$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa File: 1E018994AEBF11E993F33C65C4F9AE02.roa (raw, json) Hash identifier: UPi+EXP3M++eU/SlCZMA1QlfPjsM5dTJBEKasdPEKHs= Subject key identifier: 13:A3:D1:A9:56:1F:EF:4B:8A:3E:47:5E:76:76:A0:C3:D6:1C:BC:E7 Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Certificate serial: 0EAF Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa Signing time: Fri 24 Apr 2026 18:22:53 +0000 ROA not before: Fri 24 Apr 2026 18:22:53 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 63526 IP address blocks: 103.106.236.0/22 maxlen: 22 103.106.236.0/23 maxlen: 23 103.106.236.0/24 maxlen: 24 103.106.237.0/24 maxlen: 24 103.106.238.0/23 maxlen: 23 103.106.238.0/24 maxlen: 24 103.106.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3759 (0xeaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887 Validity Not Before: Apr 24 18:22:53 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69ebb4fd-e9fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:73:80:ab:39:f8:90:be:c1:c5:47:a3:5c: 06:ed:d0:44:52:36:19:ee:6b:38:11:74:19:2a:df: 24:dc:99:6c:ed:60:1b:e7:17:2c:31:06:b8:e3:11: 31:65:35:0c:79:9f:eb:c2:f0:e9:ef:45:fd:2b:f9: 77:81:a5:35:8d:2c:7b:47:9c:39:7f:f3:3f:9f:37: 98:18:db:f0:dc:6b:98:9b:3f:af:5e:02:6b:94:3f: ba:9f:58:df:0d:09:7b:87:27:47:1d:84:56:91:7d: 6a:b8:eb:ca:5b:32:03:ae:1c:ad:69:a4:8b:61:c2: 26:ac:bc:35:85:60:2c:8f:6d:24:e3:06:fc:6a:58: 2a:76:f8:b2:df:51:23:01:db:5e:d5:98:7f:2d:3c: 55:2e:a0:79:33:29:51:4f:b3:e0:bc:ec:f4:8e:bf: c7:2b:d9:db:63:62:01:52:b9:f5:42:cc:15:27:c8: 75:30:20:5e:8e:4d:57:fb:a3:6c:68:df:ec:3f:16: cb:d4:73:d7:46:17:2d:5e:70:f8:74:b7:fd:f9:a7: 7b:39:e8:5f:6c:ec:83:82:5f:61:c4:3c:d0:90:76: 42:df:64:ec:8f:0d:44:a9:ae:0f:46:bf:6f:18:b5: 3b:3d:d2:01:53:9d:79:16:7e:bf:a8:ef:f2:09:12: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A3:D1:A9:56:1F:EF:4B:8A:3E:47:5E:76:76:A0:C3:D6:1C:BC:E7 X509v3 Authority Key Identifier: keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/1E018994AEBF11E993F33C65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.106.236.0/22 Signature Algorithm: sha256WithRSAEncryption 58:95:b2:37:92:05:b1:d2:18:51:b7:d2:81:0a:1e:21:b9:ef: aa:7e:45:4b:31:d4:ef:d4:30:d2:e2:8f:0a:54:cf:3f:8c:3c: de:25:49:67:15:49:3c:da:84:8d:31:b3:ce:cc:46:c3:00:5b: 69:67:cc:af:ee:e7:d4:25:3b:46:e0:7d:1b:f2:fe:87:ce:bc: 32:c1:94:e9:92:b2:c6:ae:02:1c:98:6b:40:e2:18:bd:9e:dc: 09:b1:d4:d1:93:c7:31:86:0c:19:2c:97:f7:01:c9:06:71:e0: 8d:74:82:f8:e5:83:fa:fc:6a:01:28:03:21:45:22:65:f2:98: ba:72:14:21:f3:7e:b9:92:25:4f:68:77:14:30:06:41:8e:44: 5f:bd:01:6a:01:e7:f5:09:17:b0:1a:43:3b:32:23:2f:9d:93: 89:cb:42:fe:19:6d:8c:61:94:de:4e:93:c2:b9:91:aa:e0:71: fa:73:e2:57:f5:54:d0:4a:f9:c7:61:9c:a4:c9:17:4f:45:b5: f6:d1:3b:8a:b7:0a:14:1d:17:40:2f:f9:17:31:b4:7b:5a:1c: 9e:6a:c0:ed:a3:48:5d:ab:d0:b5:bb:83:e1:58:d6:e2:42:b2: 88:bf:a9:c3:18:87:56:6a:87:2e:c9:f2:90:0d:30:21:0c:ea: 40:e3:2a:ac -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF M0UyMjc4ODcwHhcNMjYwNDI0MTgyMjUzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWViYjRmZC1lOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0RzgKs5+JC+wcVHo1wG7dBEUjYZ7ms4EXQZKt8k3Jls7WAb5xcsMQa44xEx ZTUMeZ/rwvDp70X9K/l3gaU1jSx7R5w5f/M/nzeYGNvw3GuYmz+vXgJrlD+6n1jf DQl7hydHHYRWkX1quOvKWzIDrhytaaSLYcImrLw1hWAsj20k4wb8algqdviy31Ej Adte1Zh/LTxVLqB5MylRT7PgvOz0jr/HK9nbY2IBUrn1QswVJ8h1MCBejk1X+6Ns aN/sPxbL1HPXRhctXnD4dLf9+ad7OehfbOyDgl9hxDzQkHZC32Tsjw1Eqa4PRr9v GLU7PdIBU515Fn6/qO/yCRJTtQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBOj0alW H+9Lij5HXnZ2oMPWHLznMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyOTQvMENCNUVBRkFBRUJFMTFFOTgwRkI0RTYzQzRGOUFFMDIvMUUwMTg5OTRB RUJGMTFFOTkzRjMzQzY1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ2rsMA0GCSqGSIb3DQEBCwUAA4IBAQBYlbI3kgWx0hhRt9KBCh4h ue+qfkVLMdTv1DDS4o8KVM8/jDzeJUlnFUk82oSNMbPOzEbDAFtpZ8yv7ufUJTtG 4H0b8v6HzrwywZTpkrLGrgIcmGtA4hi9ntwJsdTRk8cxhgwZLJf3AckGceCNdIL4 5YP6/GoBKAMhRSJl8pi6chQh8365kiVPaHcUMAZBjkRfvQFqAef1CRewGkM7MiMv nZOJy0L+GW2MYZTeTpPCuZGq4HH6c+JX9VTQSvnHYZykyRdPRbX20TuKtwoUHRdA L/kXMbR7WhyeasDto0hdq9C1u4PhWNbiQrKIv6nDGIdWaocuyfKQDTAhDOpA4yqs -----END CERTIFICATE-----Generated at Wed May 13 05:30:03 2026 by rpki-client