$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/5EB1F538B81611F190F6B0883811F970.roa File: 5EB1F538B81611F190F6B0883811F970.roa (raw, json) Hash identifier: AH6RwM13T7twAonrOktDKiu6jrp6+Tk5H+lvF6NM5yw= Subject key identifier: E3:C4:D4:CF:D0:7B:42:BE:79:5D:4D:0F:18:E0:ED:C6:CC:43:68:9C Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Certificate serial: E1 Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/5EB1F538B81611F190F6B0883811F970.roa Signing time: Thu 24 Sep 2026 12:49:24 +0000 ROA not before: Thu 24 Sep 2026 12:49:24 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 152177 IP address blocks: 103.214.156.0/22 maxlen: 22 103.214.156.0/23 maxlen: 23 103.214.156.0/24 maxlen: 24 103.214.157.0/24 maxlen: 24 103.214.158.0/24 maxlen: 24 144.48.112.0/22 maxlen: 22 144.48.112.0/23 maxlen: 23 144.48.112.0/24 maxlen: 24 144.48.113.0/24 maxlen: 24 2407:ea40::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF Validity Not Before: Sep 24 12:49:24 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ab51c54-af3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:f5:47:a3:8e:13:bd:37:28:6f:ba:61:ff: e0:21:6d:b3:75:8a:9e:ad:59:6f:39:aa:01:2e:33: 9e:59:b0:88:0f:4d:2b:d1:5e:3f:32:b3:bd:f3:a5: e4:c8:a4:f9:5a:80:cd:d9:69:1b:25:00:d0:93:86: d8:22:4e:12:f4:e7:0c:15:cd:0b:73:c4:6a:78:b7: 7a:2f:2e:be:66:66:12:e5:8e:6d:f2:0b:be:97:6f: b2:72:ee:e7:da:cb:f3:6a:02:dd:4a:62:22:22:c8: 90:93:19:28:f6:f9:46:a6:b8:9b:d0:18:78:58:4a: f1:e9:a4:80:37:dc:5d:bd:a9:83:74:cb:8f:26:b9: e9:4b:26:57:26:79:52:69:ae:b7:97:74:f7:32:b9: 3f:95:59:92:9a:b0:45:56:97:12:80:06:46:b2:75: 93:99:d0:ee:1f:57:61:87:3c:12:dc:3d:63:9b:fd: bc:95:43:b7:e8:eb:08:c4:94:68:5d:53:54:2b:74: 11:41:5a:3d:af:47:05:99:f7:21:06:f7:1c:90:aa: bd:dc:c8:06:1f:df:c0:b8:79:1e:ee:10:e0:44:77: ca:35:f2:81:9b:56:54:1d:0f:a8:bf:b5:d3:17:1c: 28:4c:04:d8:67:3f:37:50:ce:f3:a2:14:da:99:b2: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C4:D4:CF:D0:7B:42:BE:79:5D:4D:0F:18:E0:ED:C6:CC:43:68:9C X509v3 Authority Key Identifier: keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/5EB1F538B81611F190F6B0883811F970.roa sbgp-ipAddrBlock: critical IPv4: 103.214.156.0/22 144.48.112.0/22 IPv6: 2407:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 5a:59:71:1d:a6:f4:ef:7b:39:9a:43:0e:ed:77:f5:67:db:d8: cc:eb:86:49:1c:99:6e:58:c3:c4:ba:e4:f5:43:0d:dd:75:c7: 0b:f0:b8:61:f7:46:c7:c1:39:87:f5:26:f2:90:31:95:00:a3: 0e:0d:f8:70:02:66:08:04:3e:22:16:79:53:65:41:a4:a4:46: e6:1b:0e:c0:7b:45:ea:6b:1c:45:b9:4a:1c:4f:8c:53:c8:44: b3:1b:7e:c6:5d:6e:f3:b0:88:11:cb:b4:3b:8a:11:83:ff:9c: 65:d7:c4:f7:4d:4a:cf:f3:60:76:c0:64:65:7a:9c:6a:15:fc: 62:cf:c2:1f:57:02:bf:4e:fd:d5:ab:8a:34:1f:60:66:8b:66: a9:b3:c5:de:8d:1f:d5:e4:2d:ce:8f:19:aa:fc:17:7d:75:45: 04:31:f5:3e:53:47:42:62:7e:53:4f:3a:e6:08:09:47:6f:6a: ca:1c:9a:3d:f6:c5:c0:a9:ec:8a:6d:f3:f0:ed:41:27:18:49: 6e:67:4a:8b:ee:62:68:98:af:34:f1:14:e8:9a:b9:ce:97:74: 59:e6:85:77:e4:ac:c2:9c:33:33:e4:13:b7:55:cf:37:46:1e: bd:d0:b5:06:54:9a:e9:e1:82:2c:71:41:e7:e7:e5:6a:82:06: 19:54:dc:19 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlCNUE1MzY1REEyQjI1RkE2OThCNzAzMDkzQ0ZCREMy QTJDMjNGQ0YwHhcNMjYwOTI0MTI0OTI0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1MWM1NC1hZjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rv1R6OOE703KG+6Yf/gIW2zdYqerVlvOaoBLjOeWbCID00r0V4/MrO986Xk yKT5WoDN2WkbJQDQk4bYIk4S9OcMFc0Lc8RqeLd6Ly6+ZmYS5Y5t8gu+l2+ycu7n 2svzagLdSmIiIsiQkxko9vlGprib0Bh4WErx6aSAN9xdvamDdMuPJrnpSyZXJnlS aa63l3T3Mrk/lVmSmrBFVpcSgAZGsnWTmdDuH1dhhzwS3D1jm/28lUO36OsIxJRo XVNUK3QRQVo9r0cFmfchBvcckKq93MgGH9/AuHke7hDgRHfKNfKBm1ZUHQ+ov7XT FxwoTATYZz83UM7zohTambLiYQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOPE1M/Q e0K+eV1NDxjg7cbMQ2icMB8GA1UdIwQYMBaAFJtaU2XaKyX6aYtwMJPPvcKiwj/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tMXBUWmRvckpmcHBpM0F3azgtOXdxTENQ ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20xcFRaZG9ySmZwcGkzQXdrOC05d3FMQ1A4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzdCNjgvNTNBN0I5MkNCMEE1MTFFQThGOTJFRDE3QzRGOUFFMDIvNUVCMUY1MzhC ODE2MTFGMTkwRjZCMDg4MzgxMUY5NzAucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ9acAwQCkDBwMA0EAgACMAcDBQAkB+pAMA0GCSqGSIb3DQEBCwUA A4IBAQBaWXEdpvTvezmaQw7td/Vn29jM64ZJHJluWMPEuuT1Qw3ddccL8Lhh90bH wTmH9SbykDGVAKMODfhwAmYIBD4iFnlTZUGkpEbmGw7Ae0XqaxxFuUocT4xTyESz G37GXW7zsIgRy7Q7ihGD/5xl18T3TUrP82B2wGRlepxqFfxiz8IfVwK/Tv3Vq4o0 H2Bmi2aps8XejR/V5C3Ojxmq/Bd9dUUEMfU+U0dCYn5TTzrmCAlHb2rKHJo99sXA qeyKbfPw7UEnGEluZ0qL7mJomK808RTomrnOl3RZ5oV35KzCnDMz5BO3Vc83Rh69 0LUGVJrp4YIscUHn5+VqggYZVNwZ -----END CERTIFICATE-----Generated at Fri Sep 25 19:39:56 2026 by rpki-client