$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa File: 3A904D64210111F181AE0DC81F3D8C67.roa (raw, json) Hash identifier: t+AIRVihJ3hRRsLPqK0l+yDAoSi5gLyuvLWG6FytYCE= Subject key identifier: 25:82:A2:62:13:7E:EA:C7:DF:B8:C8:00:06:66:08:B0:16:CF:C4:82 Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Certificate serial: 03DC Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa Signing time: Fri 03 Apr 2026 00:34:38 +0000 ROA not before: Fri 03 Apr 2026 00:34:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142002 IP address blocks: 139.5.108.0/24 maxlen: 24 139.5.109.0/24 maxlen: 24 139.5.110.0/24 maxlen: 24 139.5.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6 Validity Not Before: Apr 3 00:34:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69cf0b1e-e647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:6c:9e:cc:34:88:cf:de:cf:e1:53:fb:3f: 3d:c4:77:a1:0e:9a:4a:65:a9:d0:cd:20:58:b2:8a: 15:46:fe:a4:f8:6a:b0:d6:5e:ce:6e:c6:dd:83:e9: 49:34:5c:07:42:b5:94:81:15:06:3a:f8:83:57:2f: 61:79:fa:83:c1:1b:53:83:9d:26:20:bf:3d:7a:5b: 59:68:37:1a:fa:3c:75:a5:c5:86:e6:59:a3:34:db: cd:f2:3b:6b:a7:a3:a3:1d:3e:88:c2:fc:b2:b2:f7: 94:c5:b7:91:1a:43:0b:aa:16:c6:fa:58:e4:88:9a: 03:cd:ab:dd:06:a8:6a:da:7f:9c:01:69:f8:8c:34: b7:19:12:70:6b:d8:4f:18:ec:54:e3:31:05:e4:87: d6:17:1d:0f:c1:42:04:9e:53:31:31:34:09:e9:e4: 6a:43:d5:cf:61:1d:dd:3a:cd:e0:41:ad:07:5e:ca: 72:08:72:f6:a3:ca:72:fb:29:99:6c:06:b3:57:1f: a2:d5:64:48:86:a2:a4:93:53:6f:8e:1e:da:32:fa: ec:13:1b:22:5e:3b:c5:03:68:74:55:6b:1f:e7:ca: 63:01:d0:ec:fa:f6:b2:58:78:b6:fa:95:fc:3a:33: 74:f7:41:6f:ae:e9:d0:1f:12:90:e3:e8:d6:35:a7: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:82:A2:62:13:7E:EA:C7:DF:B8:C8:00:06:66:08:B0:16:CF:C4:82 X509v3 Authority Key Identifier: keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/3A904D64210111F181AE0DC81F3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 139.5.108.0/22 Signature Algorithm: sha256WithRSAEncryption 30:bf:3f:d4:d7:55:cf:6d:c6:16:6a:97:0e:f8:18:1f:28:04: fe:15:22:4c:b7:ed:57:99:89:99:e9:9c:bb:b9:fc:6c:f3:d7: d6:0c:ea:c3:b0:cb:38:11:a6:0d:2e:66:cb:25:8b:92:94:72: 24:d5:cc:dc:76:5e:d5:a4:8d:2b:2a:6d:d2:6b:03:76:cb:b2: 7c:85:a8:d9:05:9a:06:51:4f:d3:c2:24:bc:2a:d3:07:7c:1c: 43:f3:67:ed:35:5a:11:72:0d:06:e4:6b:50:63:cf:33:d8:3a: 76:5e:19:4c:83:48:09:3f:f4:2e:60:6e:c7:26:83:9f:a8:35: 43:7a:c7:f8:8a:7f:c9:02:ce:43:46:a0:5d:39:0b:5e:88:02: c2:b9:f1:df:e3:a5:64:a9:62:2a:27:e3:6c:cc:05:ab:13:d3: 69:68:98:9b:9e:be:fa:b0:c2:cc:e0:8a:59:69:f9:7e:6f:be: 93:8d:88:1c:61:4f:b1:6f:18:7a:d3:4c:67:17:fb:69:59:c6: cd:0a:2c:8b:7b:65:94:2d:20:7a:5f:72:b3:8d:c6:51:1c:06: bb:3a:d9:5c:77:b5:75:21:76:17:03:a4:cd:36:27:45:71:5e: b1:0c:74:44:86:ab:9f:bb:42:04:da:b7:bc:59:0e:2c:79:42: b9:9e:31:52 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw NDc0QzkxQzYwHhcNMjYwNDAzMDAzNDM4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNmMGIxZS1lNjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdhsnsw0iM/ez+FT+z89xHehDppKZanQzSBYsooVRv6k+Gqw1l7Obsbdg+lJ NFwHQrWUgRUGOviDVy9hefqDwRtTg50mIL89eltZaDca+jx1pcWG5lmjNNvN8jtr p6OjHT6IwvyysveUxbeRGkMLqhbG+ljkiJoDzavdBqhq2n+cAWn4jDS3GRJwa9hP GOxU4zEF5IfWFx0PwUIEnlMxMTQJ6eRqQ9XPYR3dOs3gQa0HXspyCHL2o8py+ymZ bAazVx+i1WRIhqKkk1Nvjh7aMvrsExsiXjvFA2h0VWsf58pjAdDs+vayWHi2+pX8 OjN090FvrunQHxKQ4+jWNaeTNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCWComIT furH37jIAAZmCLAWz8SCMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTVCMDcvNzJBNDhBNzZDQ0UxMTFFQ0JCQTA1QzJDQzRGOUFFMDIvM0E5MDRENjQy MTAxMTFGMTgxQUUwREM4MUYzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCiwVsMA0GCSqGSIb3DQEBCwUAA4IBAQAwvz/U11XPbcYWapcO+Bgf KAT+FSJMt+1XmYmZ6Zy7ufxs89fWDOrDsMs4EaYNLmbLJYuSlHIk1czcdl7VpI0r Km3SawN2y7J8hajZBZoGUU/TwiS8KtMHfBxD82ftNVoRcg0G5GtQY88z2Dp2XhlM g0gJP/QuYG7HJoOfqDVDesf4in/JAs5DRqBdOQteiALCufHf46VkqWIqJ+NszAWr E9NpaJibnr76sMLM4IpZafl+b76TjYgcYU+xbxh600xnF/tpWcbNCiyLe2WULSB6 X3KzjcZRHAa7Otlcd7V1IXYXA6TNNidFcV6xDHREhqufu0IE2re8WQ4seUK5njFS -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:48 2026 by rpki-client