$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa File: F547BE4253EA11F08B05D02EC4F9AE02.roa (raw, json) Hash identifier: ulIWI26V47R53BZSt6uCetTpw45HUPI+vILpTZRiHGA= Subject key identifier: 97:02:FE:52:DE:CF:AE:08:A1:32:20:44:3B:ED:F8:D9:F8:B8:F4:B3 Certificate issuer: /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Certificate serial: 0988 Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa Signing time: Fri 24 Apr 2026 16:34:36 +0000 ROA not before: Fri 24 Apr 2026 16:34:36 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138997 IP address blocks: 103.138.72.0/22 maxlen: 22 103.138.72.0/23 maxlen: 24 103.138.74.0/23 maxlen: 24 2404:c140::/32 maxlen: 32 2404:c140:155::/48 maxlen: 48 2404:c140:156::/48 maxlen: 48 2404:c140:157::/48 maxlen: 48 2404:c140:220::/48 maxlen: 48 2404:c140:221::/48 maxlen: 48 2404:c140:224::/48 maxlen: 48 2404:c140:225::/48 maxlen: 48 2404:c140:230::/47 maxlen: 48 2404:c140:1f00::/40 maxlen: 48 2404:c140:2000::/40 maxlen: 48 2404:c140:2100::/40 maxlen: 48 2404:c140:2200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 14:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2440 (0x988) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85 Validity Not Before: Apr 24 16:34:36 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69eb9b9c-aca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:04:a9:97:62:f0:7b:4d:62:07:12:46:3b:a3: 07:e5:5c:4b:7d:bf:59:32:9b:20:58:1f:f0:0b:58: 1a:a4:fa:a4:bd:00:bc:5e:6e:54:e1:e7:e7:33:06: 02:03:8c:cc:ae:d9:1c:cf:2c:41:66:0e:05:24:f3: e5:75:e3:98:46:37:dd:2a:04:3a:9b:72:d5:73:8c: 28:fc:8e:7a:bb:1a:a7:de:e8:8b:30:a4:cc:7b:13: d9:eb:02:73:bf:bb:8b:fc:b6:96:f3:ee:c9:b6:94: 6a:39:8a:a3:d0:8b:53:c2:b7:05:ee:49:f9:19:9b: 41:66:c1:aa:31:a3:23:a8:10:59:97:f5:cd:04:21: 7a:65:1b:30:ea:6d:16:74:23:70:04:ed:ef:d9:40: 46:68:f7:78:26:91:7e:9e:35:4d:aa:40:81:7f:0d: 11:69:a5:94:bb:38:37:35:e8:a5:bf:bb:75:a9:42: 45:eb:21:eb:a6:ea:ae:b0:48:f1:43:3f:76:8e:a3: f8:2c:28:dc:5d:93:73:f8:d8:22:5b:b0:09:0a:3f: 8c:b8:df:c1:18:1a:b1:69:74:32:81:90:16:e3:80: 53:a1:5a:4d:28:0a:45:22:92:d2:b5:61:16:26:26: e6:c8:6f:91:e3:38:9a:ff:d7:60:67:7d:59:7d:ab: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:02:FE:52:DE:CF:AE:08:A1:32:20:44:3B:ED:F8:D9:F8:B8:F4:B3 X509v3 Authority Key Identifier: keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/F547BE4253EA11F08B05D02EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.138.72.0/22 IPv6: 2404:c140::/32 Signature Algorithm: sha256WithRSAEncryption 46:de:c7:a7:31:bb:65:69:e7:ab:8c:14:3d:7c:2a:37:54:7f: 93:31:7d:8f:be:ae:2d:9e:77:0c:6c:7f:a8:b1:75:12:ef:c6: b6:9e:38:d6:6e:09:b2:80:b1:79:da:90:58:f8:bb:8f:47:77: 23:64:c8:17:7e:d0:e2:aa:22:80:85:13:1f:cf:17:ee:43:1f: 25:05:e4:f4:a2:85:c2:74:8b:ea:d2:2e:75:7b:ab:fc:64:9d: 27:c6:54:d4:35:f9:b3:26:78:bb:6f:ab:0c:c0:2e:3e:af:d2: c5:d9:0c:de:13:f3:1e:bc:f1:ec:ca:31:9f:da:78:21:c9:90: ad:f7:bc:d5:63:bf:2a:cd:fe:ef:58:f0:6a:81:54:4c:92:19: bd:88:0e:f4:fd:bf:67:98:83:e1:cf:c3:4c:b2:73:d7:b9:da: 4f:ac:fa:38:78:f5:0e:75:72:9c:98:6f:6d:0b:bb:73:ef:83: a1:ea:04:1a:27:4d:41:d4:04:16:0d:82:db:80:9d:9b:35:a8: 6f:f8:17:08:38:8c:5d:b4:68:18:36:64:fc:35:86:a1:b6:af: 1b:84:06:b1:07:f8:5e:9e:a3:8f:15:a3:0d:7d:47:c2:f9:ac: a6:6a:c3:9a:bc:8d:2e:54:88:12:61:60:85:21:5f:77:09:20: 15:50:56:04 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICCYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD NTU5MDlEODUwHhcNMjYwNDI0MTYzNDM2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWViOWI5Yy1hY2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ASpl2Lwe01iBxJGO6MH5VxLfb9ZMpsgWB/wC1gapPqkvQC8Xm5U4efnMwYC A4zMrtkczyxBZg4FJPPldeOYRjfdKgQ6m3LVc4wo/I56uxqn3uiLMKTMexPZ6wJz v7uL/LaW8+7JtpRqOYqj0ItTwrcF7kn5GZtBZsGqMaMjqBBZl/XNBCF6ZRsw6m0W dCNwBO3v2UBGaPd4JpF+njVNqkCBfw0RaaWUuzg3Neilv7t1qUJF6yHrpuqusEjx Qz92jqP4LCjcXZNz+NgiW7AJCj+MuN/BGBqxaXQygZAW44BToVpNKApFIpLStWEW JibmyG+R4zia/9dgZ31ZfavG+QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFJcC/lLe z64IoTIgRDvt+Nn4uPSzMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVERkQvNTQ1MzZCM0VCQzg4MTFFQTg4RUYzRDQ5QzRGOUFFMDIvRjU0N0JFNDI1 M0VBMTFGMDhCMDVEMDJFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQCZ4pIMA0EAgACMAcDBQAkBMFAMA0GCSqGSIb3DQEBCwUAA4IBAQBG 3senMbtlaeerjBQ9fCo3VH+TMX2Pvq4tnncMbH+osXUS78a2njjWbgmygLF52pBY +LuPR3cjZMgXftDiqiKAhRMfzxfuQx8lBeT0ooXCdIvq0i51e6v8ZJ0nxlTUNfmz Jni7b6sMwC4+r9LF2QzeE/MevPHsyjGf2nghyZCt97zVY78qzf7vWPBqgVRMkhm9 iA70/b9nmIPhz8NMsnPXudpPrPo4ePUOdXKcmG9tC7tz74Oh6gQaJ01B1AQWDYLb gJ2bNahv+BcIOIxdtGgYNmT8NYahtq8bhAaxB/henqOPFaMNfUfC+aymasOavI0u VIgSYWCFIV93CSAVUFYE -----END CERTIFICATE-----Generated at Mon Apr 27 00:39:24 2026 by rpki-client