$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/E8DA2D1C5F5211EABFCF4128C4F9AE02.roa File: E8DA2D1C5F5211EABFCF4128C4F9AE02.roa (raw, json) Hash identifier: Kv1ZeZer4REIrfI8Hlm3MaeU0Dgip0iWzMyHWiW+bnU= Subject key identifier: 09:56:75:54:1F:A0:DA:9B:33:E7:48:AF:10:29:28:11:D2:B0:F2:50 Certificate issuer: /CN=A91DB0C2/serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Certificate serial: 0B1D Authority key identifier: 38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/E8DA2D1C5F5211EABFCF4128C4F9AE02.roa Signing time: Thu 02 Apr 2026 19:24:54 +0000 ROA not before: Thu 02 Apr 2026 19:24:54 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 136929 IP address blocks: 103.149.36.0/23 maxlen: 23 103.149.36.0/24 maxlen: 24 103.149.37.0/24 maxlen: 24 2405:e140::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB0C2, serialNumber=381E53485046CB302791C909F2DBD67DAF8D781A Validity Not Before: Apr 2 19:24:54 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cec286-46f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:d9:33:60:35:a3:ad:0e:e0:50:7a:94:6f: 13:cf:b9:ff:85:32:2a:4f:6e:b5:aa:6f:9e:d5:be: 0e:d4:66:12:e0:e0:4d:2e:66:c5:76:a3:5c:c5:00: 9c:de:6c:7e:ed:cf:79:6b:e7:bd:8f:1e:2f:5e:c7: 8c:e9:4f:69:81:05:f4:fb:20:70:f5:cf:de:60:ff: ba:57:0f:83:e3:be:7d:1f:e7:2c:28:05:a8:52:d0: 97:fc:1d:e8:40:b4:07:e4:2f:ad:1b:da:37:c4:0c: 36:7d:33:c7:f5:06:0a:7e:83:c9:b2:d2:6e:28:b0: 19:09:39:6d:94:d7:0d:d4:c9:83:45:4e:fe:3a:d8: 1a:f4:9b:c6:b0:c8:03:0e:c5:c3:1e:a8:49:bc:6a: 1f:ea:3a:37:48:d8:f2:5c:5e:3a:bd:31:85:bf:ff: 72:7e:35:30:0e:08:1e:bd:ea:c9:b2:da:2b:9f:ba: ce:66:bd:b5:5d:5e:a1:e8:a5:4c:c8:3d:1c:d9:86: 97:15:b8:0a:76:b6:23:1f:7c:a4:89:c3:24:cd:c3: d5:eb:64:0f:d9:4b:ef:cd:4f:ae:2c:f4:5a:f1:31: e0:c5:08:2b:00:bd:b8:17:28:bd:2e:62:fa:67:e4: ad:9c:7b:2e:1a:73:1b:f3:ec:42:19:49:a3:23:eb: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:75:54:1F:A0:DA:9B:33:E7:48:AF:10:29:28:11:D2:B0:F2:50 X509v3 Authority Key Identifier: keyid:38:1E:53:48:50:46:CB:30:27:91:C9:09:F2:DB:D6:7D:AF:8D:78:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/OB5TSFBGyzAnkckJ8tvWfa-NeBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OB5TSFBGyzAnkckJ8tvWfa-NeBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB0C2/FD8838225F5111EA89993D27C4F9AE02/E8DA2D1C5F5211EABFCF4128C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.36.0/23 IPv6: 2405:e140::/32 Signature Algorithm: sha256WithRSAEncryption 18:42:76:67:ec:2a:67:87:14:fd:dd:9d:25:cb:9d:59:6c:df: 1c:b9:2b:86:ff:f7:e9:38:3a:cb:82:61:22:55:ee:da:4c:ff: 4d:e2:f2:ed:93:94:69:ba:30:8a:1b:14:23:8b:6f:d2:25:16: e1:23:1d:94:1a:47:2e:53:5b:e2:41:9a:bf:77:54:3d:f8:02: 3e:83:47:73:07:c7:59:4a:d1:38:12:b5:c8:42:78:da:1d:43: da:c6:8e:e1:78:9a:8e:9f:33:cf:07:06:71:10:16:5a:3f:e6: 29:99:0f:72:6d:14:5f:16:cb:f3:6a:68:78:62:9a:0f:a3:e3: ac:6e:f7:f7:ac:26:8d:29:a8:49:af:20:bb:35:8d:fe:f6:88: c5:04:cb:b1:ca:b8:58:5c:6b:df:57:b9:3b:92:5d:ff:2f:c4: b0:19:a0:fd:9f:1f:a8:59:87:77:3f:69:6e:ed:95:61:fd:76: 25:5f:e7:7e:5a:8d:b5:bd:af:b5:46:74:43:f6:08:58:de:24: 76:90:e2:93:ea:cc:a4:9e:a9:8f:52:38:90:9d:7b:a5:29:2f: 09:0e:96:a8:f6:5a:3c:51:8e:20:6d:40:73:af:7c:1d:36:f9: 59:f2:de:be:80:30:78:bb:d9:c9:9a:73:74:df:b8:01:20:c5: d2:ba:26:d0 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIwQzIxMTAvBgNVBAUTKDM4MUU1MzQ4NTA0NkNCMzAyNzkxQzkwOUYyREJENjdE QUY4RDc4MUEwHhcNMjYwNDAyMTkyNDU0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNlYzI4Ni00NmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAHZM2A1o60O4FB6lG8Tz7n/hTIqT261qm+e1b4O1GYS4OBNLmbFdqNcxQCc 3mx+7c95a+e9jx4vXseM6U9pgQX0+yBw9c/eYP+6Vw+D4759H+csKAWoUtCX/B3o QLQH5C+tG9o3xAw2fTPH9QYKfoPJstJuKLAZCTltlNcN1MmDRU7+Otga9JvGsMgD DsXDHqhJvGof6jo3SNjyXF46vTGFv/9yfjUwDggeverJstorn7rOZr21XV6h6KVM yD0c2YaXFbgKdrYjH3ykicMkzcPV62QP2UvvzU+uLPRa8THgxQgrAL24Fyi9LmL6 Z+StnHsuGnMb8+xCGUmjI+s/wwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFAlWdVQf oNqbM+dIrxApKBHSsPJQMB8GA1UdIwQYMBaAFDgeU0hQRsswJ5HJCfLb1n2vjXga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjBDMi9GRDg4MzgyMjVG NTExMUVBODk5OTNEMjdDNEY5QUUwMi9PQjVUU0ZCR3l6QW5rY2tKOHR2V2ZhLU5l Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09CNVRTRkJHeXpBbmtja0o4dHZXZmEtTmVCby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REIwQzIvRkQ4ODM4MjI1RjUxMTFFQTg5OTkzRDI3QzRGOUFFMDIvRThEQTJEMUM1 RjUyMTFFQUJGQ0Y0MTI4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5UkMA0EAgACMAcDBQAkBeFAMA0GCSqGSIb3DQEBCwUAA4IBAQAY QnZn7CpnhxT93Z0ly51ZbN8cuSuG//fpODrLgmEiVe7aTP9N4vLtk5RpujCKGxQj i2/SJRbhIx2UGkcuU1viQZq/d1Q9+AI+g0dzB8dZStE4ErXIQnjaHUPaxo7heJqO nzPPBwZxEBZaP+YpmQ9ybRRfFsvzamh4YpoPo+Osbvf3rCaNKahJryC7NY3+9ojF BMuxyrhYXGvfV7k7kl3/L8SwGaD9nx+oWYd3P2lu7ZVh/XYlX+d+Wo21va+1RnRD 9ghY3iR2kOKT6syknqmPUjiQnXulKS8JDpao9lo8UY4gbUBzr3wdNvlZ8t6+gDB4 u9nJmnN037gBIMXSuibQ -----END CERTIFICATE-----Generated at Mon Apr 6 10:24:41 2026 by rpki-client