$ rpki-client -vvf rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/41A09C683D8211EEA0E4DD46C4F9AE02.roa File: 41A09C683D8211EEA0E4DD46C4F9AE02.roa (raw, json) Hash identifier: yBAKdOeuYpOHwpfvu2EJBrKJc+IZbXKkxfMi4yfRU/Q= Subject key identifier: 12:A4:6F:85:77:A6:1B:25:EC:86:11:E7:F5:91:E7:32:BC:6B:3E:48 Certificate issuer: /CN=A91E868C/serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Certificate serial: 0F50 Authority key identifier: 28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/41A09C683D8211EEA0E4DD46C4F9AE02.roa Signing time: Tue 31 Mar 2026 06:10:47 +0000 ROA not before: Tue 31 Mar 2026 06:10:47 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 137818 IP address blocks: 103.5.0.0/22 maxlen: 22 103.5.0.0/23 maxlen: 23 103.5.0.0/24 maxlen: 24 103.5.1.0/24 maxlen: 24 103.5.2.0/23 maxlen: 23 103.5.2.0/24 maxlen: 24 103.5.3.0/24 maxlen: 24 126.209.88.0/22 maxlen: 22 126.209.88.0/23 maxlen: 23 126.209.88.0/24 maxlen: 24 126.209.89.0/24 maxlen: 24 126.209.90.0/24 maxlen: 24 126.209.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3920 (0xf50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E868C, serialNumber=28E670C2E37012F05C63BB566E203C51DC45E2B2 Validity Not Before: Mar 31 06:10:47 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69cb6567-8c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:e2:8a:d0:6e:ef:f7:9c:9e:a8:27:90:45: a3:31:2c:8b:58:de:58:dd:5b:de:73:07:1a:a5:6a: af:da:b9:0d:b1:d7:cb:d9:57:83:6f:6e:c6:ef:46: e4:fe:b4:62:da:99:a8:17:03:a4:2e:54:cf:ad:e6: c4:ba:04:43:ab:1e:b8:ee:b3:91:a5:1d:5c:e2:75: 38:57:c1:eb:96:c7:0c:2f:40:2c:48:ea:32:16:db: 22:b1:83:21:74:d6:1f:7a:9b:39:e1:8d:fe:06:d1: a6:b0:6e:47:a6:6f:94:9f:5a:65:39:eb:db:5c:31: 86:c1:81:91:bd:b7:82:7a:fb:a8:e9:c6:e5:53:71: fe:5d:22:d5:19:02:ba:6d:71:4e:d3:b9:93:64:64: 95:8b:21:b6:89:42:f1:d0:4b:86:22:bc:16:e9:bb: 36:ec:a5:fa:1a:70:44:a0:2d:4c:fe:d9:a3:a9:dc: 4d:a3:31:fa:45:ce:96:9e:33:85:13:f8:ff:79:bf: 46:c4:e9:82:ae:f3:cc:a0:7d:c4:85:3d:65:4c:f2: 00:2d:31:de:41:91:19:34:19:d7:29:0a:4b:1b:28: 04:4d:eb:29:22:58:a5:fc:9d:5b:da:0e:5f:43:cd: fb:0c:e0:c7:55:aa:01:0b:79:25:ab:3f:da:82:98: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A4:6F:85:77:A6:1B:25:EC:86:11:E7:F5:91:E7:32:BC:6B:3E:48 X509v3 Authority Key Identifier: keyid:28:E6:70:C2:E3:70:12:F0:5C:63:BB:56:6E:20:3C:51:DC:45:E2:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/KOZwwuNwEvBcY7tWbiA8UdxF4rI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOZwwuNwEvBcY7tWbiA8UdxF4rI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E868C/3FB93368A9DB11E984285286C4F9AE02/41A09C683D8211EEA0E4DD46C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.5.0.0/22 126.209.88.0/22 Signature Algorithm: sha256WithRSAEncryption 42:d1:b7:fa:67:e8:b6:5d:e4:4f:4a:cc:16:8e:20:d3:b9:52: bd:a7:42:5c:e8:a2:36:e3:27:18:0f:af:dc:7c:a2:0d:f0:4b: 9a:29:ee:9b:cb:86:91:3d:00:7d:b1:d6:2a:da:19:4f:1f:36: ae:5c:2b:d8:93:62:5e:74:da:8f:d4:a2:93:13:52:68:6a:72: 12:b2:92:34:8a:36:34:0d:93:42:89:1a:ad:55:0f:1f:f6:c4: 00:0f:23:cf:03:01:76:a7:61:8b:2f:9c:af:16:89:af:28:4d: 5d:fb:0c:eb:b5:4b:8d:fe:6a:bd:b4:74:14:85:d2:0a:4a:70: d0:6b:54:66:83:07:fa:99:99:18:83:15:e7:2c:c8:30:9e:2b: 13:10:c9:cc:e1:29:32:4d:ec:0d:20:44:92:b1:0c:19:51:1e: 56:61:df:90:e3:2e:2a:3d:3d:9f:35:99:a0:20:e5:17:fa:05: 00:5b:4d:78:b3:4a:1f:c7:dd:05:5a:42:58:82:f0:b2:72:f8: 68:46:43:2b:be:95:a3:5c:27:d7:88:dd:26:1c:42:65:de:f0: 83:1b:4f:ea:6d:5f:a8:7a:1a:c9:ad:71:8b:55:62:8c:0c:b3: 96:b0:38:bd:81:08:00:5d:e5:09:fe:fb:2a:fc:64:6e:9f:e6: 7d:25:92:4b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2OEMxMTAvBgNVBAUTKDI4RTY3MEMyRTM3MDEyRjA1QzYzQkI1NjZFMjAzQzUx REM0NUUyQjIwHhcNMjYwMzMxMDYxMDQ3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiNjU2Ny04YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBDiitBu7/ecnqgnkEWjMSyLWN5Y3VvecwcapWqv2rkNsdfL2VeDb27G70bk /rRi2pmoFwOkLlTPrebEugRDqx647rORpR1c4nU4V8HrlscML0AsSOoyFtsisYMh dNYfeps54Y3+BtGmsG5Hpm+Un1plOevbXDGGwYGRvbeCevuo6cblU3H+XSLVGQK6 bXFO07mTZGSViyG2iULx0EuGIrwW6bs27KX6GnBEoC1M/tmjqdxNozH6Rc6WnjOF E/j/eb9GxOmCrvPMoH3EhT1lTPIALTHeQZEZNBnXKQpLGygETespIlil/J1b2g5f Q837DODHVaoBC3klqz/agpjPawIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBKkb4V3 phsl7IYR5/WR5zK8az5IMB8GA1UdIwQYMBaAFCjmcMLjcBLwXGO7Vm4gPFHcReKy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODY4Qy8zRkI5MzM2OEE5 REIxMUU5ODQyODUyODZDNEY5QUUwMi9LT1p3d3VOd0V2QmNZN3RXYmlBOFVkeEY0 ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPWnd3dU53RXZCY1k3dFdiaUE4VWR4RjRySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg2OEMvM0ZCOTMzNjhBOURCMTFFOTg0Mjg1Mjg2QzRGOUFFMDIvNDFBMDlDNjgz RDgyMTFFRUEwRTRERDQ2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCZwUAAwQCftFYMA0GCSqGSIb3DQEBCwUAA4IBAQBC0bf6Z+i2XeRP SswWjiDTuVK9p0Jc6KI24ycYD6/cfKIN8EuaKe6by4aRPQB9sdYq2hlPHzauXCvY k2JedNqP1KKTE1JoanISspI0ijY0DZNCiRqtVQ8f9sQADyPPAwF2p2GLL5yvFomv KE1d+wzrtUuN/mq9tHQUhdIKSnDQa1Rmgwf6mZkYgxXnLMgwnisTEMnM4SkyTewN IESSsQwZUR5WYd+Q4y4qPT2fNZmgIOUX+gUAW014s0ofx90FWkJYgvCycvhoRkMr vpWjXCfXiN0mHEJl3vCDG0/qbV+oehrJrXGLVWKMDLOWsDi9gQgAXeUJ/vsq/GRu n+Z9JZJL -----END CERTIFICATE-----Generated at Sun Apr 5 21:07:55 2026 by rpki-client