$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1C69D67C1AEC11F1BECB19E5043D8C67.roa File: 1C69D67C1AEC11F1BECB19E5043D8C67.roa (raw, json) Hash identifier: QNaa4w23l7Y82bTjgOsQxPiCwaFcnV0djxntPTBPsOg= Subject key identifier: 9C:C1:C1:45:18:4D:E8:FF:15:26:C6:F4:92:27:3A:A3:49:02:31:03 Certificate issuer: /CN=A91EBB5B/serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Certificate serial: 0BD3 Authority key identifier: 95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1C69D67C1AEC11F1BECB19E5043D8C67.roa Signing time: Sun 08 Mar 2026 12:41:22 +0000 ROA not before: Sun 08 Mar 2026 12:41:22 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 197537 IP address blocks: 103.231.38.0/24 maxlen: 24 103.231.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 18:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBB5B, serialNumber=95C13A3CC7EC270B7E5F19F3CD4F3B50DFDF62E4 Validity Not Before: Mar 8 12:41:22 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69ad6e71-ae51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:b4:04:78:be:c6:c8:7c:48:a6:4d:58:a1: a4:8e:43:2f:0f:cf:8e:0f:72:f6:a2:13:67:c0:51: 2f:c8:7c:79:62:2e:1d:19:3d:0d:a2:bd:5c:a2:95: 19:85:4f:b7:45:7b:53:d0:eb:30:d2:ec:a1:a6:32: 16:5a:3a:da:8c:1d:a6:19:17:46:52:71:db:3c:8b: 9a:31:cf:11:4b:e1:76:45:84:08:f7:b8:7f:c3:80: f2:c0:9c:d0:e0:6a:c6:e8:31:9f:f7:11:e6:56:d6: ee:7a:2a:b6:e5:69:8b:92:ba:4e:70:3d:c4:34:4e: 05:af:1e:13:b8:3d:4c:82:ce:42:89:14:cc:5b:95: 12:df:66:ae:b7:78:62:3f:17:3c:44:37:f1:5e:bb: dc:60:84:f7:37:60:3f:e2:c0:97:d5:27:78:5e:e4: dd:42:4f:a4:ba:01:c2:03:4f:39:07:2d:47:3b:9b: ce:77:8c:31:62:84:2e:e0:48:0b:31:9b:ac:e1:72: 8f:c4:68:bf:f5:53:e4:0e:c7:c9:2d:06:60:f1:9e: 8b:f0:58:6e:07:47:83:a2:d5:ae:a5:32:50:1d:50: a2:ea:54:d8:1b:7b:00:fd:93:01:62:70:4d:ef:bf: 07:f5:21:4a:e1:7c:dd:65:ae:6a:9e:a1:9a:2d:35: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C1:C1:45:18:4D:E8:FF:15:26:C6:F4:92:27:3A:A3:49:02:31:03 X509v3 Authority Key Identifier: keyid:95:C1:3A:3C:C7:EC:27:0B:7E:5F:19:F3:CD:4F:3B:50:DF:DF:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/lcE6PMfsJwt-XxnzzU87UN_fYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lcE6PMfsJwt-XxnzzU87UN_fYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBB5B/29DE748A419E11EAB866E77AC4F9AE02/1C69D67C1AEC11F1BECB19E5043D8C67.roa sbgp-ipAddrBlock: critical IPv4: 103.231.38.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:56:e0:0e:3a:0e:82:01:ff:a0:0b:94:26:b7:99:ed:ba:82: 9d:8b:07:9e:45:85:11:25:ab:31:0e:cc:c7:91:ab:dc:37:94: c4:c6:9e:4c:87:8b:a9:7f:4a:81:6f:2b:ca:46:f5:a9:51:82: a7:c9:c2:30:6d:eb:1f:15:59:3d:1a:32:26:9b:89:bb:af:71: c9:58:73:16:b2:d1:d1:e1:f9:2c:88:43:ca:86:e1:9e:93:b6: 73:5c:05:31:e7:85:f4:65:2c:1b:48:98:bf:ab:c9:32:4f:d9: 73:ac:39:16:8b:ad:81:fe:32:73:73:75:7d:76:e4:80:6f:2f: 0b:f7:35:14:dd:d9:1e:2b:93:dd:f0:65:7a:13:24:69:5e:f6: 81:9c:2a:82:57:77:33:a2:e1:18:7f:3d:36:cb:f1:59:09:47: 7f:20:37:72:e3:d0:f7:1c:aa:62:78:79:a9:a9:0f:d2:f7:a6: 58:e1:34:20:65:8b:d9:fb:7d:72:00:ac:1a:24:ee:bd:a1:5c: 4e:41:89:40:44:4d:29:02:2c:5a:68:24:ee:26:6f:3a:24:13: 22:b1:d5:37:1f:71:68:2e:82:96:46:7d:7e:d6:78:dd:48:15: 85:80:15:64:88:36:5c:ed:28:e3:91:9a:01:36:d4:04:a9:28: cf:2e:cf:00 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJCNUIxMTAvBgNVBAUTKDk1QzEzQTNDQzdFQzI3MEI3RTVGMTlGM0NENEYzQjUw REZERjYyRTQwHhcNMjYwMzA4MTI0MTIyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFkNmU3MS1hZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Aa0BHi+xsh8SKZNWKGkjkMvD8+OD3L2ohNnwFEvyHx5Yi4dGT0Nor1copUZ hU+3RXtT0Osw0uyhpjIWWjrajB2mGRdGUnHbPIuaMc8RS+F2RYQI97h/w4DywJzQ 4GrG6DGf9xHmVtbueiq25WmLkrpOcD3ENE4Frx4TuD1Mgs5CiRTMW5US32aut3hi Pxc8RDfxXrvcYIT3N2A/4sCX1Sd4XuTdQk+kugHCA085By1HO5vOd4wxYoQu4EgL MZus4XKPxGi/9VPkDsfJLQZg8Z6L8FhuB0eDotWupTJQHVCi6lTYG3sA/ZMBYnBN 778H9SFK4XzdZa5qnqGaLTWAwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJzBwUUY Tej/FSbG9JInOqNJAjEDMB8GA1UdIwQYMBaAFJXBOjzH7CcLfl8Z881PO1Df32Lk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkI1Qi8yOURFNzQ4QTQx OUUxMUVBQjg2NkU3N0FDNEY5QUUwMi9sY0U2UE1mc0p3dC1YeG56elU4N1VOX2ZZ dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xjRTZQTWZzSnd0LVh4bnp6VTg3VU5fZll1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJCNUIvMjlERTc0OEE0MTlFMTFFQUI4NjZFNzdBQzRGOUFFMDIvMUM2OUQ2N0Mx QUVDMTFGMUJFQ0IxOUU1MDQzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ+cmMA0GCSqGSIb3DQEBCwUAA4IBAQBPVuAOOg6CAf+gC5Qmt5nt uoKdiweeRYURJasxDszHkavcN5TExp5Mh4upf0qBbyvKRvWpUYKnycIwbesfFVk9 GjImm4m7r3HJWHMWstHR4fksiEPKhuGek7ZzXAUx54X0ZSwbSJi/q8kyT9lzrDkW i62B/jJzc3V9duSAby8L9zUU3dkeK5Pd8GV6EyRpXvaBnCqCV3czouEYfz02y/FZ CUd/IDdy49D3HKpieHmpqQ/S96ZY4TQgZYvZ+31yAKwaJO69oVxOQYlARE0pAixa aCTuJm86JBMisdU3H3FoLoKWRn1+1njdSBWFgBVkiDZc7SjjkZoBNtQEqSjPLs8A -----END CERTIFICATE-----Generated at Tue Mar 10 14:49:33 2026 by rpki-client