$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa File: C908B72A696F11EFA4DA475FC4F9AE02.roa (raw, json) Hash identifier: W6dcDrB3RcselU+HE/a3UN93ZRWn0E/P0SOzXj78T2A= Subject key identifier: C0:0E:DE:56:B9:8A:C9:95:10:1E:85:D6:C5:1C:2B:79:BA:67:48:05 Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Certificate serial: 0558 Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa Signing time: Sat 04 Apr 2026 23:30:13 +0000 ROA not before: Sat 04 Apr 2026 23:30:13 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 132834 IP address blocks: 103.135.84.0/22 maxlen: 24 103.248.188.0/24 maxlen: 24 180.94.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3307, serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Validity Not Before: Apr 4 23:30:13 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69d19f05-2fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:ec:57:65:7a:a6:6a:15:aa:9d:e4:97:12: fa:a2:77:22:ef:e8:ca:34:5b:8c:78:4f:35:d6:b5: d2:eb:51:b7:e6:cb:51:ce:8e:46:88:7a:b4:f1:c4: f6:ff:31:18:51:16:99:d1:cb:fa:46:70:0b:bf:8f: f5:64:49:70:b6:bd:e9:e7:2a:af:cc:a0:a5:05:ab: f6:fe:54:3e:f6:8e:0d:30:70:47:b4:37:0c:02:85: 5a:40:6e:94:c1:2e:21:a1:54:41:6c:6b:72:c2:19: 84:f9:e3:2a:5b:91:1a:74:8d:bd:69:1f:d6:b0:6d: 38:bc:ac:76:08:51:fe:46:87:3b:31:96:9f:ba:30: 00:74:46:56:f0:fd:1f:9c:a1:c0:24:e1:e8:6d:a4: 8b:dc:74:63:e3:9f:40:2e:ac:c4:d4:00:55:a3:9d: 68:2c:80:98:2b:d8:4a:29:4c:0f:fa:54:4d:87:e1: 94:3e:05:87:d8:cc:70:da:78:9b:a7:41:23:af:03: 66:4d:c5:f1:4d:d6:61:0d:1d:ed:e2:dd:40:94:e9: 26:5f:ff:22:72:3c:ef:c1:d6:67:0f:a1:f3:88:12: 5f:07:dd:d1:d3:e1:8b:0e:4b:57:8d:18:d6:4e:7a: a0:d7:e5:d2:76:33:c5:f2:44:05:75:f5:8b:b4:ca: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0E:DE:56:B9:8A:C9:95:10:1E:85:D6:C5:1C:2B:79:BA:67:48:05 X509v3 Authority Key Identifier: keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/C908B72A696F11EFA4DA475FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.135.84.0/22 103.248.188.0/24 180.94.238.0/23 Signature Algorithm: sha256WithRSAEncryption ab:35:0a:ec:2a:ba:54:6a:c0:84:4e:80:4d:15:8c:72:7b:b5: 47:64:93:a8:64:96:b3:dc:0a:be:dd:27:6d:24:0d:2b:2e:c3: 00:83:63:d9:46:b5:46:03:ec:33:b8:c9:3c:f6:ec:5c:b3:13: 0f:ca:74:bc:06:6b:78:62:70:fd:0e:69:f9:c8:1c:1e:7b:51: 9b:f8:9f:6a:ed:00:ff:89:b7:dc:14:a5:3d:02:1a:26:71:44: ae:17:3c:b2:3a:c1:8c:3b:bd:1c:c2:f9:3c:e2:de:1d:3f:32: e4:4b:d0:61:f8:7b:15:b0:98:00:48:28:bc:79:18:4c:f0:50: c4:43:84:d6:aa:b5:89:2d:ae:7c:0a:74:42:04:da:86:fb:96: 5d:bf:bc:82:0e:04:aa:bb:5b:8b:7f:74:ce:7f:83:3b:56:c6: 88:fe:07:4a:cb:79:c2:3e:72:0c:a0:33:d4:83:cc:5f:02:fc: c0:ed:4c:20:cd:67:a9:c0:4a:30:ca:0b:3f:2c:9d:ac:94:80: 0e:ad:de:cf:39:28:58:c8:c0:7e:73:f3:50:70:4f:93:17:b3: 7b:21:dd:98:cf:97:39:3c:34:21:ec:c9:46:17:d5:29:e0:3b: f0:87:43:37:48:50:68:5e:36:79:94:8a:d4:93:41:15:b1:44: 9d:ad:e3:2d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4 ODFDMTk0M0QwHhcNMjYwNDA0MjMzMDEzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWQxOWYwNS0yZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOXsV2V6pmoVqp3klxL6onci7+jKNFuMeE811rXS61G35stRzo5GiHq08cT2 /zEYURaZ0cv6RnALv4/1ZElwtr3p5yqvzKClBav2/lQ+9o4NMHBHtDcMAoVaQG6U wS4hoVRBbGtywhmE+eMqW5EadI29aR/WsG04vKx2CFH+Roc7MZafujAAdEZW8P0f nKHAJOHobaSL3HRj459ALqzE1ABVo51oLICYK9hKKUwP+lRNh+GUPgWH2Mxw2nib p0EjrwNmTcXxTdZhDR3t4t1AlOkmX/8icjzvwdZnD6HziBJfB93R0+GLDktXjRjW Tnqg1+XSdjPF8kQFdfWLtMq4LQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFMAO3la5 ismVEB6F1sUcK3m6Z0gFMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMzMDcvMzQyRDgzMjg0MkNDMTFFQzhGMTMzMjBEQzRGOUFFMDIvQzkwOEI3MkE2 OTZGMTFFRkE0REE0NzVGQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCZ4dUAwQAZ/i8AwQBtF7uMA0GCSqGSIb3DQEBCwUAA4IBAQCrNQrs KrpUasCEToBNFYxye7VHZJOoZJaz3Aq+3SdtJA0rLsMAg2PZRrVGA+wzuMk89uxc sxMPynS8Bmt4YnD9Dmn5yBwee1Gb+J9q7QD/ibfcFKU9AhomcUSuFzyyOsGMO70c wvk84t4dPzLkS9Bh+HsVsJgASCi8eRhM8FDEQ4TWqrWJLa58CnRCBNqG+5Zdv7yC DgSqu1uLf3TOf4M7VsaI/gdKy3nCPnIMoDPUg8xfAvzA7UwgzWepwEowygs/LJ2s lIAOrd7POShYyMB+c/NQcE+TF7N7Id2Yz5c5PDQh7MlGF9Up4Dvwh0M3SFBoXjZ5 lIrUk0EVsUSdreMt -----END CERTIFICATE-----Generated at Mon Apr 6 10:08:14 2026 by rpki-client