$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/A5FE56B2596B11F0AF4BB31EC4F9AE02.roa File: A5FE56B2596B11F0AF4BB31EC4F9AE02.roa (raw, json) Hash identifier: Kg3LZLrrYMd/Twi8PrMuJPdsiV2ZsSVK7GaFeSrc+z0= Subject key identifier: 75:61:3C:F3:47:2D:48:5E:C3:AE:BC:25:82:65:11:B1:D9:D7:F1:6E Certificate issuer: /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Certificate serial: 0C21 Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/A5FE56B2596B11F0AF4BB31EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:48:32 +0000 ROA not before: Tue 02 Dec 2025 18:50:37 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 401783 IP address blocks: 103.249.184.0/24 maxlen: 24 103.249.185.0/24 maxlen: 24 103.249.186.0/24 maxlen: 24 103.249.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 18:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE Validity Not Before: Dec 2 18:50:37 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a48a00-c844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:17:b0:91:ba:d7:2d:6f:2e:20:07:16:d9:14: 62:a7:07:09:ec:b5:b3:70:f7:7c:b1:f8:7b:d2:a5: f7:59:40:34:eb:61:f1:75:43:02:87:b8:e3:56:ad: 2d:c1:a9:8c:23:07:9c:da:1d:7f:48:5c:34:5b:42: 8c:19:9f:e5:aa:40:8b:e4:03:5e:f1:00:09:30:79: f4:f5:41:3b:9a:bb:ae:65:03:fa:9a:28:6d:d2:17: c3:25:f8:30:81:fc:d2:7c:ac:ac:be:24:a7:d9:82: 87:60:6f:01:d7:2c:a6:5c:e0:61:fb:4d:46:b2:e0: f6:2c:95:f0:79:13:95:e5:0a:18:3a:3a:3b:eb:cd: 7e:cf:ad:da:f0:ca:26:3e:be:f1:93:cc:df:58:f4: fa:c7:d4:e7:75:92:e4:bb:9c:15:53:24:3e:86:93: db:24:74:b5:d1:b4:09:04:bb:3c:35:77:aa:93:90: a8:a7:eb:16:48:1e:f9:bf:a0:98:51:f1:f4:6d:7a: db:ce:7e:ce:7b:05:ed:f6:6d:b9:1c:19:57:bb:6f: 4e:1e:f0:81:3b:87:ce:0b:6c:01:54:62:f7:00:10: 36:8f:ad:20:a9:fd:07:07:55:26:5e:66:77:11:20: cb:5e:a9:0a:56:76:51:38:85:20:e0:09:8d:f1:da: 18:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:61:3C:F3:47:2D:48:5E:C3:AE:BC:25:82:65:11:B1:D9:D7:F1:6E X509v3 Authority Key Identifier: keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/A5FE56B2596B11F0AF4BB31EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.249.184.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:8f:c0:54:0c:f4:89:a6:8d:95:f1:de:85:c2:12:49:1c:12: 67:9c:52:67:83:7a:52:96:7c:a6:40:4c:84:b4:c3:ff:31:45: 1d:5c:1f:7c:33:95:fd:b3:56:a0:6b:81:ff:7a:d3:05:4b:0e: 00:6d:c9:4e:91:c8:96:1c:b9:2e:45:23:86:83:65:65:34:db: a5:ca:6b:23:0e:7e:f6:fc:d5:d8:ec:ee:9d:90:c0:f5:7a:61: 67:e0:df:f2:cc:7d:40:4b:38:b2:61:69:60:7e:bc:6b:ad:29: 17:df:52:b1:7e:09:2e:c7:8b:b1:ae:5e:5f:7c:46:91:77:7c: cb:98:cb:18:c3:c3:7b:8c:35:52:0d:8c:51:86:64:38:f8:96: f1:b0:73:ad:a0:97:1c:d3:a1:ac:ac:ff:8e:27:89:a8:db:7d: 82:f6:39:f0:ee:3e:b8:13:5c:8d:75:ad:b2:80:f9:6f:53:67: 4d:89:1d:d4:04:f3:14:92:41:18:5a:59:f1:13:36:1b:5d:ec: a0:94:de:6f:a0:0e:f7:f5:d9:47:18:55:ec:70:c8:68:c7:e2: 5e:30:fe:68:73:fc:64:a2:49:7e:52:e6:25:21:fa:74:f6:3c: b3:83:a1:6b:2d:ba:2a:77:44:88:10:b9:c2:5e:13:47:04:fc: ea:3e:fc:7b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG NTA5RUE2RUUwHhcNMjUxMjAyMTg1MDM3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGEwMC1jODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohewkbrXLW8uIAcW2RRipwcJ7LWzcPd8sfh70qX3WUA062HxdUMCh7jjVq0t wamMIwec2h1/SFw0W0KMGZ/lqkCL5ANe8QAJMHn09UE7mruuZQP6miht0hfDJfgw gfzSfKysviSn2YKHYG8B1yymXOBh+01GsuD2LJXweROV5QoYOjo7681+z63a8Mom Pr7xk8zfWPT6x9TndZLku5wVUyQ+hpPbJHS10bQJBLs8NXeqk5Cop+sWSB75v6CY UfH0bXrbzn7OewXt9m25HBlXu29OHvCBO4fOC2wBVGL3ABA2j60gqf0HB1UmXmZ3 ESDLXqkKVnZROIUg4AmN8doYsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHVhPPNH LUhew668JYJlEbHZ1/FuMB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEMzAvRTNERjQ2OUM0MTY4MTFFQUFFOEE3NzUwQzRGOUFFMDIvQTVGRTU2QjI1 OTZCMTFGMEFGNEJCMzFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCZ/m4MA0GCSqGSIb3DQEBCwUAA4IBAQBuj8BUDPSJpo2V8d6FwhJJ HBJnnFJng3pSlnymQEyEtMP/MUUdXB98M5X9s1aga4H/etMFSw4AbclOkciWHLku RSOGg2VlNNulymsjDn72/NXY7O6dkMD1emFn4N/yzH1ASziyYWlgfrxrrSkX31Kx fgkux4uxrl5ffEaRd3zLmMsYw8N7jDVSDYxRhmQ4+JbxsHOtoJcc06GsrP+OJ4mo 232C9jnw7j64E1yNda2ygPlvU2dNiR3UBPMUkkEYWlnxEzYbXeyglN5voA739dlH GFXscMhox+JeMP5oc/xkokl+UuYlIfp09jyzg6FrLboqd0SIELnCXhNHBPzqPvx7 -----END CERTIFICATE-----Generated at Thu Mar 5 14:03:15 2026 by rpki-client