$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa File: 87BB6D70822711ED94C3212CC4F9AE02.roa (raw, json) Hash identifier: m40Au0D9D53HHKA3UY789RoJoXUIJ7gV5QbX6BIo4EU= Subject key identifier: C1:33:C8:F2:FE:86:87:F2:E8:2F:E8:A1:E8:D5:7A:F9:BA:3B:02:93 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0E36 Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:27:46 +0000 ROA not before: Tue 06 May 2025 18:27:35 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4812 IP address blocks: 103.38.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 17:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3638 (0xe36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: May 6 18:27:35 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a46902-90a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:63:83:66:55:63:61:ef:7f:04:49:21:c1: ad:00:81:ee:e0:f4:09:59:6e:b8:5e:38:28:3b:ff: 65:04:e9:ba:c1:15:a9:84:a3:bd:8e:af:18:28:ec: 8e:6b:a1:f0:09:fb:f8:51:24:68:e3:0d:38:d7:d4: 06:e9:2a:43:a1:19:3c:d1:77:27:27:3e:b9:48:32: 1b:ce:51:b2:8a:22:fa:7f:61:48:ce:3a:ea:b4:48: ab:39:ee:19:5d:08:31:ea:1d:7a:ea:4a:68:9d:a3: 24:c4:ec:39:45:66:66:7c:35:2e:b0:d3:8d:a4:9d: a1:da:95:4b:67:77:e9:54:13:db:61:b5:dd:72:50: 92:89:0c:b4:bc:da:b1:d3:bd:0c:f1:61:6b:74:55: 60:d1:8f:a8:94:94:fe:1d:d3:3b:1e:b7:62:63:2c: b1:ce:14:7d:5b:cf:ab:1d:54:b5:6c:33:45:45:6d: 47:bf:9a:a5:c6:3f:f1:75:f1:fd:da:c7:e5:86:fe: 91:40:87:24:fb:05:4c:8c:3b:32:e4:0a:89:ee:04: ae:72:24:82:d2:79:1b:61:54:ba:f7:19:12:12:4a: 99:d1:f8:24:1c:e5:67:a1:8b:18:7b:46:ab:ae:57: c9:51:1f:52:85:ea:e1:fa:69:37:f6:ac:02:c0:e1: 50:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:33:C8:F2:FE:86:87:F2:E8:2F:E8:A1:E8:D5:7A:F9:BA:3B:02:93 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/87BB6D70822711ED94C3212CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.38.252.0/23 Signature Algorithm: sha256WithRSAEncryption 82:3c:8a:2c:a3:a1:53:69:bc:44:ec:b7:e3:23:d6:6b:aa:0d: db:02:21:86:e2:e8:1a:11:42:a1:d8:55:05:4f:f0:5f:2c:89: ea:e3:02:3b:d7:a3:e3:87:8d:a6:19:4f:2d:19:eb:43:2f:5e: 35:8b:1f:fc:55:e0:59:8b:95:e5:53:7d:6f:60:37:44:b9:ab: 3a:b5:86:ec:41:cc:2a:b6:96:cc:c8:14:e7:6f:62:d1:a2:63: 1e:07:3e:e7:ee:c9:27:ee:8a:e7:b5:a8:ef:f6:f8:b6:98:d0: f5:52:fc:a9:8c:6a:8d:6d:79:e5:81:54:45:1f:91:ca:85:8b: 67:b3:aa:15:ef:65:b8:4b:5f:f5:ab:e2:53:84:00:e9:f6:59: f3:66:03:66:bf:9f:c9:fd:3e:e0:21:15:27:12:f9:56:70:40: 25:a1:cd:a6:b9:19:48:d4:84:33:d7:73:63:63:33:80:27:ae: 8d:7e:ef:e5:68:3e:91:50:65:8e:6b:04:ff:7f:83:87:fc:56: 7f:98:81:55:55:1f:5c:86:eb:4d:50:10:e1:3a:fa:50:c9:81: 1b:2b:d7:2a:19:60:0d:81:24:54:ba:ef:11:96:52:cc:98:5b: d2:01:47:b2:b4:4d:9d:e6:e7:6e:1f:f9:96:90:b4:cc:b3:67: 85:32:e9:33 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNTA2MTgyNzM1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjkwMi05MGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoohjg2ZVY2HvfwRJIcGtAIHu4PQJWW64XjgoO/9lBOm6wRWphKO9jq8YKOyO a6HwCfv4USRo4w0419QG6SpDoRk80XcnJz65SDIbzlGyiiL6f2FIzjrqtEirOe4Z XQgx6h166kponaMkxOw5RWZmfDUusNONpJ2h2pVLZ3fpVBPbYbXdclCSiQy0vNqx 070M8WFrdFVg0Y+olJT+HdM7HrdiYyyxzhR9W8+rHVS1bDNFRW1Hv5qlxj/xdfH9 2sflhv6RQIck+wVMjDsy5AqJ7gSuciSC0nkbYVS69xkSEkqZ0fgkHOVnoYsYe0ar rlfJUR9Sherh+mk39qwCwOFQvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMEzyPL+ hofy6C/ooejVevm6OwKTMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvODdCQjZENzA4 MjI3MTFFRDk0QzMyMTJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZyb8MA0GCSqGSIb3DQEBCwUAA4IBAQCCPIoso6FTabxE7LfjI9Zr qg3bAiGG4ugaEUKh2FUFT/BfLInq4wI716Pjh42mGU8tGetDL141ix/8VeBZi5Xl U31vYDdEuas6tYbsQcwqtpbMyBTnb2LRomMeBz7n7skn7orntajv9vi2mND1Uvyp jGqNbXnlgVRFH5HKhYtns6oV72W4S1/1q+JThADp9lnzZgNmv5/J/T7gIRUnEvlW cEAloc2muRlI1IQz13NjYzOAJ66Nfu/laD6RUGWOawT/f4OH/FZ/mIFVVR9chutN UBDhOvpQyYEbK9cqGWANgSRUuu8RllLMmFvSAUeytE2d5uduH/mWkLTMs2eFMukz -----END CERTIFICATE-----Generated at Thu Mar 12 16:51:30 2026 by rpki-client