$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/97EA257424D611F1948C90B8AB833773.roa File: 97EA257424D611F1948C90B8AB833773.roa (raw, json) Hash identifier: x7ThlrbpRobxp6D+qx/sidRoN6DyIJk6KWUPxoCM1O0= Subject key identifier: 98:7D:B5:60:86:FD:50:7E:03:86:1A:F8:B3:7B:2E:BC:A1:C0:16:7B Certificate issuer: /CN=A91DB551/serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Certificate serial: 0D86 Authority key identifier: B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/97EA257424D611F1948C90B8AB833773.roa Signing time: Sat 21 Mar 2026 03:32:31 +0000 ROA not before: Sat 21 Mar 2026 03:32:31 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 54702 IP address blocks: 103.99.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3462 (0xd86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB551, serialNumber=B6389791BD54096AD00999A7591FB204189AF198 Validity Not Before: Mar 21 03:32:31 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69be114f-4a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:91:8c:50:7a:2f:1f:26:39:f7:fb:ac:30:90: 71:cc:b6:00:12:84:03:d8:9f:09:84:fe:cd:90:10: 9d:6d:94:fe:31:d6:42:cb:79:77:e2:2b:e1:b9:8e: a5:7c:e2:f3:5e:ae:bb:54:39:6a:63:dd:8e:03:ce: db:b2:26:a6:cf:f8:2d:ed:a5:2d:d0:30:0e:7a:23: d0:ea:c8:28:da:f3:9f:f1:ef:b9:74:11:b3:ad:2d: f5:02:97:d6:c6:70:c7:96:89:ea:64:01:4b:cf:7f: 0c:b5:fc:92:86:f8:81:6a:3a:29:b8:f7:1c:c2:61: eb:05:08:b6:e4:f0:bc:6d:ed:4a:72:94:cc:89:a1: e4:2c:60:28:54:1c:7f:ac:fa:b5:c6:58:bb:ee:ec: 84:30:47:e5:dd:c2:69:1a:fa:35:5b:eb:14:60:1d: fc:8b:c6:62:24:fc:85:71:43:2f:08:90:0a:53:43: ba:1c:e6:0f:89:04:7e:13:11:38:d0:45:6b:cd:cb: 70:23:a2:79:ff:e4:69:46:f4:ac:14:00:5e:7e:6e: 90:77:f5:b7:df:b8:38:d0:30:da:f8:bc:64:17:0b: 4e:66:5f:e0:c9:f9:53:ec:2e:29:27:d3:cc:ee:4f: d2:b6:9b:a2:14:34:ed:be:fa:f9:28:81:ec:af:3c: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:B5:60:86:FD:50:7E:03:86:1A:F8:B3:7B:2E:BC:A1:C0:16:7B X509v3 Authority Key Identifier: keyid:B6:38:97:91:BD:54:09:6A:D0:09:99:A7:59:1F:B2:04:18:9A:F1:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/tjiXkb1UCWrQCZmnWR-yBBia8Zg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjiXkb1UCWrQCZmnWR-yBBia8Zg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB551/DBF6E1D4E2E411E99CD0A969C4F9AE02/97EA257424D611F1948C90B8AB833773.roa sbgp-ipAddrBlock: critical IPv4: 103.99.86.0/24 Signature Algorithm: sha256WithRSAEncryption ae:c6:78:33:1a:09:48:a2:57:c7:64:1f:6b:cb:30:92:3a:9f: 74:61:8e:17:1c:43:db:57:0c:d7:e9:a9:d4:80:ac:2b:43:9d: fe:dd:de:e7:48:47:cb:16:0a:cc:f7:ed:57:46:4e:a7:1a:79: a8:3d:a8:1a:da:5f:6c:32:51:a7:d0:08:26:36:05:79:55:b5: 47:42:10:60:96:c0:4a:40:b9:00:4b:7b:29:91:2e:5a:80:a1: a1:6a:bf:14:09:6e:26:1d:a0:2c:30:fa:80:ce:00:42:90:79: a1:3e:13:b5:6f:47:80:fb:a8:20:7a:69:48:44:de:3d:7d:23: 43:af:24:d8:33:e3:57:8b:8f:6f:94:fd:f2:43:6e:22:95:5a: f1:2e:a7:a0:57:e8:37:90:a6:5c:ae:b2:4d:b1:46:c9:01:b1: c8:57:5b:1f:91:f9:1e:86:95:ea:98:54:53:f7:2f:93:36:d5: 09:f6:10:d2:f6:2e:4b:41:c0:da:af:d9:7e:8e:0e:36:6c:2f: 25:5c:47:01:59:00:5d:ec:c4:52:92:a1:d1:d6:d8:0b:ac:a2: 21:9c:46:2b:30:68:70:8d:cd:7e:59:12:19:2e:ab:19:ce:2c: a5:be:e6:3a:87:f1:7f:50:f7:b1:85:f2:f5:be:88:52:ac:ac: 23:3d:95:de -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI1NTExMTAvBgNVBAUTKEI2Mzg5NzkxQkQ1NDA5NkFEMDA5OTlBNzU5MUZCMjA0 MTg5QUYxOTgwHhcNMjYwMzIxMDMzMjMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWJlMTE0Zi00YTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiZGMUHovHyY59/usMJBxzLYAEoQD2J8JhP7NkBCdbZT+MdZCy3l34ivhuY6l fOLzXq67VDlqY92OA87bsiamz/gt7aUt0DAOeiPQ6sgo2vOf8e+5dBGzrS31ApfW xnDHlonqZAFLz38MtfyShviBajopuPccwmHrBQi25PC8be1KcpTMiaHkLGAoVBx/ rPq1xli77uyEMEfl3cJpGvo1W+sUYB38i8ZiJPyFcUMvCJAKU0O6HOYPiQR+ExE4 0EVrzctwI6J5/+RpRvSsFABefm6Qd/W337g40DDa+LxkFwtOZl/gyflT7C4pJ9PM 7k/StpuiFDTtvvr5KIHsrzzh3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJh9tWCG /VB+A4Ya+LN7LryhwBZ7MB8GA1UdIwQYMBaAFLY4l5G9VAlq0AmZp1kfsgQYmvGY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU1MS9EQkY2RTFENEUy RTQxMUU5OUNEMEE5NjlDNEY5QUUwMi90amlYa2IxVUNXclFDWm1uV1IteUJCaWE4 WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqaVhrYjFVQ1dyUUNabW5XUi15QkJpYThaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REI1NTEvREJGNkUxRDRFMkU0MTFFOTlDRDBBOTY5QzRGOUFFMDIvOTdFQTI1NzQy NEQ2MTFGMTk0OEM5MEI4QUI4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ2NWMA0GCSqGSIb3DQEBCwUAA4IBAQCuxngzGglIolfHZB9ryzCS Op90YY4XHEPbVwzX6anUgKwrQ53+3d7nSEfLFgrM9+1XRk6nGnmoPaga2l9sMlGn 0AgmNgV5VbVHQhBglsBKQLkAS3spkS5agKGhar8UCW4mHaAsMPqAzgBCkHmhPhO1 b0eA+6ggemlIRN49fSNDryTYM+NXi49vlP3yQ24ilVrxLqegV+g3kKZcrrJNsUbJ AbHIV1sfkfkehpXqmFRT9y+TNtUJ9hDS9i5LQcDar9l+jg42bC8lXEcBWQBd7MRS kqHR1tgLrKIhnEYrMGhwjc1+WRIZLqsZziylvuY6h/F/UPexhfL1vohSrKwjPZXe -----END CERTIFICATE-----Generated at Wed Mar 25 21:27:13 2026 by rpki-client