$ rpki-client -vvf rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa File: 76C5241CF47311EC8721C33DC4F9AE02.roa (raw, json) Hash identifier: /az6S07hruj2MI8zT0Jdx+G9dMfedswkpkDUNrwlWX8= Subject key identifier: 49:ED:43:A2:43:43:54:82:E7:30:1C:5A:10:9E:A0:3E:D9:CB:07:59 Certificate issuer: /CN=A91D506C/serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37 Certificate serial: 034A Authority key identifier: DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa Signing time: Sun 01 Mar 2026 09:01:51 +0000 ROA not before: Fri 25 Jul 2025 02:08:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 149985 IP address blocks: 103.190.34.0/23 maxlen: 23 103.190.34.0/24 maxlen: 24 103.190.35.0/24 maxlen: 24 2001:df0:e340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D506C, serialNumber=DD8F3D963FA8D1F22D57F4DFB29ABD70D2558E37 Validity Not Before: Jul 25 02:08:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4007f-8558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:6e:17:d1:6c:6f:15:14:a1:11:38:5d:33: 0e:f0:c5:eb:62:20:85:0e:df:b8:5d:40:ab:03:75: 30:75:70:bb:01:32:7c:14:c0:cf:49:7b:ff:15:f2: dc:33:63:e2:a3:6a:f0:de:05:25:9d:ec:cc:92:38: 78:f2:e3:89:3e:fa:72:4d:92:25:40:7b:74:c3:45: 47:0c:5b:28:e2:65:da:94:cc:83:c3:04:cc:b0:16: 9e:41:17:50:3e:c7:a6:ff:07:55:b5:0f:c2:78:b1: e5:39:1a:42:64:b3:ea:86:c9:c1:15:cf:a0:39:5a: d8:5b:57:ee:9e:8d:50:fa:4c:77:d5:8b:38:db:54: c7:27:01:0f:3e:1c:90:71:e8:53:cd:c2:8e:48:77: 72:f7:11:cc:bd:68:20:00:22:13:9d:9b:94:a0:0e: ba:c1:ce:a8:7f:7a:ed:6e:9c:a4:24:eb:7d:b8:0f: a5:a1:1f:43:74:11:07:e3:2f:6b:10:41:b4:07:6e: 50:82:1c:be:b5:99:8a:f2:8a:a4:0d:86:7f:2a:f2: c6:58:a2:c9:b3:2b:7c:8a:d0:b7:cb:f1:6f:1a:67: a4:ba:b9:70:6e:bd:84:56:74:44:cb:30:42:97:e1: 18:a5:78:cc:22:8f:1d:5d:48:54:eb:c3:a9:ab:b0: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:ED:43:A2:43:43:54:82:E7:30:1C:5A:10:9E:A0:3E:D9:CB:07:59 X509v3 Authority Key Identifier: keyid:DD:8F:3D:96:3F:A8:D1:F2:2D:57:F4:DF:B2:9A:BD:70:D2:55:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/3Y89lj-o0fItV_Tfspq9cNJVjjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Y89lj-o0fItV_Tfspq9cNJVjjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D506C/46618B1CF46E11EC8C60700FC4F9AE02/76C5241CF47311EC8721C33DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.190.34.0/23 IPv6: 2001:df0:e340::/48 Signature Algorithm: sha256WithRSAEncryption a6:b4:df:52:0b:03:1d:37:01:65:06:e0:4a:2e:41:c7:4a:e8: e1:f5:c5:c2:ae:6c:d3:16:5c:9a:a1:73:34:f3:d8:9a:f3:0c: 13:f2:f0:a1:86:f8:d3:c4:b9:57:bb:57:71:ca:65:c7:29:ba: 8b:ee:33:66:33:7b:63:98:fd:a9:be:fe:cc:17:c7:55:19:78: 88:5a:3f:96:b0:f7:45:19:de:c7:18:f6:2f:a8:5b:41:17:39: 21:d2:3e:5c:b5:cd:6a:a3:ea:d2:31:26:3a:88:3b:fa:cf:d2: 23:08:98:cb:3f:3b:65:6c:a7:4e:80:7c:19:54:40:1d:44:66: 34:cd:03:3e:ff:30:34:9d:32:8c:e0:50:5c:a1:54:c9:36:60: 55:9c:b2:bb:e0:0f:5f:29:0a:f9:b3:c2:f1:f8:4d:9d:4d:83: 63:b0:c4:7a:ec:bd:45:1c:f3:c1:ad:bd:2c:c6:b1:21:67:c4: bf:70:8e:b4:c8:40:f4:f8:67:d8:65:72:53:38:1c:69:92:6c: 43:91:59:09:c8:f5:11:15:22:fd:a1:e7:73:8e:07:cf:31:27: ed:f2:0d:57:03:f4:98:27:55:99:47:5c:fe:63:13:20:2b:d4: b0:d9:8b:91:90:6e:a5:66:d9:af:aa:1c:cb:74:b0:be:19:e7: de:fd:43:8c -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUwNkMxMTAvBgNVBAUTKEREOEYzRDk2M0ZBOEQxRjIyRDU3RjRERkIyOUFCRDcw RDI1NThFMzcwHhcNMjUwNzI1MDIwODUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MDA3Zi04NTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEtuF9FsbxUUoRE4XTMO8MXrYiCFDt+4XUCrA3UwdXC7ATJ8FMDPSXv/FfLc M2Pio2rw3gUlnezMkjh48uOJPvpyTZIlQHt0w0VHDFso4mXalMyDwwTMsBaeQRdQ Psem/wdVtQ/CeLHlORpCZLPqhsnBFc+gOVrYW1funo1Q+kx31Ys421THJwEPPhyQ cehTzcKOSHdy9xHMvWggACITnZuUoA66wc6of3rtbpykJOt9uA+loR9DdBEH4y9r EEG0B25Qghy+tZmK8oqkDYZ/KvLGWKLJsyt8itC3y/FvGmekurlwbr2EVnREyzBC l+EYpXjMIo8dXUhU68Opq7D/2QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEntQ6JD Q1SC5zAcWhCeoD7ZywdZMB8GA1UdIwQYMBaAFN2PPZY/qNHyLVf037KavXDSVY43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTA2Qy80NjYxOEIxQ0Y0 NkUxMUVDOEM2MDcwMEZDNEY5QUUwMi8zWTg5bGotbzBmSXRWX1Rmc3BxOWNOSlZq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZODlsai1vMGZJdFZfVGZzcHE5Y05KVmpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUwNkMvNDY2MThCMUNGNDZFMTFFQzhDNjA3MDBGQzRGOUFFMDIvNzZDNTI0MUNG NDczMTFFQzg3MjFDMzNEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ74iMA8EAgACMAkDBwAgAQ3w40AwDQYJKoZIhvcNAQELBQADggEB AKa031ILAx03AWUG4EouQcdK6OH1xcKubNMWXJqhczTz2JrzDBPy8KGG+NPEuVe7 V3HKZccpuovuM2Yze2OY/am+/swXx1UZeIhaP5aw90UZ3scY9i+oW0EXOSHSPly1 zWqj6tIxJjqIO/rP0iMImMs/O2Vsp06AfBlUQB1EZjTNAz7/MDSdMozgUFyhVMk2 YFWcsrvgD18pCvmzwvH4TZ1Ng2OwxHrsvUUc88GtvSzGsSFnxL9wjrTIQPT4Z9hl clM4HGmSbEORWQnI9REVIv2h53OOB88xJ+3yDVcD9JgnVZlHXP5jEyAr1LDZi5GQ bqVm2a+qHMt0sL4Z5979Q4w= -----END CERTIFICATE-----Generated at Thu Mar 26 19:13:55 2026 by rpki-client