$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/64237DC06C3611EBB6BA1A24C4F9AE02.roa File: 64237DC06C3611EBB6BA1A24C4F9AE02.roa (raw, json) Hash identifier: nMkO+9vmimKW3Y3yHgm1KOVW1G1AUvQhOMK9F5Y0CIk= Subject key identifier: 11:28:E4:C6:CF:C2:6C:3C:72:FD:FF:6C:B1:AE:BA:C8:83:83:D3:79 Certificate issuer: /CN=A91F1605/serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Certificate serial: 0739 Authority key identifier: F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/64237DC06C3611EBB6BA1A24C4F9AE02.roa Signing time: Mon 16 Mar 2026 21:29:02 +0000 ROA not before: Mon 16 Mar 2026 21:29:02 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 135140 IP address blocks: 103.210.220.0/24 maxlen: 24 103.211.198.0/24 maxlen: 24 103.211.236.0/24 maxlen: 24 146.196.84.0/24 maxlen: 24 146.196.85.0/24 maxlen: 24 146.196.86.0/24 maxlen: 24 146.196.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1849 (0x739) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1605, serialNumber=F04690BB03E0D3962B4808E4D06CB26A3490E516 Validity Not Before: Mar 16 21:29:02 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b8761e-cca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:e1:68:fd:b8:c9:4b:ab:ae:fe:f2:16:a5: 08:ca:24:4c:d7:79:d8:a7:f3:04:0d:16:84:cb:11: c6:7c:0a:22:e8:52:43:08:8a:09:d0:44:72:58:2e: 51:5a:b9:93:63:a7:1c:31:b3:9c:22:4a:d3:ca:8e: 59:65:35:cf:ae:23:fa:2b:cb:cd:d0:1c:cf:42:2f: 6a:ad:02:25:a0:9c:ea:41:30:b3:65:5e:75:2a:19: 21:fd:2c:6c:4f:ac:8f:9d:16:6a:b1:b4:17:ed:3c: 2a:13:9d:a9:93:b8:23:a1:01:71:f4:d7:f0:44:ab: 75:3c:9f:12:f8:73:24:45:56:1e:f8:f9:95:30:a7: 49:65:c5:57:ef:38:1b:a2:f6:9b:51:78:c7:3c:57: 74:ba:82:a2:6d:8d:73:dc:9e:cb:3a:05:fc:6e:52: 91:e3:f2:70:35:81:49:e6:5a:22:8f:68:d8:3d:18: 1e:ab:f2:92:ef:7c:0c:39:65:09:61:1a:da:72:31: 60:ed:80:2a:ee:23:02:2e:f7:42:ea:bc:41:b2:12: 17:60:ad:52:64:89:c0:eb:68:fe:c0:88:6d:fb:08: aa:24:e4:03:5b:23:5a:a7:4d:39:6f:7f:2f:ee:d3: c1:6e:66:ea:3e:b8:81:b6:ec:5a:80:72:d1:ec:16: 9c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:28:E4:C6:CF:C2:6C:3C:72:FD:FF:6C:B1:AE:BA:C8:83:83:D3:79 X509v3 Authority Key Identifier: keyid:F0:46:90:BB:03:E0:D3:96:2B:48:08:E4:D0:6C:B2:6A:34:90:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/8EaQuwPg05YrSAjk0GyyajSQ5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EaQuwPg05YrSAjk0GyyajSQ5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1605/7250CA446C3411EB9E37AA21C4F9AE02/64237DC06C3611EBB6BA1A24C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.210.220.0/24 103.211.198.0/24 103.211.236.0/24 146.196.84.0/22 Signature Algorithm: sha256WithRSAEncryption a5:65:0e:e4:12:92:b6:53:fa:11:f5:bf:3f:a2:3c:fc:26:f3: ce:9c:06:3d:5b:82:40:35:8f:72:3e:3e:62:65:a3:81:13:2f: 13:00:79:6c:16:27:d6:66:be:f6:17:ca:0b:36:83:f1:40:9f: 40:01:52:cc:32:08:60:b2:9f:b2:5f:b0:b8:2b:7c:3c:b1:0d: 7f:21:40:94:97:b2:b5:fc:54:cc:72:c5:86:ca:fa:fc:79:54: c4:0e:81:2d:ba:36:ad:89:23:b9:49:36:ee:ce:67:bf:1c:33: 17:c1:83:7b:d0:bb:b4:d3:f3:91:ba:fa:b2:9a:f0:a6:80:f5: 63:76:45:91:b2:33:15:9f:f6:9f:52:69:e7:6a:8f:95:2f:82: 0f:06:9b:dd:78:d0:e8:70:3e:6a:2d:33:f3:5d:37:0f:70:5a: c0:5c:6c:6b:da:31:df:86:29:31:32:f3:d0:63:1c:f7:23:0d: fd:13:0b:17:e5:59:8e:32:04:b8:81:82:3a:3d:4c:f6:41:a4: cb:bf:f1:75:f3:4a:04:5c:e6:5f:d8:a2:ae:a0:57:cd:25:e7: 1f:d0:d3:34:80:56:b1:5b:d7:af:06:c4:49:18:a7:91:15:6a: 62:90:76:d9:63:14:e2:90:8e:ac:65:00:cf:c0:d4:89:64:64: 3c:fa:68:97 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE2MDUxMTAvBgNVBAUTKEYwNDY5MEJCMDNFMEQzOTYyQjQ4MDhFNEQwNkNCMjZB MzQ5MEU1MTYwHhcNMjYwMzE2MjEyOTAyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4NzYxZS1jY2E1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApC/haP24yUurrv7yFqUIyiRM13nYp/MEDRaEyxHGfAoi6FJDCIoJ0ERyWC5R WrmTY6ccMbOcIkrTyo5ZZTXPriP6K8vN0BzPQi9qrQIloJzqQTCzZV51Khkh/Sxs T6yPnRZqsbQX7TwqE52pk7gjoQFx9NfwRKt1PJ8S+HMkRVYe+PmVMKdJZcVX7zgb ovabUXjHPFd0uoKibY1z3J7LOgX8blKR4/JwNYFJ5loij2jYPRgeq/KS73wMOWUJ YRracjFg7YAq7iMCLvdC6rxBshIXYK1SZInA62j+wIht+wiqJOQDWyNap005b38v 7tPBbmbqPriBtuxagHLR7BacRQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFBEo5MbP wmw8cv3/bLGuusiDg9N5MB8GA1UdIwQYMBaAFPBGkLsD4NOWK0gI5NBssmo0kOUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTYwNS83MjUwQ0E0NDZD MzQxMUVCOUUzN0FBMjFDNEY5QUUwMi84RWFRdXdQZzA1WXJTQWprMEd5eWFqU1E1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFYVF1d1BnMDVZclNBamswR3l5YWpTUTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjE2MDUvNzI1MENBNDQ2QzM0MTFFQjlFMzdBQTIxQzRGOUFFMDIvNjQyMzdEQzA2 QzM2MTFFQkI2QkExQTI0QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZ9LcAwQAZ9PGAwQAZ9PsAwQCksRUMA0GCSqGSIb3DQEBCwUAA4IB AQClZQ7kEpK2U/oR9b8/ojz8JvPOnAY9W4JANY9yPj5iZaOBEy8TAHlsFifWZr72 F8oLNoPxQJ9AAVLMMghgsp+yX7C4K3w8sQ1/IUCUl7K1/FTMcsWGyvr8eVTEDoEt ujatiSO5STbuzme/HDMXwYN70Lu00/ORuvqymvCmgPVjdkWRsjMVn/afUmnnao+V L4IPBpvdeNDocD5qLTPzXTcPcFrAXGxr2jHfhikxMvPQYxz3Iw39EwsX5VmOMgS4 gYI6PUz2QaTLv/F180oEXOZf2KKuoFfNJecf0NM0gFaxW9evBsRJGKeRFWpikHbZ YxTikI6sZQDPwNSJZGQ8+miX -----END CERTIFICATE-----Generated at Thu Mar 26 13:23:25 2026 by rpki-client