$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa File: 7C29A45A669A11EA9A11434FC4F9AE02.roa (raw, json) Hash identifier: FltWI5xRyUf7n10bBM13nJiUl3E+pGaXZNwDZHIDukY= Subject key identifier: 43:DB:3F:8E:72:7E:E9:07:26:11:55:1C:AC:BA:CE:A5:69:6E:83:D0 Certificate issuer: /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Certificate serial: 0AEC Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa Signing time: Mon 02 Mar 2026 19:25:11 +0000 ROA not before: Mon 02 Mar 2026 19:25:11 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 137033 IP address blocks: 103.149.72.0/23 maxlen: 23 103.149.72.0/24 maxlen: 24 103.149.73.0/24 maxlen: 24 2001:df5:c780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2796 (0xaec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821 Validity Not Before: Mar 2 19:25:11 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a5e417-ee5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:59:36:f3:ff:85:cd:ea:44:79:fd:b6:b3: 16:38:63:b3:67:05:85:96:c0:15:d3:49:e8:01:ba: 56:73:8d:b4:1d:cf:66:ae:e7:92:86:f2:69:0b:db: e2:c5:f7:82:75:b5:d2:60:48:d8:aa:8c:f6:57:86: 4d:5b:bf:11:29:44:a1:3a:9b:fc:b3:f6:2b:0b:ca: 5b:c6:d4:f0:77:aa:10:54:96:f1:29:13:fa:57:0e: 53:b0:c5:9f:61:e3:20:fe:fc:25:93:f5:e3:14:48: 50:83:45:ad:26:1b:ab:28:0a:16:9c:c9:71:bc:c9: 76:6a:cf:a0:61:93:20:e6:df:f4:c3:4c:22:9a:0e: 86:2b:36:dd:c5:b9:4a:fd:b8:18:e9:6a:58:14:8c: 35:d4:78:ee:5b:07:7e:c5:a7:e8:a6:8f:68:70:3c: a4:3a:72:9c:96:39:47:d0:0c:74:51:11:3d:31:41: 16:01:d1:bc:ce:08:7d:52:92:e1:4e:08:2d:3f:26: f7:7c:11:a4:05:a4:9c:d9:03:11:2f:c3:93:d0:5a: e1:8d:21:aa:64:3e:81:6b:bf:14:76:c3:dc:39:2b: ba:52:e5:c9:67:3e:94:00:0f:2a:9f:76:e1:94:0a: 7c:21:72:7f:85:41:87:be:e9:42:15:e7:0c:f3:41: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DB:3F:8E:72:7E:E9:07:26:11:55:1C:AC:BA:CE:A5:69:6E:83:D0 X509v3 Authority Key Identifier: keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/7C29A45A669A11EA9A11434FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.72.0/23 IPv6: 2001:df5:c780::/48 Signature Algorithm: sha256WithRSAEncryption 5a:cb:7c:c7:ef:fa:4e:88:65:64:88:bd:ba:a9:1e:52:2a:14: bc:54:ec:b3:4a:9d:b7:b8:0b:70:a5:c8:c9:de:75:35:a2:b2: 37:76:8c:ad:d5:86:01:17:a8:cc:ff:68:22:d7:0b:c4:f3:e5: 2c:8b:af:83:27:94:35:2a:6a:84:20:b3:33:a3:97:95:07:c1: 1a:8b:83:b7:63:1f:ff:66:ea:f5:e0:da:b1:b6:0c:58:aa:ae: cd:29:66:bb:5e:86:01:68:a7:db:f6:c0:ba:6c:14:a6:36:54: 9e:95:7a:b1:5e:5f:5e:0a:b8:b0:47:b4:f5:26:af:6d:23:0e: 4f:73:de:ad:85:b4:b0:8b:bd:83:55:bb:63:6c:b3:47:1f:35: e5:25:09:c2:58:8f:f2:db:a0:00:93:a8:bb:e8:2f:6d:11:11: 40:28:de:e7:0e:4b:02:8c:9b:a7:f4:9f:d6:17:c7:c7:fb:74: 44:45:4f:fd:e1:ad:46:43:c0:4b:3f:f4:55:74:70:f2:e1:a8: 11:0d:42:9a:90:4e:4d:ce:b9:3b:d4:b9:5b:15:e9:39:c5:86: 6b:ae:23:4d:8f:92:57:17:48:11:ce:b8:a9:be:fd:11:94:ea: ad:be:b1:99:3e:a7:f8:40:35:9d:29:ce:d8:91:8b:f3:ec:e1: 21:57:bf:e3 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZFNTgxMTAvBgNVBAUTKDFFRDc3MjcwQTQ4MThBNTU3NEVGRUVDQUNBRkI3NDgz Q0Q3Njg4MjEwHhcNMjYwMzAyMTkyNTExWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ZTQxNy1lZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj45ZNvP/hc3qRHn9trMWOGOzZwWFlsAV00noAbpWc420Hc9mrueShvJpC9vi xfeCdbXSYEjYqoz2V4ZNW78RKUShOpv8s/YrC8pbxtTwd6oQVJbxKRP6Vw5TsMWf YeMg/vwlk/XjFEhQg0WtJhurKAoWnMlxvMl2as+gYZMg5t/0w0wimg6GKzbdxblK /bgY6WpYFIw11HjuWwd+xafopo9ocDykOnKcljlH0Ax0URE9MUEWAdG8zgh9UpLh TggtPyb3fBGkBaSc2QMRL8OT0FrhjSGqZD6Ba78UdsPcOSu6UuXJZz6UAA8qn3bh lAp8IXJ/hUGHvulCFecM80Gt3QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEPbP45y fukHJhFVHKy6zqVpboPQMB8GA1UdIwQYMBaAFB7XcnCkgYpVdO/uysr7dIPNdogh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkU1OC82MDMzQ0Y2QTY2 OTkxMUVBQkYxM0M5NERDNEY5QUUwMi9IdGR5Y0tTQmlsVjA3LTdLeXZ0MGc4MTJp Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZHljS1NCaWxWMDctN0t5dnQwZzgxMmlDRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZFNTgvNjAzM0NGNkE2Njk5MTFFQUJGMTNDOTREQzRGOUFFMDIvN0MyOUE0NUE2 NjlBMTFFQTlBMTE0MzRGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ5VIMA8EAgACMAkDBwAgAQ31x4AwDQYJKoZIhvcNAQELBQADggEB AFrLfMfv+k6IZWSIvbqpHlIqFLxU7LNKnbe4C3ClyMnedTWisjd2jK3VhgEXqMz/ aCLXC8Tz5SyLr4MnlDUqaoQgszOjl5UHwRqLg7djH/9m6vXg2rG2DFiqrs0pZrte hgFop9v2wLpsFKY2VJ6VerFeX14KuLBHtPUmr20jDk9z3q2FtLCLvYNVu2Nss0cf NeUlCcJYj/LboACTqLvoL20REUAo3ucOSwKMm6f0n9YXx8f7dERFT/3hrUZDwEs/ 9FV0cPLhqBENQpqQTk3OuTvUuVsV6TnFhmuuI02PklcXSBHOuKm+/RGU6q2+sZk+ p/hANZ0pztiRi/Ps4SFXv+M= -----END CERTIFICATE-----Generated at Thu Mar 26 04:28:35 2026 by rpki-client