$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/3B85CDCC5AC611F0A650577AC4F9AE02.roa File: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (raw, json) Hash identifier: MeswJw3AHNnj/Kfl6uQ6n3GXjLaJwS53BSqpTy4iSHk= Subject key identifier: D6:65:D9:70:F3:38:86:56:51:96:1A:BC:51:2F:F8:A6:D3:6E:86:43 Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Certificate serial: 07D5 Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/3B85CDCC5AC611F0A650577AC4F9AE02.roa Signing time: Tue 31 Mar 2026 22:27:17 +0000 ROA not before: Tue 31 Mar 2026 22:27:17 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 137466 IP address blocks: 103.109.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Validity Not Before: Mar 31 22:27:17 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cc4a45-75f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:81:c3:ad:03:ca:1f:bc:bf:ca:46:1c:61: 13:6e:ed:cf:aa:48:5c:5e:b7:c2:87:26:3b:db:8f: 2a:e4:78:0b:4d:5a:e5:76:de:85:dc:2f:bf:a5:9c: 5a:ce:7d:5b:09:06:15:e1:f7:1f:ed:bb:7d:6a:0c: 76:f2:da:6d:12:1d:cc:1e:9c:9c:c6:97:b2:11:73: 3d:ab:0e:0a:d2:61:1c:29:73:51:d9:07:8b:7f:8f: a2:bc:3b:0c:d6:8f:a5:75:ad:4d:0a:c1:af:15:f0: 39:3a:1c:2b:76:ee:62:ba:85:e2:76:26:f5:45:43: 66:59:ff:90:c3:bb:07:3c:d8:c4:ea:53:25:73:6e: f0:00:2d:e1:a1:bc:de:1d:f8:be:fe:1a:33:fc:ad: b9:5c:44:65:e0:7a:e6:62:fa:ae:a3:68:04:f4:93: 69:41:f4:10:09:41:41:7b:0d:59:0f:b4:ff:0c:bc: f3:44:eb:8a:6a:0a:f0:84:66:06:22:0f:78:5e:da: 60:3f:32:e7:53:a2:9f:ad:4f:59:b3:35:df:20:bc: 97:eb:65:9c:ea:f9:8d:e4:d9:2f:6b:01:a8:c9:80: 01:f3:71:b3:75:fa:c6:6b:f7:c9:83:16:24:59:6c: 73:f1:39:d3:34:d2:de:9c:f6:c8:7a:3e:cc:fd:08: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:D9:70:F3:38:86:56:51:96:1A:BC:51:2F:F8:A6:D3:6E:86:43 X509v3 Authority Key Identifier: keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/3B85CDCC5AC611F0A650577AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.109.232.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:6f:53:22:1b:77:2f:28:12:f9:f6:35:27:ea:1f:cf:5c:dd: af:00:8a:7b:6a:c8:3c:ad:37:95:4a:d1:d5:a2:85:32:06:76: f5:86:a7:2d:03:03:1a:1e:d1:ac:e3:1b:a9:21:72:49:3b:b9: d9:59:f8:6e:73:5f:ec:3f:ce:89:b1:25:49:f2:4e:28:1a:42: d3:84:96:be:34:21:b8:b6:13:d2:cc:d9:84:3e:b2:14:e6:c9: b6:1a:81:a3:f4:36:a0:39:0a:ef:8b:3f:18:f7:47:12:2f:8b: d9:2c:ec:5c:0a:f7:93:2e:4c:ff:6f:74:d1:bc:1c:68:93:6a: 1d:d9:6d:39:1a:e8:89:89:37:0f:47:be:7f:d0:14:64:d9:bb: 71:0b:ec:e3:08:96:35:53:19:29:93:ea:f3:ca:8d:f4:26:d2: 8a:97:76:f8:2e:2a:10:04:6b:e9:03:62:d5:93:21:20:e3:cc: fa:35:ed:eb:f8:f2:b1:c0:7f:a2:c2:a7:35:f0:08:97:40:87: 33:fa:3a:b3:e5:bf:59:25:ab:d1:53:71:2d:97:eb:bd:d3:8d: e7:72:61:67:f8:fe:b5:42:d7:7e:5a:99:70:b1:47:91:10:74: 9a:bd:37:18:44:db:14:aa:6a:af:66:30:fa:41:ba:3f:fc:e9: bb:07:fc:cc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC MEZEMjFENUMwHhcNMjYwMzMxMjIyNzE3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjNGE0NS03NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoS2Bw60Dyh+8v8pGHGETbu3PqkhcXrfChyY7248q5HgLTVrldt6F3C+/pZxa zn1bCQYV4fcf7bt9agx28tptEh3MHpycxpeyEXM9qw4K0mEcKXNR2QeLf4+ivDsM 1o+lda1NCsGvFfA5Ohwrdu5iuoXidib1RUNmWf+Qw7sHPNjE6lMlc27wAC3hobze Hfi+/hoz/K25XERl4HrmYvquo2gE9JNpQfQQCUFBew1ZD7T/DLzzROuKagrwhGYG Ig94XtpgPzLnU6KfrU9ZszXfILyX62Wc6vmN5NkvawGoyYAB83GzdfrGa/fJgxYk WWxz8TnTNNLenPbIej7M/QgcEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNZl2XDz OIZWUZYavFEv+KbTboZDMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5 MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY1OTAvMkY3QjE3QzQzOTBEMTFFQjg4QkM2MTY1QzRGOUFFMDIvM0I4NUNEQ0M1 QUM2MTFGMEE2NTA1NzdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ23oMA0GCSqGSIb3DQEBCwUAA4IBAQA9b1MiG3cvKBL59jUn6h/P XN2vAIp7asg8rTeVStHVooUyBnb1hqctAwMaHtGs4xupIXJJO7nZWfhuc1/sP86J sSVJ8k4oGkLThJa+NCG4thPSzNmEPrIU5sm2GoGj9DagOQrviz8Y90cSL4vZLOxc CveTLkz/b3TRvBxok2od2W05GuiJiTcPR75/0BRk2btxC+zjCJY1Uxkpk+rzyo30 JtKKl3b4LioQBGvpA2LVkyEg48z6Ne3r+PKxwH+iwqc18AiXQIcz+jqz5b9ZJavR U3Etl+u9043ncmFn+P61Qtd+WplwsUeREHSavTcYRNsUqmqvZjD6Qbo//Om7B/zM -----END CERTIFICATE-----Generated at Mon Apr 6 10:07:14 2026 by rpki-client