$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/CAB386681C3311F19EABC196373D8C67.roa File: CAB386681C3311F19EABC196373D8C67.roa (raw, json) Hash identifier: T/oLtE2mjr0sZTyuKrpEAyn//6fUPu8aClVWAT8HK7Y= Subject key identifier: AF:5E:0E:94:FE:21:94:9E:C7:4A:C0:F3:F4:09:DF:10:78:EB:C1:6F Certificate issuer: /CN=A91C3B8A/serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Certificate serial: 0C23 Authority key identifier: 45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/CAB386681C3311F19EABC196373D8C67.roa Signing time: Tue 31 Mar 2026 13:08:52 +0000 ROA not before: Tue 31 Mar 2026 13:08:52 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 7361 IP address blocks: 103.229.198.0/24 maxlen: 24 103.229.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3B8A, serialNumber=4550C69051BAA18AF112DC76B5F5DF9E6B7940D5 Validity Not Before: Mar 31 13:08:52 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69cbc764-5a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:fb:33:6f:90:a8:ac:31:c4:ba:7a:38:09: c6:3d:03:c6:4d:d8:cd:4e:66:9f:f6:42:c9:5e:fc: fa:15:a6:95:42:1d:2b:53:69:d6:e0:83:19:9d:2a: 30:98:43:76:5e:0e:76:c0:32:0f:09:77:1b:cb:9a: 48:04:a3:73:df:4b:71:d4:dd:a4:04:ee:2d:07:6e: c1:cd:59:a2:b5:ff:46:f3:56:92:3f:d7:44:9c:2d: 26:73:5b:89:c5:cf:1e:32:e4:de:be:9b:33:e8:cc: 1f:ce:06:d4:a3:92:74:dc:e5:64:d4:c9:0f:ca:f0: 08:3b:b8:1f:67:f2:27:1d:b7:b1:9f:dc:af:9e:e4: a1:ca:ae:dc:2b:a8:f3:fe:0b:d3:a8:10:3e:6a:05: b3:fa:7c:ef:d8:65:29:52:7b:86:45:1e:56:20:98: 34:b2:00:7c:e6:31:b4:18:11:ef:fe:58:83:a8:cd: 95:7e:2d:db:47:3e:da:62:41:6a:d8:b4:14:f6:2f: 2b:54:4d:e8:64:db:28:f4:6a:e1:31:fe:9d:d2:61: b7:17:a9:cc:c4:af:bd:4f:df:b2:72:7e:51:55:0d: 54:a3:99:23:06:31:7e:0b:be:2c:0e:29:b1:4c:a7: f5:35:51:ac:f8:52:ea:e6:26:12:a0:03:bb:b6:a1: 95:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5E:0E:94:FE:21:94:9E:C7:4A:C0:F3:F4:09:DF:10:78:EB:C1:6F X509v3 Authority Key Identifier: keyid:45:50:C6:90:51:BA:A1:8A:F1:12:DC:76:B5:F5:DF:9E:6B:79:40:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/RVDGkFG6oYrxEtx2tfXfnmt5QNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RVDGkFG6oYrxEtx2tfXfnmt5QNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3B8A/08C43924384D11EAA4F55B73C4F9AE02/CAB386681C3311F19EABC196373D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.229.198.0/23 Signature Algorithm: sha256WithRSAEncryption 13:29:bf:1e:7d:fd:28:62:00:44:98:25:0d:3a:f3:7a:66:69: 94:4a:c3:a6:ed:c8:7a:30:5a:b2:fe:7a:b9:94:cd:49:d3:b0: 81:6b:f5:92:9d:4a:96:9f:d4:ea:e2:9c:c4:ea:8d:e1:0b:6a: bb:c7:2b:03:cd:a6:0f:78:0e:fa:6c:db:8c:04:ab:ab:3f:aa: 78:e1:d2:e3:34:cd:d5:9d:b5:a6:75:41:5c:2b:a0:9f:a4:f2: 64:6e:13:7d:97:ee:53:28:39:dd:30:16:1f:fc:ce:61:9e:2c: 82:a6:aa:8c:c9:98:0f:0e:1d:08:45:28:07:45:6d:92:86:af: cc:41:af:6f:4d:db:4c:c5:45:06:93:e1:8a:d7:bc:b9:5b:8c: b1:8f:ca:67:8f:ec:92:b3:20:9b:ae:ee:ee:d1:05:e7:63:08: 46:df:e4:ed:ac:a6:36:12:49:47:02:ca:52:3f:e9:79:6c:b1: b3:7b:9e:44:e5:5d:a2:96:cb:c2:e0:47:7d:e6:e7:36:af:81: a0:57:36:59:73:7c:66:29:bd:42:cd:bf:80:85:18:28:54:c2: 79:e0:11:4e:9f:a3:ef:cc:c6:96:93:fa:2f:69:8c:de:77:d7: 31:af:28:1b:3a:58:1b:13:7d:cc:60:28:6e:ff:99:30:e8:05: 16:77:cf:f9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNCOEExMTAvBgNVBAUTKDQ1NTBDNjkwNTFCQUExOEFGMTEyREM3NkI1RjVERjlF NkI3OTQwRDUwHhcNMjYwMzMxMTMwODUyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiYzc2NC01YTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQb7M2+QqKwxxLp6OAnGPQPGTdjNTmaf9kLJXvz6FaaVQh0rU2nW4IMZnSow mEN2Xg52wDIPCXcby5pIBKNz30tx1N2kBO4tB27BzVmitf9G81aSP9dEnC0mc1uJ xc8eMuTevpsz6MwfzgbUo5J03OVk1MkPyvAIO7gfZ/InHbexn9yvnuShyq7cK6jz /gvTqBA+agWz+nzv2GUpUnuGRR5WIJg0sgB85jG0GBHv/liDqM2Vfi3bRz7aYkFq 2LQU9i8rVE3oZNso9GrhMf6d0mG3F6nMxK+9T9+ycn5RVQ1Uo5kjBjF+C74sDimx TKf1NVGs+FLq5iYSoAO7tqGVPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK9eDpT+ IZSex0rA8/QJ3xB468FvMB8GA1UdIwQYMBaAFEVQxpBRuqGK8RLcdrX1355reUDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0I4QS8wOEM0MzkyNDM4 NEQxMUVBQTRGNTVCNzNDNEY5QUUwMi9SVkRHa0ZHNm9ZcnhFdHgydGZYZm5tdDVR TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JWREdrRkc2b1lyeEV0eDJ0Zlhmbm10NVFOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNCOEEvMDhDNDM5MjQzODREMTFFQUE0RjU1QjczQzRGOUFFMDIvQ0FCMzg2Njgx QzMzMTFGMTlFQUJDMTk2MzczRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+XGMA0GCSqGSIb3DQEBCwUAA4IBAQATKb8eff0oYgBEmCUNOvN6 ZmmUSsOm7ch6MFqy/nq5lM1J07CBa/WSnUqWn9Tq4pzE6o3hC2q7xysDzaYPeA76 bNuMBKurP6p44dLjNM3VnbWmdUFcK6CfpPJkbhN9l+5TKDndMBYf/M5hniyCpqqM yZgPDh0IRSgHRW2Shq/MQa9vTdtMxUUGk+GK17y5W4yxj8pnj+ySsyCbru7u0QXn YwhG3+TtrKY2EklHAspSP+l5bLGze55E5V2ilsvC4Ed95uc2r4GgVzZZc3xmKb1C zb+AhRgoVMJ54BFOn6PvzMaWk/ovaYzed9cxrygbOlgbE33MYChu/5kw6AUWd8/5 -----END CERTIFICATE-----Generated at Sun Apr 5 19:21:31 2026 by rpki-client