$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/23F9CE72A41911ECBDBED829C4F9AE02.roa File: 23F9CE72A41911ECBDBED829C4F9AE02.roa (raw, json) Hash identifier: jDls2g86m7GV6UJnx5UHRHLT+1GVeljl8mbGfPYQmlg= Subject key identifier: 3E:06:48:A0:44:B6:B8:12:A3:89:B9:7F:28:54:1B:07:6B:1E:C6:A7 Certificate issuer: /CN=A913AE91/serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Certificate serial: 0418 Authority key identifier: DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/23F9CE72A41911ECBDBED829C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:55:50 +0000 ROA not before: Sat 03 May 2025 01:06:51 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 136523 IP address blocks: 103.91.188.0/22 maxlen: 22 103.91.188.0/24 maxlen: 24 103.91.189.0/24 maxlen: 24 103.91.190.0/24 maxlen: 24 103.91.191.0/24 maxlen: 24 123.253.60.0/22 maxlen: 22 123.253.60.0/24 maxlen: 24 123.253.61.0/24 maxlen: 24 123.253.62.0/24 maxlen: 24 123.253.63.0/24 maxlen: 24 2401:fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1048 (0x418) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE91, serialNumber=DCCBCC9893809099ED02B7178184365416B31E1C Validity Not Before: May 3 01:06:51 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3ff16-8b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:90:9e:34:8b:66:5e:aa:8c:86:58:bb:31: 85:55:f5:c9:56:97:c1:e2:da:c0:97:12:3f:7f:e1: 48:19:c5:f3:2f:1f:3c:4e:3c:9c:20:2b:fa:14:93: 41:5d:84:0c:ec:b8:d3:12:32:e2:90:34:88:8d:81: e0:82:7c:77:3f:c1:62:37:8f:36:da:71:93:1e:48: 3c:a6:83:22:40:af:1b:27:81:75:1b:b7:ea:f0:ba: 15:de:fa:40:ee:87:d4:55:85:7e:5d:73:9c:68:22: 32:e1:3c:ef:82:85:b0:b4:0f:d4:9c:8a:0e:3e:71: fc:96:8a:c0:af:01:f1:9c:23:b9:12:29:e4:2c:6b: 64:3a:9e:08:a0:88:d2:77:67:9f:ed:b8:53:94:0c: 8c:57:fb:a7:0b:f5:7e:57:ff:c9:2f:1f:31:ca:09: dd:da:c7:23:f5:e2:2f:75:0b:c3:5b:62:d7:35:5d: 05:55:32:3b:0c:e1:9c:a8:46:e0:e9:d2:02:79:27: 35:61:79:88:8e:1c:98:26:e5:9a:b6:a1:f2:8a:43: f4:cf:58:48:bc:e6:df:b3:36:f9:59:59:e0:d8:05: 46:f7:a3:b0:87:db:09:16:9b:f7:40:81:27:c1:f7: 30:c0:7c:a8:49:93:e0:5e:95:63:6b:5c:13:a9:49: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:06:48:A0:44:B6:B8:12:A3:89:B9:7F:28:54:1B:07:6B:1E:C6:A7 X509v3 Authority Key Identifier: keyid:DC:CB:CC:98:93:80:90:99:ED:02:B7:17:81:84:36:54:16:B3:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/3MvMmJOAkJntArcXgYQ2VBazHhw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3MvMmJOAkJntArcXgYQ2VBazHhw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE91/2E921636A41511ECBE900A7BC4F9AE02/23F9CE72A41911ECBDBED829C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.91.188.0/22 123.253.60.0/22 IPv6: 2401:fc0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:bb:d8:43:50:ba:1c:68:04:9b:fc:55:7f:05:60:22:22:29: cf:1c:3e:57:87:07:b3:2f:98:cc:74:8b:83:8c:89:80:a9:88: e7:ea:89:ae:5f:23:90:39:b8:43:11:d2:8d:60:a9:75:7c:20: 76:57:64:92:17:c6:07:9c:6f:fb:d8:a6:fa:62:04:a1:37:e6: 95:72:f6:ed:90:8b:a1:df:25:04:10:0c:11:c6:aa:b5:17:66: a4:27:5a:6d:63:f3:1f:27:2f:6a:ae:73:a6:66:2d:6d:30:04: a8:aa:9c:70:f0:11:0b:00:7b:ae:d2:52:e1:22:f1:a7:72:ce: 65:34:86:89:b1:c2:8c:df:62:02:54:51:e3:21:ab:2b:6e:5a: 3e:dd:3e:8f:7e:99:ef:cf:db:e5:46:eb:a1:9f:e2:96:21:67: a2:1f:1f:90:c1:1d:0f:22:db:77:d8:61:21:ba:7f:3a:92:fa: af:d5:67:33:c3:d7:5d:ff:ef:10:b8:06:e6:d5:eb:16:30:5d: 13:aa:5b:00:4f:df:3b:51:5b:90:03:26:c3:77:43:64:58:83: 79:65:95:c3:f8:80:cb:b7:9d:48:97:b8:e7:9c:a6:c7:6d:df: 91:27:41:18:48:3f:bb:53:85:5e:9b:c3:ca:a2:e0:a2:d5:44: d8:f3:41:02 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFOTExMTAvBgNVBAUTKERDQ0JDQzk4OTM4MDkwOTlFRDAyQjcxNzgxODQzNjU0 MTZCMzFFMUMwHhcNMjUwNTAzMDEwNjUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmYxNi04YjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcWQnjSLZl6qjIZYuzGFVfXJVpfB4trAlxI/f+FIGcXzLx88TjycICv6FJNB XYQM7LjTEjLikDSIjYHggnx3P8FiN4822nGTHkg8poMiQK8bJ4F1G7fq8LoV3vpA 7ofUVYV+XXOcaCIy4TzvgoWwtA/UnIoOPnH8lorArwHxnCO5EinkLGtkOp4IoIjS d2ef7bhTlAyMV/unC/V+V//JLx8xygnd2scj9eIvdQvDW2LXNV0FVTI7DOGcqEbg 6dICeSc1YXmIjhyYJuWatqHyikP0z1hIvObfszb5WVng2AVG96Owh9sJFpv3QIEn wfcwwHyoSZPgXpVja1wTqUmDuQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFD4GSKBE trgSo4m5fyhUGwdrHsanMB8GA1UdIwQYMBaAFNzLzJiTgJCZ7QK3F4GENlQWsx4c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUU5MS8yRTkyMTYzNkE0 MTUxMUVDQkU5MDBBN0JDNEY5QUUwMi8zTXZNbUpPQWtKbnRBcmNYZ1lRMlZCYXpI aHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNNdk1tSk9Ba0pudEFyY1hnWVEyVkJhekhody5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFOTEvMkU5MjE2MzZBNDE1MTFFQ0JFOTAwQTdCQzRGOUFFMDIvMjNGOUNFNzJB NDE5MTFFQ0JEQkVEODI5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCZ1u8AwQCe/08MA0EAgACMAcDBQAkAQ/AMA0GCSqGSIb3DQEBCwUA A4IBAQA9u9hDULocaASb/FV/BWAiIinPHD5XhwezL5jMdIuDjImAqYjn6omuXyOQ ObhDEdKNYKl1fCB2V2SSF8YHnG/72Kb6YgShN+aVcvbtkIuh3yUEEAwRxqq1F2ak J1ptY/MfJy9qrnOmZi1tMASoqpxw8BELAHuu0lLhIvGncs5lNIaJscKM32ICVFHj Iasrblo+3T6Pfpnvz9vlRuuhn+KWIWeiHx+QwR0PItt32GEhun86kvqv1Wczw9dd /+8QuAbm1esWMF0TqlsAT987UVuQAybDd0NkWIN5ZZXD+IDLt51Il7jnnKbHbd+R J0EYSD+7U4Vem8PKouCi1UTY80EC -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:08 2026 by rpki-client