$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/FD58613E7B7B11E99CCAAF73C4F9AE02.roa File: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (raw, json) Hash identifier: oyiwfM//j6jTxFCREO16zqCWP6KF1/ZsVC+VRbLetKw= Subject key identifier: C4:78:30:93:04:F4:A9:07:F8:85:75:35:DF:64:76:98:48:CF:43:D5 Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 1015 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/FD58613E7B7B11E99CCAAF73C4F9AE02.roa Signing time: Tue 31 Mar 2026 18:21:59 +0000 ROA not before: Tue 31 Mar 2026 18:21:59 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 138943 IP address blocks: 103.137.132.0/22 maxlen: 24 2404:b140::/32 maxlen: 42 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4117 (0x1015) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Mar 31 18:21:59 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cc10c7-c9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:ec:aa:d1:9f:75:5a:93:54:51:cf:d9:0c: 67:8c:31:d0:48:30:5d:ad:64:a6:58:fd:03:e5:30: b6:23:6e:6c:76:16:59:d7:78:ac:14:33:5c:4b:b7: 6b:60:69:36:9c:82:29:4a:34:3c:9d:11:f9:a5:68: 5f:4b:1a:70:6c:d7:8a:d6:86:42:ec:9c:e8:e9:3d: 35:b7:ea:35:f1:ff:8f:3d:82:e2:3d:2f:fb:4b:b0: df:59:4c:e5:d5:39:8a:41:67:d0:af:b5:e4:21:11: c4:b6:c0:ef:29:4e:14:af:3e:20:05:4d:52:89:3a: c3:42:cd:a5:34:03:2b:ae:5a:e7:81:9b:8e:6c:47: a3:81:83:28:5f:59:44:0f:1b:75:73:94:2a:89:d0: 3d:fd:36:d1:3a:7f:a8:05:7b:d1:a2:7b:84:6f:d6: 50:05:0b:0c:7a:2d:9f:35:e7:f8:82:6a:10:b2:cd: e0:61:e6:2c:14:f5:d1:3f:63:43:90:af:19:a9:45: cf:43:c3:ae:6f:d5:4f:31:8b:4e:22:b9:d8:39:d9: 7e:d7:50:d7:ad:8a:cc:e8:52:7b:c3:e3:84:7c:ac: a0:95:d0:f5:9b:9c:4d:ce:b2:53:ad:df:85:b9:0b: b9:bc:cf:ad:2d:b2:6d:ce:00:16:cb:f2:ce:64:1a: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:78:30:93:04:F4:A9:07:F8:85:75:35:DF:64:76:98:48:CF:43:D5 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/FD58613E7B7B11E99CCAAF73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.137.132.0/22 IPv6: 2404:b140::/32 Signature Algorithm: sha256WithRSAEncryption 80:0e:ec:f9:e3:3a:5d:e1:05:7d:08:3f:34:97:37:d4:13:c1: 55:11:0e:8d:80:7f:d2:4b:15:73:3f:37:21:f8:cf:bd:bf:73: 75:b8:39:99:e7:4f:af:6a:8b:f0:21:63:2b:3c:7c:42:af:ea: 74:73:32:4b:d9:c2:aa:8f:3f:4d:e7:89:14:d9:23:31:c2:8e: 69:ca:ce:d7:fe:f8:35:89:a9:fa:56:ca:f7:a6:4e:c2:1b:ba: c1:a2:e1:0b:05:c4:5d:c2:3b:32:08:dc:d8:7b:f8:88:c2:10: 93:48:ed:86:c6:83:bd:60:f4:4f:c1:45:28:0a:57:07:7b:e2: ab:29:2c:f1:ef:87:3f:58:bb:9b:bd:d9:62:d3:0b:6d:0c:60: 15:a6:74:31:3d:27:8b:30:f7:e2:39:d4:dc:d4:c4:7a:2e:fc: 57:1f:b6:4b:33:23:90:43:ae:7b:e6:f1:cd:6e:97:00:0a:fa: 72:4e:e6:37:43:d1:e7:5d:16:28:8d:71:25:71:e2:34:f1:0f: bf:29:61:9e:2b:5f:37:7c:ad:d6:d1:56:bc:f6:fa:45:ae:80: bc:9a:5f:79:05:8d:ef:78:99:63:7f:ed:ab:40:4b:5d:6c:0d: b0:94:d3:50:50:3a:a7:6d:85:34:d1:fe:7c:2b:b9:22:8e:b1: 4e:28:f8:63 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICEBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjYwMzMxMTgyMTU5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjMTBjNy1jOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4nsqtGfdVqTVFHP2QxnjDHQSDBdrWSmWP0D5TC2I25sdhZZ13isFDNcS7dr YGk2nIIpSjQ8nRH5pWhfSxpwbNeK1oZC7Jzo6T01t+o18f+PPYLiPS/7S7DfWUzl 1TmKQWfQr7XkIRHEtsDvKU4Urz4gBU1SiTrDQs2lNAMrrlrngZuObEejgYMoX1lE Dxt1c5QqidA9/TbROn+oBXvRonuEb9ZQBQsMei2fNef4gmoQss3gYeYsFPXRP2ND kK8ZqUXPQ8Oub9VPMYtOIrnYOdl+11DXrYrM6FJ7w+OEfKygldD1m5xNzrJTrd+F uQu5vM+tLbJtzgAWy/LOZBowwwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFMR4MJME 9KkH+IV1Nd9kdphIz0PVMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZDQjEvNkU4NzJENUU2NTZGMTFFOUJCRThGNzI0QzRGOUFFMDIvRkQ1ODYxM0U3 QjdCMTFFOTlDQ0FBRjczQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4mEMA0EAgACMAcDBQAkBLFAMA0GCSqGSIb3DQEBCwUAA4IBAQCA Duz54zpd4QV9CD80lzfUE8FVEQ6NgH/SSxVzPzch+M+9v3N1uDmZ50+vaovwIWMr PHxCr+p0czJL2cKqjz9N54kU2SMxwo5pys7X/vg1ian6Vsr3pk7CG7rBouELBcRd wjsyCNzYe/iIwhCTSO2GxoO9YPRPwUUoClcHe+KrKSzx74c/WLubvdli0wttDGAV pnQxPSeLMPfiOdTc1MR6LvxXH7ZLMyOQQ6575vHNbpcACvpyTuY3Q9HnXRYojXEl ceI08Q+/KWGeK183fK3W0Va89vpFroC8ml95BY3veJljf+2rQEtdbA2wlNNQUDqn bYU00f58K7kijrFOKPhj -----END CERTIFICATE-----Generated at Mon Apr 6 12:39:00 2026 by rpki-client