$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa File: 38DEC3C04ED611ED84336740C4F9AE02.roa (raw, json) Hash identifier: lsL1bzm7xgDwCWDuOlZQ/MIqVfUaWity48F6FNEzoq8= Subject key identifier: A8:16:76:7D:BB:88:9E:A7:72:BF:E5:B3:A0:80:56:F8:D1:7B:EA:D1 Certificate issuer: /CN=A91E6419/serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Certificate serial: 0280 Authority key identifier: 89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:54:18 +0000 ROA not before: Thu 25 Dec 2025 01:22:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 132136 IP address blocks: 103.247.116.0/24 maxlen: 24 2001:df7:6a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 01:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6419, serialNumber=895FB3CE2F9C2E47B914BB2A6B66C77D5397A40A Validity Not Before: Dec 25 01:22:02 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a436fa-d076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:58:da:71:be:d7:fb:99:e2:c0:37:1e:be: 31:43:c4:6d:f1:83:cc:d5:98:67:19:2b:97:c0:57: eb:53:d3:eb:e9:1d:91:a0:7f:59:f2:c5:fa:77:5d: fa:bf:86:1b:88:b3:3c:ea:3e:95:7c:36:7c:96:2f: 3a:da:3e:6b:3e:7e:7d:5f:05:d1:2c:46:6b:14:0b: 83:18:a1:61:98:a9:c0:da:f7:b3:9f:2c:4c:22:91: 20:0c:72:8c:e0:e7:ce:94:bb:84:39:92:9b:68:4a: 6c:4a:9a:2f:7c:93:e4:27:28:b1:ee:1f:e8:53:2f: 2d:ee:cb:9d:3f:2f:5d:10:eb:7d:ff:72:d3:c6:f2: 75:15:68:ed:e2:97:88:83:85:26:d3:26:21:67:ae: 6f:4a:fc:36:fc:1d:2e:b1:c7:90:7e:7f:b4:9a:b0: 86:cd:17:f3:70:b0:68:91:20:a8:bf:ce:6b:f2:9b: f5:37:6b:10:ab:08:a9:47:68:17:93:44:b9:7a:8b: 12:13:a0:cf:86:79:bb:3a:1f:a2:64:1b:de:c0:ce: 3b:6d:94:02:44:6f:5c:31:04:2d:af:c8:45:7c:96: 93:2c:9e:7b:c3:a3:d0:14:7d:e8:0d:dc:13:ff:47: c4:ef:1d:bb:3c:a5:c5:fa:55:ca:2f:e9:1e:12:68: cb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:76:7D:BB:88:9E:A7:72:BF:E5:B3:A0:80:56:F8:D1:7B:EA:D1 X509v3 Authority Key Identifier: keyid:89:5F:B3:CE:2F:9C:2E:47:B9:14:BB:2A:6B:66:C7:7D:53:97:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/iV-zzi-cLke5FLsqa2bHfVOXpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV-zzi-cLke5FLsqa2bHfVOXpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6419/FA6E36CC4ED311EDA5E53040C4F9AE02/38DEC3C04ED611ED84336740C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.247.116.0/24 IPv6: 2001:df7:6a00::/48 Signature Algorithm: sha256WithRSAEncryption 2a:c4:37:6a:54:4f:a2:32:76:99:82:ab:17:4b:f8:b4:7c:ef: d3:07:13:b7:d2:41:08:04:29:e3:77:1b:e7:70:1c:55:eb:d6: 95:eb:42:71:f7:d9:b3:02:21:4e:ba:0f:89:99:b6:24:c5:9b: ee:74:19:21:67:21:08:04:c8:f7:04:1f:bd:e1:36:85:cd:d8: 8a:29:aa:7e:16:55:36:ab:b3:c3:ee:fe:b6:de:36:ec:aa:dc: 82:c7:5c:cb:65:d7:de:b1:95:81:87:4c:6b:88:78:fd:31:0b: b7:dc:ae:ce:7e:26:14:bb:27:0b:66:c9:ef:ca:53:40:6a:f1: be:f0:5e:73:ce:af:ce:3d:40:75:4e:73:72:77:39:b7:b4:b0: af:f2:10:70:5a:ea:c8:1a:66:67:9e:e6:6c:55:7e:28:6a:28: c9:5a:13:f5:78:bb:09:7e:6b:f5:c6:55:58:94:45:b7:59:b9: c7:f5:d5:c2:60:a8:29:2b:7e:75:03:22:a6:04:9d:15:63:8a: c5:6c:a6:c8:5d:e6:81:ba:8b:7d:b0:51:f7:52:e4:e4:c7:37: 27:fa:79:01:82:c5:d9:38:ed:6b:a0:04:b9:24:1f:b5:f5:21: 7f:9a:e6:fd:5c:16:f1:e5:c9:ca:ce:a7:3f:75:cb:2a:93:e2: 79:ee:f2:5a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY0MTkxMTAvBgNVBAUTKDg5NUZCM0NFMkY5QzJFNDdCOTE0QkIyQTZCNjZDNzdE NTM5N0E0MEEwHhcNMjUxMjI1MDEyMjAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzZmYS1kMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwt1Y2nG+1/uZ4sA3Hr4xQ8Rt8YPM1ZhnGSuXwFfrU9Pr6R2RoH9Z8sX6d136 v4YbiLM86j6VfDZ8li862j5rPn59XwXRLEZrFAuDGKFhmKnA2veznyxMIpEgDHKM 4OfOlLuEOZKbaEpsSpovfJPkJyix7h/oUy8t7sudPy9dEOt9/3LTxvJ1FWjt4peI g4Um0yYhZ65vSvw2/B0usceQfn+0mrCGzRfzcLBokSCov85r8pv1N2sQqwipR2gX k0S5eosSE6DPhnm7Oh+iZBvewM47bZQCRG9cMQQtr8hFfJaTLJ57w6PQFH3oDdwT /0fE7x27PKXF+lXKL+keEmjLJwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKgWdn27 iJ6ncr/ls6CAVvjRe+rRMB8GA1UdIwQYMBaAFIlfs84vnC5HuRS7Kmtmx31Tl6QK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjQxOS9GQTZFMzZDQzRF RDMxMUVEQTVFNTMwNDBDNEY5QUUwMi9pVi16emktY0xrZTVGTHNxYTJiSGZWT1hw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWLXp6aS1jTGtlNUZMc3FhMmJIZlZPWHBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTY0MTkvRkE2RTM2Q0M0RUQzMTFFREE1RTUzMDQwQzRGOUFFMDIvMzhERUMzQzA0 RUQ2MTFFRDg0MzM2NzQwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQAZ/d0MA8EAgACMAkDBwAgAQ33agAwDQYJKoZIhvcNAQELBQADggEB ACrEN2pUT6IydpmCqxdL+LR879MHE7fSQQgEKeN3G+dwHFXr1pXrQnH32bMCIU66 D4mZtiTFm+50GSFnIQgEyPcEH73hNoXN2Iopqn4WVTars8Pu/rbeNuyq3ILHXMtl 196xlYGHTGuIeP0xC7fcrs5+JhS7Jwtmye/KU0Bq8b7wXnPOr849QHVOc3J3Obe0 sK/yEHBa6sgaZmee5mxVfihqKMlaE/V4uwl+a/XGVViURbdZucf11cJgqCkrfnUD IqYEnRVjisVspshd5oG6i32wUfdS5OTHNyf6eQGCxdk47WugBLkkH7X1IX+a5v1c FvHlycrOpz91yyqT4nnu8lo= -----END CERTIFICATE-----Generated at Sat Mar 28 13:27:41 2026 by rpki-client