$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5728551C6E9611EF8FEC9C1BC4F9AE02.roa File: 5728551C6E9611EF8FEC9C1BC4F9AE02.roa (raw, json) Hash identifier: aHD9k1CO/91sgZuODhSSCG/52z7yS492WmwyS5uktA4= Subject key identifier: C5:29:7F:31:02:9B:29:69:DE:75:C8:34:09:95:A8:32:A2:46:22:4A Certificate issuer: /CN=A91DA2D5/serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Certificate serial: 2D8E Authority key identifier: 3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5728551C6E9611EF8FEC9C1BC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:08:13 +0000 ROA not before: Sat 06 Sep 2025 15:52:37 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138650 IP address blocks: 103.102.43.0/24 maxlen: 24 2405:1500:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11662 (0x2d8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA2D5, serialNumber=3C1C877347EE82729636AF0F3A375D391090F921 Validity Not Before: Sep 6 15:52:37 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a4727d-922b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:d4:c7:de:ac:7e:5b:fa:34:ed:d8:71:5c: 81:1e:30:32:71:ad:f0:2b:c3:cb:35:1d:bb:92:53: c7:01:61:c7:59:71:b0:9b:a6:9a:10:a8:79:64:bd: 96:9c:e5:ae:4b:3b:56:4f:8b:6c:30:65:ca:83:51: 7b:84:c0:db:48:b8:6f:3e:e4:99:52:56:00:47:80: 77:78:83:ac:cf:8a:6e:2d:f1:4e:ce:8e:29:c7:04: 28:f3:04:cb:fd:d3:21:5f:8c:4b:8d:61:e9:9f:fb: 47:d0:8c:10:4d:88:52:4e:9a:f6:0a:f1:c0:c7:8d: f7:7e:4f:f5:40:5f:fe:28:3b:98:81:04:5a:b2:39: 5b:d4:b7:c2:a2:20:8f:69:55:96:d4:65:54:7b:7d: 72:ad:29:34:f6:6e:39:19:83:79:6d:34:21:72:0a: 0c:49:83:51:a9:1b:62:7a:08:e6:a7:aa:e7:ca:23: 68:31:f7:b1:4f:10:b2:37:84:9b:f5:d5:e0:c7:03: 63:20:e9:b4:37:46:4c:7c:2c:9f:c8:55:28:55:a5: 69:34:7f:fe:0a:f1:05:bd:b9:f6:f1:f1:d9:31:35: 93:c7:59:cb:d0:c5:36:31:e9:de:e4:ee:fb:1f:13: d5:71:51:86:80:48:d0:43:cc:68:54:99:9f:d3:44: c2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:7F:31:02:9B:29:69:DE:75:C8:34:09:95:A8:32:A2:46:22:4A X509v3 Authority Key Identifier: keyid:3C:1C:87:73:47:EE:82:72:96:36:AF:0F:3A:37:5D:39:10:90:F9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/PByHc0fugnKWNq8POjddORCQ-SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PByHc0fugnKWNq8POjddORCQ-SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA2D5/5F861EE6B89A11E3B4AC7E785911EA32/5728551C6E9611EF8FEC9C1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.102.43.0/24 IPv6: 2405:1500:300::/48 Signature Algorithm: sha256WithRSAEncryption 2e:52:32:85:4b:34:ee:b4:b9:b6:21:2d:ff:28:ae:49:c1:ba: 0c:85:dd:96:a4:43:c9:43:a5:f2:d3:65:61:5f:0a:99:d7:fd: 3d:72:f6:96:6b:32:0b:6d:69:9f:5a:f0:16:0c:9a:df:eb:ad: d6:7d:17:3c:fe:fd:6b:4a:29:31:1e:b8:56:f6:4f:c7:9f:40: 63:62:8d:58:9d:b4:fb:10:ae:1e:40:d8:1a:b5:59:b5:d6:3a: 32:6d:2f:33:3e:59:b3:24:14:31:12:80:07:f6:4c:b1:d1:5a: 6f:0b:d4:19:e6:cb:67:75:67:54:61:29:42:b1:25:5c:d9:8f: 97:18:12:3c:30:0f:db:3b:b7:a8:33:a3:40:e0:c7:50:a4:d1: 38:65:00:db:95:c4:f3:1b:36:74:0f:fc:5f:d2:53:1a:be:84: 48:b5:69:e1:d5:c4:28:20:2a:6c:36:a5:02:fa:3a:69:2b:e2: 86:01:fc:53:aa:90:76:59:10:99:3b:83:f9:7b:1e:25:f0:9d: 49:6a:09:8c:93:d6:d8:42:5b:eb:30:91:83:57:1a:8c:e1:dc: 8f:e1:8b:12:05:82:05:19:70:d5:6a:5c:f8:a6:20:11:d4:81: 89:80:d0:23:60:81:e1:50:f7:4b:4b:aa:c1:49:70:61:be:16: 8b:b8:21:62 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICLY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEyRDUxMTAvBgNVBAUTKDNDMUM4NzczNDdFRTgyNzI5NjM2QUYwRjNBMzc1RDM5 MTA5MEY5MjEwHhcNMjUwOTA2MTU1MjM3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzI3ZC05MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtLUx96sflv6NO3YcVyBHjAyca3wK8PLNR27klPHAWHHWXGwm6aaEKh5ZL2W nOWuSztWT4tsMGXKg1F7hMDbSLhvPuSZUlYAR4B3eIOsz4puLfFOzo4pxwQo8wTL /dMhX4xLjWHpn/tH0IwQTYhSTpr2CvHAx433fk/1QF/+KDuYgQRasjlb1LfCoiCP aVWW1GVUe31yrSk09m45GYN5bTQhcgoMSYNRqRtiegjmp6rnyiNoMfexTxCyN4Sb 9dXgxwNjIOm0N0ZMfCyfyFUoVaVpNH/+CvEFvbn28fHZMTWTx1nL0MU2Mene5O77 HxPVcVGGgEjQQ8xoVJmf00TChwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMUpfzEC mylp3nXINAmVqDKiRiJKMB8GA1UdIwQYMBaAFDwch3NH7oJyljavDzo3XTkQkPkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTJENS81Rjg2MUVFNkI4 OUExMUUzQjRBQzdFNzg1OTExRUEzMi9QQnlIYzBmdWduS1dOcThQT2pkZE9SQ1Et U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCeUhjMGZ1Z25LV05xOFBPamRkT1JDUS1TRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REEyRDUvNUY4NjFFRTZCODlBMTFFM0I0QUM3RTc4NTkxMUVBMzIvNTcyODU1MUM2 RTk2MTFFRjhGRUM5QzFCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ2YrMA8EAgACMAkDBwAkBRUAAwAwDQYJKoZIhvcNAQELBQADggEB AC5SMoVLNO60ubYhLf8orknBugyF3ZakQ8lDpfLTZWFfCpnX/T1y9pZrMgttaZ9a 8BYMmt/rrdZ9Fzz+/WtKKTEeuFb2T8efQGNijVidtPsQrh5A2Bq1WbXWOjJtLzM+ WbMkFDESgAf2TLHRWm8L1Bnmy2d1Z1RhKUKxJVzZj5cYEjwwD9s7t6gzo0Dgx1Ck 0ThlANuVxPMbNnQP/F/SUxq+hEi1aeHVxCggKmw2pQL6Omkr4oYB/FOqkHZZEJk7 g/l7HiXwnUlqCYyT1thCW+swkYNXGozh3I/hixIFggUZcNVqXPimIBHUgYmA0CNg geFQ90tLqsFJcGG+Fou4IWI= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:20 2026 by rpki-client