roa (raw, json) Hash identifier: PoBDNCZFrGQzQ7+3sGgDnm+Nft1wV7A+I3RbGRaDZks= Subject key identifier: 28:63:2A:09:3F:D1:35:66:0A:4D:43:6B:C0:88:56:8A:86:DE:94:E0 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0D1F Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa Signing time: Tue 12 May 2026 18:22:41 +0000 ROA not before: Tue 12 May 2026 18:22:41 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 134841 IP address blocks: 103.139.132.0/24 maxlen: 24 103.139.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3359 (0xd1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: May 12 18:22:41 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a036ff1-6419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:37:04:54:1d:9f:f8:05:ea:b8:79:fa:1c: fa:76:6f:46:9e:a3:27:f2:d3:cb:51:1c:ec:22:96: bc:f3:40:b9:be:99:c9:6b:47:54:b8:b5:0f:c6:93: f1:4b:34:72:39:eb:65:29:6f:89:4a:32:ae:7f:ed: 02:37:71:87:47:51:36:3d:f5:7e:14:c3:a8:e4:b2: a0:a8:3c:1a:d6:63:71:ed:61:fe:6a:f1:5e:c7:a3: ce:da:74:43:72:54:78:66:a3:d5:34:4f:31:a5:09: 02:17:97:68:61:06:57:67:c2:41:73:1b:2d:e6:af: cf:4d:09:ed:08:f0:75:98:9b:46:09:74:77:7d:e9: 82:c6:db:02:fd:97:a6:fc:5c:7d:34:6a:6a:68:85: 28:e8:69:8c:bb:0b:1c:a3:c6:25:f4:e1:e6:ff:f4: a5:1c:2b:af:b8:a2:68:22:05:88:49:a0:7c:19:67: 1e:f2:30:b7:63:64:c2:71:ef:e2:2c:9f:e2:4d:d2: cc:0c:b7:d8:7f:da:82:17:7d:01:2b:e0:1a:9b:d1: 1e:a6:8f:f7:b4:97:13:db:40:91:01:36:08:e1:19: 49:25:5f:74:f0:c5:ab:0d:0d:03:d5:c2:bf:ad:de: fd:eb:40:df:63:39:c4:50:f4:88:30:14:7d:7c:fe: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:63:2A:09:3F:D1:35:66:0A:4D:43:6B:C0:88:56:8A:86:DE:94:E0 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/C10D2C4002B311EAABAF727DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.139.132.0/23 Signature Algorithm: sha256WithRSAEncryption 59:a3:a0:fb:6f:78:4e:a1:6b:5f:80:9f:90:1c:9f:c6:17:33: 30:82:d2:7e:26:47:0e:21:ba:a1:8b:62:0b:26:90:8c:c1:91: 2e:a3:72:65:9f:37:bc:b1:b0:82:14:3d:b9:3a:51:a9:d7:98: dd:7a:40:bf:78:4e:c0:bf:f6:fe:2f:94:32:97:5d:b8:35:3e: 75:0f:a1:38:95:68:b8:c0:81:a3:02:02:b5:05:ea:fd:41:7a: f9:1e:3e:13:1a:6f:90:a3:8c:6f:78:80:c7:42:1d:f6:fb:da: f4:fc:53:2b:41:d6:c2:89:0e:32:fe:8c:1e:c8:5a:89:fd:d3: ee:c2:c2:33:c5:b9:65:a0:3d:b9:df:d7:47:32:27:cb:f0:25: 47:f4:66:eb:45:37:b1:e1:38:50:20:11:dd:66:12:bd:55:1c: a9:d0:7b:af:ed:6f:59:a0:01:8b:70:fa:b3:99:bc:5d:80:c2: 55:74:75:35:67:7c:e9:9c:21:3f:c1:c7:1e:66:58:1c:7b:40: 74:d2:1b:0b:bc:4e:13:5e:9f:69:02:50:05:75:ec:0b:cb:2e: e8:2b:08:fa:f9:da:5b:48:4e:a0:8c:c8:61:2e:64:46:d0:5c: 1b:d4:78:f6:6a:c6:aa:d3:0a:cc:e2:25:09:fe:36:70:92:af: 83:8c:f6:28 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjYwNTEyMTgyMjQxWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAzNmZmMS02NDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC83BFQdn/gF6rh5+hz6dm9GnqMn8tPLURzsIpa880C5vpnJa0dUuLUPxpPx SzRyOetlKW+JSjKuf+0CN3GHR1E2PfV+FMOo5LKgqDwa1mNx7WH+avFex6PO2nRD clR4ZqPVNE8xpQkCF5doYQZXZ8JBcxst5q/PTQntCPB1mJtGCXR3femCxtsC/Zem /Fx9NGpqaIUo6GmMuwsco8Yl9OHm//SlHCuvuKJoIgWISaB8GWce8jC3Y2TCce/i LJ/iTdLMDLfYf9qCF30BK+Aam9Eepo/3tJcT20CRATYI4RlJJV908MWrDQ0D1cK/ rd7960DfYznEUPSIMBR9fP688wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFChjKgk/ 0TVmCk1Da8CIVoqG3pTgMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZDMUQvNURDQ0Y3MjgwMkIzMTFFQTlFNzc0QjdEQzRGOUFFMDIvQzEwRDJDNDAw MkIzMTFFQUFCQUY3MjdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ4uEMA0GCSqGSIb3DQEBCwUAA4IBAQBZo6D7b3hOoWtfgJ+QHJ/G FzMwgtJ+JkcOIbqhi2ILJpCMwZEuo3Jlnze8sbCCFD25OlGp15jdekC/eE7Av/b+ L5Qyl124NT51D6E4lWi4wIGjAgK1Ber9QXr5Hj4TGm+Qo4xveIDHQh32+9r0/FMr QdbCiQ4y/oweyFqJ/dPuwsIzxblloD2539dHMifL8CVH9GbrRTex4ThQIBHdZhK9 VRyp0Huv7W9ZoAGLcPqzmbxdgMJVdHU1Z3zpnCE/wcceZlgce0B00hsLvE4TXp9p AlAFdewLyy7oKwj6+dpbSE6gjMhhLmRG0Fwb1Hj2asaq0wrM4iUJ/jZwkq+DjPYo -----END CERTIFICATE-----Generated at Wed May 13 10:45:49 2026 by rpki-client