$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa File: B4D99056FF2511F0989D8DC686EE528E.roa (raw, json) Hash identifier: innZf7EsNIXw7HADa9taW/ScYgdd9jVos0hP3W/VhWE= Subject key identifier: 9B:A9:AE:F9:E5:C4:ED:48:25:DC:0D:00:EF:13:69:BD:3C:2C:06:F8 Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Certificate serial: 01B3 Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa Signing time: Sun 03 May 2026 04:37:15 +0000 ROA not before: Sun 03 May 2026 04:37:15 +0000 ROA not after: Wed 02 Sep 2026 00:00:00 +0000 asID: 9821 IP address blocks: 103.80.140.0/22 maxlen: 22 202.90.128.0/19 maxlen: 19 202.90.135.0/24 maxlen: 24 202.90.155.0/24 maxlen: 24 203.211.56.0/22 maxlen: 22 2001:d18::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 04:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Validity Not Before: May 3 04:37:15 2026 GMT Not After : Sep 2 00:00:00 2026 GMT Subject: CN=69f6d0fb-3428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:23:c9:21:bc:b8:6e:e5:e7:35:6e:9b:e5: 63:9b:aa:48:54:b5:9e:e6:00:ed:f0:8d:eb:13:52: db:fb:0d:b9:ec:0a:34:10:02:4c:30:b7:9a:3c:05: 2c:0c:0d:dc:2c:34:04:11:ea:f8:2b:34:bf:f5:94: ba:30:3a:b4:1f:e6:cf:d7:78:f4:4c:78:76:3e:34: 9c:d6:6b:3a:d5:aa:2d:25:4f:74:70:82:08:f1:57: 70:e2:dc:9a:92:52:90:45:41:d9:60:f5:4e:a5:c5: 33:76:66:35:f3:33:03:7b:2c:f7:86:ea:1a:47:8e: 9f:02:a3:35:59:34:31:44:70:fb:7c:9d:37:1d:99: 2b:83:1a:04:62:0b:83:53:99:13:a5:17:53:37:fb: 12:36:86:2b:4a:65:22:78:da:74:b0:a8:bf:85:c9: ee:37:51:b7:03:01:60:7b:42:b4:a7:f3:98:7b:b6: 75:50:8b:03:ed:16:d8:74:d2:2a:95:8c:fb:6f:4a: 31:05:aa:df:36:c0:04:f8:9a:a6:f3:7b:03:cd:dc: 51:cf:bd:4f:fd:88:37:b4:12:63:93:a4:ae:a0:ba: 26:c5:f4:f8:a3:61:20:5a:08:49:fe:be:ec:ef:9d: 8f:3a:46:ef:66:79:06:ca:4f:af:d9:73:f9:34:38: 2d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A9:AE:F9:E5:C4:ED:48:25:DC:0D:00:EF:13:69:BD:3C:2C:06:F8 X509v3 Authority Key Identifier: keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/B4D99056FF2511F0989D8DC686EE528E.roa sbgp-ipAddrBlock: critical IPv4: 103.80.140.0/22 202.90.128.0/19 203.211.56.0/22 IPv6: 2001:d18::/32 Signature Algorithm: sha256WithRSAEncryption 24:15:1e:c4:36:a2:ef:8b:10:f9:12:56:72:da:a9:1c:ed:ab: 0f:62:cb:7d:bc:59:a7:0d:33:20:c8:e9:d3:75:16:ba:9e:fe: 1d:24:56:51:6f:f9:f4:15:fd:8f:2c:2b:af:ef:29:d4:3d:eb: db:38:6a:f2:cb:9e:3d:52:7d:ea:01:de:39:00:56:12:a9:bb: 1f:3f:a2:bd:d9:40:9f:7d:3d:72:d3:24:f0:b4:b3:ca:87:b3: 00:8d:b7:24:16:05:c0:7f:d2:53:c8:aa:c3:c4:d3:d4:79:e1: 54:c2:87:50:b4:05:95:f9:c7:fe:4c:e7:d5:15:42:3a:81:3c: 72:a5:fc:98:5e:b9:97:81:5a:81:6e:a5:35:92:2d:42:58:b6: 53:0f:c5:4a:6e:58:46:e8:ba:fa:72:b4:d2:e8:29:94:85:d7: 19:fe:6b:9a:8f:92:7e:84:7c:ab:83:b1:c6:13:19:03:67:9b: 97:31:34:3e:aa:19:88:b8:5c:f7:5d:7e:d9:8a:4d:e4:05:61: 0f:ec:01:33:c8:1e:6d:b3:f4:96:e7:33:8c:c7:f9:e6:c6:36: 65:dd:da:7c:58:f2:7b:41:7e:ec:33:26:22:bb:22:0c:61:de: 91:fd:7d:ff:77:aa:3e:80:48:b2:ae:44:32:b9:e6:be:91:92: e8:00:7f:8b -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4MDYxMTAvBgNVBAUTKEVEMUU2M0M0Q0E4NTIwNEVDQkFEMjZDRTJDOTQ2MjY0 NUUwQjFDQUQwHhcNMjYwNTAzMDQzNzE1WhcNMjYwOTAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2ZDBmYi0zNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUsjySG8uG7l5zVum+Vjm6pIVLWe5gDt8I3rE1Lb+w257Ao0EAJMMLeaPAUs DA3cLDQEEer4KzS/9ZS6MDq0H+bP13j0THh2PjSc1ms61aotJU90cIII8Vdw4tya klKQRUHZYPVOpcUzdmY18zMDeyz3huoaR46fAqM1WTQxRHD7fJ03HZkrgxoEYguD U5kTpRdTN/sSNoYrSmUieNp0sKi/hcnuN1G3AwFge0K0p/OYe7Z1UIsD7RbYdNIq lYz7b0oxBarfNsAE+Jqm83sDzdxRz71P/Yg3tBJjk6SuoLomxfT4o2EgWghJ/r7s 752POkbvZnkGyk+v2XP5NDgtswIDAQABo4ICezCCAncwHQYDVR0OBBYEFJuprvnl xO1IJdwNAO8Tab08LAb4MB8GA1UdIwQYMBaAFO0eY8TKhSBOy60mziyUYmReCxyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODgwNi8zOUQwODdBQUQ2 OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklFN0xyU2JPTEpSaVpGNExI SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSNWp4TXFGSUU3THJTYk9MSlJpWkY0TEhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg4MDYvMzlEMDg3QUFENjk4MTFFRUE1NDRCNDM4QzRGOUFFMDIvQjREOTkwNTZG RjI1MTFGMDk4OUQ4REM2ODZFRTUyOEUucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAY BAIAATASAwQCZ1CMAwQFylqAAwQCy9M4MA0EAgACMAcDBQAgAQ0YMA0GCSqGSIb3 DQEBCwUAA4IBAQAkFR7ENqLvixD5ElZy2qkc7asPYst9vFmnDTMgyOnTdRa6nv4d JFZRb/n0Ff2PLCuv7ynUPevbOGryy549Un3qAd45AFYSqbsfP6K92UCffT1y0yTw tLPKh7MAjbckFgXAf9JTyKrDxNPUeeFUwodQtAWV+cf+TOfVFUI6gTxypfyYXrmX gVqBbqU1ki1CWLZTD8VKblhG6Lr6crTS6CmUhdcZ/muaj5J+hHyrg7HGExkDZ5uX MTQ+qhmIuFz3XX7Zik3kBWEP7AEzyB5ts/SW5zOMx/nmxjZl3dp8WPJ7QX7sMyYi uyIMYd6R/X3/d6o+gEiyrkQyuea+kZLoAH+L -----END CERTIFICATE-----Generated at Wed May 13 05:35:44 2026 by rpki-client