$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa File: 10E905682CCE11F1BB1925E192833773.roa (raw, json) Hash identifier: 6g6Ja4w+RYbHzuKLTfgElgeDFmZnmZ9tKzWcakJqqZs= Subject key identifier: 6C:7F:A3:E1:70:5C:15:66:37:09:72:C4:64:C9:2E:74:60:5B:70:8E Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F5F Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa Signing time: Tue 31 Mar 2026 06:58:12 +0000 ROA not before: Tue 31 Mar 2026 06:58:12 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149299 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 126.209.88.0/22 maxlen: 22 126.209.88.0/23 maxlen: 23 126.209.88.0/24 maxlen: 24 126.209.89.0/24 maxlen: 24 126.209.90.0/24 maxlen: 24 126.209.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3935 (0xf5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Mar 31 06:58:12 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69cb7084-f474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:45:06:08:2f:49:a7:bd:de:3b:33:7b:a3: db:6d:cd:61:3d:67:0a:a1:95:df:ad:2a:6c:76:67: f4:72:55:fb:5a:70:1e:47:90:4c:61:71:dd:ed:03: f9:55:c1:cc:49:eb:23:2a:70:57:04:48:e9:97:e9: 23:f3:e3:1e:db:a6:81:27:f9:f5:33:c5:3e:93:01: cd:1e:e0:d9:5d:ab:bb:37:23:9b:52:11:80:52:71: 2c:fd:3c:f9:23:f9:62:a6:45:bd:e8:05:86:62:d8: 71:4a:9b:79:c7:b8:d7:77:2a:47:da:13:9d:ca:f8: 88:27:d1:c1:6f:7a:78:dc:3b:53:13:b3:ea:74:ae: fe:b1:d0:57:86:ea:95:fc:42:dc:b8:29:15:27:46: 29:dc:84:81:55:2f:ae:7a:53:37:78:fd:b9:3d:31: 5c:7d:9a:63:87:ce:43:6b:cd:68:97:e4:74:c4:a4: 18:0d:9f:ed:6e:cd:65:a1:07:ac:9b:bb:f0:b6:7f: 51:73:6e:c7:80:24:5e:f6:13:3b:bd:c0:62:49:62: 69:e9:d8:b3:ca:84:4b:ea:19:96:cc:5e:91:58:fe: 6d:a3:a8:ea:1d:36:f8:e0:d9:e2:bf:d0:4f:48:d7: c2:52:5e:7a:cd:68:57:ad:d0:e4:6a:f8:26:f5:e8: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7F:A3:E1:70:5C:15:66:37:09:72:C4:64:C9:2E:74:60:5B:70:8E X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/10E905682CCE11F1BB1925E192833773.roa sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 126.209.88.0/22 Signature Algorithm: sha256WithRSAEncryption a4:a0:23:46:8b:bb:21:8d:37:93:17:59:a9:3d:f6:d2:ac:1a: 39:96:8a:38:34:4e:9a:d7:d9:76:08:3d:9e:03:ba:5a:4f:67: 89:b0:d2:e8:72:79:90:af:3f:78:55:1c:18:eb:90:c1:ed:a6: 14:80:00:06:fe:c7:aa:cf:2f:f7:20:3e:d1:e4:c3:b1:9c:6a: 9a:e7:ef:5e:c0:b1:72:76:44:58:0d:29:ba:ef:36:27:10:f9: 30:c0:ce:85:48:0e:96:7d:e7:e6:59:ee:d0:9d:9f:99:1e:81: eb:bc:a7:8f:f9:a5:ab:a5:b2:cf:46:cb:e4:5d:95:a8:97:d7: 07:e2:d5:c6:42:5f:50:db:5e:26:d9:fe:cb:b5:94:fe:d8:77: 3c:bd:46:74:36:0b:b0:ce:e3:63:2e:dc:ed:5d:b5:e2:3c:98: 1d:f3:43:b5:6a:ff:2c:1d:89:d8:49:dc:ad:f4:a2:2a:3a:24: c4:90:2f:fe:f1:a0:86:41:8e:20:66:2f:11:92:d7:30:0d:78: 1e:db:d0:58:b2:2e:8a:0d:ba:65:cc:e8:73:d5:62:8b:f7:86: 9b:2a:f3:ba:62:6b:fa:0f:ad:e4:19:cf:8a:46:ba:10:c5:1e: 4d:e8:36:e6:4f:09:10:ba:9c:f1:59:3b:fe:f5:a2:98:c1:8a: 80:51:70:b6 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICD18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwMzMxMDY1ODEyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiNzA4NC1mNDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgNFBggvSae93jsze6Pbbc1hPWcKoZXfrSpsdmf0clX7WnAeR5BMYXHd7QP5 VcHMSesjKnBXBEjpl+kj8+Me26aBJ/n1M8U+kwHNHuDZXau7NyObUhGAUnEs/Tz5 I/lipkW96AWGYthxSpt5x7jXdypH2hOdyviIJ9HBb3p43DtTE7PqdK7+sdBXhuqV /ELcuCkVJ0Yp3ISBVS+uelM3eP25PTFcfZpjh85Da81ol+R0xKQYDZ/tbs1loQes m7vwtn9Rc27HgCRe9hM7vcBiSWJp6dizyoRL6hmWzF6RWP5to6jqHTb44Nniv9BP SNfCUl56zWhXrdDkavgm9ehitwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGx/o+Fw XBVmNwlyxGTJLnRgW3COMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvMTBFOTA1Njgy Q0NFMTFGMUJCMTkyNUUxOTI4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZwUAAwQCftFYMA0GCSqGSIb3DQEBCwUAA4IBAQCkoCNGi7shjTeT F1mpPfbSrBo5loo4NE6a19l2CD2eA7paT2eJsNLocnmQrz94VRwY65DB7aYUgAAG /seqzy/3ID7R5MOxnGqa5+9ewLFydkRYDSm67zYnEPkwwM6FSA6WfefmWe7QnZ+Z HoHrvKeP+aWrpbLPRsvkXZWol9cH4tXGQl9Q214m2f7LtZT+2Hc8vUZ0NguwzuNj LtztXbXiPJgd80O1av8sHYnYSdyt9KIqOiTEkC/+8aCGQY4gZi8RktcwDXge29BY si6KDbplzOhz1WKL94abKvO6Ymv6D63kGc+KRroQxR5N6DbmTwkQupzxWTv+9aKY wYqAUXC2 -----END CERTIFICATE-----Generated at Sun Apr 5 21:04:14 2026 by rpki-client