$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa File: 290732FC79A211E79F34D81FC4F9AE02.roa (raw, json) Hash identifier: DCBXdQ3TUOdDXYDH2IWIye/rRhJnHFBuWi5K22qghWc= Subject key identifier: 90:95:78:78:F5:9B:93:60:91:05:38:4D:02:68:B6:98:CD:E4:7F:24 Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 19DF Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa Signing time: Sun 01 Mar 2026 14:34:28 +0000 ROA not before: Wed 24 Dec 2025 16:14:11 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 136134 IP address blocks: 103.81.68.0/22 maxlen: 22 103.81.68.0/24 maxlen: 24 103.81.69.0/24 maxlen: 24 103.81.70.0/24 maxlen: 24 103.81.71.0/24 maxlen: 24 2402:bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6623 (0x19df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Dec 24 16:14:11 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a44e74-aaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:4e:c6:8c:49:24:a5:df:ba:0d:d1:59:e5:8f: ff:b9:5a:af:52:7d:58:1d:1f:28:9d:9e:f9:f1:d7: b8:55:71:5a:70:6b:93:ea:0e:2d:b3:68:4d:a1:26: 6d:05:2e:e3:1e:c4:dd:71:a7:5d:d4:b0:58:18:c8: 5e:24:d6:7e:26:ff:cd:4f:d1:29:bb:68:0a:45:38: e3:c4:87:5d:9b:21:74:e4:60:f6:f1:94:ed:0e:44: a4:a1:ea:3c:45:c0:af:58:d5:23:b4:65:53:07:a6: dd:43:d3:65:60:4e:31:fb:d2:30:eb:08:b3:f1:2b: 33:2e:52:a8:ad:9d:55:a9:cb:dd:55:00:1d:c3:0a: 1c:fe:1a:df:ae:18:b7:a8:d2:41:41:78:98:ff:af: 70:35:ff:e6:6a:5c:74:5f:a8:23:95:23:6b:03:4e: d3:28:5b:0e:60:f6:60:88:2b:85:a3:de:87:14:10: b8:ef:ce:63:14:01:12:f9:11:80:c4:8e:18:ba:d3: 05:6b:3d:d8:b9:ee:4e:29:c1:df:81:28:07:81:10: 84:f9:41:4c:c9:4f:fe:25:2b:66:5f:d7:db:bf:81: c0:4f:e1:23:62:a3:f1:dc:67:a0:b7:19:8f:36:cf: 34:cb:d7:5d:d9:d7:a0:60:55:74:cc:08:3d:f2:51: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:95:78:78:F5:9B:93:60:91:05:38:4D:02:68:B6:98:CD:E4:7F:24 X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/290732FC79A211E79F34D81FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.81.68.0/22 IPv6: 2402:bc0::/32 Signature Algorithm: sha256WithRSAEncryption 3b:0f:14:04:18:e7:9f:16:23:2b:39:ea:94:d3:83:be:d1:a8: 71:c4:d0:e6:81:60:25:20:14:93:79:2d:b7:04:f0:1d:28:59: b8:ab:b1:34:08:84:a2:c2:0c:79:78:f7:2a:b1:6d:6a:ca:7e: 9f:cb:28:0a:86:a8:95:3b:08:20:11:c5:93:17:65:f9:65:fd: c9:c1:ed:66:da:83:d8:6e:b6:af:e5:41:48:55:65:2f:0b:a5: a9:a0:65:b3:c3:d0:bb:58:c1:00:ba:a4:a2:8b:cb:5e:71:da: 5f:7f:f6:39:9d:c7:9d:d3:81:f4:c8:a0:0b:10:35:1b:be:b6: da:12:dc:64:d8:e9:74:03:62:d1:16:25:54:d6:8a:c6:28:09: 54:bf:f7:c0:bb:57:96:b0:15:8a:98:35:c1:6e:22:ff:8f:42: 52:72:fc:d9:23:2b:4e:78:7c:ff:d0:34:3a:19:17:78:6a:e8: 0f:51:e8:68:aa:5c:f1:0c:67:0c:a8:ab:7b:d3:9e:4a:56:8b: e0:81:6f:14:43:2e:c5:29:23:af:ac:a4:e9:8d:46:67:fb:58: b3:b2:08:12:92:53:4d:d6:b2:3b:4f:d3:9c:c4:5e:19:f6:ed: 95:9b:d1:6d:62:91:e5:01:4e:58:7c:f3:a7:a3:cd:ba:42:d0: ad:34:21:59 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICGd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUxMjI0MTYxNDExWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NGU3NC1hYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9k7GjEkkpd+6DdFZ5Y//uVqvUn1YHR8onZ758de4VXFacGuT6g4ts2hNoSZt BS7jHsTdcadd1LBYGMheJNZ+Jv/NT9Epu2gKRTjjxIddmyF05GD28ZTtDkSkoeo8 RcCvWNUjtGVTB6bdQ9NlYE4x+9Iw6wiz8SszLlKorZ1VqcvdVQAdwwoc/hrfrhi3 qNJBQXiY/69wNf/malx0X6gjlSNrA07TKFsOYPZgiCuFo96HFBC4785jFAES+RGA xI4YutMFaz3Yue5OKcHfgSgHgRCE+UFMyU/+JStmX9fbv4HAT+EjYqPx3GegtxmP Ns80y9dd2degYFV0zAg98lFOvwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJCVeHj1 m5NgkQU4TQJotpjN5H8kMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U1MzMvRThGRDRGQTQ3OTlGMTFFN0I4NzkxMDFEQzRGOUFFMDIvMjkwNzMyRkM3 OUEyMTFFNzlGMzREODFGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ1FEMA0EAgACMAcDBQAkAgvAMA0GCSqGSIb3DQEBCwUAA4IBAQA7 DxQEGOefFiMrOeqU04O+0ahxxNDmgWAlIBSTeS23BPAdKFm4q7E0CISiwgx5ePcq sW1qyn6fyygKhqiVOwggEcWTF2X5Zf3Jwe1m2oPYbrav5UFIVWUvC6WpoGWzw9C7 WMEAuqSii8tecdpff/Y5nced04H0yKALEDUbvrbaEtxk2Ol0A2LRFiVU1orGKAlU v/fAu1eWsBWKmDXBbiL/j0JScvzZIytOeHz/0DQ6GRd4augPUehoqlzxDGcMqKt7 055KVovggW8UQy7FKSOvrKTpjUZn+1izsggSklNN1rI7T9OcxF4Z9u2Vm9FtYpHl AU5YfPOno826QtCtNCFZ -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:47 2026 by rpki-client