$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/5FBC810E2C6C11F1AFD97E4FB3833773.roa File: 5FBC810E2C6C11F1AFD97E4FB3833773.roa (raw, json) Hash identifier: g2RLVtOivjuUFJpHbhY01dBDwhC9Sd+LiRmcxISqRKU= Subject key identifier: 2C:BE:CE:89:95:5A:52:8F:65:3D:A4:B1:A9:4D:B8:D0:A2:80:48:66 Certificate issuer: /CN=A91E3B25/serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Certificate serial: 09BA Authority key identifier: B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/5FBC810E2C6C11F1AFD97E4FB3833773.roa Signing time: Mon 30 Mar 2026 19:12:20 +0000 ROA not before: Mon 30 Mar 2026 19:12:20 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 135130 IP address blocks: 103.210.56.0/24 maxlen: 24 103.210.57.0/24 maxlen: 24 103.210.59.0/24 maxlen: 24 2404:6480::/32 maxlen: 32 2404:6480::/48 maxlen: 48 2404:6480:1::/48 maxlen: 48 2404:6480:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2490 (0x9ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3B25, serialNumber=B654DD5F5B1520B325BC09C4BF4CADF3CAFB3429 Validity Not Before: Mar 30 19:12:20 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cacb14-0f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:90:d4:d7:58:83:08:71:c3:31:01:2e:4d: c4:a2:c3:b7:b4:a6:02:24:6e:c7:bb:c4:3e:95:90: 87:6f:4c:82:15:31:61:31:06:3d:f9:f1:aa:52:94: bf:77:47:98:ff:14:4a:66:73:33:a6:e9:d0:98:64: 94:38:ab:c6:2b:6e:42:e6:a1:cc:7d:c2:a3:9a:85: 72:68:46:dc:85:66:08:95:cd:c6:5b:af:fa:d4:b2: 68:86:05:d5:0b:69:e6:53:f3:7d:07:47:23:a8:2a: 01:a6:42:ac:0b:89:6c:f7:c6:e5:78:66:c6:fe:76: 0f:ad:f1:77:9a:6b:99:b5:e7:d5:79:90:05:e6:4c: a6:b3:7f:94:80:03:7a:0a:17:82:70:a2:d9:f8:ee: bf:8e:de:a3:ca:10:58:2d:fb:7d:21:27:0d:3d:94: 06:b6:c5:02:47:e7:4e:57:08:ac:e4:ea:48:b6:f1: 6c:ed:e0:69:a7:1f:7a:89:0d:ad:b2:19:2c:32:bd: 5b:9e:e4:78:a2:8d:36:7e:1d:19:95:f9:33:83:f0: f6:20:9c:bc:63:9f:b9:72:96:54:41:eb:e7:20:c9: 27:9a:39:ba:34:7a:ef:65:c1:e5:97:e6:7f:c9:f2: d3:2e:6e:7d:88:90:74:93:86:a6:5b:8e:40:33:35: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:CE:89:95:5A:52:8F:65:3D:A4:B1:A9:4D:B8:D0:A2:80:48:66 X509v3 Authority Key Identifier: keyid:B6:54:DD:5F:5B:15:20:B3:25:BC:09:C4:BF:4C:AD:F3:CA:FB:34:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/tlTdX1sVILMlvAnEv0yt88r7NCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tlTdX1sVILMlvAnEv0yt88r7NCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3B25/7E892CC2F61511E7B830096DC4F9AE02/5FBC810E2C6C11F1AFD97E4FB3833773.roa sbgp-ipAddrBlock: critical IPv4: 103.210.56.0/23 103.210.59.0/24 IPv6: 2404:6480::/32 Signature Algorithm: sha256WithRSAEncryption 1d:78:ec:64:22:a2:73:62:d4:38:da:cf:a0:3d:9e:23:05:c9: cd:dd:90:55:8b:34:06:24:cd:a1:70:db:d5:d0:70:c2:e9:fc: 69:2f:fd:0a:0f:aa:69:56:72:73:f0:3a:a0:e9:f2:3a:e6:78: e4:90:a0:9a:84:43:d2:d5:4a:a3:0c:89:4b:91:86:60:a2:f3: a9:47:04:9c:f8:8d:99:7a:ef:7e:7d:5f:37:98:57:59:fc:d2: 7f:2f:8d:e1:57:eb:74:1b:7e:53:ac:a4:f4:33:fb:36:24:74: d2:4d:82:57:a4:9b:5d:e0:59:8a:e3:c9:00:82:53:20:38:b5: 30:f6:82:91:be:df:f1:0c:b6:5e:4a:73:a4:11:da:a4:a6:30: 9f:e8:33:4f:de:65:2e:80:54:d5:eb:49:23:4e:b0:80:ba:92: ec:f0:dd:1b:5c:9d:38:6e:5d:70:e0:e7:a2:a7:7d:14:98:c3: ed:4f:cc:e2:6f:0c:ae:1a:01:1f:77:1c:df:99:cd:7d:d4:c6: e5:50:90:5a:c4:3f:24:98:a6:99:39:48:41:94:f3:1f:30:1c: 3e:57:1c:24:30:70:f1:a5:ba:18:71:62:b0:ba:f8:74:78:9f: d7:c3:f5:93:69:28:f2:61:64:51:0c:ed:d2:d4:9b:23:62:e3: 86:ce:9e:fc -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCMjUxMTAvBgNVBAUTKEI2NTRERDVGNUIxNTIwQjMyNUJDMDlDNEJGNENBREYz Q0FGQjM0MjkwHhcNMjYwMzMwMTkxMjIwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhY2IxNC0wZjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCuQ1NdYgwhxwzEBLk3EosO3tKYCJG7Hu8Q+lZCHb0yCFTFhMQY9+fGqUpS/ d0eY/xRKZnMzpunQmGSUOKvGK25C5qHMfcKjmoVyaEbchWYIlc3GW6/61LJohgXV C2nmU/N9B0cjqCoBpkKsC4ls98bleGbG/nYPrfF3mmuZtefVeZAF5kyms3+UgAN6 CheCcKLZ+O6/jt6jyhBYLft9IScNPZQGtsUCR+dOVwis5OpItvFs7eBppx96iQ2t shksMr1bnuR4oo02fh0Zlfkzg/D2IJy8Y5+5cpZUQevnIMknmjm6NHrvZcHll+Z/ yfLTLm59iJB0k4amW45AMzXWfwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCy+zomV WlKPZT2ksalNuNCigEhmMB8GA1UdIwQYMBaAFLZU3V9bFSCzJbwJxL9MrfPK+zQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0IyNS83RTg5MkNDMkY2 MTUxMUU3QjgzMDA5NkRDNEY5QUUwMi90bFRkWDFzVklMTWx2QW5FdjB5dDg4cjdO Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RsVGRYMXNWSUxNbHZBbkV2MHl0ODhyN05Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNCMjUvN0U4OTJDQzJGNjE1MTFFN0I4MzAwOTZEQzRGOUFFMDIvNUZCQzgxMEUy QzZDMTFGMUFGRDk3RTRGQjM4MzM3NzMucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBZ9I4AwQAZ9I7MA0EAgACMAcDBQAkBGSAMA0GCSqGSIb3DQEBCwUA A4IBAQAdeOxkIqJzYtQ42s+gPZ4jBcnN3ZBVizQGJM2hcNvV0HDC6fxpL/0KD6pp VnJz8Dqg6fI65njkkKCahEPS1UqjDIlLkYZgovOpRwSc+I2Zeu9+fV83mFdZ/NJ/ L43hV+t0G35TrKT0M/s2JHTSTYJXpJtd4FmK48kAglMgOLUw9oKRvt/xDLZeSnOk EdqkpjCf6DNP3mUugFTV60kjTrCAupLs8N0bXJ04bl1w4Oeip30UmMPtT8zibwyu GgEfdxzfmc191MblUJBaxD8kmKaZOUhBlPMfMBw+VxwkMHDxpboYcWKwuvh0eJ/X w/WTaSjyYWRRDO3S1JsjYuOGzp78 -----END CERTIFICATE-----Generated at Sun Apr 5 21:04:17 2026 by rpki-client