$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa File: 98DB93A4301011EEA92BE919C4F9AE02.roa (raw, json) Hash identifier: XLPSc0/td1mhYplTCs82dgrhLJseOG/zvxA6NfAFkmo= Subject key identifier: BD:04:D6:F0:C8:3D:BA:BB:9E:D6:A9:62:D3:0B:90:E9:A0:9D:B9:70 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 01FA Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa Signing time: Fri 27 Mar 2026 03:36:43 +0000 ROA not before: Fri 27 Mar 2026 03:36:43 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 58907 IP address blocks: 43.230.108.0/22 maxlen: 22 43.230.108.0/24 maxlen: 24 43.230.109.0/24 maxlen: 24 43.230.110.0/24 maxlen: 24 43.230.111.0/24 maxlen: 24 103.249.140.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Mar 27 03:36:43 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c5fb4b-e938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5f:71:56:30:df:7f:7e:df:6b:1e:32:d7:d0: f0:a5:27:34:54:3b:3d:2a:62:51:a5:36:67:03:1f: 62:ee:62:68:fc:9a:b9:11:a6:d6:98:45:53:0f:07: f4:0c:6d:c1:4d:c0:11:af:1e:a5:8a:6c:e8:c0:4b: e4:16:ee:a6:84:2e:6a:f6:c5:48:d3:c9:a6:db:ed: 51:8f:8f:50:ab:d0:da:23:1e:e9:8a:32:00:a4:d8: a3:ab:af:60:68:7e:e8:66:db:d5:2a:2c:05:0f:f7: 52:92:ec:f2:d6:3a:a3:2d:4d:a1:dd:20:2d:e5:b2: 9e:15:4a:16:27:08:66:f5:d8:4b:ec:f3:75:00:4a: 9d:fc:5f:d8:67:3b:96:cb:29:d1:b8:df:57:99:79: b5:f0:3b:69:3c:68:21:17:dd:ac:b6:c2:6d:3f:bb: 2d:5b:4f:a3:a5:72:f0:d0:93:7b:32:4f:8a:78:1e: a7:65:f3:e4:76:bd:b5:c0:bf:3c:55:38:23:af:66: f3:ed:ca:40:7a:72:96:e2:92:52:d3:2a:b1:a4:77: f7:ed:da:79:88:ca:48:42:40:8b:5e:80:a7:59:b2: b3:b6:8e:6d:58:69:9d:8f:c0:69:e0:c7:b6:b6:84: 50:8a:89:26:0e:ee:1f:8a:8f:56:6a:b3:64:b9:ba: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:D6:F0:C8:3D:BA:BB:9E:D6:A9:62:D3:0B:90:E9:A0:9D:B9:70 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.230.108.0/22 103.249.140.0/22 Signature Algorithm: sha256WithRSAEncryption 68:6b:4d:f3:2e:ed:e2:9a:ca:2d:7d:ba:a3:d6:d9:8f:38:0c: 26:a0:df:64:b9:59:7e:9f:82:19:cd:18:2f:80:ca:b1:e6:7e: 3a:9d:a8:ff:6d:82:18:88:bc:04:cd:31:17:11:82:66:f4:01: b4:72:72:db:88:a8:e1:25:99:ed:87:0d:9b:fb:d7:e1:5f:e3: d3:cc:ba:4c:8c:95:ae:de:45:14:8f:e2:81:2a:6b:2d:4e:67: 0e:1f:02:16:7f:bf:91:57:b0:aa:52:b7:b1:57:7c:4f:8f:b1: 0b:80:0a:2b:93:da:b7:41:6b:10:eb:87:f0:b1:0d:2d:27:eb: f9:c7:d8:ab:f8:a3:57:df:45:db:db:dc:23:e1:f2:59:8b:55: b9:dd:dd:8d:52:e0:93:ba:61:0c:2a:f8:2d:8a:95:dd:7b:5a: e0:f5:4d:9d:f5:38:67:ef:33:d8:ad:ff:59:66:18:24:39:9d: f9:30:4b:5c:2e:db:97:47:b3:14:ef:d9:e1:84:69:a9:3e:bc: 00:de:3d:64:e4:80:63:ef:d8:f5:c0:ba:62:f7:29:72:18:1f: 04:1a:21:ad:07:01:01:9f:ee:ac:c6:2a:d6:1c:f2:0a:3c:2b: 4d:b6:3e:3e:57:87:ff:07:6b:4c:95:a3:a0:cb:b9:49:73:62: 9b:d7:d6:f8 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjYwMzI3MDMzNjQzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWM1ZmI0Yi1lOTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjl9xVjDff37fax4y19DwpSc0VDs9KmJRpTZnAx9i7mJo/Jq5EabWmEVTDwf0 DG3BTcARrx6limzowEvkFu6mhC5q9sVI08mm2+1Rj49Qq9DaIx7pijIApNijq69g aH7oZtvVKiwFD/dSkuzy1jqjLU2h3SAt5bKeFUoWJwhm9dhL7PN1AEqd/F/YZzuW yynRuN9XmXm18DtpPGghF92stsJtP7stW0+jpXLw0JN7Mk+KeB6nZfPkdr21wL88 VTgjr2bz7cpAenKW4pJS0yqxpHf37dp5iMpIQkCLXoCnWbKzto5tWGmdj8Bp4Me2 toRQiokmDu4fio9WarNkubqzIwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL0E1vDI Pbq7ntapYtMLkOmgnblwMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVCREEvRjczRjIwQTYzMDBGMTFFRTg1RUEwNDE1QzRGOUFFMDIvOThEQjkzQTQz MDEwMTFFRUE5MkJFOTE5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQCK+ZsAwQCZ/mMMA0GCSqGSIb3DQEBCwUAA4IBAQBoa03zLu3imsot fbqj1tmPOAwmoN9kuVl+n4IZzRgvgMqx5n46naj/bYIYiLwEzTEXEYJm9AG0cnLb iKjhJZnthw2b+9fhX+PTzLpMjJWu3kUUj+KBKmstTmcOHwIWf7+RV7CqUrexV3xP j7ELgAork9q3QWsQ64fwsQ0tJ+v5x9ir+KNX30Xb29wj4fJZi1W53d2NUuCTumEM KvgtipXde1rg9U2d9Thn7zPYrf9ZZhgkOZ35MEtcLtuXR7MU79nhhGmpPrwA3j1k 5IBj79j1wLpi9ylyGB8EGiGtBwEBn+6sxirWHPIKPCtNtj4+V4f/B2tMlaOgy7lJ c2Kb19b4 -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:17 2026 by rpki-client