$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa File: EF66DDE4E46A11EB9552D31BC4F9AE02.roa (raw, json) Hash identifier: vMIdusdjtj9hlcGq2gI+hsj/mLp2lRpI2Yrz/QIdsz8= Subject key identifier: 46:CA:94:20:68:06:BF:7E:84:A6:54:75:35:56:3F:E9:BA:31:21:01 Certificate issuer: /CN=A91ACC22/serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Certificate serial: 10A7 Authority key identifier: 28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa Signing time: Mon 30 Mar 2026 17:22:08 +0000 ROA not before: Mon 30 Mar 2026 17:22:08 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 138584 IP address blocks: 103.133.200.0/22 maxlen: 22 103.133.200.0/24 maxlen: 24 103.133.201.0/24 maxlen: 24 103.133.202.0/24 maxlen: 24 103.133.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4263 (0x10a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACC22, serialNumber=28F5E65D7505961DC550A94924DBCEFBB67694BD Validity Not Before: Mar 30 17:22:08 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69cab140-9c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:8d:37:3c:9a:4c:8d:98:41:7d:9e:c8:22: 0d:9c:ff:0e:8a:40:f4:ad:72:67:81:2b:5d:2f:82: 75:36:ae:17:19:6c:5a:06:aa:11:85:de:8a:19:09: 30:40:ad:da:07:e2:00:e3:e0:a9:ad:a1:6c:ae:4c: 4c:27:aa:28:a0:d1:e7:10:9c:d1:1d:a4:27:1e:19: e3:ba:e9:0b:0b:27:8f:a1:52:80:09:01:c2:ab:02: ba:8d:9e:53:44:b2:7a:ce:24:92:6b:74:36:f7:42: bb:d3:4b:a4:63:24:5d:ec:b5:d5:57:12:d3:8c:f5: 84:bc:26:da:ea:97:15:a7:8f:32:dd:f9:73:a5:dc: 75:fc:26:5a:2d:2e:6c:3f:99:63:24:c2:e3:e1:94: 11:98:7e:41:77:30:7c:4f:27:73:ef:91:d2:8b:8b: 5a:b9:8a:5e:f6:05:3a:bc:84:4c:46:1f:d9:cd:85: e2:8e:4d:0b:b0:6d:48:97:cc:16:12:27:80:5e:0b: 15:24:6e:1a:8d:e6:1d:3a:80:bb:7b:9f:fb:7c:fa: 0a:31:25:d1:9b:ec:bd:b7:09:8c:03:0d:54:e8:fe: ba:7f:b9:16:40:b5:5c:69:db:26:cc:0b:2f:bc:97: f1:68:db:3d:3b:d8:96:7b:4b:20:4d:47:9b:1a:bb: 7e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CA:94:20:68:06:BF:7E:84:A6:54:75:35:56:3F:E9:BA:31:21:01 X509v3 Authority Key Identifier: keyid:28:F5:E6:5D:75:05:96:1D:C5:50:A9:49:24:DB:CE:FB:B6:76:94:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KPXmXXUFlh3FUKlJJNvO-7Z2lL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACC22/6906C6FA4C7411E9B7C4BB55C4F9AE02/EF66DDE4E46A11EB9552D31BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.133.200.0/22 Signature Algorithm: sha256WithRSAEncryption b6:0f:d4:47:06:b7:6e:3d:eb:52:70:60:e5:92:55:a4:3f:f1: d7:bf:07:e5:4c:db:8c:ef:2a:ea:9d:b8:53:1d:93:29:b5:85: 47:e8:b2:7b:08:11:6b:9d:f7:c1:fa:6c:11:4b:e2:61:91:0b: f5:73:38:44:e5:1c:cb:a1:65:93:51:de:f1:b4:05:c3:f0:b5: 22:1f:fa:e0:a4:49:5f:f8:48:4f:56:b3:ff:83:cd:9d:91:98: f6:d4:36:dd:6b:62:66:1b:22:8a:84:52:48:af:0e:3d:c8:01: 3a:c0:4d:89:86:2f:bb:9c:8d:b1:d4:57:89:83:b0:01:3a:a3: 5b:b9:c2:c2:aa:b7:75:8a:27:79:a0:61:13:04:2c:dd:1c:d1: a9:e0:b8:1c:21:8a:89:99:a4:b0:29:ab:82:b5:38:22:49:88: 20:e5:b1:a3:4a:2b:38:d4:d8:29:e0:0d:1d:f3:20:a1:eb:26: 1f:74:3e:70:fb:e3:4b:74:1e:be:e0:d2:ab:62:8c:65:de:1e: c9:f5:20:10:d8:31:6f:6c:b3:45:93:b5:4c:2d:0d:e4:72:9d: 07:12:34:3b:34:82:90:fd:04:31:7c:5b:91:86:48:14:cf:53: d5:24:33:73:a1:2a:84:ef:76:7a:1b:93:9f:1f:b7:69:e9:af: f3:7a:a5:7b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNDMjIxMTAvBgNVBAUTKDI4RjVFNjVENzUwNTk2MURDNTUwQTk0OTI0REJDRUZC QjY3Njk0QkQwHhcNMjYwMzMwMTcyMjA4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNhYjE0MC05YzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zeNNzyaTI2YQX2eyCINnP8OikD0rXJngStdL4J1Nq4XGWxaBqoRhd6KGQkw QK3aB+IA4+CpraFsrkxMJ6oooNHnEJzRHaQnHhnjuukLCyePoVKACQHCqwK6jZ5T RLJ6ziSSa3Q290K700ukYyRd7LXVVxLTjPWEvCba6pcVp48y3flzpdx1/CZaLS5s P5ljJMLj4ZQRmH5BdzB8Tydz75HSi4tauYpe9gU6vIRMRh/ZzYXijk0LsG1Il8wW EieAXgsVJG4ajeYdOoC7e5/7fPoKMSXRm+y9twmMAw1U6P66f7kWQLVcadsmzAsv vJfxaNs9O9iWe0sgTUebGrt+KQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEbKlCBo Br9+hKZUdTVWP+m6MSEBMB8GA1UdIwQYMBaAFCj15l11BZYdxVCpSSTbzvu2dpS9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0MyMi82OTA2QzZGQTRD NzQxMUU5QjdDNEJCNTVDNEY5QUUwMi9LUFhtWFhVRmxoM0ZVS2xKSk52Ty03WjJs TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tQWG1YWFVGbGgzRlVLbEpKTnZPLTdaMmxMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNDMjIvNjkwNkM2RkE0Qzc0MTFFOUI3QzRCQjU1QzRGOUFFMDIvRUY2NkRERTRF NDZBMTFFQjk1NTJEMzFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ4XIMA0GCSqGSIb3DQEBCwUAA4IBAQC2D9RHBrduPetScGDlklWk P/HXvwflTNuM7yrqnbhTHZMptYVH6LJ7CBFrnffB+mwRS+JhkQv1czhE5RzLoWWT Ud7xtAXD8LUiH/rgpElf+EhPVrP/g82dkZj21Dbda2JmGyKKhFJIrw49yAE6wE2J hi+7nI2x1FeJg7ABOqNbucLCqrd1iid5oGETBCzdHNGp4LgcIYqJmaSwKauCtTgi SYgg5bGjSis41Ngp4A0d8yCh6yYfdD5w++NLdB6+4NKrYoxl3h7J9SAQ2DFvbLNF k7VMLQ3kcp0HEjQ7NIKQ/QQxfFuRhkgUz1PVJDNzoSqE73Z6G5OfH7dp6a/zeqV7 -----END CERTIFICATE-----Generated at Mon Apr 6 15:13:53 2026 by rpki-client