$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1CD09CEA9E2C11F18953E4265611F970.roa File: 1CD09CEA9E2C11F18953E4265611F970.roa (raw, json) Hash identifier: GTgRufRrOY/9upf/2CDbblL7ACUEaUL581JiW4Jmg80= Subject key identifier: 8C:43:A9:9E:19:E3:65:FF:00:CB:E7:5A:B5:3A:09:F1:92:AB:30:E3 Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Certificate serial: 0226 Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1CD09CEA9E2C11F18953E4265611F970.roa Signing time: Sat 22 Aug 2026 13:32:36 +0000 ROA not before: Sat 22 Aug 2026 13:32:36 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 140077 IP address blocks: 103.148.50.0/24 maxlen: 24 103.148.51.0/24 maxlen: 24 2405:cbc0::/35 maxlen: 35 2405:cbc0:2000::/35 maxlen: 35 2405:cbc0:4000::/35 maxlen: 35 2405:cbc0:6000::/35 maxlen: 35 2405:cbc0:8000::/35 maxlen: 35 2405:cbc0:a000::/35 maxlen: 35 2405:cbc0:c000::/35 maxlen: 35 2405:cbc0:e000::/35 maxlen: 35 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Validity Not Before: Aug 22 13:32:36 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a89a4f4-c36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:81:75:05:cb:98:4e:1a:72:a1:76:24:c5: 82:08:7e:8c:32:df:a3:e2:3a:fe:29:ca:08:68:67: 8a:37:ba:16:ff:e8:cf:fd:36:4e:3f:74:24:9d:47: c4:30:f1:3d:8a:f7:d5:bf:e9:46:f9:a7:4e:1a:00: 8e:75:1f:87:a6:3f:e4:3f:15:ab:d4:62:af:3a:60: 8e:83:90:55:03:28:ed:e5:74:f9:a4:4f:07:59:b3: 66:8e:11:f2:18:1b:8c:93:ef:82:27:bc:b8:07:aa: f3:6a:53:90:82:ff:97:ca:3a:68:0c:d2:e8:d5:80: 63:cf:74:4c:dd:b9:a4:57:ea:3a:15:ef:d5:f4:d8: fa:92:20:9e:f1:6b:eb:6e:23:f4:25:fe:28:9b:c9: 07:1c:18:19:f8:f6:00:eb:81:53:a2:84:ed:10:72: 8e:e5:61:39:e0:9b:ea:43:a0:a5:1d:80:80:cd:af: d3:0f:57:4a:6b:56:89:2d:42:0c:a8:4d:dc:c9:e3: dc:6c:8d:76:fc:e5:ea:68:ce:cf:c6:2a:71:f4:17: b3:8e:38:79:5b:0c:df:8f:d3:d2:9b:5e:a6:76:83: d1:55:ad:8f:f4:a7:c1:b4:50:a1:e1:b9:4e:eb:d7: a3:ab:14:c7:87:58:84:4e:ba:ac:ef:b8:7c:b3:f0: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:43:A9:9E:19:E3:65:FF:00:CB:E7:5A:B5:3A:09:F1:92:AB:30:E3 X509v3 Authority Key Identifier: keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1CD09CEA9E2C11F18953E4265611F970.roa sbgp-ipAddrBlock: critical IPv4: 103.148.50.0/23 IPv6: 2405:cbc0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:24:ce:ca:67:e1:5e:ad:0e:25:8c:e1:ab:2c:bf:fb:b4:15: 4c:89:be:21:3b:35:90:1a:74:07:4b:a3:56:20:ee:3b:b7:c8: fe:cf:23:b5:26:5e:15:51:07:da:b4:05:36:74:e6:13:76:be: c7:5d:b6:b4:b5:04:6a:04:f8:b9:79:14:93:b8:01:06:6e:cb: dc:93:fa:79:40:8e:b3:0d:24:4a:95:81:17:db:2a:e1:85:20: b4:ec:47:e4:62:24:10:bb:58:f3:7f:ee:e6:8e:b7:53:f6:b7: 5c:97:07:80:0a:93:4f:47:74:bd:fd:27:e2:4b:ac:50:e0:d2: ae:37:2f:48:d6:d3:fc:43:91:ea:ac:dc:7c:c4:49:02:42:d3: 74:fb:c7:95:92:70:af:66:33:0e:83:78:fb:84:05:ea:c2:c4: 72:ce:ba:4f:cb:97:e7:0e:f4:c0:ee:4a:c6:3f:2d:08:bf:59: 39:35:22:a8:6f:2a:ab:b0:18:1e:b6:06:64:bf:c8:c1:6b:fe: 5d:61:b8:a9:e4:7c:5d:70:28:2a:76:6f:f7:99:42:b4:51:bc: 5b:61:4d:a5:bb:02:6c:26:0c:17:cb:c6:14:4a:a2:3e:62:53: 06:c2:18:af:7a:d6:55:59:03:7a:32:0d:19:b1:28:61:1f:d5: a2:0b:85:fb -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC RTJDQUIxRTYwHhcNMjYwODIyMTMzMjM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg5YTRmNC1jMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1jKBdQXLmE4acqF2JMWCCH6MMt+j4jr+KcoIaGeKN7oW/+jP/TZOP3QknUfE MPE9ivfVv+lG+adOGgCOdR+Hpj/kPxWr1GKvOmCOg5BVAyjt5XT5pE8HWbNmjhHy GBuMk++CJ7y4B6rzalOQgv+XyjpoDNLo1YBjz3RM3bmkV+o6Fe/V9Nj6kiCe8Wvr biP0Jf4om8kHHBgZ+PYA64FTooTtEHKO5WE54JvqQ6ClHYCAza/TD1dKa1aJLUIM qE3cyePcbI12/OXqaM7Pxipx9Bezjjh5Wwzfj9PSm16mdoPRVa2P9KfBtFCh4blO 69ejqxTHh1iETrqs77h8s/Cb4QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFIxDqZ4Z 42X/AMvnWrU6CfGSqzDjMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3 MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFGNEIvODQ4NThGNkE0NzE5MTFFQTkwODYzMDcyQzRGOUFFMDIvMUNEMDlDRUE5 RTJDMTFGMTg5NTNFNDI2NTYxMUY5NzAucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ5QyMA0EAgACMAcDBQAkBcvAMA0GCSqGSIb3DQEBCwUAA4IBAQCb JM7KZ+FerQ4ljOGrLL/7tBVMib4hOzWQGnQHS6NWIO47t8j+zyO1Jl4VUQfatAU2 dOYTdr7HXba0tQRqBPi5eRSTuAEGbsvck/p5QI6zDSRKlYEX2yrhhSC07EfkYiQQ u1jzf+7mjrdT9rdclweACpNPR3S9/SfiS6xQ4NKuNy9I1tP8Q5HqrNx8xEkCQtN0 +8eVknCvZjMOg3j7hAXqwsRyzrpPy5fnDvTA7krGPy0Iv1k5NSKobyqrsBgetgZk v8jBa/5dYbip5HxdcCgqdm/3mUK0UbxbYU2luwJsJgwXy8YUSqI+YlMGwhivetZV WQN6Mg0ZsShhH9WiC4X7 -----END CERTIFICATE-----Generated at Sat Sep 5 06:56:07 2026 by rpki-client