$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa File: F189CB86C81D11EBA4C0E321C4F9AE02.roa (raw, json) Hash identifier: Vhxsq5oGsGnJdnu9k72YuMt3LNz1ibjMmsc3t9zhgQE= Subject key identifier: 05:63:5D:7E:37:3B:0D:17:41:0E:4C:44:58:3F:11:FB:ED:62:F5:0A Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 0653 Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa Signing time: Mon 02 Mar 2026 05:17:15 +0000 ROA not before: Tue 06 Jan 2026 03:17:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137968 IP address blocks: 103.9.49.0/24 maxlen: 24 103.195.66.0/24 maxlen: 24 103.195.67.0/24 maxlen: 24 203.25.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Jan 6 03:17:14 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a51d5b-795b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:97:7d:e1:59:4c:b6:13:11:6d:6b:09:a2:b7: 37:52:59:68:93:d8:d1:d8:d9:e2:ba:ae:35:e4:a8: 3a:92:83:9c:bb:3b:77:ca:cb:f2:64:95:cd:e1:20: 1c:55:95:3b:4f:42:0d:2a:57:5e:b7:ff:2d:76:31: f8:09:20:78:3c:98:ba:a9:4e:63:6e:17:cd:23:07: e0:9f:11:07:93:28:14:18:03:b7:e7:d9:da:92:e2: 30:56:00:5c:fd:b0:7a:8b:8c:d9:98:b5:4c:f5:f6: 7b:a4:0a:8c:bb:e8:6b:9a:dc:03:45:51:b3:24:50: b1:74:0e:e4:ad:a4:5b:55:8a:a5:fc:24:5c:d4:a7: 43:53:8c:ae:8d:fe:90:9a:e8:5c:84:fa:d6:70:e0: b0:b7:b3:46:76:41:4a:8b:d7:16:fa:e8:06:ab:5a: 6f:5e:83:97:6a:2e:63:4f:c4:81:0c:e1:f6:d9:0c: 7a:4f:fa:19:eb:f5:0e:61:f1:3e:cf:13:fe:37:63: 72:dc:9b:d4:28:5d:11:be:4d:9c:9d:04:32:33:6d: d4:ce:ba:4b:d4:6d:02:14:2a:05:75:64:0a:82:b3: 23:74:49:40:30:d3:3f:21:03:b4:e1:ef:c0:7e:86: 6d:88:f7:9b:83:fe:be:d4:48:ea:ac:ca:f8:cb:cc: 25:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:5D:7E:37:3B:0D:17:41:0E:4C:44:58:3F:11:FB:ED:62:F5:0A X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.9.49.0/24 103.195.66.0/23 203.25.144.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:f4:5a:ce:58:fb:fd:a2:e6:6a:f7:15:7e:44:93:a1:17:0c: 56:c0:98:49:39:be:39:d4:a0:1b:a0:9a:ab:72:99:43:a7:0f: 40:43:c9:56:05:bd:4f:36:47:ca:65:1d:16:3e:76:42:66:6f: 57:d2:71:2f:d4:b7:42:ad:2f:e1:51:26:1a:17:b8:2f:7d:28: 6b:73:f6:8e:4d:0e:2e:80:4a:bb:aa:24:6a:39:20:0e:45:d7: d3:cf:44:3b:91:a6:6c:8d:8a:12:c0:3b:4e:5a:91:49:18:2e: 73:52:ed:b9:6b:f8:e4:e7:62:05:7d:7f:b9:12:05:5a:33:cb: be:ca:79:f4:1b:83:ff:36:8f:f3:a3:18:73:c2:c5:b2:7f:c6: 08:c0:36:2b:5b:73:67:1e:14:a7:d8:3e:04:bc:9d:b5:b9:a0: 20:c7:61:d6:a0:cf:e2:ac:13:25:48:c3:42:7a:00:42:e3:fc: 0f:d0:45:d3:93:ec:ba:29:e5:45:e0:fd:79:4c:0d:2d:f6:b7: c4:1f:f6:26:d1:4e:1b:a7:91:37:4e:39:58:e5:8e:b0:79:e0: 2c:9c:29:ac:3d:7b:77:11:85:f7:89:1b:b6:ae:bb:ff:8e:26: a9:46:ea:c2:13:bf:fc:46:6c:fc:32:33:e3:f6:0c:3e:9a:84: d1:22:0c:4f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjYwMTA2MDMxNzE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWQ1Yi03OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZd94VlMthMRbWsJorc3Ullok9jR2Nniuq415Kg6koOcuzt3ysvyZJXN4SAc VZU7T0INKldet/8tdjH4CSB4PJi6qU5jbhfNIwfgnxEHkygUGAO359nakuIwVgBc /bB6i4zZmLVM9fZ7pAqMu+hrmtwDRVGzJFCxdA7kraRbVYql/CRc1KdDU4yujf6Q muhchPrWcOCwt7NGdkFKi9cW+ugGq1pvXoOXai5jT8SBDOH22Qx6T/oZ6/UOYfE+ zxP+N2Ny3JvUKF0Rvk2cnQQyM23UzrpL1G0CFCoFdWQKgrMjdElAMNM/IQO04e/A foZtiPebg/6+1EjqrMr4y8wlRwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAVjXX43 Ow0XQQ5MRFg/EfvtYvUKMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI1Q0UvQjA5NkM1MDBDODFBMTFFQkIxMjVBNzNFQzRGOUFFMDIvRjE4OUNCODZD ODFEMTFFQkE0QzBFMzIxQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAZwkxAwQBZ8NCAwQAyxmQMA0GCSqGSIb3DQEBCwUAA4IBAQAs9FrO WPv9ouZq9xV+RJOhFwxWwJhJOb451KAboJqrcplDpw9AQ8lWBb1PNkfKZR0WPnZC Zm9X0nEv1LdCrS/hUSYaF7gvfShrc/aOTQ4ugEq7qiRqOSAORdfTz0Q7kaZsjYoS wDtOWpFJGC5zUu25a/jk52IFfX+5EgVaM8u+ynn0G4P/No/zoxhzwsWyf8YIwDYr W3NnHhSn2D4EvJ21uaAgx2HWoM/irBMlSMNCegBC4/wP0EXTk+y6KeVF4P15TA0t 9rfEH/Ym0U4bp5E3TjlY5Y6weeAsnCmsPXt3EYX3iRu2rrv/jiapRurCE7/8Rmz8 MjPj9gw+moTRIgxP -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:27 2026 by rpki-client