$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/1004D41ED21D11E992825429C4F9AE02.roa File: 1004D41ED21D11E992825429C4F9AE02.roa (raw, json) Hash identifier: nWSk10SPwusUWBSLiCJQo289XMus0NqOV3jdZ3AZ3Cs= Subject key identifier: 41:19:03:73:A5:40:36:89:AC:54:49:4A:59:83:1B:C6:72:F9:C6:5F Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Certificate serial: 0E08 Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/1004D41ED21D11E992825429C4F9AE02.roa Signing time: Fri 08 May 2026 18:22:15 +0000 ROA not before: Fri 08 May 2026 18:22:15 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 136379 IP address blocks: 103.138.192.0/24 maxlen: 24 103.138.193.0/24 maxlen: 24 2001:df0:5080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Validity Not Before: May 8 18:22:15 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69fe29d7-1fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:ff:01:fa:84:30:da:f6:72:e2:7c:4b:5c: 8d:92:a1:ce:22:87:5e:5d:2b:a7:47:eb:01:72:28: 2c:f0:83:f4:65:51:2b:44:12:f4:81:cf:26:d4:59: 2d:dd:7e:03:cb:b0:3e:74:1b:79:e0:e8:52:9c:19: f6:aa:66:9c:54:eb:48:15:d8:f9:5d:8f:54:ce:9d: 4b:ac:b5:18:53:af:a2:cb:7f:0e:c0:1a:8c:b4:91: b6:b9:49:7d:25:5e:c9:cb:b6:be:3a:3f:5b:be:1e: 26:c2:14:55:71:d4:06:eb:f9:1a:d4:b2:01:38:93: b3:c8:2f:1b:33:3a:f3:93:0d:80:e7:b0:bd:25:09: 6f:7d:cb:68:6d:94:2f:3b:1d:57:05:b5:dc:5c:da: fd:f1:50:c3:69:37:0e:d8:37:9b:f3:8e:26:76:34: 1d:eb:b6:3d:49:25:e3:a3:aa:39:b3:a3:c1:64:55: b7:93:93:22:c0:b9:a3:2b:12:28:95:5b:3c:dc:86: d6:a4:cc:18:60:11:f6:2b:70:32:d3:61:ab:4e:d7: 50:cf:c9:84:38:ca:82:01:53:39:73:4f:cc:6d:9f: de:c5:31:21:c7:a4:c2:a1:cc:8a:af:8e:41:f9:c6: c3:c7:7b:a2:36:20:83:1f:33:7b:38:da:8d:27:f1: 6b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:03:73:A5:40:36:89:AC:54:49:4A:59:83:1B:C6:72:F9:C6:5F X509v3 Authority Key Identifier: keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/1004D41ED21D11E992825429C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.192.0/23 IPv6: 2001:df0:5080::/48 Signature Algorithm: sha256WithRSAEncryption a5:f4:dc:71:d6:70:b4:46:9d:8b:aa:9f:be:66:0c:d2:fa:03: 95:d2:fe:ab:55:89:a9:0f:ec:d3:e0:29:c5:40:c7:ff:87:fe: 2d:18:22:fc:28:54:62:86:6d:e8:cb:d0:cc:a3:4c:dd:91:c0: 31:35:23:30:86:55:8f:3f:1e:79:6f:f0:8f:4d:0e:61:4d:9c: 3f:e3:b1:a7:e1:91:85:1a:66:7a:01:a0:6a:b5:9a:42:9f:02: 00:4b:1f:ce:52:14:c6:f3:dc:f2:0d:b9:77:19:d3:1f:81:da: d6:b9:11:07:44:7b:a3:35:ef:20:d1:1a:96:c6:20:18:b0:c7: 7f:bd:af:44:43:d8:d7:fb:e4:45:45:99:92:33:c9:03:bc:1e: 00:c9:00:5f:a3:51:d9:00:fb:d5:2c:d5:4a:16:d7:91:46:35: c2:47:62:14:60:cf:4e:b8:74:27:95:a5:0f:a4:fe:42:45:4e: 16:47:07:bc:51:07:d1:62:50:69:0b:01:51:57:61:7e:b0:a1: 5d:67:67:62:57:20:d2:0c:c4:d2:cd:cf:4c:b5:88:c9:ea:ca: 9f:30:b5:f3:26:ce:0d:24:d6:1b:1c:33:92:f6:80:e0:5e:f3: 5b:17:e0:49:0b:f2:d4:b5:07:84:6e:5f:6e:9c:fd:b6:af:dc: 2c:fc:9b:cb -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICDggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz RDQ5RjY4MDQwHhcNMjYwNTA4MTgyMjE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZlMjlkNy0xZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgf/AfqEMNr2cuJ8S1yNkqHOIodeXSunR+sBcigs8IP0ZVErRBL0gc8m1Fkt 3X4Dy7A+dBt54OhSnBn2qmacVOtIFdj5XY9Uzp1LrLUYU6+iy38OwBqMtJG2uUl9 JV7Jy7a+Oj9bvh4mwhRVcdQG6/ka1LIBOJOzyC8bMzrzkw2A57C9JQlvfctobZQv Ox1XBbXcXNr98VDDaTcO2Deb844mdjQd67Y9SSXjo6o5s6PBZFW3k5MiwLmjKxIo lVs83IbWpMwYYBH2K3Ay02GrTtdQz8mEOMqCAVM5c0/MbZ/exTEhx6TCocyKr45B +cbDx3uiNiCDHzN7ONqNJ/FrPwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFEEZA3Ol QDaJrFRJSlmDG8Zy+cZfMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI5QzAvRDM2NEYwQ0NEMjFBMTFFOTgzRjlFNTI0QzRGOUFFMDIvMTAwNEQ0MUVE MjFEMTFFOTkyODI1NDI5QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ4rAMA8EAgACMAkDBwAgAQ3wUIAwDQYJKoZIhvcNAQELBQADggEB AKX03HHWcLRGnYuqn75mDNL6A5XS/qtViakP7NPgKcVAx/+H/i0YIvwoVGKGbejL 0MyjTN2RwDE1IzCGVY8/Hnlv8I9NDmFNnD/jsafhkYUaZnoBoGq1mkKfAgBLH85S FMbz3PINuXcZ0x+B2ta5EQdEe6M17yDRGpbGIBiwx3+9r0RD2Nf75EVFmZIzyQO8 HgDJAF+jUdkA+9Us1UoW15FGNcJHYhRgz064dCeVpQ+k/kJFThZHB7xRB9FiUGkL AVFXYX6woV1nZ2JXINIMxNLNz0y1iMnqyp8wtfMmzg0k1hscM5L2gOBe81sX4EkL 8tS1B4RuX26c/bav3Cz8m8s= -----END CERTIFICATE-----Generated at Wed May 13 04:36:37 2026 by rpki-client