$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa File: 7C29A45A669A11EA9A11434FC4F9AE02.roa (raw, json) Hash identifier: vOrOSmJQLIsIatyr7Uv+VT+AWeKNcab4dULnTatya4s= Subject key identifier: D2:0A:71:C3:D8:FA:25:6A:20:8A:0F:6E:6B:4F:09:56:9C:B4:00:87 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0B07 Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa Signing time: Fri 17 Apr 2026 17:28:33 +0000 ROA not before: Fri 17 Apr 2026 17:28:33 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137033 IP address blocks: 103.149.72.0/23 maxlen: 23 103.149.72.0/24 maxlen: 24 103.149.73.0/24 maxlen: 24 2001:df5:c780::/48 maxlen: 48 2402:58e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Apr 17 17:28:33 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69e26dc1-b6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:01:33:6b:f5:94:58:8a:a7:c1:70:01:5c: c5:fd:cb:a0:6b:50:3f:8b:a6:22:f7:1d:ff:4d:aa: 4a:cd:f1:0f:01:b0:a1:dd:bb:2e:7d:40:28:ee:4e: 02:4a:c5:33:12:e7:43:25:f8:15:be:22:d9:ef:f1: c1:44:8c:78:c0:e5:82:d6:c8:57:d5:17:fb:43:e5: 57:01:b0:2f:42:d3:e4:e0:57:69:1c:9f:60:27:94: a7:e5:79:8a:f7:26:f4:56:d2:8a:00:0a:22:2c:75: 6f:c3:d9:72:bf:6a:e3:d7:77:61:f6:7c:56:a2:0e: db:02:f6:f3:35:27:c0:7f:ba:fd:3e:be:b6:7a:4f: 89:a4:a1:3d:af:22:7d:25:16:27:a4:fb:bf:e0:4d: c1:41:1b:7c:13:e8:82:97:8e:99:d7:31:34:9c:52: ac:a2:98:2a:2b:4b:dd:2e:2b:bd:6e:e6:36:81:70: 1f:eb:e6:76:f1:4b:8e:12:c3:84:a2:1b:11:91:74: 32:ec:92:ad:a0:c4:45:2c:18:19:38:f6:a8:fa:f8: 33:3b:3a:9f:0c:84:30:41:6f:8a:24:05:f7:b0:3d: 50:44:f7:3a:a7:e6:e4:35:31:0a:51:cf:51:d6:0d: 68:c0:b5:4b:ac:60:09:96:0d:0d:bb:bc:81:2f:b3: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0A:71:C3:D8:FA:25:6A:20:8A:0F:6E:6B:4F:09:56:9C:B4:00:87 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.72.0/23 IPv6: 2001:df5:c780::/48 2402:58e0::/32 Signature Algorithm: sha256WithRSAEncryption 60:18:17:f1:45:4a:5d:c6:9c:0c:3d:1a:a1:f7:05:4a:e6:8a: 7b:b4:f0:7f:e0:97:4e:4f:f4:6a:0e:81:bc:ab:9e:5e:0d:38: bc:36:2d:f6:85:ca:58:cc:fe:85:e0:5f:67:80:4c:d7:38:36: 95:05:95:9b:45:6e:32:d1:00:06:f3:68:fd:a4:4e:ae:2e:3c: 81:d8:63:be:cf:c6:8d:29:53:e4:49:a6:30:e5:5f:8b:c9:25: 3e:cd:2e:54:96:a2:40:91:c5:8d:08:b4:ee:9f:f4:74:79:e4: c1:3f:f0:8a:a4:e5:59:52:24:3e:9e:b1:62:8e:92:4e:24:70: 32:75:bc:1f:a7:75:03:76:f1:32:d7:92:cb:8f:63:f8:d5:d7: de:b3:58:e3:fc:39:3a:fa:91:3b:8b:31:01:d1:8f:17:b7:96: 66:41:81:1e:29:6d:20:07:96:0b:ff:df:a5:96:ab:03:8f:93: eb:24:75:fa:bb:79:db:09:12:98:d7:7f:40:2c:ea:ae:2b:8a: e7:60:c6:a7:29:8a:07:aa:58:b7:4a:83:00:89:92:74:c1:2a: 27:b6:18:66:e7:d3:c5:b0:4c:ef:7f:5a:63:81:fa:87:54:9e: 4e:a2:2c:c4:79:bb:f3:5f:2b:d9:f1:2c:2d:3f:99:b4:e2:a5: c5:3b:c6:45 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjYwNDE3MTcyODMzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWUyNmRjMS1iNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhkBM2v1lFiKp8FwAVzF/cuga1A/i6Yi9x3/TapKzfEPAbCh3bsufUAo7k4C SsUzEudDJfgVviLZ7/HBRIx4wOWC1shX1Rf7Q+VXAbAvQtPk4FdpHJ9gJ5Sn5XmK 9yb0VtKKAAoiLHVvw9lyv2rj13dh9nxWog7bAvbzNSfAf7r9Pr62ek+JpKE9ryJ9 JRYnpPu/4E3BQRt8E+iCl46Z1zE0nFKsopgqK0vdLiu9buY2gXAf6+Z28UuOEsOE ohsRkXQy7JKtoMRFLBgZOPao+vgzOzqfDIQwQW+KJAX3sD1QRPc6p+bkNTEKUc9R 1g1owLVLrGAJlg0Nu7yBL7OutQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFNIKccPY +iVqIIoPbmtPCVactACHMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZFNTgvNjAzM0NGNkE2Njk5MTFFQUJGMTNDOTREQzRGOUFFMDIvN0MyOUE0NUE2 NjlBMTFFQTlBMTE0MzRGQzRGOUFFMDIucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAM BAIAATAGAwQBZ5VIMBYEAgACMBADBwAgAQ31x4ADBQAkAljgMA0GCSqGSIb3DQEB CwUAA4IBAQBgGBfxRUpdxpwMPRqh9wVK5op7tPB/4JdOT/RqDoG8q55eDTi8Ni32 hcpYzP6F4F9ngEzXODaVBZWbRW4y0QAG82j9pE6uLjyB2GO+z8aNKVPkSaYw5V+L ySU+zS5UlqJAkcWNCLTun/R0eeTBP/CKpOVZUiQ+nrFijpJOJHAydbwfp3UDdvEy 15LLj2P41dfes1jj/Dk6+pE7izEB0Y8Xt5ZmQYEeKW0gB5YL/9+llqsDj5PrJHX6 u3nbCRKY139ALOquK4rnYManKYoHqli3SoMAiZJ0wSonthhm59PFsEzvf1pjgfqH VJ5OoizEebvzXyvZ8SwtP5m04qXFO8ZF -----END CERTIFICATE-----Generated at Wed May 13 07:03:23 2026 by rpki-client