$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/9954B962F02D11EFBA26B94FC4F9AE02.roa File: 9954B962F02D11EFBA26B94FC4F9AE02.roa (raw, json) Hash identifier: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo= Subject key identifier: 57:1F:90:B1:3F:C5:62:CB:F1:06:07:49:94:1B:6A:FE:D7:B8:B4:CD Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 3571 Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/9954B962F02D11EFBA26B94FC4F9AE02.roa Signing time: Tue 21 Apr 2026 04:19:20 +0000 ROA not before: Tue 21 Apr 2026 04:19:20 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 147040 IP address blocks: 103.35.136.0/22 maxlen: 24 111.67.40.0/24 maxlen: 24 202.87.100.0/22 maxlen: 24 202.87.112.0/22 maxlen: 24 202.87.116.0/22 maxlen: 24 202.87.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Apr 21 04:19:20 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69e6fac8-9f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:ae:06:ce:c0:a0:93:19:b7:fd:42:d3:24: 9a:83:78:8b:9a:2f:42:41:d8:1a:43:de:54:47:27: f9:f0:34:9c:c0:6d:74:9e:ee:52:db:40:bd:08:08: 92:3b:8b:72:46:4f:66:db:2d:cd:88:fb:39:90:85: 13:8c:59:54:c5:15:f5:10:0e:30:76:33:d3:17:ca: aa:7a:b4:b4:1e:53:7e:e6:d1:ed:d7:df:4a:d1:30: 3e:48:53:3d:98:da:24:49:dd:a2:25:71:22:56:ee: d5:47:de:fa:b5:a2:15:c3:5b:95:e8:ce:0b:ca:e5: b0:25:73:c9:e8:e3:34:db:74:ee:db:a4:36:b1:00: 69:7d:54:3f:15:50:62:e0:bc:74:f8:e9:87:73:7b: 28:27:81:76:9d:f6:62:65:df:a7:4a:59:d5:f4:a1: dd:7e:f2:33:3f:da:24:8b:71:ca:e7:5f:fa:fc:d3: 02:7d:04:5d:c2:52:8c:1c:b2:42:6f:fa:1e:55:98: 08:2c:30:74:96:e9:03:6b:68:9e:95:cf:b5:0d:97: a3:1a:54:ec:80:d1:74:9d:fb:4d:6a:63:64:28:9d: 15:55:37:6b:78:07:84:dd:41:97:31:5d:bb:44:39: 91:ba:ad:95:3b:86:bb:52:12:92:77:01:20:fa:e0: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1F:90:B1:3F:C5:62:CB:F1:06:07:49:94:1B:6A:FE:D7:B8:B4:CD X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/9954B962F02D11EFBA26B94FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.35.136.0/22 111.67.40.0/24 202.87.100.0/22 202.87.112.0-202.87.123.255 Signature Algorithm: sha256WithRSAEncryption b2:a4:07:f1:3d:ea:a6:f5:d9:5d:80:eb:0b:01:26:93:c0:2b: f2:b0:12:03:ef:ab:f3:d8:37:d4:19:ab:d6:7f:c1:07:4a:23: 65:44:3c:67:33:ab:a6:83:2d:88:ba:82:e1:3d:55:43:bb:e6: 8e:fc:68:2d:5a:24:00:f3:62:ca:bc:e2:73:c1:3d:e0:ac:c3: 1d:7d:a4:f2:b0:3b:17:ce:bc:41:3d:ff:ce:53:c2:46:1d:f5: 47:94:8d:25:45:d0:a8:71:9d:b4:5f:e3:de:37:86:9c:b5:75: 70:56:6b:d9:c7:41:68:56:76:09:2a:1a:7d:72:c7:72:3a:20: f5:b8:54:a4:48:af:b4:7b:68:19:04:81:49:e4:88:6c:cd:86: 55:09:cf:2d:b6:57:09:20:11:65:27:c9:12:3a:6d:3e:dc:ce: 6f:04:97:b1:df:61:40:d9:f8:e7:23:91:29:1c:56:10:37:85: bc:8b:10:03:2f:d8:88:61:de:c5:e4:39:96:e7:2d:88:cd:ed: 00:0a:03:1e:52:9c:89:de:ac:f6:69:4d:e2:d3:8b:48:4e:7a: 47:0d:b4:ac:69:d8:f3:76:5c:a6:ea:c7:6b:e8:a9:be:13:66: 88:ac:a9:ea:f5:b7:06:35:c3:7a:87:db:aa:ba:ed:8b:2a:04: 85:7e:de:18 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwNDIxMDQxOTIwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWU2ZmFjOC05ZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj7CuBs7AoJMZt/1C0ySag3iLmi9CQdgaQ95URyf58DScwG10nu5S20C9CAiS O4tyRk9m2y3NiPs5kIUTjFlUxRX1EA4wdjPTF8qqerS0HlN+5tHt199K0TA+SFM9 mNokSd2iJXEiVu7VR976taIVw1uV6M4LyuWwJXPJ6OM023Tu26Q2sQBpfVQ/FVBi 4Lx0+OmHc3soJ4F2nfZiZd+nSlnV9KHdfvIzP9oki3HK51/6/NMCfQRdwlKMHLJC b/oeVZgILDB0lukDa2ielc+1DZejGlTsgNF0nftNamNkKJ0VVTdreAeE3UGXMV27 RDmRuq2VO4a7UhKSdwEg+uAuYwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFFcfkLE/ xWLL8QYHSZQbav7XuLTNMB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VCQ0EvQjU4OEI0QTYxRDg4MTFFMjhDQUU4RkUxMDhCMDJDRDIvOTk1NEI5NjJG MDJEMTFFRkJBMjZCOTRGQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCZyOIAwQAb0MoAwQCyldkMAwDBATKV3ADBALKV3gwDQYJKoZIhvcN AQELBQADggEBALKkB/E96qb12V2A6wsBJpPAK/KwEgPvq/PYN9QZq9Z/wQdKI2VE PGczq6aDLYi6guE9VUO75o78aC1aJADzYsq84nPBPeCswx19pPKwOxfOvEE9/85T wkYd9UeUjSVF0KhxnbRf4943hpy1dXBWa9nHQWhWdgkqGn1yx3I6IPW4VKRIr7R7 aBkEgUnkiGzNhlUJzy22VwkgEWUnyRI6bT7czm8El7HfYUDZ+OcjkSkcVhA3hbyL EAMv2Ihh3sXkOZbnLYjN7QAKAx5SnInerPZpTeLTi0hOekcNtKxp2PN2XKbqx2vo qb4TZoisqer1twY1w3qH26q67YsqBIV+3hg= -----END CERTIFICATE-----Generated at Wed May 13 04:33:46 2026 by rpki-client