$ rpki-client -vvf rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa File: 38EC4D321F2711EB93A71042C4F9AE02.roa (raw, json) Hash identifier: gXIt2yd0FQgVFoledLc37A0tKse+hQfjfmJoALOtcpg= Subject key identifier: DA:1B:23:2F:55:98:19:C9:1A:06:07:A3:DE:97:50:2F:4C:60:FC:46 Certificate issuer: /CN=A91147EF/serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Certificate serial: 09ED Authority key identifier: 02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:50:04 +0000 ROA not before: Thu 10 Apr 2025 20:30:33 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 393954 IP address blocks: 103.149.76.0/24 maxlen: 24 2405:e640:c0fd::/48 maxlen: 48 2405:e640:d000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2541 (0x9ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91147EF, serialNumber=0215502AA8FFDC721D7F84F74CD070B756390016 Validity Not Before: Apr 10 20:30:33 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a427ec-ce99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:d4:5f:65:f7:76:24:9b:8d:16:7d:51:33: 3e:39:e2:76:7c:3b:b5:3a:98:dc:f3:b3:78:fc:0f: dc:a6:e1:90:b3:88:ae:5f:c4:e5:35:85:3e:5a:a0: c8:aa:ec:b5:93:a4:9e:59:68:48:5d:49:c7:54:4a: ec:8e:c9:5e:d6:17:e9:e3:07:40:89:ae:57:e3:25: b6:9c:c7:19:94:6c:53:6f:74:c8:59:99:01:3a:98: 7b:9b:39:d7:8f:6b:74:d7:cc:10:aa:8e:16:19:39: da:f0:ad:65:f7:19:ca:98:09:55:eb:74:1f:53:b0: 22:89:b5:3e:5d:46:19:fc:66:2c:ef:c7:25:64:55: 27:d7:95:79:39:8f:b0:26:08:fe:fd:31:9f:9f:16: b4:95:f7:f6:68:7d:e0:76:0d:7c:ef:41:1a:59:c4: 41:c6:db:54:d1:cc:98:2d:de:d6:8b:f4:8b:ef:e6: e6:a1:5a:5e:32:9f:47:09:26:79:de:dd:6d:3a:b3: e4:e4:f5:8c:3d:3e:56:17:a9:35:76:61:27:5d:5a: e1:a0:c7:13:6b:0f:16:76:70:18:24:d0:cb:71:c2: aa:69:13:1c:b2:e4:b4:a8:0f:1f:01:4b:db:ba:74: b5:3b:5d:14:37:45:26:7b:dd:50:6a:81:f2:7d:ce: 41:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1B:23:2F:55:98:19:C9:1A:06:07:A3:DE:97:50:2F:4C:60:FC:46 X509v3 Authority Key Identifier: keyid:02:15:50:2A:A8:FF:DC:72:1D:7F:84:F7:4C:D0:70:B7:56:39:00:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AhVQKqj_3HIdf4T3TNBwt1Y5ABY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91147EF/8A291046991611EA9955D50BC4F9AE02/38EC4D321F2711EB93A71042C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.149.76.0/24 IPv6: 2405:e640:c0fd::/48 2405:e640:d000::/36 Signature Algorithm: sha256WithRSAEncryption 95:5b:33:f5:63:7e:4f:38:d8:a6:54:17:7d:95:44:8a:58:8e: 48:3c:db:82:96:8f:fb:8a:81:0f:0e:45:c0:69:64:29:17:58: 03:90:e2:a9:35:d8:52:da:3b:16:44:8c:97:2a:6d:c3:35:64: 2d:db:e6:ce:2e:8f:b1:4c:3a:3f:f3:8b:9b:37:61:9f:1b:0f: 03:7b:66:fb:ca:3b:b8:4e:a7:18:b8:f6:9e:67:d6:39:4d:1e: 29:8a:0f:47:48:e5:52:3d:a3:ba:86:c7:a1:50:76:72:7d:13: f6:3b:41:69:eb:3a:e1:88:65:92:02:c6:a0:98:96:49:e7:93: 1f:38:11:6f:76:04:12:68:82:79:4c:dc:15:62:4a:6b:d6:3e: e9:ab:04:74:9b:ea:69:86:11:0d:25:c9:71:9a:e7:6e:0a:bf: 94:d9:82:40:5f:0c:71:c0:2f:9c:bc:70:01:c8:91:7c:ee:07: 3a:66:ba:0f:68:b3:64:78:62:d9:d9:01:be:03:bc:57:46:9c: 76:cb:b7:64:12:8a:66:7b:14:09:92:89:8d:68:96:b3:01:a8: b0:5b:59:a5:06:65:15:65:72:58:97:40:d1:62:6f:ff:e4:6b: 2c:bd:5c:ed:ec:2b:02:7a:18:0d:c4:c1:59:f1:02:1d:de:52: a3:2c:ad:52 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICCe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ3RUYxMTAvBgNVBAUTKDAyMTU1MDJBQThGRkRDNzIxRDdGODRGNzRDRDA3MEI3 NTYzOTAwMTYwHhcNMjUwNDEwMjAzMDMzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjdlYy1jZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lTUX2X3diSbjRZ9UTM+OeJ2fDu1Opjc87N4/A/cpuGQs4iuX8TlNYU+WqDI quy1k6SeWWhIXUnHVErsjsle1hfp4wdAia5X4yW2nMcZlGxTb3TIWZkBOph7mznX j2t018wQqo4WGTna8K1l9xnKmAlV63QfU7AiibU+XUYZ/GYs78clZFUn15V5OY+w Jgj+/TGfnxa0lff2aH3gdg1870EaWcRBxttU0cyYLd7Wi/SL7+bmoVpeMp9HCSZ5 3t1tOrPk5PWMPT5WF6k1dmEnXVrhoMcTaw8WdnAYJNDLccKqaRMcsuS0qA8fAUvb unS1O10UN0Ume91QaoHyfc5BzwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFNobIy9V mBnJGgYHo96XUC9MYPxGMB8GA1UdIwQYMBaAFAIVUCqo/9xyHX+E90zQcLdWOQAW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDdFRi84QTI5MTA0Njk5 MTYxMUVBOTk1NUQ1MEJDNEY5QUUwMi9BaFZRS3FqXzNISWRmNFQzVE5Cd3QxWTVB QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FoVlFLcWpfM0hJZGY0VDNUTkJ3dDFZNUFCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTQ3RUYvOEEyOTEwNDY5OTE2MTFFQTk5NTVENTBCQzRGOUFFMDIvMzhFQzREMzIx RjI3MTFFQjkzQTcxMDQyQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAM BAIAATAGAwQAZ5VMMBcEAgACMBEDBwAkBeZAwP0DBgQkBeZA0DANBgkqhkiG9w0B AQsFAAOCAQEAlVsz9WN+TzjYplQXfZVEiliOSDzbgpaP+4qBDw5FwGlkKRdYA5Di qTXYUto7FkSMlyptwzVkLdvmzi6PsUw6P/OLmzdhnxsPA3tm+8o7uE6nGLj2nmfW OU0eKYoPR0jlUj2juobHoVB2cn0T9jtBaes64YhlkgLGoJiWSeeTHzgRb3YEEmiC eUzcFWJKa9Y+6asEdJvqaYYRDSXJcZrnbgq/lNmCQF8MccAvnLxwAciRfO4HOma6 D2izZHhi2dkBvgO8V0acdsu3ZBKKZnsUCZKJjWiWswGosFtZpQZlFWVyWJdA0WJv /+RrLL1c7ewrAnoYDcTBWfECHd5SoyytUg== -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:08 2026 by rpki-client