$ rpki-client -vvf rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa File: A98932365ED311EF9DE3E178C4F9AE02.roa (raw, json) Hash identifier: jPNeK/T4iEnyu07qfGOB5hnamUYxNaGDvce1vSeeQew= Subject key identifier: E5:09:2A:8B:57:F6:E6:39:D3:91:81:08:B1:C9:9D:97:4E:43:1F:E6 Certificate issuer: /CN=A91F372C/serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Certificate serial: 0135 Authority key identifier: 4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa Signing time: Tue 03 Mar 2026 05:46:52 +0000 ROA not before: Tue 03 Mar 2026 05:46:52 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 59267 IP address blocks: 103.39.138.0/24 maxlen: 24 103.58.232.0/24 maxlen: 24 103.66.39.0/24 maxlen: 24 103.255.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F372C, serialNumber=4C62F1E10B883F5D5784D635740FD23034CEBFE2 Validity Not Before: Mar 3 05:46:52 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a675cc-68e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:6c:1f:29:3e:32:55:ca:bb:b9:02:95:70:51: df:75:b8:bd:dc:9f:53:78:50:ac:a5:8d:0d:cd:19: 21:6d:5a:ec:58:55:03:9b:e5:8d:2f:bf:c5:d7:4c: a0:da:d3:a6:6c:f2:13:1e:00:c0:0e:87:bc:6b:65: e0:ac:fb:ff:71:b0:94:31:66:c1:7e:94:ab:9f:0b: c8:8c:06:4d:56:9d:44:05:94:2a:1e:b1:20:96:42: d6:8f:08:06:dd:0d:33:9f:79:e2:af:77:c2:cb:ab: dc:6c:39:c0:61:45:ab:a6:3a:c3:ed:86:0c:50:0a: af:41:5b:4b:93:3f:a6:20:17:e8:c9:2b:72:08:e4: c4:dc:a2:d5:40:1f:d3:13:1f:9c:d3:fa:53:98:94: 18:f3:39:85:2c:b3:3b:03:1a:6c:2c:e6:49:01:30: 2c:0b:52:f4:03:97:76:d6:85:50:00:95:8b:5c:cb: 57:1c:06:41:6b:68:0c:b2:46:cb:9f:8b:3d:96:21: 47:6a:d1:50:b7:fd:50:e7:89:29:34:3b:51:92:ca: f6:6f:c3:96:60:ee:fc:fc:24:f8:65:c6:89:eb:73: 50:7c:14:80:33:e7:82:3e:9c:81:4b:13:e4:f4:3c: ae:45:f6:22:cb:f7:ca:6f:c6:5c:c7:6f:cb:b2:94: b2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:2A:8B:57:F6:E6:39:D3:91:81:08:B1:C9:9D:97:4E:43:1F:E6 X509v3 Authority Key Identifier: keyid:4C:62:F1:E1:0B:88:3F:5D:57:84:D6:35:74:0F:D2:30:34:CE:BF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/TGLx4QuIP11XhNY1dA_SMDTOv-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TGLx4QuIP11XhNY1dA_SMDTOv-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F372C/6796D8E25ECE11EFA9A8B03EC4F9AE02/A98932365ED311EF9DE3E178C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.39.138.0/24 103.58.232.0/24 103.66.39.0/24 103.255.251.0/24 Signature Algorithm: sha256WithRSAEncryption 24:1c:b4:c8:e0:30:1f:61:7e:4b:ba:33:09:5f:a9:72:84:32: 67:3e:34:51:21:c7:2a:f8:cc:5f:a8:b7:34:db:a6:b1:0a:40: 00:82:b2:c5:a9:bb:68:43:40:aa:0f:cc:3a:fd:c3:64:7b:4a: 8f:6d:7d:6b:2c:f8:5c:72:d8:a8:2f:af:64:54:77:bc:1b:c7: 93:f0:89:21:fc:a2:5d:8c:37:dc:8e:b1:e0:a1:da:bf:59:39: 6d:85:18:a3:19:0c:6b:f9:be:4f:2b:9b:f1:f9:51:35:1a:8e: 20:5f:13:e0:25:40:2b:03:9b:d7:c2:8e:77:61:a1:05:3d:5b: e3:1a:49:ef:50:2e:b5:c1:c6:4e:b1:c7:11:fb:93:6f:6d:1d: 52:d6:88:79:21:fe:eb:00:14:c3:3f:e4:9f:27:11:91:35:38: f5:af:74:f1:51:11:05:d3:d7:a2:f8:38:7e:21:3a:8a:98:02: da:18:bf:2d:a9:4f:7e:7a:3a:93:45:4e:06:09:45:d9:ea:6f: a6:69:07:99:ff:b8:50:09:40:d4:39:76:02:da:5f:0e:9f:74: 15:db:e6:18:85:a1:9b:ba:1a:15:a1:62:82:5b:88:a1:7c:32: 4d:11:6e:f1:76:d3:ed:a0:c1:83:53:bf:f4:66:f7:48:c2:09: 09:3e:5d:dc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3MkMxMTAvBgNVBAUTKDRDNjJGMUUxMEI4ODNGNUQ1Nzg0RDYzNTc0MEZEMjMw MzRDRUJGRTIwHhcNMjYwMzAzMDU0NjUyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2NzVjYy02OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/2wfKT4yVcq7uQKVcFHfdbi93J9TeFCspY0NzRkhbVrsWFUDm+WNL7/F10yg 2tOmbPITHgDADoe8a2XgrPv/cbCUMWbBfpSrnwvIjAZNVp1EBZQqHrEglkLWjwgG 3Q0zn3nir3fCy6vcbDnAYUWrpjrD7YYMUAqvQVtLkz+mIBfoyStyCOTE3KLVQB/T Ex+c0/pTmJQY8zmFLLM7AxpsLOZJATAsC1L0A5d21oVQAJWLXMtXHAZBa2gMskbL n4s9liFHatFQt/1Q54kpNDtRksr2b8OWYO78/CT4ZcaJ63NQfBSAM+eCPpyBSxPk 9DyuRfYiy/fKb8Zcx2/LspSyEQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFOUJKotX 9uY505GBCLHJnZdOQx/mMB8GA1UdIwQYMBaAFExi8eELiD9dV4TWNXQP0jA0zr/i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzcyQy82Nzk2RDhFMjVF Q0UxMUVGQTlBOEIwM0VDNEY5QUUwMi9UR0x4NFF1SVAxMVhoTlkxZEFfU01EVE92 LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RHTHg0UXVJUDExWGhOWTFkQV9TTURUT3YtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM3MkMvNjc5NkQ4RTI1RUNFMTFFRkE5QThCMDNFQzRGOUFFMDIvQTk4OTMyMzY1 RUQzMTFFRjlERTNFMTc4QzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAZyeKAwQAZzroAwQAZ0InAwQAZ//7MA0GCSqGSIb3DQEBCwUAA4IB AQAkHLTI4DAfYX5LujMJX6lyhDJnPjRRIccq+MxfqLc026axCkAAgrLFqbtoQ0Cq D8w6/cNke0qPbX1rLPhcctioL69kVHe8G8eT8Ikh/KJdjDfcjrHgodq/WTlthRij GQxr+b5PK5vx+VE1Go4gXxPgJUArA5vXwo53YaEFPVvjGknvUC61wcZOsccR+5Nv bR1S1oh5If7rABTDP+SfJxGRNTj1r3TxUREF09ei+Dh+ITqKmALaGL8tqU9+ejqT RU4GCUXZ6m+maQeZ/7hQCUDUOXYC2l8On3QV2+YYhaGbuhoVoWKCW4ihfDJNEW7x dtPtoMGDU7/0ZvdIwgkJPl3c -----END CERTIFICATE-----Generated at Thu Mar 26 04:20:24 2026 by rpki-client