$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/3C4D39C05AC611F0A650577AC4F9AE02.roa File: 3C4D39C05AC611F0A650577AC4F9AE02.roa (raw, json) Hash identifier: Zdf9TWMHjctU5OVteJHuNVfi9I0rsmnesXZnDlf1ckk= Subject key identifier: C4:50:AE:ED:C1:21:5D:44:9D:5E:1B:5B:8A:8A:26:BD:26:9F:D1:F3 Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Certificate serial: 07D6 Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/3C4D39C05AC611F0A650577AC4F9AE02.roa Signing time: Tue 31 Mar 2026 22:27:19 +0000 ROA not before: Tue 31 Mar 2026 22:27:19 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 17763 IP address blocks: 103.109.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2006 (0x7d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C Validity Not Before: Mar 31 22:27:19 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69cc4a47-89fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:e0:d6:ec:ec:ba:1f:24:97:eb:fc:03:d4: 1a:00:33:e7:99:3c:50:cf:12:bf:69:87:64:a1:be: a2:ee:93:20:c0:be:50:4a:27:93:56:40:4f:e9:34: 33:de:e8:c7:72:f5:bc:b1:bf:4a:6f:8b:11:01:26: 37:b3:36:d5:04:cc:7c:eb:f8:40:bf:7e:ca:dc:7c: 24:71:97:8e:53:80:11:f6:a7:1e:4e:39:e1:95:65: 13:a1:75:c9:9e:a6:df:94:06:c6:e8:0d:cd:ff:08: 06:a8:96:7a:65:49:72:94:cc:7f:fd:30:d6:65:9a: 5e:cd:f4:99:f7:44:c5:88:ef:57:5b:bf:81:e2:7e: 9b:54:c2:1e:12:b0:fa:e3:2c:bb:1d:05:c0:9d:c7: 75:ad:32:83:ac:f9:93:41:07:4d:eb:11:e7:7b:a4: 71:01:c7:de:e4:5b:36:18:66:cb:70:18:f3:b2:ce: 68:1e:78:00:ef:5a:91:e0:db:82:10:f5:90:68:a3: 19:07:c1:a1:1d:50:0d:16:c0:8d:c3:bf:24:7e:92: b6:ce:ac:ce:81:b0:ed:52:97:db:e4:5f:1b:f6:4d: ce:85:09:e6:8d:e1:49:cf:b1:f7:7b:97:2b:80:70: a4:88:73:14:a9:97:bc:2d:71:4d:a8:c6:cd:16:2e: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:50:AE:ED:C1:21:5D:44:9D:5E:1B:5B:8A:8A:26:BD:26:9F:D1:F3 X509v3 Authority Key Identifier: keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/3C4D39C05AC611F0A650577AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.109.232.0/24 Signature Algorithm: sha256WithRSAEncryption 29:b2:93:64:a2:a9:15:dc:b0:4a:b5:c6:06:21:81:6a:b9:7d: a4:1d:00:1d:44:63:40:83:06:84:c9:27:03:c4:ef:d9:4b:a2: 15:e2:fb:04:66:db:f7:49:9a:59:2a:27:26:a3:59:73:65:ce: a4:27:bd:90:75:ee:88:97:aa:de:f4:4d:ea:2c:0e:8e:bd:cb: 3b:2c:e8:46:c5:50:f3:24:4d:c4:96:00:8c:e5:01:d5:3d:7f: 60:ad:ce:5b:51:9f:4d:ad:a7:8d:ac:7c:8b:af:91:2a:be:75: e1:6e:30:64:41:f6:11:7b:10:3b:a8:da:6d:fb:29:3d:c5:30: 69:fe:96:a5:bc:73:e4:8d:7e:52:1f:16:7a:86:51:62:cb:31: b2:8a:a5:7b:a4:66:27:a5:ee:2d:fe:e5:ed:9d:7b:39:b2:6d: f9:ae:20:57:90:92:57:78:64:e4:fc:1b:30:02:f1:3b:8a:14: 3b:48:6e:88:b5:7f:a7:dc:b5:9f:f1:c4:e1:6a:a9:49:cc:e7: f9:fc:eb:ce:19:f4:c4:c5:a6:27:20:93:20:b6:b7:7b:47:43: ff:de:a7:98:20:19:26:66:93:db:8f:d1:96:2d:6f:12:43:36: 34:6f:b8:5f:e9:64:f6:aa:d5:91:5a:36:00:75:96:34:1b:8f: a7:b6:ca:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC MEZEMjFENUMwHhcNMjYwMzMxMjIyNzE5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWNjNGE0Ny04OWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfXg1uzsuh8kl+v8A9QaADPnmTxQzxK/aYdkob6i7pMgwL5QSieTVkBP6TQz 3ujHcvW8sb9Kb4sRASY3szbVBMx86/hAv37K3HwkcZeOU4AR9qceTjnhlWUToXXJ nqbflAbG6A3N/wgGqJZ6ZUlylMx//TDWZZpezfSZ90TFiO9XW7+B4n6bVMIeErD6 4yy7HQXAncd1rTKDrPmTQQdN6xHne6RxAcfe5Fs2GGbLcBjzss5oHngA71qR4NuC EPWQaKMZB8GhHVANFsCNw78kfpK2zqzOgbDtUpfb5F8b9k3OhQnmjeFJz7H3e5cr gHCkiHMUqZe8LXFNqMbNFi48awIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMRQru3B IV1EnV4bW4qKJr0mn9HzMB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5 MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY1OTAvMkY3QjE3QzQzOTBEMTFFQjg4QkM2MTY1QzRGOUFFMDIvM0M0RDM5QzA1 QUM2MTFGMEE2NTA1NzdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAZ23oMA0GCSqGSIb3DQEBCwUAA4IBAQApspNkoqkV3LBKtcYGIYFq uX2kHQAdRGNAgwaEyScDxO/ZS6IV4vsEZtv3SZpZKicmo1lzZc6kJ72Qde6Il6re 9E3qLA6Ovcs7LOhGxVDzJE3ElgCM5QHVPX9grc5bUZ9NraeNrHyLr5EqvnXhbjBk QfYRexA7qNpt+yk9xTBp/palvHPkjX5SHxZ6hlFiyzGyiqV7pGYnpe4t/uXtnXs5 sm35riBXkJJXeGTk/BswAvE7ihQ7SG6ItX+n3LWf8cThaqlJzOf5/OvOGfTExaYn IJMgtrd7R0P/3qeYIBkmZpPbj9GWLW8SQzY0b7hf6WT2qtWRWjYAdZY0G4+ntso5 -----END CERTIFICATE-----Generated at Mon Apr 6 10:07:59 2026 by rpki-client