$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa File: 5A5F40627F5911ECA27EA93CC4F9AE02.roa (raw, json) Hash identifier: Q5lRp0acdWqPg3IqnjMG0R4XSMlKeGDG7K9KprEV+tw= Subject key identifier: 86:38:C5:5E:E0:44:20:34:0C:4D:96:C5:4E:D5:B8:73:4C:8F:30:E1 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5DD4 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:15:36 +0000 ROA not before: Thu 28 Aug 2025 14:53:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131440 IP address blocks: 103.245.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24020 (0x5dd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:53:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60c08-88e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:62:3e:a2:3d:5a:2d:41:cc:e8:df:6a:0c: 51:1c:67:60:c9:20:e5:ab:c2:17:30:be:76:1e:78: 1a:4a:5d:f4:b7:89:65:2d:7a:a8:36:10:81:81:99: 51:04:3d:65:a2:87:99:02:fb:ff:91:40:55:1a:76: 82:5b:1f:9d:07:40:f0:65:ba:40:08:7d:6a:19:e5: 5e:8c:c5:37:02:36:82:c4:39:73:3d:df:a4:63:e7: 7a:63:db:b3:24:db:aa:5e:5c:47:f7:1d:b0:ab:33: 21:f4:66:83:c0:52:2a:8d:da:07:9d:eb:a2:2e:22: 89:63:95:f0:40:21:6e:53:e8:c4:f1:66:e6:bd:72: eb:aa:33:a0:bb:39:0f:9f:7e:f1:84:81:a6:87:9d: 8a:d4:be:3a:be:32:b9:e6:98:7d:c9:da:6d:3c:9e: 05:cf:cf:31:3f:03:49:57:e6:e7:9a:3d:59:0e:59: b6:14:09:c2:50:6b:59:3e:d3:1b:5e:ce:55:1a:22: 8f:17:b2:73:bf:5e:e4:f6:5e:6d:32:61:f5:cf:4f: e3:3a:76:ac:fc:5c:77:d6:40:b5:eb:bb:80:18:1e: e5:ea:80:0b:8a:dc:6e:d2:7d:cb:9d:96:25:94:8d: 78:57:aa:cc:1c:15:c9:11:d5:7d:0c:27:58:10:8b: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:38:C5:5E:E0:44:20:34:0C:4D:96:C5:4E:D5:B8:73:4C:8F:30:E1 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5A5F40627F5911ECA27EA93CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.245.252.0/22 Signature Algorithm: sha256WithRSAEncryption 90:d0:94:e0:32:57:b4:4a:14:f2:26:75:50:81:13:9d:65:e1: f2:25:1a:e3:8a:92:b0:3f:81:9f:32:4d:a0:47:df:1a:92:5b: 9e:96:31:14:3a:27:b6:58:6c:5f:41:31:e6:ed:30:ea:fc:8b: df:bb:08:74:ce:d8:2c:e1:6f:d5:94:53:c1:0d:dc:69:69:84: 1e:29:a0:90:1c:75:68:41:08:18:17:a2:f9:43:44:69:58:fc: 6e:7a:e4:79:65:1b:89:45:1d:e9:f3:eb:36:ca:1d:73:54:73: e2:49:cc:e9:be:b1:b7:34:bf:08:31:d3:14:d2:1a:dd:f9:37: 69:41:3a:d6:2e:4d:93:aa:8e:99:50:19:1a:08:b7:96:5c:c7: a8:e1:ad:29:1b:6b:7d:9a:e5:ac:f8:a0:26:9a:c2:34:84:18: 89:1f:a9:74:2f:6f:69:b8:e9:af:11:f8:43:62:5f:6e:07:f7: 59:09:e6:82:b8:22:ca:03:ce:9a:36:98:2a:5d:7e:b0:e6:af: 39:19:2b:79:ff:0a:d1:9c:2d:12:02:c4:88:d3:3d:2c:1a:e5: 12:3f:8c:98:9a:54:10:27:27:5a:3c:ae:58:f6:0c:2b:b2:bb: 12:96:aa:c8:1d:5d:22:1f:d6:99:79:c2:ed:5a:c0:6d:37:c8: 77:e4:1c:d1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICXdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MzAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGMwOC04OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVhiPqI9Wi1BzOjfagxRHGdgySDlq8IXML52HngaSl30t4llLXqoNhCBgZlR BD1looeZAvv/kUBVGnaCWx+dB0DwZbpACH1qGeVejMU3AjaCxDlzPd+kY+d6Y9uz JNuqXlxH9x2wqzMh9GaDwFIqjdoHneuiLiKJY5XwQCFuU+jE8WbmvXLrqjOguzkP n37xhIGmh52K1L46vjK55ph9ydptPJ4Fz88xPwNJV+bnmj1ZDlm2FAnCUGtZPtMb Xs5VGiKPF7Jzv17k9l5tMmH1z0/jOnas/Fx31kC167uAGB7l6oALitxu0n3LnZYl lI14V6rMHBXJEdV9DCdYEIsigQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIY4xV7g RCA0DE2WxU7VuHNMjzDhMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNUE1RjQwNjI3 RjU5MTFFQ0EyN0VBOTNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/X8MA0GCSqGSIb3DQEBCwUAA4IBAQCQ0JTgMle0ShTyJnVQgROd ZeHyJRrjipKwP4GfMk2gR98aklueljEUOie2WGxfQTHm7TDq/Ivfuwh0ztgs4W/V lFPBDdxpaYQeKaCQHHVoQQgYF6L5Q0RpWPxueuR5ZRuJRR3p8+s2yh1zVHPiSczp vrG3NL8IMdMU0hrd+TdpQTrWLk2Tqo6ZUBkaCLeWXMeo4a0pG2t9muWs+KAmmsI0 hBiJH6l0L29puOmvEfhDYl9uB/dZCeaCuCLKA86aNpgqXX6w5q85GSt5/wrRnC0S AsSI0z0sGuUSP4yYmlQQJydaPK5Y9gwrsrsSlqrIHV0iH9aZecLtWsBtN8h35BzR -----END CERTIFICATE-----Generated at Sat Mar 7 22:45:24 2026 by rpki-client